From gih@apnic.net Tue Nov 2 16:15:23 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9CB863A6987 for ; Tue, 2 Nov 2010 16:15:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.605 X-Spam-Level: X-Spam-Status: No, score=-101.605 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RELAY_IS_203=0.994, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6pfQsXoS9laf for ; Tue, 2 Nov 2010 16:15:22 -0700 (PDT) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 2DCC43A67AC for ; Tue, 2 Nov 2010 16:15:22 -0700 (PDT) Received: from dhcp75.potaroo.net (eth143.act.adsl.internode.on.net [203.16.208.142]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id DAB80D58FC for ; Wed, 3 Nov 2010 09:15:25 +1000 (EST) From: Geoff Huston Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Wed, 3 Nov 2010 10:15:20 +1100 Message-Id: To: "sidr@ietf.org wg" Mime-Version: 1.0 (Apple Message framework v1081) X-Mailer: Apple Mail (2.1081) Subject: [sidr] EE certificates X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Nov 2010 23:15:23 -0000 Hi In revising the manifests draft the topic of single use and multi use = certificates came up as a discussion topic between the draft's authors. The sidr specs allow for two forms of use of EE certificates: one is = perhaps a "conventional" use, where a EE cert can be used to validate = any number of objects signed with digital signatures, without any = particular restrictions on the number of such digitally signed objects = that may be validated by this EE cert at any one time. The res-cert = draft calls this forms of ee certs "multi-use" EE certs. The other form = of use is a more restricted form of use of an EE certificate, where the = EE cert may be used to validate the digital signature of only a single = object at any one time. This form of use of an EE cert is called a = "single-use" EE cert. Single-use EE certs allow for the validity of a RPKI digitally signed = object to be controlled by the validity of the associated single-use EE = certificate. There is no clearly defined use for multi-use EE certificates, other = than a general intent to allow for some potential use of RPKI EE certs = in a manner that is consistent with other PKIs.=20 My co-authors of the manifest draft have proposed dropping the multi-use = EE cert from the RPKI spec and leave only single-use EE certs. Before = making this change to the sidr drafts that I'm editing, I'd like to = check on the SIDR mailer whether anyone in the WG has a strong view that = this would be the wrong thing to do. So if you have the view that it is = preferable to keep multi-use EE certs in the spec, please speak up now, = otherwise they will be removed in the next rev of the relevant drafts. thanks, Geoff From gih@apnic.net Wed Nov 3 20:34:00 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1F49B3A68C7 for ; Wed, 3 Nov 2010 20:34:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -91.254 X-Spam-Level: X-Spam-Status: No, score=-91.254 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_AU=0.377, HELO_EQ_CPE=0.5, HOST_EQ_AU=0.327, HOST_EQ_CPE=0.979, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nwBPXaD+Ivcp for ; Wed, 3 Nov 2010 20:33:59 -0700 (PDT) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id B73663A68AC for ; Wed, 3 Nov 2010 20:33:58 -0700 (PDT) Received: from cpe-58-168-14-97.lns8.cht.bigpond.net.au (CPE-58-168-14-97.lns8.cht.bigpond.net.au [58.168.14.97]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 07D04D58AC; Thu, 4 Nov 2010 13:34:03 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Thu, 4 Nov 2010 14:34:00 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20101008080002.50A8D3A6827@core3.amsl.com> <4CB4A38C.9060104@ieca.com> <4CB4DDF9.1020808@nist.gov> To: Stephen Kent , "David A. Cooper" X-Mailer: Apple Mail (2.1081) Cc: "sidr@ietf.org wg" Subject: Re: [sidr] I-D Action:draft-ietf-sidr-rpki-algs-03.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Nov 2010 03:34:00 -0000 Hi, I'd like to resolve this in the draft, and at this stage I see a strong = argument to remove the sentence: In anticipation of a potential need to transition to stronger cryptographic algorithms in the future, CAs and RPs SHOULD be able to generate and verify RSASSA-PKCS1-v1_5 signatures using the SHA-512 hash algorithm and RSA key sizes of 3072 and 4096 bits. in the next rev of this draft thanks, Geoff =20= From Sandra.Murphy@cobham.com Fri Nov 5 13:09:53 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 485393A693C for ; Fri, 5 Nov 2010 13:09:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2OYY90cIIkzv for ; Fri, 5 Nov 2010 13:09:52 -0700 (PDT) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 3B09B3A693B for ; Fri, 5 Nov 2010 13:09:52 -0700 (PDT) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oA5KA5Hu012116 for ; Fri, 5 Nov 2010 15:10:05 -0500 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oA5KA5XU026976 for ; Fri, 5 Nov 2010 15:10:05 -0500 Received: from sparta.com ([222.128.202.155]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Fri, 5 Nov 2010 16:10:04 -0400 Date: Fri, 5 Nov 2010 16:10:00 -0400 (EDT) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 05 Nov 2010 20:10:04.0764 (UTC) FILETIME=[6F78C9C0:01CB7D25] Subject: [sidr] WG LC for draft-ietf-sidr-arch-11 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Nov 2010 20:09:53 -0000 The authors of draft-ietf-sidr-arch (http://tools.ietf.org/html/draft-ietf-sidr-arch-11) have requested a working group last call. The chairs ask the working group to consider this draft and decide whether it is worthy of publication. This draft was in last call about a year ago and some changes have been made in the time since. Given that the IETF is next week, the WG LC will end on 26 November. --Sandy, wg chair turban on From Sandra.Murphy@cobham.com Fri Nov 5 13:11:41 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 676243A6933 for ; Fri, 5 Nov 2010 13:11:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZcmqkYAk3P2w for ; Fri, 5 Nov 2010 13:11:33 -0700 (PDT) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 912EB3A68FF for ; Fri, 5 Nov 2010 13:11:33 -0700 (PDT) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oA5KBk4Z012124 for ; Fri, 5 Nov 2010 15:11:46 -0500 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oA5KBkPY027033 for ; Fri, 5 Nov 2010 15:11:46 -0500 Received: from sparta.com ([222.128.202.155]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Fri, 5 Nov 2010 16:11:46 -0400 Date: Fri, 5 Nov 2010 16:11:42 -0400 (EDT) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 05 Nov 2010 20:11:46.0810 (UTC) FILETIME=[AC4BC5A0:01CB7D25] Subject: [sidr] WG LC for draft-ietf-sidr-signed-object-01 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Nov 2010 20:11:41 -0000 The authors of draft-ietf-sidr-signed-object-01 (http://tools.ietf.org/html/draft-ietf-sidr-signed-object-01) have requested a working group last call. The chairs ask the working group to consider this draft and decide if it is worthy of publication. This draft has not been through a last call before and next week is the IETF week, so the last call will end on 26 November. --Sandy From Sandra.Murphy@cobham.com Fri Nov 5 13:12:54 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D9E1F3A68FF for ; Fri, 5 Nov 2010 13:12:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N4phPKNfxuTN for ; Fri, 5 Nov 2010 13:12:54 -0700 (PDT) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id EF3223A68BE for ; Fri, 5 Nov 2010 13:12:53 -0700 (PDT) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oA5KD77h012152 for ; Fri, 5 Nov 2010 15:13:07 -0500 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oA5KD7C4027099 for ; Fri, 5 Nov 2010 15:13:07 -0500 Received: from sparta.com ([222.128.202.155]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Fri, 5 Nov 2010 16:13:06 -0400 Date: Fri, 5 Nov 2010 16:13:03 -0400 (EDT) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org In-Reply-To: Message-ID: References: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 05 Nov 2010 20:13:07.0200 (UTC) FILETIME=[DC365000:01CB7D25] Subject: Re: [sidr] WG LC for draft-ietf-sidr-signed-object-01 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Nov 2010 20:12:55 -0000 OOPS, forgot the obligatory: --Sandy, wg homburg on On Fri, 5 Nov 2010, Sandra Murphy wrote: > The authors of draft-ietf-sidr-signed-object-01 > (http://tools.ietf.org/html/draft-ietf-sidr-signed-object-01) have requested > a working group last call. > > The chairs ask the working group to consider this draft and decide if it is > worthy of publication. > > This draft has not been through a last call before and next week is the IETF > week, so the last call will end on 26 November. > > --Sandy > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr > From Sandra.Murphy@cobham.com Fri Nov 5 13:15:38 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3D65D3A6940 for ; Fri, 5 Nov 2010 13:15:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kncmi7Sx9iMd for ; Fri, 5 Nov 2010 13:15:37 -0700 (PDT) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 6C72B3A693F for ; Fri, 5 Nov 2010 13:15:37 -0700 (PDT) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oA5KFo7f012186 for ; Fri, 5 Nov 2010 15:15:50 -0500 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oA5KFoEm027210 for ; Fri, 5 Nov 2010 15:15:50 -0500 Received: from sparta.com ([222.128.202.155]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Fri, 5 Nov 2010 16:15:49 -0400 Date: Fri, 5 Nov 2010 16:15:45 -0400 (EDT) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 05 Nov 2010 20:15:50.0386 (UTC) FILETIME=[3D7A8520:01CB7D26] Subject: [sidr] WG LC for draft-ietf-sidr-ta-05 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Nov 2010 20:15:38 -0000 On 14 September, Chris Morrow, with wg fedora on, said of draft-ietf-sidr-ta-04: > Unless there are complaints about this, please get a last rev in > before Bejing so it can start LC just before the meeting. The authors have submitted a new version (http://tools.ietf.org/html/draft-ietf-sidr-ta-05) and have requested a working group last call. The chairs ask the working group to consider this draft and decide whether it is worthy of publication. Given that next week is IETF week, the last call will end 26 November. --Sandy, wg chair skullcap on From Internet-Drafts@ietf.org Sun Nov 7 17:45:03 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 00E7B28C113; Sun, 7 Nov 2010 17:45:03 -0800 (PST) X-Quarantine-ID: <76F-GDD9OjtI> X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, MIME error: error: unexpected end of preamble X-Spam-Flag: NO X-Spam-Score: -99.752 X-Spam-Level: X-Spam-Status: No, score=-99.752 tagged_above=-999 required=5 tests=[AWL=-0.938, BAYES_00=-2.599, MISSING_MIME_HB_SEP=2.119, SARE_BOUNDARY_LC=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 76F-GDD9OjtI; Sun, 7 Nov 2010 17:45:02 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 327EF3A6929; Sun, 7 Nov 2010 17:45:02 -0800 (PST) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextpart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101108014502.10797.44925.idtracker@localhost> Date: Sun, 07 Nov 2010 17:45:02 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-roa-validation-09.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 01:45:03 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : Validation of Route Origination using the Resource Certificate PKI and ROAs Author(s) : G. Huston, G. Michaelson Filename : draft-ietf-sidr-roa-validation-09.txt Pages : 10 Date : 2010-11-07 This document defines the semantics of a Route Origin Authorization (ROA) in terms of the context of an application of the Resource Public Key Infrastructure to validate the origination of routes advertised in the Border Gateway Protocol. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-roa-validation-09.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-roa-validation-09.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-07174302.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Sun Nov 7 17:45:03 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2224828C115; Sun, 7 Nov 2010 17:45:03 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, MIME error: error: unexpected end of preamble X-Spam-Flag: NO X-Spam-Score: -99.618 X-Spam-Level: X-Spam-Status: No, score=-99.618 tagged_above=-999 required=5 tests=[AWL=-0.804, BAYES_00=-2.599, MISSING_MIME_HB_SEP=2.119, SARE_BOUNDARY_LC=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FQG9QZ2XVmzt; Sun, 7 Nov 2010 17:45:02 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6805D3A693B; Sun, 7 Nov 2010 17:45:02 -0800 (PST) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextpart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101108014502.10797.51489.idtracker@localhost> Date: Sun, 07 Nov 2010 17:45:02 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-res-certs-20.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 01:45:03 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Profile for X.509 PKIX Resource Certificates Author(s) : G. Huston, et al. Filename : draft-ietf-sidr-res-certs-20.txt Pages : 28 Date : 2010-11-07 This document defines a standard profile for X.509 certificates for the purposes of supporting validation of assertions of "right-of-use" of Resources (INRs). The certificates issued under this profile are used to convey the Issuer's authorisation of the Subject to be regarded as the current holder of a "right-of-use" of the INRs that are described in the certificate. This document contains the normative specification of Certificate and Certificate Revocation List (CRL) syntax in the Resource Public Key Infrastructure (RPKI). The document also specifies profiles for the format of certificate requests. The document also specifies the Relying Party RPKI certificate path validation procedure. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-res-certs-20.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-res-certs-20.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-07174306.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Sun Nov 7 17:45:03 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C544C28C115; Sun, 7 Nov 2010 17:45:03 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, MIME error: error: unexpected end of preamble X-Spam-Flag: NO X-Spam-Score: -99.544 X-Spam-Level: X-Spam-Status: No, score=-99.544 tagged_above=-999 required=5 tests=[AWL=-0.730, BAYES_00=-2.599, MISSING_MIME_HB_SEP=2.119, SARE_BOUNDARY_LC=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S677a-HuvBvw; Sun, 7 Nov 2010 17:45:03 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 78A2A3A693E; Sun, 7 Nov 2010 17:45:02 -0800 (PST) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextpart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101108014502.10797.7329.idtracker@localhost> Date: Sun, 07 Nov 2010 17:45:02 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-repos-struct-06.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 01:45:03 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Profile for Resource Certificate Repository Structure Author(s) : G. Huston, et al. Filename : draft-ietf-sidr-repos-struct-06.txt Pages : 13 Date : 2010-11-07 This document defines a profile for the structure of the Resource PKI distributed repository. Each individual repository publication point is a directory that contains files that correspond to X.509 / PKIX Resource Certificates, Certificate Revocation Lists and signed objects. This profile defines the recommended object (file) naming scheme, the recommended contents of repository publication points (directories), and a suggested internal structure of a local repository cache that is intended to facilitate synchronisation across a distributed collection of repository publication points and facilitate certification path construction. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-repos-struct-06.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-repos-struct-06.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-07174311.I-D@ietf.org> --NextPart-- From turners@ieca.com Sun Nov 7 21:28:40 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CA3263A6947 for ; Sun, 7 Nov 2010 21:28:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.655 X-Spam-Level: X-Spam-Status: No, score=-101.655 tagged_above=-999 required=5 tests=[AWL=0.944, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8y175CPFo4QJ for ; Sun, 7 Nov 2010 21:28:40 -0800 (PST) Received: from nm22-vm0.bullet.mail.sp2.yahoo.com (nm22-vm0.bullet.mail.sp2.yahoo.com [98.139.91.222]) by core3.amsl.com (Postfix) with SMTP id F324B3A68DA for ; Sun, 7 Nov 2010 21:28:39 -0800 (PST) Received: from [98.139.91.62] by nm22.bullet.mail.sp2.yahoo.com with NNFMP; 08 Nov 2010 05:28:57 -0000 Received: from [98.139.91.48] by tm2.bullet.mail.sp2.yahoo.com with NNFMP; 08 Nov 2010 05:28:57 -0000 Received: from [127.0.0.1] by omp1048.mail.sp2.yahoo.com with NNFMP; 08 Nov 2010 05:28:57 -0000 X-Yahoo-Newman-Id: 696879.202.bm@omp1048.mail.sp2.yahoo.com Received: (qmail 67724 invoked from network); 8 Nov 2010 05:28:57 -0000 Received: from [130.129.35.8] (turners@130.129.35.8 with plain) by smtp113.biz.mail.mud.yahoo.com with SMTP; 07 Nov 2010 21:28:56 -0800 PST X-Yahoo-SMTP: ZrP3VLSswBDL75pF8ymZHDSu9B.vcMfDPgLJ X-YMail-OSG: scJIkX0VM1lu0B3OeLrenz76BaBWOr6M0haRRGN2cMA8DwI xB1R5eI5HBqN4vtwkxVkMc.3EeK2.iFlnIZFqNW2J8u7QgMyMP9uwpzocs7q Of48Dlam3g5GTdLrQuc0JBhAMfVHgYwsio0waV2vconrpYW3Ydle_WP.B7dd dG2dcBXhV5FVUvL2lE3XxRkjdacHnJJOuDuXahzRWb4UCxZI20kCoqmlfy_c Vb7_O.Nxjx68xZKtDMX6gj2_.qLnzHcZJBe6eRs51o2EyGoM3kZGlqYKGN.k WzbcTUaPIrd2UUfR2I4ApXSUH_OshK.KTwe8- X-Yahoo-Newman-Property: ymail-3 Message-ID: <4CD78A96.8000209@ieca.com> Date: Mon, 08 Nov 2010 13:28:54 +0800 From: Sean Turner User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Sandra Murphy References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr@ietf.org Subject: Re: [sidr] WG LC for draft-ietf-sidr-signed-object-01 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 05:28:40 -0000 11/6/2010 4:11 AM, Sandra Murphy wrote: > The authors of draft-ietf-sidr-signed-object-01 > (http://tools.ietf.org/html/draft-ietf-sidr-signed-object-01) have > requested a working group last call. > > The chairs ask the working group to consider this draft and decide if it > is worthy of publication. > > This draft has not been through a last call before and next week is the > IETF week, so the last call will end on 26 November. I have read this draft and support progressing it down the publication path. spt From turners@ieca.com Sun Nov 7 21:36:08 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B06513A68DA for ; Sun, 7 Nov 2010 21:36:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.773 X-Spam-Level: X-Spam-Status: No, score=-101.773 tagged_above=-999 required=5 tests=[AWL=0.826, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PV2iJyRLWEzZ for ; Sun, 7 Nov 2010 21:36:07 -0800 (PST) Received: from nm21-vm0.bullet.mail.sp2.yahoo.com (nm21-vm0.bullet.mail.sp2.yahoo.com [98.139.91.220]) by core3.amsl.com (Postfix) with SMTP id 539F23A68D8 for ; Sun, 7 Nov 2010 21:36:05 -0800 (PST) Received: from [98.139.91.68] by nm21.bullet.mail.sp2.yahoo.com with NNFMP; 08 Nov 2010 05:36:23 -0000 Received: from [98.139.91.11] by tm8.bullet.mail.sp2.yahoo.com with NNFMP; 08 Nov 2010 05:36:23 -0000 Received: from [127.0.0.1] by omp1011.mail.sp2.yahoo.com with NNFMP; 08 Nov 2010 05:36:23 -0000 X-Yahoo-Newman-Id: 55663.50682.bm@omp1011.mail.sp2.yahoo.com Received: (qmail 58202 invoked from network); 8 Nov 2010 05:36:22 -0000 Received: from [130.129.35.8] (turners@130.129.35.8 with plain) by smtp114.biz.mail.sp1.yahoo.com with SMTP; 07 Nov 2010 21:36:22 -0800 PST X-Yahoo-SMTP: ZrP3VLSswBDL75pF8ymZHDSu9B.vcMfDPgLJ X-YMail-OSG: M7v_dQAVM1kBNinlzd0cfXAqS0oyCNQiXHS7B533qACLtoT UwrDyOh3eQI8vCEdyfK4YkZI95ZZStipvQXmC_8A7JRhgYEbgJPGiiICSkRj ich0CKcGDKY68zEGpOrzfIhpPl8o_ux7gqKxYpwJW1bZUa_Zp8k4g3ZtlByx 7_OThx1HmpwqTA1iYDGBlL0Xg5XMTV4Mi2QcGvMZQGlhDBzGUq5qwPt7AoHG Sas4uU_ywdS9XIZFqINZ_Uq3g5Iji98jW3q53VDowuSb8w2L_f8LDMfPS22P .5oh05nxhCg4dijHnnagNaxGC7Ay.Sz10lg-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <4CD78C54.5080402@ieca.com> Date: Mon, 08 Nov 2010 13:36:20 +0800 From: Sean Turner User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Sandra Murphy References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr@ietf.org Subject: Re: [sidr] WG LC for draft-ietf-sidr-signed-object-01 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 05:36:08 -0000 > On Fri, 5 Nov 2010, Sandra Murphy wrote: > >> The authors of draft-ietf-sidr-signed-object-01 >> (http://tools.ietf.org/html/draft-ietf-sidr-signed-object-01) have >> requested a working group last call. >> >> The chairs ask the working group to consider this draft and decide if >> it is worthy of publication. >> >> This draft has not been through a last call before and next week is >> the IETF week, so the last call will end on 26 November. I have read this draft and support progressing it down the publication path. One minor nit: [I-D.sidr-rpki-algs] should point to draft-ietf-sidr-rpki-algs instead of draft-huston-sidr-rpki-algs. spt From kent@bbn.com Sun Nov 7 21:49:27 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 381F93A69AB for ; Sun, 7 Nov 2010 21:49:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.001, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wzm3Op90R7vI for ; Sun, 7 Nov 2010 21:49:26 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id DC69F3A6947 for ; Sun, 7 Nov 2010 21:49:25 -0800 (PST) Received: from dommiel.bbn.com ([192.1.122.15]:60143 helo=[130.129.76.156]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PFKbx-000CBw-RS; Mon, 08 Nov 2010 00:49:46 -0500 Mime-Version: 1.0 Message-Id: In-Reply-To: References: Date: Mon, 8 Nov 2010 00:47:58 -0500 To: Sandra Murphy From: Stephen Kent Content-Type: text/plain; charset="us-ascii" ; format="flowed" Cc: sidr@ietf.org Subject: Re: [sidr] WG LC for draft-ietf-sidr-arch-11 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 05:49:27 -0000 At 4:10 PM -0400 11/5/10, Sandra Murphy wrote: >The authors of draft-ietf-sidr-arch >(http://tools.ietf.org/html/draft-ietf-sidr-arch-11) have requested >a working group last call. > >The chairs ask the working group to consider this draft and decide >whether it is worthy of publication. > >This draft was in last call about a year ago and some changes have >been made in the time since. Given that the IETF is next week, the >WG LC will end on 26 November. > >--Sandy, wg chair turban on >_______________________________________________ >sidr mailing list >sidr@ietf.org >https://www.ietf.org/mailman/listinfo/sidr I support this doc. Steve From kent@bbn.com Sun Nov 7 21:49:37 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AE0EC28C10D for ; Sun, 7 Nov 2010 21:49:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EC+HKiIu9GKh for ; Sun, 7 Nov 2010 21:49:36 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id A6D4628C120 for ; Sun, 7 Nov 2010 21:49:36 -0800 (PST) Received: from dommiel.bbn.com ([192.1.122.15]:60143 helo=[130.129.76.156]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PFKc8-000CBw-MD; Mon, 08 Nov 2010 00:49:57 -0500 Mime-Version: 1.0 Message-Id: In-Reply-To: References: Date: Mon, 8 Nov 2010 00:49:35 -0500 To: Sandra Murphy From: Stephen Kent Content-Type: text/plain; charset="us-ascii" ; format="flowed" Cc: sidr@ietf.org Subject: Re: [sidr] WG LC for draft-ietf-sidr-ta-05 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 05:49:37 -0000 At 4:15 PM -0400 11/5/10, Sandra Murphy wrote: >On 14 September, Chris Morrow, with wg fedora on, said of >draft-ietf-sidr-ta-04: > >>Unless there are complaints about this, please get a last rev in >>before Bejing so it can start LC just before the meeting. > >The authors have submitted a new version >(http://tools.ietf.org/html/draft-ietf-sidr-ta-05) and have >requested a working group last call. > >The chairs ask the working group to consider this draft and decide >whether it is worthy of publication. > >Given that next week is IETF week, the last call will end 26 November. > >--Sandy, wg chair skullcap on >_______________________________________________ >sidr mailing list >sidr@ietf.org >https://www.ietf.org/mailman/listinfo/sidr I support progression of this doc (with a few editorial edits) that will probably appear in the next version anyway ... :-) Steve From randy@psg.com Sun Nov 7 21:57:08 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ED1863A69B6 for ; Sun, 7 Nov 2010 21:57:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.491 X-Spam-Level: X-Spam-Status: No, score=-2.491 tagged_above=-999 required=5 tests=[AWL=0.108, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8ToSSKhUIO1s for ; Sun, 7 Nov 2010 21:57:08 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36]) by core3.amsl.com (Postfix) with ESMTP id E4DE23A69B5 for ; Sun, 7 Nov 2010 21:57:07 -0800 (PST) Received: from localhost ([127.0.0.1] helo=rmac.psg.com.psg.com) by ran.psg.com with esmtp (Exim 4.72 (FreeBSD)) (envelope-from ) id 1PFKjP-000H5g-3F for sidr@ietf.org; Mon, 08 Nov 2010 05:57:27 +0000 Date: Mon, 08 Nov 2010 13:57:25 +0800 Message-ID: From: Randy Bush To: sidr wg References: <20101108055538.655EC3A69B6@core3.amsl.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: message/rfc822 Subject: [sidr] draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 05:57:09 -0000 From: IETF I-D Submission Tool To: randy@psg.com Subject: New Version Notification for draft-ymbk-rpki-origin-ops-00 Message-Id: <20101108055538.655EC3A69B6@core3.amsl.com> Date: Sun, 7 Nov 2010 21:55:37 -0800 (PST) A new version of I-D, draft-ymbk-rpki-origin-ops-00.txt has been successfully submitted by Randy Bush and posted to the IETF repository. Filename: draft-ymbk-rpki-origin-ops Revision: 00 Title: RPKI-Based Origin Validation Operations Creation_date: 2010-11-08 WG ID: Independent Submission Number_of_pages: 7 Abstract: Deployment of the RPKI-based BGP origin validation has many operational considerations. This document attempts to collect and present them. It is expected to evolve as RPKI-based origin validation is deployed and the dynamics are better understood. The IETF Secretariat. From randy@psg.com Sun Nov 7 21:57:58 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2F8CD3A6997 for ; Sun, 7 Nov 2010 21:57:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.499 X-Spam-Level: X-Spam-Status: No, score=-2.499 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NfZwos9Z6GnU for ; Sun, 7 Nov 2010 21:57:57 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36]) by core3.amsl.com (Postfix) with ESMTP id 2033F3A684F for ; Sun, 7 Nov 2010 21:57:57 -0800 (PST) Received: from localhost ([127.0.0.1] helo=rmac.psg.com.psg.com) by ran.psg.com with esmtp (Exim 4.72 (FreeBSD)) (envelope-from ) id 1PFKk9-000H6D-JF for sidr@ietf.org; Mon, 08 Nov 2010 05:58:14 +0000 Date: Mon, 08 Nov 2010 13:58:11 +0800 Message-ID: From: Randy Bush To: sidr wg References: <20101108055300.C1EC53A6998@core3.amsl.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: message/rfc822 Subject: [sidr] draft-ymbk-ghostbusters-01 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 05:57:58 -0000 From: IETF I-D Submission Tool To: randy@psg.com Subject: New Version Notification for draft-ymbk-ghostbusters-01 Message-Id: <20101108055300.C1EC53A6998@core3.amsl.com> Date: Sun, 7 Nov 2010 21:53:00 -0800 (PST) A new version of I-D, draft-ymbk-ghostbusters-01.txt has been successfully submitted by Randy Bush and posted to the IETF repository. Filename: draft-ymbk-ghostbusters Revision: 01 Title: The RPKI Ghostbusters Record Creation_date: 2010-11-08 WG ID: Independent Submission Number_of_pages: 7 Abstract: In the Resource Public Key Infrastructure (RPKI), resource certificates completely obscure names or any other information which might be useful for contacting responsible parties to deal with issues of certificate expiration, maintenance, roll-overs, compromises, etc. This draft describes the RPKI Ghostbusters Record containing human contact information to be signed (indirectly) by a resource-owning certificate. The data in the record are those of a severely profiled vCARD. The IETF Secretariat. From Internet-Drafts@ietf.org Sun Nov 7 22:17:02 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 00B2A3A6996; Sun, 7 Nov 2010 22:17:02 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, MIME error: error: unexpected end of preamble X-Spam-Flag: NO X-Spam-Score: -99.247 X-Spam-Level: X-Spam-Status: No, score=-99.247 tagged_above=-999 required=5 tests=[AWL=-0.433, BAYES_00=-2.599, MISSING_MIME_HB_SEP=2.119, SARE_BOUNDARY_LC=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LbqoXGenTq4b; Sun, 7 Nov 2010 22:17:00 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A95ED3A69A2; Sun, 7 Nov 2010 22:17:00 -0800 (PST) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextpart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101108061658.8168.25466.idtracker@localhost> Date: Sun, 07 Nov 2010 22:16:58 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-roa-format-08.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 06:17:02 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Profile for Route Origin Authorizations (ROAs) Author(s) : M. Lepinski, et al. Filename : draft-ietf-sidr-roa-format-08.txt Pages : 9 Date : 2010-11-07 This document defines a standard profile for Route Origin Authorizations (ROAs). A ROA is a digitally signed object that provides a means of verifying that an IP address block holder has authorized an Autonomous System (AS) to originate routes to that one or more prefixes within the address block. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-roa-format-08.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-roa-format-08.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-07221055.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Sun Nov 7 22:30:24 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AF3B03A6975; Sun, 7 Nov 2010 22:30:24 -0800 (PST) X-Quarantine-ID: <65KZ03MGKDHZ> X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, MIME error: error: unexpected end of preamble X-Spam-Flag: NO X-Spam-Score: -99.246 X-Spam-Level: X-Spam-Status: No, score=-99.246 tagged_above=-999 required=5 tests=[AWL=-0.432, BAYES_00=-2.599, MISSING_MIME_HB_SEP=2.119, SARE_BOUNDARY_LC=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 65KZ03MGKDHZ; Sun, 7 Nov 2010 22:30:23 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1A39C3A69AE; Sun, 7 Nov 2010 22:30:10 -0800 (PST) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextpart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101108063009.12928.30086.idtracker@localhost> Date: Sun, 07 Nov 2010 22:30:09 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-ta-06.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 06:30:24 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : Resource Certificate PKI (RPKI) Trust Anchor Locator Author(s) : G. Huston, et al. Filename : draft-ietf-sidr-ta-06.txt Pages : 8 Date : 2010-11-07 This document defines a Trust Anchor Locator (TAL) for the Resource Certificate Public Key Infrastructure (RPKI). A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-ta-06.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-ta-06.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-07221826.I-D@ietf.org> --NextPart-- From turners@ieca.com Mon Nov 8 01:32:12 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 755ED28C0D8 for ; Mon, 8 Nov 2010 01:32:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.999 X-Spam-Level: X-Spam-Status: No, score=-101.999 tagged_above=-999 required=5 tests=[AWL=0.600, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oG0DeMhaUn60 for ; Mon, 8 Nov 2010 01:32:11 -0800 (PST) Received: from nm2.bullet.mail.ac4.yahoo.com (nm2.bullet.mail.ac4.yahoo.com [98.139.52.199]) by core3.amsl.com (Postfix) with SMTP id 916673A693C for ; Mon, 8 Nov 2010 01:32:11 -0800 (PST) Received: from [98.139.52.188] by nm2.bullet.mail.ac4.yahoo.com with NNFMP; 08 Nov 2010 09:32:29 -0000 Received: from [98.139.52.144] by tm1.bullet.mail.ac4.yahoo.com with NNFMP; 08 Nov 2010 09:32:29 -0000 Received: from [127.0.0.1] by omp1027.mail.ac4.yahoo.com with NNFMP; 08 Nov 2010 09:32:29 -0000 X-Yahoo-Newman-Id: 706997.63811.bm@omp1027.mail.ac4.yahoo.com Received: (qmail 65118 invoked from network); 8 Nov 2010 09:32:29 -0000 Received: from [130.129.35.8] (turners@130.129.35.8 with plain) by smtp111.biz.mail.re2.yahoo.com with SMTP; 08 Nov 2010 01:32:28 -0800 PST X-Yahoo-SMTP: ZrP3VLSswBDL75pF8ymZHDSu9B.vcMfDPgLJ X-YMail-OSG: KIac4TUVM1mkJeTfAuw2EuPuduV5aYkRgJm.6Eb85H4i5B5 WXOYUjbtSTmzW64qnKEBomPh0EL0kHsb506KKQfxv4sNBMLNDd0pTiCdrcmU LyP3ZNXFV1y_xvrPfvj4tqAbkIBUusUFnZqIsTWygC.uQuakUg0ywpl6NHF0 k1IrxoMllUnKlEMWgYnCBj_wl65RriRacWKy7hnPo65QFLYjpEaG4g74cOps IL_4tMglTxnBLrk0DifbrY0ABQm2sc.imlUwF52Z2slSyom6jD7VASfM_wzN BsQ7ElJynupCxNcDlKpLTZQ6QrC.eINHgw86Q1IiTbM.nV7X.mmXClEpyPs2 JbRKdFK5HKSK7O2RxTkIM7eBokC7C3PC8gmzY17wnxkwQiFA8h9YFREBOx_Q - X-Yahoo-Newman-Property: ymail-3 Message-ID: <4CD7C3A9.9060306@ieca.com> Date: Mon, 08 Nov 2010 17:32:25 +0800 From: Sean Turner User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Sandra Murphy References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr@ietf.org Subject: Re: [sidr] WG LC for draft-ietf-sidr-arch-11 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 09:32:12 -0000 On 11/6/2010 4:10 AM, Sandra Murphy wrote: > The authors of draft-ietf-sidr-arch > (http://tools.ietf.org/html/draft-ietf-sidr-arch-11) have requested a > working group last call. > > The chairs ask the working group to consider this draft and decide > whether it is worthy of publication. > > This draft was in last call about a year ago and some changes have been > made in the time since. Given that the IETF is next week, the WG LC will > end on 26 November. I have read this draft and support progressing it down the publication path. spt From Sandra.Murphy@cobham.com Mon Nov 8 01:51:52 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9AF493A692C for ; Mon, 8 Nov 2010 01:51:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tb10sb4WT8qB for ; Mon, 8 Nov 2010 01:51:51 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id B75303A692F for ; Mon, 8 Nov 2010 01:51:51 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oA89qBYt003667 for ; Mon, 8 Nov 2010 03:52:11 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oA89qC9i007242 for ; Mon, 8 Nov 2010 03:52:12 -0600 Received: from sparta.com ([130.129.39.13]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Mon, 8 Nov 2010 04:52:11 -0500 Date: Mon, 8 Nov 2010 04:52:08 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 08 Nov 2010 09:52:11.0988 (UTC) FILETIME=[9D9D5940:01CB7F2A] Subject: [sidr] revised agenda available X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 09:51:52 -0000 I have revised the sidr agenda for Thursday. The new agenda is available from the IETF 79 meeting agenda page. Please take a look at http://www.ietf.org/proceedings/79/agenda/sidr.html. If I missed your request for agenda time, please let me know. --Sandy From Sandra.Murphy@cobham.com Mon Nov 8 02:22:51 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DF4AD3A6939 for ; Mon, 8 Nov 2010 02:22:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3OhbJ9A+OhzB for ; Mon, 8 Nov 2010 02:22:49 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 0A83B3A697C for ; Mon, 8 Nov 2010 02:22:48 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oA8AN9GR004272 for ; Mon, 8 Nov 2010 04:23:09 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oA8AN9I1008098 for ; Mon, 8 Nov 2010 04:23:09 -0600 Received: from sparta.com ([130.129.39.13]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Mon, 8 Nov 2010 05:23:08 -0500 Date: Mon, 8 Nov 2010 05:23:05 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 08 Nov 2010 10:23:09.0584 (UTC) FILETIME=[F0D40100:01CB7F2E] Subject: [sidr] request for jabber scribe and minute taker X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 10:22:51 -0000 We need a jabber scribe and a minute taker for the sidr meeting Thursday morning. I'm looking for volunteers. If you can do one of those functions, please email me. --Sandy, wg co-chair beanie on From gih902@gmail.com Mon Nov 8 04:10:23 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EC97028C0E8 for ; Mon, 8 Nov 2010 04:10:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lbvHWTf3BUIM for ; Mon, 8 Nov 2010 04:10:18 -0800 (PST) Received: from mail-px0-f172.google.com (mail-px0-f172.google.com [209.85.212.172]) by core3.amsl.com (Postfix) with ESMTP id 85E073A69C7 for ; Mon, 8 Nov 2010 04:10:18 -0800 (PST) Received: by pxi6 with SMTP id 6so1067110pxi.31 for ; Mon, 08 Nov 2010 04:10:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:subject:mime-version :content-type:from:in-reply-to:date:cc:content-transfer-encoding :message-id:references:to:x-mailer; bh=kYdBJrgRNzQvdCdU21/nVTTqjZ2qbpLYRalphgEBdYw=; b=tU+CiwEgMJqmt7w/wsaKLuYUqT7ShVSlfJMV2O/9JdwnuE3GxxqIXL3w/N3OzrE+Lj OZW6Nb/Zvh/dBl3n9QL+2U0wq+A7xSG4bPzOKz2syMJ/e0+35mhIVZ7jLZ+WwKT7WANA iwWZMz5Dt0TsSz2Mrl5o8LrgErlazP+PHvPrU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; b=Dw9zhStwUtSKMBljs7W+cmE1+axfUsYSk0LXI6lrKNm2nJHOIwuVwfCYBa4B/oJhIv Yx+OtocZLB7lppvvgGluq92SgRRKG0p/386txxYra58z25RjkMceMO7zYVIpARm+Gpo1 llqeJTDL/TCJJhNRXseCKTGQdu2nX7T01pylA= Received: by 10.142.97.16 with SMTP id u16mr4556432wfb.185.1289218239629; Mon, 08 Nov 2010 04:10:39 -0800 (PST) Received: from [172.21.172.174] ([221.181.95.222]) by mx.google.com with ESMTPS id e36sm8000678wfj.14.2010.11.08.04.10.32 (version=TLSv1/SSLv3 cipher=RC4-MD5); Mon, 08 Nov 2010 04:10:33 -0800 (PST) Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Mon, 8 Nov 2010 23:10:30 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: <6C1BE3E0-6B7F-483C-B906-27F5D904FA18@apnic.net> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1081) Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG LC for draft-ietf-sidr-signed-object-01 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 12:19:42 -0000 On 06/11/2010, at 7:11 AM, Sandra Murphy wrote: > The authors of draft-ietf-sidr-signed-object-01 = (http://tools.ietf.org/html/draft-ietf-sidr-signed-object-01) have = requested a working group last call. >=20 > The chairs ask the working group to consider this draft and decide if = it is worthy of publication. >=20 > This draft has not been through a last call before and next week is = the IETF week, so the last call will end on 26 November. >=20 I had a question about this draft that I posted to the SIDR WG mailing = list on the 8th October.=20 ---------------- I am a little confused in reading section 4 of this draft. The intro to this section states that: "Each RPKI signed object MUST be defined in an Internet standards track document based on this profile, by specifying the following data elements and validation procedure:" My question is: Why is the Content-Type Attribute listed as a distinct data element that requires specification?=20 The relevant text (item 3) states that: "Content-Type Attribute: The mandatory Content-Type Attribute MUST have its attrValues field set to the same OID as eContentType in item 1." So I understand that in writing a document that uses a RPKI signed = object I have to define the eContentType, but I DO NOT need to also define the Content-Type Attribute. If this is the case then why is this data = element listed in Section 4 of the draft as being a data element that MUST be separately specified in the specific object specification? regards, Geoff ------------------- I have not seen a response posted to the SIDR WG that responds to this = question. Accordingly, as it stands I do not support this draft going = forward until this question is resolved, as the draft as it stands is = not internally consistent, imho. thanks, Geoff From achi@bbn.com Mon Nov 8 07:04:54 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EFD4C3A68C1 for ; Mon, 8 Nov 2010 07:04:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5F3blrYwoog5 for ; Mon, 8 Nov 2010 07:04:53 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id 0AF0D3A67D0 for ; Mon, 8 Nov 2010 07:04:53 -0800 (PST) Received: from dhcp89-089-231.bbn.com ([128.89.89.231]:56380 helo=[127.0.0.1]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PFTHV-000INy-8r; Mon, 08 Nov 2010 10:05:13 -0500 Message-ID: <4CD811A5.6050103@bbn.com> Date: Mon, 08 Nov 2010 10:05:09 -0500 From: Andrew Chi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Geoff Huston References: <6C1BE3E0-6B7F-483C-B906-27F5D904FA18@apnic.net> In-Reply-To: <6C1BE3E0-6B7F-483C-B906-27F5D904FA18@apnic.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG LC for draft-ietf-sidr-signed-object-01 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 15:04:54 -0000 On 11/8/2010 7:10 AM, Geoff Huston wrote: > > On 06/11/2010, at 7:11 AM, Sandra Murphy wrote: > >> The authors of draft-ietf-sidr-signed-object-01 (http://tools.ietf.org/html/draft-ietf-sidr-signed-object-01) have requested a working group last call. >> >> The chairs ask the working group to consider this draft and decide if it is worthy of publication. >> >> This draft has not been through a last call before and next week is the IETF week, so the last call will end on 26 November. >> > > I had a question about this draft that I posted to the SIDR WG mailing list on the 8th October. > > ---------------- > I am a little confused in reading section 4 of this draft. > > The intro to this section states that: > > "Each RPKI signed object MUST be defined in an Internet standards > track document based on this profile, by specifying the following > data elements and validation procedure:" > > My question is: Why is the Content-Type Attribute listed as a distinct > data element that requires specification? > > The relevant text (item 3) states that: > > "Content-Type Attribute: The mandatory Content-Type Attribute > MUST have its attrValues field set to the same OID as > eContentType in item 1." > > So I understand that in writing a document that uses a RPKI signed object I > have to define the eContentType, but I DO NOT need to also define the > Content-Type Attribute. If this is the case then why is this data element > listed in Section 4 of the draft as being a data element that MUST > be separately specified in the specific object specification? > > regards, > > Geoff > ------------------- > > I have not seen a response posted to the SIDR WG that responds to this question. Accordingly, as it stands I do not support this draft going forward until this question is resolved, as the draft as it stands is not internally consistent, imho. > Thanks for catching this, Geoff. You are correct that since the eContentType OID MUST equal the Content-Type Attribute, a specific object specification only needs to specify one, not both. That item will be removed. -Andrew From gih902@gmail.com Mon Nov 8 13:25:10 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 81F603A6978 for ; Mon, 8 Nov 2010 13:25:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XQUqrbqANzDb for ; Mon, 8 Nov 2010 13:25:09 -0800 (PST) Received: from mail-gy0-f172.google.com (mail-gy0-f172.google.com [209.85.160.172]) by core3.amsl.com (Postfix) with ESMTP id AD3893A68CF for ; Mon, 8 Nov 2010 13:25:09 -0800 (PST) Received: by gya6 with SMTP id 6so4063930gya.31 for ; Mon, 08 Nov 2010 13:25:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:subject:mime-version :content-type:from:in-reply-to:date:cc:content-transfer-encoding :message-id:references:to:x-mailer; bh=YnxvHlvHOrNpHSkmnpp4LA+V4rIA0DnzmgQ1gu4OTws=; b=rTHdvhQdQvVduoRzjCFxTdDHYZxyQy0ZZvnphg+Jt/sEuKq89YYXZpVAi6LJW4vIV6 FMp/FeZuFROsY6XvqGATdcuCtkMfBwpX2K2KB0jR1Yqu1wthT6e2DhHfghchA/WuMa8u UgxGqyPojr1Jh/qkHbL1L23xlM71o+PEYpvt8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=subject:mime-version:content-type:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to:x-mailer; b=p4zZjgOlUqhswQGMdagSlRh6/c6AnfC+DxPwLZbUKqxXJDABNqu3h06okhLs2xM5Nm kDMqAOXoJT8693QsjZKnfxVQVt5HinGag5rGChv304aW3jeMZwpcYgXTl0ESiONlaBul todjdrrQB0Lz+Zny9Z74ACim4t4stQeYJlxuU= Received: by 10.150.11.3 with SMTP id 3mr9384135ybk.83.1289251531359; Mon, 08 Nov 2010 13:25:31 -0800 (PST) Received: from [222.128.202.143] ([222.128.202.143]) by mx.google.com with ESMTPS id p30sm242312ybk.8.2010.11.08.13.25.25 (version=TLSv1/SSLv3 cipher=RC4-MD5); Mon, 08 Nov 2010 13:25:29 -0800 (PST) Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: <4CD811A5.6050103@bbn.com> Date: Tue, 9 Nov 2010 08:25:22 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <6C1BE3E0-6B7F-483C-B906-27F5D904FA18@apnic.net> <4CD811A5.6050103@bbn.com> To: Sandra Murphy X-Mailer: Apple Mail (2.1081) Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG LC for draft-ietf-sidr-signed-object-01 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 21:25:10 -0000 >>=20 >>=20 >>=20 >> I have not seen a response posted to the SIDR WG that responds to = this question. Accordingly, as it stands I do not support this draft = going forward until this question is resolved, as the draft as it stands = is not internally consistent, imho. >>=20 >=20 > Thanks for catching this, Geoff. You are correct that since the = eContentType OID MUST equal the Content-Type Attribute, a specific = object specification only needs to specify one, not both. That item = will be removed. On the understanding that this will be corrected before the document = heads to the IESG, I withdraw my objection, and support this draft gong = forward. thanks, Geoff From Internet-Drafts@ietf.org Mon Nov 8 15:00:09 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 19E583A6901; Mon, 8 Nov 2010 15:00:09 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, MIME error: error: unexpected end of preamble X-Spam-Flag: NO X-Spam-Score: -99.237 X-Spam-Level: X-Spam-Status: No, score=-99.237 tagged_above=-999 required=5 tests=[AWL=-0.423, BAYES_00=-2.599, MISSING_MIME_HB_SEP=2.119, SARE_BOUNDARY_LC=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RxXX870jDR35; Mon, 8 Nov 2010 15:00:04 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D60CC3A68FD; Mon, 8 Nov 2010 15:00:02 -0800 (PST) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextpart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101108230002.28468.99677.idtracker@localhost> Date: Mon, 08 Nov 2010 15:00:02 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-rpki-manifests-09.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 23:00:09 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : Manifests for the Resource Public Key Infrastructure Author(s) : R. Austein, et al. Filename : draft-ietf-sidr-rpki-manifests-09.txt Pages : 19 Date : 2010-11-08 This document defines a "manifest" for use in the Resource Public Key Infrastructure (RPKI). A manifest is a signed object (file) that contains a listing of all the signed objects (files) in the repository publication point (directory) associated with an authority responsible for publishing in the repository. For each certificate, Certificate Revocation List (CRL), or other type of signed objects issued by the authority, that are published at this repository publication point, the manifest contains both the name of the file containing the object, and a hash of the file content. Manifests are intended to enable a relying party (RP) to detect certain forms of attacks against a repository. Specifically, if an RP checks a manifest's contents against the signed objects retrieved from a repository publication point, then the RP can detect "stale" (valid) data and deletion of signed objects. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-rpki-manifests-09.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-rpki-manifests-09.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-08145842.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Mon Nov 8 16:15:02 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 679C13A6860; Mon, 8 Nov 2010 16:15:02 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, MIME error: error: unexpected end of preamble X-Spam-Flag: NO X-Spam-Score: -99.233 X-Spam-Level: X-Spam-Status: No, score=-99.233 tagged_above=-999 required=5 tests=[AWL=-0.419, BAYES_00=-2.599, MISSING_MIME_HB_SEP=2.119, SARE_BOUNDARY_LC=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uyxGXtVBdeqF; Mon, 8 Nov 2010 16:15:01 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A96D83A68FD; Mon, 8 Nov 2010 16:15:01 -0800 (PST) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextpart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109001501.17388.55332.idtracker@localhost> Date: Mon, 08 Nov 2010 16:15:01 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-keyroll-04.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 00:15:02 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : CA Key Rollover in the RPKI Author(s) : G. Huston, et al. Filename : draft-ietf-sidr-keyroll-04.txt Pages : 10 Date : 2010-11-08 This document describes an algorithm to allow an entity who undertakes the role of a Certification Authority in the Resource Public Key Infrastructure to perform a rollover of its key pair. This document also notes the requirements placed on Relying Parties who maintain a local cache of the objects that have been published in the distributed Resource Public Key Infrastructure repository publication structure. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-keyroll-04.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-keyroll-04.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-08160412.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Mon Nov 8 16:15:03 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 83C563A6914; Mon, 8 Nov 2010 16:15:03 -0800 (PST) X-Quarantine-ID: <6hiT4r+Cldlc> X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, MIME error: error: unexpected end of preamble X-Spam-Flag: NO X-Spam-Score: -99.237 X-Spam-Level: X-Spam-Status: No, score=-99.237 tagged_above=-999 required=5 tests=[AWL=-0.423, BAYES_00=-2.599, MISSING_MIME_HB_SEP=2.119, SARE_BOUNDARY_LC=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6hiT4r+Cldlc; Mon, 8 Nov 2010 16:15:02 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E1FF73A6927; Mon, 8 Nov 2010 16:15:01 -0800 (PST) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextpart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109001501.17388.24694.idtracker@localhost> Date: Mon, 08 Nov 2010 16:15:01 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-rpki-algs-04.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 00:15:03 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Profile for Algorithms and Key Sizes for use in the Resource Public Key Infrastructure Author(s) : G. Huston Filename : draft-ietf-sidr-rpki-algs-04.txt Pages : 6 Date : 2010-11-08 This document specifies the algorithms, algorithms' parameters, asymmetric key formats, asymmetric key size and signature format for the Resource Public Key Infrastructure subscribers that generate digital signatures on certificates, Certificate Revocation Lists, and signed objects as well as for the Relying Parties (RPs) that verify these digital signatures. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-rpki-algs-04.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-rpki-algs-04.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-08160804.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Mon Nov 8 16:15:04 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7B6E13A6914; Mon, 8 Nov 2010 16:15:04 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, MIME error: error: unexpected end of preamble X-Spam-Flag: NO X-Spam-Score: -99.233 X-Spam-Level: X-Spam-Status: No, score=-99.233 tagged_above=-999 required=5 tests=[AWL=-0.419, BAYES_00=-2.599, MISSING_MIME_HB_SEP=2.119, SARE_BOUNDARY_LC=1.666, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eeDtY8BQ8mgD; Mon, 8 Nov 2010 16:15:03 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EA9163A69C6; Mon, 8 Nov 2010 16:15:01 -0800 (PST) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="nextpart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109001501.17388.82556.idtracker@localhost> Date: Mon, 08 Nov 2010 16:15:01 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-rescerts-provisioning-08.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 00:15:04 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Protocol for Provisioning Resource Certificates Author(s) : G. Huston, et al. Filename : draft-ietf-sidr-rescerts-provisioning-08.txt Pages : 30 Date : 2010-11-08 This document defines a framework for certificate management interactions between a resource issuer ("Issuer") and a resource recipient ("Subject") through the specification of a protocol for interaction between the two parties. The protocol supports the transmission of requests from the Subject, and corresponding responses from the Issuer encompassing the actions of certificate issuance, certificate revocation and certificate status information reports. This protocol is intended to be limited to the application of resource certificate management and is not intended to be used as part of a more general certificate management framework. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-rescerts-provisioning-08.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-rescerts-provisioning-08.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-08161236.I-D@ietf.org> --NextPart-- From achi@bbn.com Mon Nov 8 17:05:05 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 952FC3A6920 for ; Mon, 8 Nov 2010 17:05:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u9iha9+jqn2Q for ; Mon, 8 Nov 2010 17:05:02 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id 8F8ED3A6877 for ; Mon, 8 Nov 2010 17:05:02 -0800 (PST) Received: from dhcp89-089-231.bbn.com ([128.89.89.231]:56661 helo=[127.0.0.1]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PFceL-00048d-1L; Mon, 08 Nov 2010 20:05:25 -0500 Message-ID: <4CD89E51.1070502@bbn.com> Date: Mon, 08 Nov 2010 20:05:21 -0500 From: Andrew Chi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Randy Bush References: <13311E83-BBFC-4F4E-9195-D0908FAAD27D@virtualized.org> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr wg Subject: Re: [sidr] testbed sprint sat before ietf X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 01:05:05 -0000 On 10/7/2010 7:32 PM, Randy Bush wrote: >>> saturday november 6, we will be doing an rpki testbed workshop and >>> hackathon in the ietf terminal room. bring unix/macosx/linux laptop, >>> or access to a system on which you can do the install and configure. >> For public information, what code will you be using for this? > > the open source full implementation (rpki, up/down, publication, relying > party, gui, mocha ice cream), implementation at http://www.rpki.net/. > and this goes all the way to some test routers to do origin validation. > I've brought BBN's version of the relying party software, and would like to try it out as well as compare results with other RP software (e.g. rcynic, others?) to see if multiple implementations get the same answers. Would Wednesday 4pm in the terminal room work for people? -Andrew From tim@ripe.net Mon Nov 8 17:53:10 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0B31F3A68A5 for ; Mon, 8 Nov 2010 17:53:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l0llBzOiFnPc for ; Mon, 8 Nov 2010 17:53:08 -0800 (PST) Received: from postlady.ripe.net (postlady.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1341]) by core3.amsl.com (Postfix) with ESMTP id 173BC3A6898 for ; Mon, 8 Nov 2010 17:53:08 -0800 (PST) Received: from ayeaye.ripe.net ([193.0.23.5]) by postlady.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PFdOj-0006JB-BC; Tue, 09 Nov 2010 02:53:28 +0100 Received: from timbru.vpn.ripe.net ([193.0.21.62] helo=dhcp-422a.meeting.ietf.org) by ayeaye.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PFdOi-000229-QL; Tue, 09 Nov 2010 02:53:21 +0100 Message-ID: <4CD8A98D.9080805@ripe.net> Date: Tue, 09 Nov 2010 09:53:17 +0800 From: Tim Bruijnzeels User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: Andrew Chi References: <13311E83-BBFC-4F4E-9195-D0908FAAD27D@virtualized.org> <4CD89E51.1070502@bbn.com> In-Reply-To: <4CD89E51.1070502@bbn.com> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719855d63240c25218804e20153b5160b5c X-RIPE-Spam-Level: -- X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719855d63240c25218804e20153b5160b5c Cc: sidr wg Subject: Re: [sidr] testbed sprint sat before ietf X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 01:53:10 -0000 On 11/9/10 9:05 AM, Andrew Chi wrote: > On 10/7/2010 7:32 PM, Randy Bush wrote: >>>> saturday november 6, we will be doing an rpki testbed workshop and >>>> hackathon in the ietf terminal room. bring unix/macosx/linux laptop, >>>> or access to a system on which you can do the install and configure. >>> For public information, what code will you be using for this? >> >> the open source full implementation (rpki, up/down, publication, relying >> party, gui, mocha ice cream), implementation at http://www.rpki.net/. >> and this goes all the way to some test routers to do origin validation. >> > > I've brought BBN's version of the relying party software, and would like > to try it out as well as compare results with other RP software (e.g. > rcynic, others?) to see if multiple implementations get the same answers. > > Would Wednesday 4pm in the terminal room work for people? > Unfortunately I could not be here in time for the Saturday hackaton. I am very interested to compare results. I can do the testing using our (RIPE NCC) command line validation tool. It's not a full fledged backgrounding, caching, rpki-rtr speaking validator, but it should be able to deal with ad-hoc top-down and bottom-up validation. I can make time Wednesday 4pm, but prefer Thursday any time after the sidr session. (was planning to go see the forbidden city or maybe even great wall tomorrow). Cheers Tim > -Andrew > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From Internet-Drafts@ietf.org Mon Nov 8 18:15:22 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8B94E3A6A20; Mon, 8 Nov 2010 18:15:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.173 X-Spam-Level: X-Spam-Status: No, score=-101.173 tagged_above=-999 required=5 tests=[AWL=1.426, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HGcjPHTaaSQ8; Mon, 8 Nov 2010 18:15:02 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E81A23A69FE; Mon, 8 Nov 2010 18:15:01 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109021501.26008.43808.idtracker@localhost> Date: Mon, 08 Nov 2010 18:15:01 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-roa-validation-09.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 02:15:22 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : Validation of Route Origination using the Resource Certificate PKI and ROAs Author(s) : G. Huston, G. Michaelson Filename : draft-ietf-sidr-roa-validation-09.txt Pages : 10 Date : 2010-11-07 This document defines the semantics of a Route Origin Authorization (ROA) in terms of the context of an application of the Resource Public Key Infrastructure to validate the origination of routes advertised in the Border Gateway Protocol. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-roa-validation-09.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-roa-validation-09.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-07174302.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Mon Nov 8 18:15:23 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7EF1D28C15D; Mon, 8 Nov 2010 18:15:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.196 X-Spam-Level: X-Spam-Status: No, score=-101.196 tagged_above=-999 required=5 tests=[AWL=1.403, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jRuTS3PBLcAz; Mon, 8 Nov 2010 18:15:22 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 98BB23A6A21; Mon, 8 Nov 2010 18:15:22 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109021522.26008.5986.idtracker@localhost> Date: Mon, 08 Nov 2010 18:15:22 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-res-certs-20.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 02:15:23 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Profile for X.509 PKIX Resource Certificates Author(s) : G. Huston, et al. Filename : draft-ietf-sidr-res-certs-20.txt Pages : 28 Date : 2010-11-07 This document defines a standard profile for X.509 certificates for the purposes of supporting validation of assertions of "right-of-use" of Resources (INRs). The certificates issued under this profile are used to convey the Issuer's authorisation of the Subject to be regarded as the current holder of a "right-of-use" of the INRs that are described in the certificate. This document contains the normative specification of Certificate and Certificate Revocation List (CRL) syntax in the Resource Public Key Infrastructure (RPKI). The document also specifies profiles for the format of certificate requests. The document also specifies the Relying Party RPKI certificate path validation procedure. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-res-certs-20.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-res-certs-20.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-07174306.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Mon Nov 8 18:15:24 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8F91B3A6A2B; Mon, 8 Nov 2010 18:15:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.218 X-Spam-Level: X-Spam-Status: No, score=-101.218 tagged_above=-999 required=5 tests=[AWL=1.381, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p7P3h3GmMMuM; Mon, 8 Nov 2010 18:15:23 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CF9FC28C136; Mon, 8 Nov 2010 18:15:22 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109021522.26008.11078.idtracker@localhost> Date: Mon, 08 Nov 2010 18:15:22 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-repos-struct-06.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 02:15:25 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Profile for Resource Certificate Repository Structure Author(s) : G. Huston, et al. Filename : draft-ietf-sidr-repos-struct-06.txt Pages : 13 Date : 2010-11-07 This document defines a profile for the structure of the Resource PKI distributed repository. Each individual repository publication point is a directory that contains files that correspond to X.509 / PKIX Resource Certificates, Certificate Revocation Lists and signed objects. This profile defines the recommended object (file) naming scheme, the recommended contents of repository publication points (directories), and a suggested internal structure of a local repository cache that is intended to facilitate synchronisation across a distributed collection of repository publication points and facilitate certification path construction. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-repos-struct-06.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-repos-struct-06.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-07174311.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Mon Nov 8 18:15:57 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8849728C263; Mon, 8 Nov 2010 18:15:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.646 X-Spam-Level: X-Spam-Status: No, score=-101.646 tagged_above=-999 required=5 tests=[AWL=0.953, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id on2QxfLikzAv; Mon, 8 Nov 2010 18:15:51 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E781A28C19A; Mon, 8 Nov 2010 18:15:26 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109021526.26008.62424.idtracker@localhost> Date: Mon, 08 Nov 2010 18:15:26 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-roa-format-08.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 02:15:57 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Profile for Route Origin Authorizations (ROAs) Author(s) : M. Lepinski, et al. Filename : draft-ietf-sidr-roa-format-08.txt Pages : 9 Date : 2010-11-07 This document defines a standard profile for Route Origin Authorizations (ROAs). A ROA is a digitally signed object that provides a means of verifying that an IP address block holder has authorized an Autonomous System (AS) to originate routes to that one or more prefixes within the address block. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-roa-format-08.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-roa-format-08.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-07221055.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Mon Nov 8 18:16:00 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1CFB628C265; Mon, 8 Nov 2010 18:16:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.661 X-Spam-Level: X-Spam-Status: No, score=-101.661 tagged_above=-999 required=5 tests=[AWL=0.938, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2Lh8+3eHVC6k; Mon, 8 Nov 2010 18:15:57 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9B6BA28C19F; Mon, 8 Nov 2010 18:15:27 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109021527.26008.48780.idtracker@localhost> Date: Mon, 08 Nov 2010 18:15:27 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-ta-06.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 02:16:00 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : Resource Certificate PKI (RPKI) Trust Anchor Locator Author(s) : G. Huston, et al. Filename : draft-ietf-sidr-ta-06.txt Pages : 8 Date : 2010-11-07 This document defines a Trust Anchor Locator (TAL) for the Resource Certificate Public Key Infrastructure (RPKI). A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-ta-06.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-ta-06.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-07221826.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Mon Nov 8 18:16:52 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 31D893A6A2D; Mon, 8 Nov 2010 18:16:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.985 X-Spam-Level: X-Spam-Status: No, score=-101.985 tagged_above=-999 required=5 tests=[AWL=0.614, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CbC0GOeI3W46; Mon, 8 Nov 2010 18:16:51 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 24A1628C234; Mon, 8 Nov 2010 18:15:42 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109021542.26008.21738.idtracker@localhost> Date: Mon, 08 Nov 2010 18:15:42 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-rpki-manifests-09.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 02:16:52 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : Manifests for the Resource Public Key Infrastructure Author(s) : R. Austein, et al. Filename : draft-ietf-sidr-rpki-manifests-09.txt Pages : 19 Date : 2010-11-08 This document defines a "manifest" for use in the Resource Public Key Infrastructure (RPKI). A manifest is a signed object (file) that contains a listing of all the signed objects (files) in the repository publication point (directory) associated with an authority responsible for publishing in the repository. For each certificate, Certificate Revocation List (CRL), or other type of signed objects issued by the authority, that are published at this repository publication point, the manifest contains both the name of the file containing the object, and a hash of the file content. Manifests are intended to enable a relying party (RP) to detect certain forms of attacks against a repository. Specifically, if an RP checks a manifest's contents against the signed objects retrieved from a repository publication point, then the RP can detect "stale" (valid) data and deletion of signed objects. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-rpki-manifests-09.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-rpki-manifests-09.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-08145842.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Mon Nov 8 18:16:53 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 675A028C17F; Mon, 8 Nov 2010 18:16:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.991 X-Spam-Level: X-Spam-Status: No, score=-101.991 tagged_above=-999 required=5 tests=[AWL=0.608, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id adEDK2z+qUqO; Mon, 8 Nov 2010 18:16:52 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 398E128C235; Mon, 8 Nov 2010 18:15:42 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109021542.26008.93088.idtracker@localhost> Date: Mon, 08 Nov 2010 18:15:42 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-keyroll-04.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 02:16:53 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : CA Key Rollover in the RPKI Author(s) : G. Huston, et al. Filename : draft-ietf-sidr-keyroll-04.txt Pages : 10 Date : 2010-11-08 This document describes an algorithm to allow an entity who undertakes the role of a Certification Authority in the Resource Public Key Infrastructure to perform a rollover of its key pair. This document also notes the requirements placed on Relying Parties who maintain a local cache of the objects that have been published in the distributed Resource Public Key Infrastructure repository publication structure. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-keyroll-04.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-keyroll-04.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-08160412.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Mon Nov 8 18:16:54 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CAC7D28C17F; Mon, 8 Nov 2010 18:16:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.993 X-Spam-Level: X-Spam-Status: No, score=-101.993 tagged_above=-999 required=5 tests=[AWL=0.606, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TnWwC3yq30Ba; Mon, 8 Nov 2010 18:16:52 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 44CFB28C237; Mon, 8 Nov 2010 18:15:42 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109021542.26008.6864.idtracker@localhost> Date: Mon, 08 Nov 2010 18:15:42 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-rpki-algs-04.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 02:16:54 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Profile for Algorithms and Key Sizes for use in the Resource Public Key Infrastructure Author(s) : G. Huston Filename : draft-ietf-sidr-rpki-algs-04.txt Pages : 6 Date : 2010-11-08 This document specifies the algorithms, algorithms' parameters, asymmetric key formats, asymmetric key size and signature format for the Resource Public Key Infrastructure subscribers that generate digital signatures on certificates, Certificate Revocation Lists, and signed objects as well as for the Relying Parties (RPs) that verify these digital signatures. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-rpki-algs-04.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-rpki-algs-04.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-08160804.I-D@ietf.org> --NextPart-- From Internet-Drafts@ietf.org Mon Nov 8 18:16:54 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0AEEE28C236; Mon, 8 Nov 2010 18:16:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.995 X-Spam-Level: X-Spam-Status: No, score=-101.995 tagged_above=-999 required=5 tests=[AWL=0.604, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AKo3bvgy6ovs; Mon, 8 Nov 2010 18:16:52 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E293528C239; Mon, 8 Nov 2010 18:15:42 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109021542.26008.48209.idtracker@localhost> Date: Mon, 08 Nov 2010 18:15:42 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-rescerts-provisioning-08.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 02:16:54 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Protocol for Provisioning Resource Certificates Author(s) : G. Huston, et al. Filename : draft-ietf-sidr-rescerts-provisioning-08.txt Pages : 30 Date : 2010-11-08 This document defines a framework for certificate management interactions between a resource issuer ("Issuer") and a resource recipient ("Subject") through the specification of a protocol for interaction between the two parties. The protocol supports the transmission of requests from the Subject, and corresponding responses from the Issuer encompassing the actions of certificate issuance, certificate revocation and certificate status information reports. This protocol is intended to be limited to the application of resource certificate management and is not intended to be used as part of a more general certificate management framework. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-rescerts-provisioning-08.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-rescerts-provisioning-08.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-08161236.I-D@ietf.org> --NextPart-- From turners@ieca.com Mon Nov 8 19:05:00 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5C2C828C242 for ; Mon, 8 Nov 2010 19:04:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.049 X-Spam-Level: X-Spam-Status: No, score=-102.049 tagged_above=-999 required=5 tests=[AWL=0.550, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KQSRBJziTEi4 for ; Mon, 8 Nov 2010 19:04:57 -0800 (PST) Received: from nm4-vm0.bullet.mail.sp2.yahoo.com (nm4-vm0.bullet.mail.sp2.yahoo.com [98.139.91.190]) by core3.amsl.com (Postfix) with SMTP id 6F03628C24A for ; Mon, 8 Nov 2010 19:04:57 -0800 (PST) Received: from [98.139.91.63] by nm4.bullet.mail.sp2.yahoo.com with NNFMP; 09 Nov 2010 03:05:17 -0000 Received: from [98.139.91.15] by tm3.bullet.mail.sp2.yahoo.com with NNFMP; 09 Nov 2010 03:05:17 -0000 Received: from [127.0.0.1] by omp1015.mail.sp2.yahoo.com with NNFMP; 09 Nov 2010 03:05:17 -0000 X-Yahoo-Newman-Id: 643426.63705.bm@omp1015.mail.sp2.yahoo.com Received: (qmail 47161 invoked from network); 9 Nov 2010 03:05:17 -0000 Received: from [130.129.35.8] (turners@130.129.35.8 with plain) by smtp112.biz.mail.mud.yahoo.com with SMTP; 08 Nov 2010 19:05:16 -0800 PST X-Yahoo-SMTP: ZrP3VLSswBDL75pF8ymZHDSu9B.vcMfDPgLJ X-YMail-OSG: GBe8dsYVM1kVoh0uS1_x1guyTNTLrIIzUA.M9BMA28PH74u VuCMcWfDjH9sPgmOh0eKbgwp27neYrZ8BqhOdej8HssbJjq3dWfiS.sKWToo lfze_TQW4y7eIr1frgWXU.3n9FoG.b_4OfIyFQrD5YLMJpDJ5ZST9RmGyF2b zqK5QJdOCa4wUdY.0ppYrW8tkOBfu9wLSOcguoKyxYYEZ2gAFMUvxv2OyMSl 2mLaSAadYvOAEOxQIO33ax09wEy2GQreD_OcLkK0tNIBdSrq6CAqwCOHW23C 1BTRVcJPKX7Kn7fUfhNEC0a59.ltRvqoIQ5PE7nXiPByxjs98Pbi2Dp2M3BO 6Eg-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <4CD8BA6B.5010009@ieca.com> Date: Tue, 09 Nov 2010 11:05:15 +0800 From: Sean Turner User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Sandra Murphy References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr@ietf.org Subject: Re: [sidr] WG LC for draft-ietf-sidr-ta-05 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 03:05:00 -0000 On 11/6/2010 4:15 AM, Sandra Murphy wrote: > On 14 September, Chris Morrow, with wg fedora on, said of > draft-ietf-sidr-ta-04: > >> Unless there are complaints about this, please get a last rev in >> before Bejing so it can start LC just before the meeting. > > The authors have submitted a new version > (http://tools.ietf.org/html/draft-ietf-sidr-ta-05) and have requested a > working group last call. > > The chairs ask the working group to consider this draft and decide > whether it is worthy of publication. > > Given that next week is IETF week, the last call will end 26 November. I have read the -06 draft and support progressing it down the publication path. I sent a couple of editorial nits sent to authors. spt From Internet-Drafts@ietf.org Mon Nov 8 22:00:37 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1E00A3A69D4; Mon, 8 Nov 2010 22:00:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.039 X-Spam-Level: X-Spam-Status: No, score=-102.039 tagged_above=-999 required=5 tests=[AWL=0.560, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rHOVKk95V2B1; Mon, 8 Nov 2010 22:00:31 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D79153A6960; Mon, 8 Nov 2010 22:00:01 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no Message-ID: <20101109060001.30655.25176.idtracker@localhost> Date: Mon, 08 Nov 2010 22:00:01 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-roa-format-09.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 06:00:37 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Profile for Route Origin Authorizations (ROAs) Author(s) : M. Lepinski, et al. Filename : draft-ietf-sidr-roa-format-09.txt Pages : 9 Date : 2010-11-08 This document defines a standard profile for Route Origin Authorizations (ROAs). A ROA is a digitally signed object that provides a means of verifying that an IP address block holder has authorized an Autonomous System (AS) to originate routes to that one or more prefixes within the address block. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-roa-format-09.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-roa-format-09.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-08215412.I-D@ietf.org> --NextPart-- From mlepinski@bbn.com Mon Nov 8 22:18:17 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3D85D3A67D4 for ; Mon, 8 Nov 2010 22:18:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bJoTfrvRL3Kw for ; Mon, 8 Nov 2010 22:18:14 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id 7BE4528C11B for ; Mon, 8 Nov 2010 22:15:28 -0800 (PST) Received: from [128.89.253.249] (port=1550) by smtp.bbn.com with esmtps (TLSv1:CAMELLIA256-SHA:256) (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PFhU3-000780-Ij for sidr@ietf.org; Tue, 09 Nov 2010 01:15:07 -0500 Message-ID: <4CD8E6EA.5010303@bbn.com> Date: Tue, 09 Nov 2010 01:15:06 -0500 From: Matt Lepinski User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [sidr] Clarification: New Versions of ROA Format X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 06:18:17 -0000 You may have noticed that two new version of ROA-Format were posted in the drafts registry in the past 24 hours. draft-ietf-sidr-roa-format-08 -- This is the version of roa-format that was posted to the SIDR mailing list back in September -- In particular, this is the first (quite short) version of the document that references the signed-object profile -- I attempted to submit this into the draft repository around the time that I posted it to the list, but I carelessly messed up the submission without noticing draft-ietf-sidr-roa-format-09 -- This is a new version of roa-format that incorporates some helpful comments that we received on the -08 version of the draft (since it was posted to the SIDR list, some people read it) -- The authors have asked the working group chairs to WGLC the -09 version of the draft From achi@bbn.com Mon Nov 8 22:22:29 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E31323A68A3 for ; Mon, 8 Nov 2010 22:22:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iQadxda-Is5e for ; Mon, 8 Nov 2010 22:22:07 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by core3.amsl.com (Postfix) with ESMTP id 244EA3A686A for ; Mon, 8 Nov 2010 22:22:00 -0800 (PST) Received: from dhcp89-089-231.bbn.com ([128.89.89.231]:56792 helo=[127.0.0.1]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PFhb3-000Nep-IN; Tue, 09 Nov 2010 01:22:21 -0500 Message-ID: <4CD8E89A.8060204@bbn.com> Date: Tue, 09 Nov 2010 01:22:18 -0500 From: Andrew Chi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Tim Bruijnzeels References: <13311E83-BBFC-4F4E-9195-D0908FAAD27D@virtualized.org> <4CD89E51.1070502@bbn.com> <4CD8A98D.9080805@ripe.net> In-Reply-To: <4CD8A98D.9080805@ripe.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr wg Subject: Re: [sidr] testbed sprint sat before ietf X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 06:22:29 -0000 On 11/8/2010 8:53 PM, Tim Bruijnzeels wrote: > > Unfortunately I could not be here in time for the Saturday hackaton. > > I am very interested to compare results. I can do the testing using our > (RIPE NCC) command line validation tool. It's not a full fledged > backgrounding, caching, rpki-rtr speaking validator, but it should be > able to deal with ad-hoc top-down and bottom-up validation. > > I can make time Wednesday 4pm, but prefer Thursday any time after the > sidr session. (was planning to go see the forbidden city or maybe even > great wall tomorrow). > Thursday after the SIDR session would be great. Let's do it then. The validation is the part I'm interested in comparing (our RTR code is only lightly tested). -Andrew From turners@ieca.com Tue Nov 9 18:47:53 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 79AE13A6452 for ; Tue, 9 Nov 2010 18:47:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.251 X-Spam-Level: X-Spam-Status: No, score=-102.251 tagged_above=-999 required=5 tests=[AWL=0.348, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P-SbtdYfZSt5 for ; Tue, 9 Nov 2010 18:47:51 -0800 (PST) Received: from nm14-vm0.bullet.mail.sp2.yahoo.com (nm14-vm0.bullet.mail.sp2.yahoo.com [98.139.91.246]) by core3.amsl.com (Postfix) with SMTP id B3C3A3A676A for ; Tue, 9 Nov 2010 18:47:51 -0800 (PST) Received: from [98.139.91.64] by nm14.bullet.mail.sp2.yahoo.com with NNFMP; 10 Nov 2010 02:48:14 -0000 Received: from [98.139.91.18] by tm4.bullet.mail.sp2.yahoo.com with NNFMP; 10 Nov 2010 02:48:14 -0000 Received: from [127.0.0.1] by omp1018.mail.sp2.yahoo.com with NNFMP; 10 Nov 2010 02:48:14 -0000 X-Yahoo-Newman-Id: 800919.961.bm@omp1018.mail.sp2.yahoo.com Received: (qmail 99743 invoked from network); 10 Nov 2010 02:48:14 -0000 Received: from [130.129.35.8] (turners@130.129.35.8 with plain) by smtp113.biz.mail.sp1.yahoo.com with SMTP; 09 Nov 2010 18:48:14 -0800 PST X-Yahoo-SMTP: ZrP3VLSswBDL75pF8ymZHDSu9B.vcMfDPgLJ X-YMail-OSG: YR6jJvsVM1ljkNjp11KruPKiTlpcc5FSbubl8Fwnj1jgNBF kfXR33fjksw59ga1K4GHuoJ4k5uF_dXtuE8d8C6LzRX5WXYiq.cTFjdkaMHK HGF83Ip0sDelPEjyhUIOYsL.T8h2Xe2tUl1QuJutQ5hbyXsdfR4y.E7kio5N hb0mf6j.Gt9gqHBEb6sKuap_aAbfAzliEgYZIO6tgJOUMnVXwPHSbty0S6XK 3tCbQAhAUoM9mkbd7MRJh5Cm47I2jknQ2drarCqzzAuiI7LgwiE4YqlqyBfl txh8rCHc6cv7Ryq3QKR_CpTMxIh9aP7.rdw-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <4CDA07ED.8070403@ieca.com> Date: Wed, 10 Nov 2010 10:48:13 +0800 From: Sean Turner User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org References: <20101109060001.30655.25176.idtracker@localhost> In-Reply-To: <20101109060001.30655.25176.idtracker@localhost> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [sidr] I-D Action:draft-ietf-sidr-roa-format-09.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 02:47:53 -0000 On 11/9/2010 2:00 PM, Internet-Drafts@ietf.org wrote: > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. > > > Title : A Profile for Route Origin Authorizations (ROAs) > Author(s) : M. Lepinski, et al. > Filename : draft-ietf-sidr-roa-format-09.txt > Pages : 9 > Date : 2010-11-08 > > This document defines a standard profile for Route Origin > Authorizations (ROAs). A ROA is a digitally signed object that > provides a means of verifying that an IP address block holder has > authorized an Autonomous System (AS) to originate routes to that one > or more prefixes within the address block. > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-ietf-sidr-roa-format-09.txt > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > Below is the data which will enable a MIME compliant mail reader > implementation to automatically retrieve the ASCII version of the > Internet-Draft. As long as the two get addressed before IETF LC, I think that this document is ready to progress out of the WG. The third is editorial and left to the discretion of the authors. #1: Need and ASN.1 module like the sidr-manifest draft. #2: Refer to 6019 vice 4049. 6019 obsoleted 4049. #3: (editorial) OLD: The right of the ROA signer to authorize the target AS to originate routes to the prefix(es) is established through use of the address space and AS number PKI described in [ARCH]. Specifically one MUST verify the signature on the ROA using an X.509 certificate issued under this PKI, and check that the prefix(es) in the ROA match those in the address space extension in the certificate. NEW: The right of the ROA signer to authorize the target AS to originate routes to the prefix(es) is established through use of the address space and AS number in RPKI certificates as described in [ARCH]. Specifically one MUST verify the signature on the ROA using an RPKI certificate, and check that the prefix(es) in the ROA match those in the address space extension in the certificate. spt From tim@ripe.net Tue Nov 9 21:29:06 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9ACE63A67D6 for ; Tue, 9 Nov 2010 21:29:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RaEsuYFhDBFE for ; Tue, 9 Nov 2010 21:29:05 -0800 (PST) Received: from postgirl.ripe.net (postgirl.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1342]) by core3.amsl.com (Postfix) with ESMTP id 6A98D3A63EB for ; Tue, 9 Nov 2010 21:29:05 -0800 (PST) Received: from dodo.ripe.net ([193.0.23.4]) by postgirl.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PG3FM-0006UB-2k; Wed, 10 Nov 2010 06:29:29 +0100 Received: from timbru.vpn.ripe.net ([193.0.21.62] helo=dhcp-422a.meeting.ietf.org) by dodo.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PG3FL-0003Cx-BD; Wed, 10 Nov 2010 06:29:24 +0100 Message-ID: <4CDA2DAF.4080501@ripe.net> Date: Wed, 10 Nov 2010 13:29:19 +0800 From: Tim Bruijnzeels User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: Andrew Chi References: <13311E83-BBFC-4F4E-9195-D0908FAAD27D@virtualized.org> <4CD89E51.1070502@bbn.com> <4CD8A98D.9080805@ripe.net> <4CD8E89A.8060204@bbn.com> In-Reply-To: <4CD8E89A.8060204@bbn.com> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719b0567422171bd49b1d61ef0736919598 X-RIPE-Spam-Level: -- X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719b0567422171bd49b1d61ef0736919598 Cc: sidr wg Subject: Re: [sidr] testbed sprint sat before ietf X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 05:29:06 -0000 On 11/9/10 2:22 PM, Andrew Chi wrote: > On 11/8/2010 8:53 PM, Tim Bruijnzeels wrote: >> >> Unfortunately I could not be here in time for the Saturday hackaton. >> >> I am very interested to compare results. I can do the testing using our >> (RIPE NCC) command line validation tool. It's not a full fledged >> backgrounding, caching, rpki-rtr speaking validator, but it should be >> able to deal with ad-hoc top-down and bottom-up validation. >> >> I can make time Wednesday 4pm, but prefer Thursday any time after the >> sidr session. (was planning to go see the forbidden city or maybe even >> great wall tomorrow). >> > > Thursday after the SIDR session would be great. Let's do it then. > > The validation is the part I'm interested in comparing (our RTR code is > only lightly tested). > Great I will be there. I have until 3:30 pm but don't need a lot of time for lunch. So I can be there 12:30 - 3:30. I expect this should give us enough time to do some testing and arrange for possible follow-ups. See you tomorrow Tim > -Andrew > From achi@bbn.com Wed Nov 10 08:00:11 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ED2EC3A698E for ; Wed, 10 Nov 2010 08:00:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8RE2YblyrR5s for ; Wed, 10 Nov 2010 08:00:02 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by core3.amsl.com (Postfix) with ESMTP id 1177B3A6A1E for ; Wed, 10 Nov 2010 08:00:02 -0800 (PST) Received: from dhcp89-089-231.bbn.com ([128.89.89.231]:57541 helo=[127.0.0.1]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PGD65-000KxU-0M for sidr@ietf.org; Wed, 10 Nov 2010 11:00:29 -0500 Message-ID: <4CDAC19A.1060208@bbn.com> Date: Wed, 10 Nov 2010 11:00:26 -0500 From: Andrew Chi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr wg Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 16:00:11 -0000 In order to test our RPKI relying party software, we generated a testbed with a large number of files. Feel free to run against this, though we will change and add to it fairly regularly in the coming weeks. rsync://rpki.bbn.com/rpki/root.cer Nominal counts at the time of this email: CA certs: 2006 CRLs: 2006 ROAs: 10005 Manifests: 2006 Bug reports, comments, and questions are most welcome. -Andrew From Sandra.Murphy@cobham.com Wed Nov 10 08:54:59 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EC3C93A6892 for ; Wed, 10 Nov 2010 08:54:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.183 X-Spam-Level: X-Spam-Status: No, score=-2.183 tagged_above=-999 required=5 tests=[AWL=0.416, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8vF+ETPpOtZh for ; Wed, 10 Nov 2010 08:54:59 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id E3EB83A67B2 for ; Wed, 10 Nov 2010 08:54:58 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAAGtO6K006927; Wed, 10 Nov 2010 10:55:25 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAAGtOM3008127; Wed, 10 Nov 2010 10:55:24 -0600 Received: from sparta.com ([130.129.72.242]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 10 Nov 2010 11:55:24 -0500 Date: Wed, 10 Nov 2010 11:55:20 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: Andrew Chi In-Reply-To: <4CDAC19A.1060208@bbn.com> Message-ID: References: <4CDAC19A.1060208@bbn.com> User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 10 Nov 2010 16:55:24.0720 (UTC) FILETIME=[11B04300:01CB80F8] Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 16:55:00 -0000 Can you say a bit more about how you generated this test data? --Sandy, as wg member only On Wed, 10 Nov 2010, Andrew Chi wrote: > In order to test our RPKI relying party software, we generated a testbed with > a large number of files. Feel free to run against this, though we will > change and add to it fairly regularly in the coming weeks. > > rsync://rpki.bbn.com/rpki/root.cer > > Nominal counts at the time of this email: > CA certs: 2006 > CRLs: 2006 > ROAs: 10005 > Manifests: 2006 > > Bug reports, comments, and questions are most welcome. > > -Andrew > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr > From Sandra.Murphy@cobham.com Wed Nov 10 12:06:04 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 344253A6A04 for ; Wed, 10 Nov 2010 12:06:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.229 X-Spam-Level: X-Spam-Status: No, score=-2.229 tagged_above=-999 required=5 tests=[AWL=0.370, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LQ76-COS4KPQ for ; Wed, 10 Nov 2010 12:06:03 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 0A8F93A69D8 for ; Wed, 10 Nov 2010 12:06:02 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAAK6UG3011000 for ; Wed, 10 Nov 2010 14:06:30 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAAK6U79017744 for ; Wed, 10 Nov 2010 14:06:30 -0600 Received: from sparta.com ([130.129.72.242]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 10 Nov 2010 15:06:29 -0500 Date: Wed, 10 Nov 2010 15:06:26 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org In-Reply-To: Message-ID: References: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 10 Nov 2010 20:06:30.0413 (UTC) FILETIME=[C3C62BD0:01CB8112] Subject: Re: [sidr] request for jabber scribe and minute taker X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 20:06:04 -0000 I have had exactly one response to this request from someone who prefers to be a co-minute taker. So another minute taker volunteer would be good (and might be lighter duty for having the buddy). For remote folk, a jabber scribe is very useful. Please consider volunteering to scribe. --Sandy On Mon, 8 Nov 2010, Sandra Murphy wrote: > We need a jabber scribe and a minute taker for the sidr meeting Thursday > morning. > > I'm looking for volunteers. If you can do one of those functions, please > email me. > > --Sandy, wg co-chair beanie on > > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr > From gih@apnic.net Wed Nov 10 18:12:15 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3D5EF3A68CF for ; Wed, 10 Nov 2010 18:12:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4YjEKY1WbPyO for ; Wed, 10 Nov 2010 18:12:10 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 807273A6910 for ; Wed, 10 Nov 2010 18:11:47 -0800 (PST) Received: from dhcp-220f.meeting.ietf.org (dhcp-220f.meeting.ietf.org [130.129.34.15]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 6B78DD59A7; Thu, 11 Nov 2010 12:12:11 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: <20101111020725.D08B63A68C8@core3.amsl.com> Date: Thu, 11 Nov 2010 13:12:02 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: <72030833-DB5D-48F6-A9AA-C0A579646727@apnic.net> References: <20101111020725.D08B63A68C8@core3.amsl.com> To: "sidr@ietf.org wg" X-Mailer: Apple Mail (2.1081) Cc: sidr-chairs@tools.ietf.org Subject: [sidr] WG Last Call Request for draft-ietf-sidr-roa-validation-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 02:12:15 -0000 Hi, We've revised this draft as per the informal poll of the WG in today's = SIDR meeting regarding the text concerning a "origin AS" when the = AS_PATH contain as AS_SET path element. We request the chairs to conduct a WG Last Call for this draft. thanks Geoff & George On 11/11/2010, at 1:07 PM, IETF I-D Submission Tool wrote: >=20 > A new version of I-D, draft-ietf-sidr-roa-validation-10.txt has been = successfully submitted by Geoff Huston and posted to the IETF = repository. >=20 > Filename: draft-ietf-sidr-roa-validation > Revision: 10 > Title: Validation of Route Origination using the = Resource Certificate PKI and ROAs > Creation_date: 2010-11-11 > WG ID: sidr > Number_of_pages: 10 >=20 > Abstract: > This document defines the semantics of a Route Origin Authorization > (ROA) in terms of the context of an application of the Resource > Public Key Infrastructure to validate the origination of routes > advertised in the Border Gateway Protocol. >=20 >=20 >=20 > The IETF Secretariat. >=20 >=20 -- Geoff Huston Chief Scientist, APNIC +61 7 3858 3100 gih@apnic.net From Internet-Drafts@ietf.org Wed Nov 10 18:15:02 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C10023A68CF; Wed, 10 Nov 2010 18:15:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.152 X-Spam-Level: X-Spam-Status: No, score=-102.152 tagged_above=-999 required=5 tests=[AWL=0.447, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vHW+f6B+T8Xl; Wed, 10 Nov 2010 18:15:02 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 971783A68F9; Wed, 10 Nov 2010 18:15:01 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 3.09 Message-ID: <20101111021501.11867.45906.idtracker@localhost> Date: Wed, 10 Nov 2010 18:15:01 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-roa-validation-10.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 02:15:02 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : Validation of Route Origination using the Resource Certificate PKI and ROAs Author(s) : G. Huston, G. Michaelson Filename : draft-ietf-sidr-roa-validation-10.txt Pages : 10 Date : 2010-11-10 This document defines the semantics of a Route Origin Authorization (ROA) in terms of the context of an application of the Resource Public Key Infrastructure to validate the origination of routes advertised in the Border Gateway Protocol. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-roa-validation-10.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-roa-validation-10.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-10180725.I-D@ietf.org> --NextPart-- From kent@bbn.com Wed Nov 10 19:07:54 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 41E313A63C9 for ; Wed, 10 Nov 2010 19:07:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.777 X-Spam-Level: X-Spam-Status: No, score=-101.777 tagged_above=-999 required=5 tests=[AWL=-0.378, BAYES_00=-2.599, J_CHICKENPOX_72=0.6, J_CHICKENPOX_74=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oe2HlqHgHv2R for ; Wed, 10 Nov 2010 19:07:52 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id 0C86F3A67B8 for ; Wed, 10 Nov 2010 19:07:52 -0800 (PST) Received: from dommiel.bbn.com ([192.1.122.15]:52531 helo=[130.129.35.119]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PGNWM-000NUm-2s for sidr@ietf.org; Wed, 10 Nov 2010 22:08:20 -0500 Mime-Version: 1.0 Message-Id: Date: Wed, 10 Nov 2010 22:08:13 -0500 To: sidr@ietf.org From: Stephen Kent Content-Type: multipart/mixed; boundary="============_-922677598==_============" Subject: [sidr] proposed edits for Ghostbusters X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 03:07:54 -0000 --============_-922677598==_============ Content-Type: text/plain; charset="us-ascii" ; format="flowed" This pdf captures proposed edits to this I-D. A text version is also attached, for Randy --============_-922677598==_============ Content-Id: Content-Type: application/pdf; name="draft-ymbk-ghostbusters-01.pdf" ; x-mac-type="50444620" ; x-mac-creator="4D535744" Content-Disposition: attachment; filename="draft-ymbk-ghostbusters-01.pdf" Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmls dGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHNXF1v28YSffevGPgpAXzX3F1+9i1x nF7f2k7qKCgu6j5Q1FrmtUQqJOXE//6epUhKVAqVVLAME6BRbSeYHc6cOXNmll/od/pC HrN81w0C4p7NHB6Q7XEmbHK5xWRgS8oU/UEJnV/knKKcrPJ3HuGvWoz7tm9Zmy9t/8+W TFqeI8lzHcZl4J1ES3o7Ifxj+kerPyZLOn/PmUWcJg/0il7T5H90OYFRXcw6+RGzHJcJ N5BUmnUyGrNsjwluw8vaW+MxS/pM2tKvzLKYxS2XJlH9HP/+cd6q4muaPdEf+E+czOnX LF2vqMevO0Zv1/nj65M+UXFEsMpAMFe6NnnVOccWrCJgtifrYO3o/qukUFmiCuNJ5QvG BWCAvLadB5PqX+bNclngSRcQ1Daro/veZeFD0SNYd3/06uo/AwZtdbzRBa3FXEsE/TBD B20yUzPKi7BY57/QpyJMZmE2y2mShdHTrpd3P9+mz2o5VRn5ZySATkO6f3POsbmfc+bY ntfP/ZffVnGm4Pab8IW4KH1pPFG5DZphA968ts0H8YMPYBaYS+DwXmYNSWEsVC3Pq6vC QW8NaBZIFfMtt8770Zjl28xzeM982IWY7efJo6K7j79d0a+PaV5M1zkKbU53KkqzmXHg Eb7D/MAjtzrQyHDH9WCez+uo7Fhst75tfZrpGlwl+km3puAI+se9gHHHc6m2vYtLzfMX MCpmWQHasKNc+rKcPhnHSGFJZnN367oujYt51wnLR3cHRnqc6+Y7aW3eha7LbD/w9209 CJwDuBASgMSj3TerY0Jb5uuz8KEc2I7Yt/Cg44YshC50FW6NrhA6Hgscp2chfDPNC/Dv GozNKTRNM+m27RzNU7UDqGUQtsal0Ljg0II7G6ugymmB5uSfBBrU2quECs1mVJ6us0jR x/V0EUf0m3rBtx6yEE99HRVrKG33rzTluX99hgq7+WHjVEfKADDugutsTtelLg+Z4FJD pF05/aQjMsLpkcqK+CGOwkLlFKXL1UIVavFC6TSPtKuTcIlvpBmFCb6I55NRnDyk2TIs 4jShr49xNIAo5nvM83E6tzrm2LwvBBM+6NEmEbt7fxnPjRd1T4AW+QKRe5SVjwVNFa1z 9bBeEB48giQpgL5aRUX2rdIkj6cLRasQgYRQKVKaqXBBX+NigMBwJXOEA2ZQnW1sgcE1 J/Xruts9MOI8X+u8e9hNUFJaEikT74yWYaz1qTCJFGAwXSzMQ6DlYJCCgYBbnaqLs82z Q4nJEHecoDGrXxZCrMvyM+NZuK0f7ZAYDZewMG6z/SMKCGpGli7jXOVnpIqIEU0e45zK fhlQkEdZPNW48DOFCtkUkOqYXUJ3wPLtBA6zg75TFV2+NRjHiQbjx/UyTGp0bhVpQDIg PI/nCcTs+1dxMoOwGpnHi5oy1aernN4RBYvFy/1rmr5QaD45wfQDKXyqLR0Zo3Z8l6HC 9S8jDT02PcwOYKDnCU57ph6EN/O1gVuYPMBvbau69iTp1zKxdihyCW6KZmERIsNKTEMm QWqlEFy5gFajdM0OzedWE7FVaIwN0Dwwdke4/WoxAC1XqMe6AUFReYgXAKznizd371iF ASaVVxvsxgEGVKaPzaOuz1wMkccGTU7AdHNRdj5dE+tOfVmjBC1VUuR0HSbzdThXxlGe 29UQDWRxx+YWRJ382BrQruJ/0nM7yXEsiGFurZuMxixb6JWsag2oesLf7dt85zfNAhU9 QbvB3g0m5qc3nz9NTs82f9Lth/Lz3eXvn6/uLt/pr3/695vr6+bD5icGhNHqlGNLeimZ JRvdtiNzAozCnR8+X1eO1Z+2Lr/4cHNzeftu4/WbN/+Fz7HWYNzVAhTXtbCq5VRn6scG 6fTDx8nVh9s316ebyhvnDWCgKBhZHGy6hj2TW6lJP4YYP7I46Aibcdfq37PN0mitwXfD WsruQIsJ2SqD+Acug+6t6ttm2tl37y9IcOxi/olP+sNfzHi4SM8H7IBPVmccW2Jyh4nA EmOrxhZWSWVdQjZw8Y/SO9aasN6keWuhG/cbtUyb1DK1/MqlbngxJHBaFrcy67ua0s+q H6nFduAxLGFW9LW9WvozzfJ9eK1eye1Vi/FgB1vC5AJMRrqC7Ja9h1eIB2gGhYMpgoeV 8rZZHavqZgkTfszX02VcaKAENkIVX2jRpRyJQIstdW/dGJpHSAfLTWLr5JEhpI1NFltW kkXXxgDMBX3fc5xjtlQi0tuLj+T5mqBQ+TFo5MW6hC2xHZik5ZBimc4wylKzM/O+r/XE 6pSj873FHPcIMVf7uR/KHsFf0F8LTzNB2zvGzJnK4mcMQZ6Ra9jmL8MkLjAPaeIgyhTG mbOS11LrW+YDA1269Dy7OdvYIsPlUBH8mrd0hD6dlnoYnz8C9NS3SK1AHXNk5bammL4X 0axR2dUJujjWfE0RmOag3HGqzeoneJU1pda2zC2yCHS3QreRe1a26NZPbGSwOaUFmfpO z2jMws0xiNr9RczBmFYju9ttUw960HxW1LJ726quJKBMCqALFHUN8Hq2VTesVZeiGtyh y2QeJwolIZmbB3dPMkxhQLkqb3fBIPP1tLnfaEuboSftD+6TMH+i96leurp/dXU5eX// GjzrNi30TCMsqr2fub4zl5eFNlzkWPOIsZEVT9fFEFwX4jduxKET2xxxbJ4XLnQ6XgNY 97LaDnDj1Is3LdBRBmu5HnV/MHjjgQ8ea+Oxt839yfDWbJrvmdXxsW/wrRolglQhv7Dm s84yrcg1vjVNqGQ9QawP0SWlzJeORnOtzRqZwoY1dFzlxC2Dvqt+VVWDfgBAfSyK1S/n 53qOrFeZn1TGYlU8sDSbn8/0RZP8vAqI8wGkVmCqzW2ww+psXSJhyLKGGxRYIa7L2sHk H9AsGWAjWPZdXkcr1aT4YEsZe6Ye9KD5FK/ZYduqI9hhmSk73PA5XMSzckc1BEv5Fi/X Sw2tefyNltiTeszNM8T69n59tpGlkgz0azEgvfRFLy0MaYVFrwKvAFtaXcnUahFG+hO2 grEvnurV8Zne2NrsiW9J+wD7MPUicH3CyvEdSzLkjOTFOPtqaltt5Mhqm8QtJmzT1kDb 0XdAtCJeKvCZq4JQ3uIkXEHEXWUxwkSvg2N3fIt5pmmN0PIQGoX6LF0S0Dzk4ebI5mJd bVa/BKy4A6h3ph6wHoU5g/lgdaqWa8/kg8VjyPKr7zVI3FXsC2W4uQK5ADcUgFqIzigu u1yFUlHebkHDm+gm51S3ZnrCg1ieY48yZ6fmy0e9MSurw3WJ3iF9rlHWbe65jCYUHP2q KLs/bpWL6oPRsWYsKtv2HnSjeWxqNIE9szrCf4lNmHpiDFpeT8ECbLL7yg5uvoHBIgbz MNSl+gRjSxssHrrbV1YdfN5DZrN0IW/LnrfWLtLVSxbPcS0M+mA8QCHapk3b3tG4UWDV GRfsxkbmuM98u5mpdMxmkLntA75/FeEGhn6FEWlRGG89wutFylm8vsyzwr0pPaWPjZfF +jUjEFjLI/Xj9jPIauVagK7qejFjt+0+MfC+Qbzna3Mpcc/e0QSsFUDCwox6w5zGYxa2 hkQzvRiLWZj3MMtppP3RmOVj8Ozz+iF2TG/9CkOk+N/8qt621arc3//Ynx+xqE/8L+Mp 37wGUVTn7FvS/w8StICyCmVuZHN0cmVhbQplbmRvYmoKNSAwIG9iagoyNzQyCmVuZG9i agoyIDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyA2 IDAgUiAvQ29udGVudHMgNCAwIFIgL01lZGlhQm94IFswIDAgNjEyIDc5Ml0KPj4KZW5k b2JqCjYgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9yU3BhY2Ug PDwgL0NzMSA3IDAgUiA+PiAvRm9udCA8PCAvRjEuMCA4IDAgUgo+PiA+PgplbmRvYmoK OSAwIG9iago8PCAvTGVuZ3RoIDEwIDAgUiAvTiAzIC9BbHRlcm5hdGUgL0RldmljZVJH QiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGdlndUU9kWh8+9N73QEiIg JfQaegkg0jtIFQRRiUmAUAKGhCZ2RAVGFBEpVmRUwAFHhyJjRRQLg4Ji1wnyEFDGwVFE ReXdjGsJ7601896a/cdZ39nnt9fZZ+9917oAUPyCBMJ0WAGANKFYFO7rwVwSE8vE9wIY EAEOWAHA4WZmBEf4RALU/L09mZmoSMaz9u4ugGS72yy/UCZz1v9/kSI3QyQGAApF1TY8 fiYX5QKUU7PFGTL/BMr0lSkyhjEyFqEJoqwi48SvbPan5iu7yZiXJuShGlnOGbw0noy7 UN6aJeGjjAShXJgl4GejfAdlvVRJmgDl9yjT0/icTAAwFJlfzOcmoWyJMkUUGe6J8gIA CJTEObxyDov5OWieAHimZ+SKBIlJYqYR15hp5ejIZvrxs1P5YjErlMNN4Yh4TM/0tAyO MBeAr2+WRQElWW2ZaJHtrRzt7VnW5mj5v9nfHn5T/T3IevtV8Sbsz55BjJ5Z32zsrC+9 FgD2JFqbHbO+lVUAtG0GQOXhrE/vIADyBQC03pzzHoZsXpLE4gwnC4vs7GxzAZ9rLivo N/ufgm/Kv4Y595nL7vtWO6YXP4EjSRUzZUXlpqemS0TMzAwOl89k/fcQ/+PAOWnNycMs nJ/AF/GF6FVR6JQJhIlou4U8gViQLmQKhH/V4X8YNicHGX6daxRodV8AfYU5ULhJB8hv PQBDIwMkbj96An3rWxAxCsi+vGitka9zjzJ6/uf6Hwtcim7hTEEiU+b2DI9kciWiLBmj 34RswQISkAd0oAo0gS4wAixgDRyAM3AD3iAAhIBIEAOWAy5IAmlABLJBPtgACkEx2AF2 g2pwANSBetAEToI2cAZcBFfADXALDIBHQAqGwUswAd6BaQiC8BAVokGqkBakD5lC1hAb Wgh5Q0FQOBQDxUOJkBCSQPnQJqgYKoOqoUNQPfQjdBq6CF2D+qAH0CA0Bv0BfYQRmALT YQ3YALaA2bA7HAhHwsvgRHgVnAcXwNvhSrgWPg63whfhG/AALIVfwpMIQMgIA9FGWAgb 8URCkFgkAREha5EipAKpRZqQDqQbuY1IkXHkAwaHoWGYGBbGGeOHWYzhYlZh1mJKMNWY Y5hWTBfmNmYQM4H5gqVi1bGmWCesP3YJNhGbjS3EVmCPYFuwl7ED2GHsOxwOx8AZ4hxw frgYXDJuNa4Etw/XjLuA68MN4SbxeLwq3hTvgg/Bc/BifCG+Cn8cfx7fjx/GvyeQCVoE a4IPIZYgJGwkVBAaCOcI/YQRwjRRgahPdCKGEHnEXGIpsY7YQbxJHCZOkxRJhiQXUiQp mbSBVElqIl0mPSa9IZPJOmRHchhZQF5PriSfIF8lD5I/UJQoJhRPShxFQtlOOUq5QHlA eUOlUg2obtRYqpi6nVpPvUR9Sn0vR5Mzl/OX48mtk6uRa5Xrl3slT5TXl3eXXy6fJ18h f0r+pvy4AlHBQMFTgaOwVqFG4bTCPYVJRZqilWKIYppiiWKD4jXFUSW8koGStxJPqUDp sNIlpSEaQtOledK4tE20Otpl2jAdRzek+9OT6cX0H+i99AllJWVb5SjlHOUa5bPKUgbC MGD4M1IZpYyTjLuMj/M05rnP48/bNq9pXv+8KZX5Km4qfJUilWaVAZWPqkxVb9UU1Z2q bapP1DBqJmphatlq+9Uuq43Pp893ns+dXzT/5PyH6rC6iXq4+mr1w+o96pMamhq+Ghka VRqXNMY1GZpumsma5ZrnNMe0aFoLtQRa5VrntV4wlZnuzFRmJbOLOaGtru2nLdE+pN2r Pa1jqLNYZ6NOs84TXZIuWzdBt1y3U3dCT0svWC9fr1HvoT5Rn62fpL9Hv1t/ysDQINpg i0GbwaihiqG/YZ5ho+FjI6qRq9Eqo1qjO8Y4Y7ZxivE+41smsImdSZJJjclNU9jU3lRg us+0zwxr5mgmNKs1u8eisNxZWaxG1qA5wzzIfKN5m/krCz2LWIudFt0WXyztLFMt6ywf WSlZBVhttOqw+sPaxJprXWN9x4Zq42Ozzqbd5rWtqS3fdr/tfTuaXbDdFrtOu8/2DvYi +yb7MQc9h3iHvQ732HR2KLuEfdUR6+jhuM7xjOMHJ3snsdNJp9+dWc4pzg3OowsMF/AX 1C0YctFx4bgccpEuZC6MX3hwodRV25XjWuv6zE3Xjed2xG3E3dg92f24+ysPSw+RR4vH lKeT5xrPC16Il69XkVevt5L3Yu9q76c+Oj6JPo0+E752vqt9L/hh/QL9dvrd89fw5/rX +08EOASsCegKpARGBFYHPgsyCRIFdQTDwQHBu4IfL9JfJFzUFgJC/EN2hTwJNQxdFfpz GC4sNKwm7Hm4VXh+eHcELWJFREPEu0iPyNLIR4uNFksWd0bJR8VF1UdNRXtFl0VLl1gs WbPkRoxajCCmPRYfGxV7JHZyqffS3UuH4+ziCuPuLjNclrPs2nK15anLz66QX8FZcSoe Gx8d3xD/iRPCqeVMrvRfuXflBNeTu4f7kufGK+eN8V34ZfyRBJeEsoTRRJfEXYljSa5J FUnjAk9BteB1sl/ygeSplJCUoykzqdGpzWmEtPi000IlYYqwK10zPSe9L8M0ozBDuspp 1e5VE6JA0ZFMKHNZZruYjv5M9UiMJJslg1kLs2qy3mdHZZ/KUcwR5vTkmuRuyx3J88n7 fjVmNXd1Z752/ob8wTXuaw6thdauXNu5Tnddwbrh9b7rj20gbUjZ8MtGy41lG99uit7U UaBRsL5gaLPv5sZCuUJR4b0tzlsObMVsFWzt3WazrWrblyJe0fViy+KK4k8l3JLr31l9 V/ndzPaE7b2l9qX7d+B2CHfc3em681iZYlle2dCu4F2t5czyovK3u1fsvlZhW3FgD2mP ZI+0MqiyvUqvakfVp+qk6oEaj5rmvep7t+2d2sfb17/fbX/TAY0DxQc+HhQcvH/I91Br rUFtxWHc4azDz+ui6rq/Z39ff0TtSPGRz0eFR6XHwo911TvU1zeoN5Q2wo2SxrHjccdv /eD1Q3sTq+lQM6O5+AQ4ITnx4sf4H++eDDzZeYp9qukn/Z/2ttBailqh1tzWibakNml7 THvf6YDTnR3OHS0/m/989Iz2mZqzymdLz5HOFZybOZ93fvJCxoXxi4kXhzpXdD66tOTS na6wrt7LgZevXvG5cqnbvfv8VZerZ645XTt9nX297Yb9jdYeu56WX+x+aem172296XCz /ZbjrY6+BX3n+l37L972un3ljv+dGwOLBvruLr57/17cPel93v3RB6kPXj/Mejj9aP1j 7OOiJwpPKp6qP6391fjXZqm99Oyg12DPs4hnj4a4Qy//lfmvT8MFz6nPK0a0RupHrUfP jPmM3Xqx9MXwy4yX0+OFvyn+tveV0auffnf7vWdiycTwa9HrmT9K3qi+OfrW9m3nZOjk 03dp76anit6rvj/2gf2h+2P0x5Hp7E/4T5WfjT93fAn88ngmbWbm3/eE8/sKZW5kc3Ry ZWFtCmVuZG9iagoxMCAwIG9iagoyNjEyCmVuZG9iago3IDAgb2JqClsgL0lDQ0Jhc2Vk IDkgMCBSIF0KZW5kb2JqCjEyIDAgb2JqCjw8IC9MZW5ndGggMTMgMCBSIC9GaWx0ZXIg L0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ac1bTXPTSBC9+1f0baGKnWi+pb2FJGylFqhs 4to9LHtQ7LEjsK0gyQn59/vGlgx2CCs5JTPJAZwKVPfr79c9n+lP+kyWRbExSULcKqZ5 QspyJhQZHjGZKEmFo79pQUcnJadRSdHquxzhn0aMxyqOovWPvn5SksnIaknWaMZlYgej Ob0eEv4z/6v1H8M5Hb3hLCJOwwm9oJc0/EhnQwjVRqzBc8TShgmTSFqJNYhYxCNDw1Ej 2fcFPF9Urli4qnc5Y8G4ALJkt+X8IXy/9i+WYYmVBlbdFqslfKdFOqmo/hreOLq8+OOc fr/Jy+p6WQLaki7dKC/Gze/Q+/zOza9dQQL2eTno4h17OK1MBDPSfEU9NKdVlgmuEIM+ lgY/dIZDxpKMmVQyDk0skTBlZccQh+uN89Fy7hYVpcvqJi9KRnQ8m1GRTW+qEm5VuuLO jVnv7ihg7igWlmytSWjuKCJmIpGEZnfOmVbWdkvtsPvwJiu/Gh9/L5fXH92ooiqn1ycX ZGNKF2M6oN1rTWq7t8yyFRLr+dnwDQ0LJNVfSnrrpumsrg2DdqV1n+SpJYuFILstdDBJ KkJut7Z7Nrgo8ruszPKFL06ztMoWU+8QK4RP60xR9u8T0jJpE0621iOwXIBWisWRaXJB S1dF0H14cVNVt78dHVXeW51jmasmLC+mR7Ns5Bal6x9aLtFsRZwaHdpA23+vJbhFs4Vm vBGrWz7LFpP8w0vKFuQmE5/E8gX5zDBOK0f5xKeDQetOe590YCTTQpuN+G1QPWDTYmLF rObdq8Tt8hqeiTwAQPMJMP2maKBTuJi5tHQA7C5z9x5xfGgaiv7ThFQxnCYS1KgXGupW szjm3bPwKC3cZDmbPbyitPSwPtDYlaMiu3b0kC+LpjvzBRodWlVkI2+hku57zx9SJhgl jSVTK1dj3jIHZtWNl/gWMdr7/LYZcBpRA2vdgKIfxLtXERTk3UA8yceOTvL5bb5AL1+S +1IV6ahyY5oU+Xz712mO2tO/o8SW2VhpatQMLTg1Ko7W3VNithjNlkD7KpvfzrJJBoxf X53S23UBpwrQ+6htAnbsq9IV/N2nUMVW5aj30d7GmKVQ42sdQ4NeJRAPdFknOgrtky/p qz5/3eXTN92qT4XImnTrG9gxbHKPVJMvK7pPiyJdVA+wSf8+v2kDag2DAz4CpaLXuIPN 9DTg4P9oQM8R1MVn5cveCDu+3/u4JTZdq1pp0K3o1KHJeq84QnOWSAUueS1mDfTWVDh4 Hg38bXM66MhOG8lBXSElf4ed/pliCcFEnKjQxILPKR7X5bmOlkek+S5uw/R65nM8ijHo c5Ti3p2OC41CazE6bQkcDGFqIqxZVFx7XTBi6UQzlexBmHLMPViNFPl4uS7qxDp/y/5L UcPuN3oGVop0bJgRGzq15fiAWiQA/9VyOsXYgyp/6dKx56i6meCQ8Nd6hga/RXeuhVnn 3LYbQcAvAf/uIgtWWO2xLtKHWZ6O6exLitbYPWmUQ8Jf6xka/CZmBsvFzvArwN97RQFm wkbYEOu9xLw7Ob489b35JPuBEzwdseqAybFWMDT30Am2C/Vo2qFP1/COk3dXdJGOPqXT 7nnR20QfEP21msGBH4EYME2/0r4yGaD/VzrLQDr7Wf/J9Pe05x8Y/bWeocGvhD/Qadb+ 7eG3gB88y7LIMOyj+y5BAxQrU5TbpujdwbEIQEeOwxFd61JD3FaXpx3kkMG5LfvWDEvP m2Gfc8qkpWSR3IM0jeEe58fvj3/oGtuO8uiT6d11Npx1o2do0SkU4ybqnhwTwH88+rTI 72duPPUHJztR+Qjsx1FwSPhrPUODn2smEmy8ujKnuG1Elz5xhVuMXLlfbTok/LWeocEf 4Y5SNvzZOp234U+JgH/vbfvmjFLvI6anNd7nxRwV8w63il995XEcfu8nh3SOtXqB+YZK cLNiVPeJeuUcntU4xxHDnvgfEP1Gz9Dgj2PQeZtr0batForS6uwRh2PH4zE203vlRnu4 vkDVeoYGv8X5qWy48q1mcZch78hfPGfhoWzEwGE0CTsYsQwH+xPXVXz7CP9noqWFZx3q y+ZwxMLrCmsbqjIcsaRi6MSCM6IwmI94cEbk/jGFqatjOEaMYoYdeGhGlAmOrGRzmxIM WjLxT57AC4e1P5Yx1tq8GYrCQcsKXxJDi0Q8aEJNDG7bLrV/jKeCi0Slmdm89gnHtyQY RitDO5mQAltFHlxjg3LIYhVcYwMWEzXRBmfECHsBEVxjI3DQEOngGhsR4z1FzEMzosDb ZsnrJUrb26XXy/IGK/6dr955K64xrSu8pvme0K3otbMvtxlmd3qXPhAXr/z7Wb6jBT7+ c5FOHYl/Dzes1wp1ndX/A73ob20KZW5kc3RyZWFtCmVuZG9iagoxMyAwIG9iagoxNzgy CmVuZG9iagoxMSAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNv dXJjZXMgMTQgMCBSIC9Db250ZW50cyAxMiAwIFIgL01lZGlhQm94ClswIDAgNjEyIDc5 Ml0gPj4KZW5kb2JqCjE0IDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdIC9D b2xvclNwYWNlIDw8IC9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL0YxLjAgOCAwIFIKPj4g Pj4KZW5kb2JqCjE2IDAgb2JqCjw8IC9MZW5ndGggMTcgMCBSIC9GaWx0ZXIgL0ZsYXRl RGVjb2RlID4+CnN0cmVhbQp4Ae2dW3PkNpLv3+tT8OzLaUd4ysV71b6cmPV4NmZvM2t3 xD54/aCWqi3N6jYqaTw+n/78EkDiQhZLZFElqU9Md9hNJkFWAkgk/shMJP6S/Wf2l6xd rtZNs9lkeVst63yTVW2+LKqsyVfLclOV2cM2+6/sNvvm212ene+ylfm7O+fV1TJfV+vV ypLCXVUuy1Vbl1nb1Mu83LSL85vsnz5mfEyKun8+3mTf/D5frrI8+/g5+5B9lX38c/bd R5gaw9ZiDlt1syyaTZkZthar5SpfNdnHc+VsP4N/uH3cPtxuH0/O57pY5gUtm7Upnweb 7zenZ6tZbtqyoVdTtkY23+8ezj4/Zu7Px8tt9v2f/vUP2T9f3u0ePz3taNpd9v32/O7h Qstk/3H31+3Np+1DVtA/Xy2mSMcRQltuimVTNqHV35vQVu2yyCvGoIylxUFheM2xVK6X ZVWu3xtbxWZZteXEIZ4vs4xh/nB38XT+eHV3e/IxlRer5aZsiqxN+X03vQt/zarYvLfe zfNlXbXtNAWOYvnDbfaI6rm73z6cSQefXWdPO+4/G7LRSFeP2fnZbfYJXXSzzW6359vd 7uzh1+zx7vQqqC6X6wJhcNV7bxpohYZs24ljilY/v7t9PDt//Dq7fLqhaR/v7MXXptHv zx4ef0Vf7+7vbncnb+KiydHy66x1dXFNPHIOu/p0vc0+3z1kZ8Lw3dPD+dariMUY1HLM vKRCkXJ8UEOcHgyU9RpZiBpy2lC8++X26vZn33anQnzlul2266r23f3O9BgYdLleNape R0qhjKjtw+PV56vzs8ctU5agqfuHqxtRU9u/nd3cI6VGpV3tUGDbi4x/f7ncWt03c4gt N6t6vWZ9wOqg2FR5vgY/u6vs4KqgrKolxVlZJLXmQ3vh96KzPthd/Xy7fZgmMm64Lfza pc99qMcz3Lflsig2hed+jnI2a6521Wb1pkXjN03Wtvait6x5jmPTqg3LtmaTLzf1epOV 1XK1KgupWLNpivVGvvl51BA7Rj21axaQebdZBjo163QqUno2rUt7DfT8cpQF6LJaRzzO 0QITuk45K1ltrmtpIlDLeiNDp66rapVX2Wa5quu8baThx3XREfX3y/FmXS1bfm6arkbd fH/39LjN/vhw9fPVbfbbp8fLu4er/2sA1C777w/f//G3//1V9mZ6pSgKxlDZZmn1xuqV i+3j9vxxx5R+/3DH/H4zd/H03IgdtpuUmFzyumYsu46ahk7++4Mgk9vs6uZ+e3vB/BrX ZBFZeoZluKcADlVmgbqXxm+rdQnLBWXphRybz6pgHW30T920Gyvc3m7khwNvtDkKKwyH 9XLdrqqimKGx+gyPnZ/CMGnrJerC4dyxcuSkR0bCJEMWrbNI7Gv9GkhT2rn28By1VgtN 42owTX5+uXq8ZBhE2CJDoL79/t9MjRajTXMjhGhsnxR5iS1she48qk/QVrLcuz+jYp+2 j79sHQZCY4GJdk/Yls5uL6jzQJcND5SeGn6u15x0URGm5xLDBJY0pD3vzdP9cQLywMxa 7xkndmSNWXhM5ndYS4Vx0tA++WozBgnNtZo+17wH2F2jUzfgoSZldyRCecA2iZCcM+Ut s98zHhzA/hqp+fa3bzfr5Zv1sm6qta+WndTHaqtokA/I/rA74KXUVVGDWMGvvgpjBGlo qA6w+4JyX2D2btfYv48TpLPrO2bkx8uzR6uPLs92yNL91cP2wkzcrNEGINSwFpqsab0W EscMVSnRLU1TNzLDNJtDk3UDdNygtsJkrdj1jSfrumXZUztMO1b8zz6BaMUQZXuASdsY dWSuO9vt7s6vWFhfZG5CZJhr57m5hL7aPZ5db5ev2GNIX77C5CkLvqppo3njTWYBb1pp XAfMGbzDEt4bv71FVV0vNyzMI8FUFPkm7RJmx4oBsq7LaRgMUw726N3dAysSFscOVKIa wJRvgsCYO1kzruqscfWZOM+wHrl/2P51e8twE6efIK/b7C9P253Y37PPD3c3QDNZrJyd n2/vGXZfq4rHoppAm2EpOV4PilOtbCvQmNgzR+hBXljVhRTUNbwRt7LJ31gPVivcg/W0 3hHw+3j5tMvur8/Ot9Ixf97eYZC/wCB/9zQNGPRG6vGQLV/Tpg3QuLGVmjaEHkWYUO0i bmcXFxjq0db3Ur9zHMpMt9knvDlWFl9Rf4uflDiLrGRArRpdH4t9boaeUm14AP7iNihL wjtcWzoBSdwHXVPrclrPx6NvMTJCZNUu8w2WqAlcqVpAKRyhFhLGvAmCTsnXRd4dzZgg TtspGiDTlDnecxwU78up32DVQTArx9bIpRKGwt/uzMi6PbvZ7kSdGI9qtNbAzIal84pI mlvrfr3+dQj1DgD6WNhMOFJfzYw1LgRzW1LdsRjy9u7ROTRvtmfizvr8dO3nrvFCOllv WrbXjB2c81WFnSpf5VhAWQt2TP59UwJvsIx5h6YE7DwVtsBpmn67/Hk52OID8jO5uYdV a1sIzwUdcRT3r2p1koiCdsXsw8y66glKok8HGq438J6fe3wg23ENxAr5ctpM9IKdK2Oq ZllxHOuC3XEoPH26vjrP/mf7a1KNhQGyEnI5C9HKaHceWAzxht98A07Xrsaj2IDeZWXk HIEnndPydoOhDQitLTZmTvs6aZhnY1Ffsn9xsaxWTHHK7iutX/vTVehHse7n63K5qVZY mbQfK0ZshffSd6O0wjhn4RFjNmDvo5TabrvNfvzDzF59XrMUOVafVrzejssxwnb6qJjg ikzZGgmgfre82j5+Pn3jebtrymWyJuh66l+h8bx9NWVrZOPtri4mRof0tMkIuWuxwmGz fm9ytyaOvqpZMB/VdOf3P5lYPIHmRAzdZb+cSbyjCY100jjDFqOt6hddKLZyTczri5pQ 9FeG4VqwzK3Y6IBDbRrYFItBtJLJrh5322sdrN3mGYuh+rPB2MVLXjMuKuwJjauN1YDp Fobuwv4FltB9jjvzF3yxe0H4wr2/Yl+Fmb9aE/YSfAyL001gNT+4keXRcd18N9RIA33a 0yLPtdCwhOYNQes1yuUozq8uZFH9mQX1/viDYbA5uQrCaF1IoIrvZPxIeaEoRRxJJ0Up IS7gqKaSsTzQSmN7+Xl9U5QFjUS4tHbnNGvKzRlmEv6bGvM4uTOH5ZH+dNPKUa2sYfV3 nz+7eKRYf57e9Fqs2VzRCJRWKc2xJzdl4da/h9ydxmrKejnMUcbdia9ghlz3NcNYbe/n rnpTLyvxw9oddQPYqKv3bRjPgMQP6wWWD9N8/epeJt5i2VRsAGRXC4EKLhbs5LGo3iCj rTRthieS+oe7r7N/+K/Lu+ziLvv17omdINfX/+cfpOFmON+eVxVASkLhSsKBbe++0lpU GVNkJt1WNUzZQerVuXVS00GQbiLYsD1rPPzBBcnpFXhgC1NKK06/SftFMYd/vARPX9yd P92I/3N3vz0naB/LuPE+DWx/HNCLA/NSb4V/vI7x5vA6qS7CMCo+f5n94VGWD2eZidS/ yO4+/ZnA2slKZ/L85e3hNTGCG5ZBWc4Kg5D4KETibZR2kRMb2+ZZp0ETse6q6iGxPqil /QbtvV4uaZe6jI3+GrozY1T35SxdBwyjijCsxOfOluJpWtpEUA1I1cAgmSxSw8wTQ1jj vGXnxlHMsxOO7WM3b8a+WrWP496GoczYo3+80MiQBlA3R7a7CwfY/Qqk/tvbtT6xvyXb p7qVSBRC1/A2pBBOL+veon+ctFxsP7N6YfPZ7XyL8PGCU1S4skuQfKcSB9t8rrFzDrui 6PEpdtgdmIS7wvK75dn55dWbCXih5tEO9++1sXV922F3ZGM/3P/P2zV1ucL5XxesGdKJ 6J02NWoP1Uf2ig67I5vaQso3k+uSPZVVXn0pSoR4L/LbNMcqEQvcf3q71tattsfJyvLt ZsxSNsGJfek4zj8OmyWH4f9kcOuNNE3DviLs8iUWc/IiRMGvdrnUCx8C+bJboOrZB+aF yx0/WYaVBDGVTJrTFhIPJtvQm0l5MFYdw7ystAlmvVIHVDfe7BXQYd6AVNi9w4bV6Y1/ BTB82pmw79vsu+9Sz5rszPNRujtiCWWnlVn3mU17F0Mhg8ODZLKZxA8S2d3Qyq76OEA8 RO32xwgv4OzKuza0N9/VWuOYY4fPxAhxsVR1uufNRkxeinWUGHetyrTx7gRIvNpI0H4f 2SsMG923d2Ql7uyw9xHssrzS3RRD25EGajV5UAybRUwWCsntobV6J95oP4zZvJKzGycT HNrUsWmQVjidM7qs1qiPVeHbZY5lf6AbJwOAA93ocg1pL04bYK8DX0p4bFvRAtqnOeEc m03ei2rt62bpjYKkRS/q33gJ/IKRgiyc+bT2TnInvp1CWzWE8xBTXB9ViTdGYWFOSbk/ uIx+w9kDBzbZFln1p+yOXEaznfCvhIm8pR1Xw26Pq4BJIPdmol6s1iyUZJZLW/+gsLyh LZFgQJM8o8PuSGF52p1JujuXvA+cIZ4Lk/RHOmCGP7yvMMeGQQTDhuuAOTBjYDqNUZFx p/XZHevpCqgolZeRHSCJBgV/D8j78GpnMiIIMIn9QRgxMjF4rSWY3wSdh3Cu/pSKqWnd JMlJNFBGGnJclF+PXw1MGEYqYelfluRTwb4/yTf/DoKrSAa2LhiZWe1qMG3yd8FVA7Ix INu9hj5etvOiJhsGyZ2OZN/sDLw4ezwzWRaSaoT9MQPViIfowB7AMEQlS9WwHPk0KloN p1EGhmjPW//L5dX5JbHAJvLBZ44Y2kD7gkNWsv2tNhgmaraQsgttQyouMhSWrxZsVebk +ZKEFNpyc5Y2ExpGdYMPWiqxa2zQWS8K6vVXhiUnaKCCvJYNGRLexx5eTXdUvwBbc7qF PbV5gXh0umWerXhKtyCfxYal96SJgaCt/7gj16ExFj1K+JZdoNiNEZIJKrNx1uQsjqJZ v84+kU/m7HZm8Nbz1QsGBVe9OaNuQL32Zonn2QqDgdVgQayRaXT6XkLHFs+drECjnz0+ khHEoEvN3aDA00wSN2cXW83bMLOR+3PeWPhZcDJGWeEoqffUsnd+RHeusAnnkpnu2Q2P bqZ7kQS23mFsmZ8jOBP0Qr+1w9Qs+x1Nm9aSCpcYc5IKpelra4KHRRzH4cgeLnhecINf OmmVgem/G25hkiwPAvSxw+u5Jhqeg8J66Bjuv/tuQBhfsHuFw7KWGEjXvWQT2pD7VhKJ yW6gk/evN8AmLXRwxf4CCy4VPA9SqH2xesNEIxU5kDncZHoIczTJDUjL6cXcB/9pLSYu lbop3WRRnRhPnRFy3hEz/WE8dl7xSkjr56bPREq708n0NUasHkdZNqTdS85vyir2JdQk 9s1kuYTPNzK189ETuk80IbI2zCtNWt3hK/UvS+NhSLN+4UgaPTvNgVWkL8f1+e4O/6nI +VAhH1PRntkXwaCbqVG0m4YnyA0BK22L3j2KUzmMihWAJPqRFD8mYeTu6Z5kaVxjnPu0 tc5kMnnqcSBc/Hy1e3z4dSZIfb5qPgGjq9qcoTFWhT/PlV8IVC0LPzEMTl1+/XJ5R5sL 6JfDmB6zn6/+anJJeetzZpN3nryBfXparcqYFj79aQY+Da2y5Vo4mSy6QHUI0rxcx+vB OilXY1eA78Ae67c/aQ0mggyT8edhe3+3u3q8e0h2YZ8o977f+FQRm9QW7NszKX/UaC/7 Ls3k1DPaS3k2BPX94Js3zrxfyelMYsuLJ5RnF9Y2zZK1HdzfsWt65rTSB3LpknV4uvFG ca3IGJUxlAPpBVdhTitnlYTq1djEOBepyld6RsOpF2E5JtqGU1iyTrOMXGXLBDyzS5+f uHw+DeVxjlqd0HXKma4UpYvIyB0n2jZ7cF/NbsqmAgnn1AMdx/YRJrwAgi7vri+2D+kK ZbpXR5vmwHirSGO+4WgdZXrMeDv9XBhAEFfAT111v/EUHdjCu4tlfLpp3OB2t42Zs8ck gbOksX+8fCDtl8zh2Y4tv5B37lSyz1cPO879+8FSs+pr8PTJgZs/ybVy9XxvUlEQOS2r yanQWOwWFgZrag21kd+f/Xp9dyZ77TxMlgMqdiTeftiSY5XAn89X19uL07e9Ow6scnV8 b01P0Pqm5by1qU3/129/+/3vnFAj43e3pClXqa6/1va1O/vJNf0/Z5yU9bP2kuud0ze+ HneIj8JU8721PvFT+IOm6x10jDmea+5uhxEzikv7WSWsjl3GMMS0z018ww9yZuFF9keT CSH7uOVkRg6W0EQQVoOeXipcUK9W6Z0JBbnJxWM4/VC6V0gz6Xf7d5g8OJHPDfh7Xkj9 1qEOWyOx2otsEn6eS801kDJ5OEHdxLaT9a2enZakvjgAGfEDmXDlDlsDbde1uk/f83sM jxpb1eExEbsuZ6/QdLqM67A1sumO2cPrGi/4v0eIHQsoc2BJh8u3bjwOUCIPGUcuJfrO zSzP2jjcnlyHQAhMeYgASPN1RlD3+cPVJ5tbKFksn2Ld5fe5amXe3ZxCEkoOVp4M88DJ HA2f/fXs+goLtKxvnIvf5TRKvIbfmw2kczddPS/R3jJZbmy13ltrk0YBHhXWJQPt9Q3R fpVbyjRZbnSZ9W7Y4tzHupl6tkbByP/h6eefCZICUH6/PZPzXU8+znO1r8hhlcL0e5M8 dq7XOTHUdjn3brqYZmsq9plNXWW6DGrsf76hl10M4pZJkOi3h+zplv8TJHd7oRnkTr52 IIBSjvddE5Vlq+QEYGDK7472fz19JnifB0U5nCMLM+y27Moi51zOfP42EQIlBuS2JTP5 VJl71WVUyuTB8ToRzx4RXRGWUSlbI4X7lbL1+2VUwuT7WUalbA20XXexMj1Z/6xlVMpj InZdziaK3TFs+WVUytbIpjt7OL+06frt6VrfB5fzD48PT+ePTw/bBBg8G2R8xNDxEWsd tZM0bXc2GHK8zNG6WPjrOvFk2+1nYP9XCcwqC9J9sP3mfavdlMmDnTRR/o+QnaB2U7YG 5L8rRa+tdhMm34/aTdkaaLuucntltZvymIhdl7OJYjdL7aZsjWw6E9kzTa86JqcZr9zh FaleeXOx8za1o9qOeEjmJSYt5w8xvhHrFNlNa9Ij1E1B7G4j55CkTbpIxLGrZE4xVWHU JR5SYm7eaIWQS+z2EYEdr7pCSJk82EkTdcYRshOmqpStAZ3RlaLXdrQkTL65zvCOlpSt gbbrTgiv7GhJeUzErsvZRLGbNVWlbI1suld3tKRcvnXjeUdLytbIxnOOFqJnOBvdRH38 kP34/e+/JY9081Ma0XaShZXueCE+KNbWSaN29czQbPVy0d3BqL7aEFnSqpnp/bBFEgBO X5xj/DtBaxUb8nrVUyO9Smz9BiJF3qaZMGlGSLNmnNK6jHEBDKG6CSv95ziWo5xAdDVH DJGzZoWx3Zwz508gO3lMs7pGOu0yoGZ6Q9Y6D7M/ucC97/52RnCQGm6OPU7weV+i3z3S YfuogTyhO5UzTF7FmoBd6bUVpwS+FRguOGY3X+fvTY8VckIEXgRjxHexAWPSJ/z2Ntta CRKHNUkquvrDpnybkbRLO3A4sqZgbdi0NSPSVmKaq8iNBw1k/eXq8TLj8K2M85KuL14h ZlhzjqfMHzUsTjGRNCQzETvn+3J0ijYpZU37ztiqOKWHDKF2FCV92AXzE6HTEWDeQydy M3Fig8YjuMH9bODPPz3tLsmPsufPd3+7v2LbafbvHNabF19nxQrF0fvz45/Oft5m5U8n dxX7qHut5xigMNT8z88sP2Y5f39CLV1k33y7y7Nvf6BJN5yusy7MvqaC7dI2J6y7+uHb Xh6w30g8TbVerVYBy7dkqNzkpTmVCtC/zgh92PCnyG6yomTGqEkhzP06u85+IO16VyE+ +00SZ5lvVPKNGw58h1/5prm33zQVOt8drpAkNhOnN7EZedZwdN96Q1TJzR7aNTTyT9SM hIa8YdWGY4OFxhRYoa/13YXQut+7zi7JvvKjbeipdeUweyZ40gcQiaO1TSnXpv6UiVqA eZn9ieGt60X3O8KUtL2IQC5ZZGrgBO1asQOSyPeG+t3soV1Dg5N63S58uXpD9q4NMekt p6Rx9CB9ESikFiQrbybf96UcTSl8qUPhS3vea1bL9XpT0u76ZtbWbNskJUdgitzxK8lS HaqjlLiKSuuXUsqi1TLnZs9fRcJkfs59/Roa2UBKMLOnIQckUW5Kz5QSFq1yLp/SQkob QwnvhbYSFvRb2u6BKe1D2QtnWVdKqE7owX6pPuXcSHGR/TJ5uCJVHGHNsR5OBaT3jJhc gsQZyb5MmUtSPOQMfEsmTblTFbJgxMb3B+9c2ZwzVJ26Me/mVc7vteuF/2XZumhKGN78 nbwP7/7+wB18FZLVw5e95h6oXhHU52kowzbTX+e53Clv8n50v0ju0meMJvNU24QRYe59 i/lf1hbla/Cmd+b9+D59mt5Jv4ui8DNDlJJF1o92jkCBBHGkO9mxJwok0HRA7xHbxTSx DQqqJ6R8qS/uOqLDe0GJBVpQKW4wLSLKPmXk6hjXR+sN5DazmnCTr1hgi46oGxJM5mSa 5ChLREpMUxvSlUfh95KH06tjmSdWZFqXQWMWDtFt+C4ZIhAgd5QxKsuUdP98vMm++T3G E775kekn+/ADW4BZ6GcfWCMzxXJxrxeXeuEeLT7cKgV8Ycr+q3/LP+J7P2Uf/8WeZjiJ YQdsAsOc2b6s5cgPu8pnWrVsf/hfwWzzor8QN4xWMdc6+4tvTOUXH9b6xBKyD77ESp/0 PuKf/KNrwdoWXYSX9Z0//XvckgKIDHpr6PphGAeQNkdLvx6MQ+8aJc7ANjCu3dRzEBxZ zATTiJ7gMHqqqvcTERyp0BhUWEQaDFoApVwUT4/GQOVE8qphgm5YRqzWbKYXGoHXvOzf BcHte3cGgiskBBgdQIi3r21KQX1TfykTWgAKtQpvXS+63zmA4AAGINmWdgjKT2lB+aEv XLmg6hiGOcdHxwiLkZKTJDdGcEw0hqbv8aUOBZXXf68RwEKu2xjBsU+fPAoBwDU1+Sva IgJwnhIBOE/z9etRFp4SEE/maaK2HYDzND9ZOZ70ni85vqNJztO0FN92pfqU8F5oKeGA FyxgdK3uefI9EyY0Cps+DbUJ/dcv1afMxG/gIB37DgW5+wi/+TIWZXHUmQA4i9BUdyh+ 0/v0aedOsR77fQw6k98CC7YkVUvxG6lbIvzm7xx+8/eG8/13it/80wi/eZpBWfrrDoMp b4rJ3L3Fb2hwy5fFa3qnWE/1qcNvubaYx2/aoha/6Z3iN3/vkKfrkfTuCPxWkfKL9hU1 GkTUDec9YhvhNxXSfeLXp/UoEX7TL0WD3g+KoMJQM0MqLMJve1SRV0+qwoLC6lEQjUDT tonbIdA6uK/hlwtBwgH3MS9hUzEZWXXb5RG4j3N72ATujNzogXeP+xzDJ8R9I38BMfaA WOGXB3P+4jS4r+xixS8E97UYg806xOG+DWDF6eOjzXfyDWfQ4vDMzN9OxH4sK9tVy9kV DSe1NGKEusn6tOuMMCQsDEA/OQR9g9kGEnhsveFEWn0V6Lfv1RnQr8TIU2cbEnloVVMC 85mse+LaS3by6BVKyCsL/41h1Ndgw6ibMkF9nhZUJmjGlfNKreE31wVtF1GYAuREhEj1 kfrW0rTUokcBRe95jwDzSmyAwoOzATZlQRpwOeVVrYmNhPSvSNoUEJ1SoingQCl9b+HL BKQE4ndfj3Gf0vwk57lSCt9yvAcEx7ccTUsdooT3QmtFU4dveY/8fO/4ydFTQn1CH/ZL 9SkzkR+mHB39Dj/1kZ8vY/GZs3vZG6c8FPh5ZZI8dcBOFY0DfmsGdQz8OO2lA/zWdIYp YVjzdw74+fv0aXKnwM+XjYCfpxn4pr9ugZ/nzYE5vbfAT+/2l/Vt4IBf6xrM4z5tT4v7 9E5xn783SG/gbjruazCLloVRIEG0dUDvEdqA+7yI7hO+Pq1HCbjPfyke9KqwghJjsTWk xALu26uMtI5JfVy9e3Y73ELLXJBwwG8vYrdjZ6tYSL8c/KYMnw6/jf2Ft8RvzReK35h8 VYMbu90L47cNztNj8RspJnCjNfh3An7r03Bxkiab6BgBax7A5SRKy/MNdj/3LgBu37sz ANymxHAfA7gO4ZqKY4uIq79hjjJ2vgDZFr23hnyv+Ah4mSzxkeXO04L6W3haQFSyraTm LCsPsWSzRC5JofbQeqUirbnvPRq4EiNgDOGkI1q8YwrhsobA1rpc53zLuZKVYnjo0vql ehTm5jBXuK/DQwBLSgvzlXIVUSzv5lvO4CYCY+rTKxUsHr5MgHBZ49pGjMRqGWlcwwem tA8D60qJq+No0dSnpfa9JzJ8tO91jYGVoAbMRZlcRhY7uTU4jJS2xlVpb1RfKAxz9/hL sb55bZLeubIbmsOsFZ2tThSD2Or4Gefl3ch5IoQy8DUY0jtEJL0/dCeQC/+lvkt3eOSk NAu8/K8bAOd5c5DN3ydPLYDzzxTeaZs4yKYN5n9YmtJwJReWwUVCix52PKo42NSPGq5i j2qDeZNAsXoRWeRUFs14ULkeL4vJ0BqWvH2yGIapynDQTAwRp8EiFTNKM7kaJiPL0qhh 165GiD/OUQ7T6PpTu9Fl0/ypeD6wfIqz4yb7p4+YBCO7mg17i+HHBH9qFvtTcaDje30R f6oyfEJc5prkuV+IG+a17WpfKi5jF4hdvHq7mtGM4pd8CbuaZK8/GpcxhTO4ArZiAsl7 NMFbWKI5NjPBZeRQJfwPn2qEy/a8OweX8bkUl6UEcBkxiBaGqaERGoAxeut6sem+NYjL 5NjqikCzGJcpLWi/RaO0oP3Yw2fOZvO4TE7xwgOd4DKlRa/ZUhEu0zIRnqupJNo4Ma3V a7zcHE8QcFkNxsZEWgVcppQYl3maV+/DlHjy8KUiXOZpHiV5riKK5T3GZb4+vVIBb/ky MS5zbZPgMtfwAZdp34Q5TSkxLnO0CJdpqX3vzcJlGzCkMV45cObvI4TmaQZtsTQIMI0s zPJ6Swvah+7+4J0rm69QDg6i5Ss5m4r4O4VoizznLFYDwMyVg2YdavzcYBvzPIJicm/B lP8FA7TMbztYZa4DNVwpRNM6Ef8g4XHaAB52+fYxLPg7C8Ayf588tVY1/6xnKXsWj9U4 clerimUaYqLYS8dnjGCmyOAoidsng37AqvZhGESLMqe5ItViNJLEXKg1XlmPVYurYjyk fLV7gKwmuKUQ34MHZOLzgLKZCcgIz6lWOFC/GEDmGH4OLh0f4NaM/IXTAzLvLdUANxfx tvhQfKGGspygK6Z4ayQTFMOfWWDMnDlnItxaG/uxAZjIOXT+u6P3KUiwB6dBYwFjtBLp JmFzfRqIDIVE1A3IjXA3NpJIiF5OkNUm58RQfZdRve/dGYiMVLGCrQieNZW7yTqEawgG s4XqS7RbvQK9+LeuF723hhBZjUGQnCSJpczTgv5beJrXdsTfLtdEAUaEmgRUWPlj9UdF DK1XKiAywgb779H6bcMWF2HBqVdC3rDExYCMGLc1NY0AmaMkgExpXr/Xg5QEkGmpGJAp zU9XylREsJwneExr0ysV4TEtE+ExbZlk8nDN7vGY7xk/p3lKhMeUFmZHpcCCC/b2lJme Tg7r9IYycx3hMHNvYFaeY42RsH53V7JlPlxbGxmKZN/zolp50CVn48Wgi50AOIQsqDKu IWsf61Cj59baZJ7HoEvetTBKf0HuFrn8toIuuXZlkit9Ltw7O5evrSIuwCGt5AAfVw5p dajx80FrV7STILZ21US1E/UgQzvInY61CF3pQFaJCmN9n2T0acOU8CVRCc5w7aUsaJfM 08Jg72gXPrVHS2gNk9q4WvfBFVFknMMTRZEBrvCDFDN3D9QExbTY69zW08TaZcPwYwwx wdp1qt0DyvDpwNXYX4gb5jTWrv8PwVWBYfU04ArlA/YIyEKsZ6OBFXH1uCABZAqOhMke DXWINQtkmACrIi8AZWL+cqCMGW/fuzOAlYzzFFl1KWA56i9lQguw9pYNBRGy6r81CK3w BbHbMQkkq5UWlN/C04LykyBM4roi7EP8yHoDWI2xldL0vUXdpWSeEr9HrA8J1GVq0jez mkAy+AjgalET1kX0jWxCVcWtlFiZK61fSinhSzEc0fdicKW0MFspV0rhW473GCUpTUtR G1eqTwnvhdaKZw9teZ0MM987YZrTPgz1CX3YL9WnzIVXBX5+Z+oCtoiZWy1OAn5aB6IK TD4BXhVkTld4xbWDV0K18Ct+LoGkatMqsZSl8KpkgrPwSa7OHbxKqdFzB3HkeQyv5N5C J/0FC6/ktxU+ybUrk1zpc+FZ4ZXWNsAraQkLn+RK4VVKjZ9Phley+5XGS+CVDsBDInVI WIJIHRI8FanwpXhIqngGFRO+FQa8CrpSwnCIVYXWMamPq3cfYOFFJAYlsl69zPZMsgUs N6W4g8Wd+AWE6SvDJwRYrkme+4XTA6zh7ZlfqjuRfF6nsl6BcVYxvJgGsNjJ2HKMjAdJ BgV2aShEZs2mlH2cwXIF4FrW2JH9uwKwet+bl2GDHToxVMKs1qEAsKh/B2AJzEsBVu+t QYBFjERr3AcRSFFa0H6LWmmq68iJgFGSWSEisP9JYnZj5UeUkqH1SkW2Ky0TvyfuWnws MbwinKpal1GQVw2uJONGEdmuHMWwoJBLaQqmSE5i34tqrF+K5w4tFcMrpQVQpFxFFMN6 YrtytemWiWwKrkSAVrSva7rr4NjRNg/ISrtFpzNecx0aV0VpWip0p1Li92Y5EnOi7jyy kusYWcm9xUpy+FVAVnKlyIprh6wGnuNPVmRVYXlNkRXbaByykitFVinVIivz3KEbuY6R ldxb1KS/YJGV+LIVOcm1K5Nc+efUSZGV1jYgK2kJi5zkSpFVSo2fT0ZWYhhsxC0YCZmX qJhmR7FK1GHJ6EvLMCV8KQZWKolBtQTJi3REqlr41D7V4moY4yqtdR9XEabF4UJku0jD tOr1vLQXNTFJa8lQ9MXgKsfwc6jneK+gNslzv/B3XOXTla0I7ns205jsUctrs1gyXkHj IZwRniXvAxuwMKFosNuYuwl7HsnUtaiQpk2Lh88YwK266ZIYn5iN1i2IUAzQFb54FGPF UMU7RXIFsVJXtfhn+m/OMFYVBYs4wjLFRWJrGd+jmam1ee7qjelMQrJceXku5XExmPeH 9zpi8QEqkkM5isfytFjNuXIR8MFPSR6FKFC+xnRHHDsnXUawSmlBPTpK/KX+e5KmrZbJ McJQlcy6eSMGKez4ZE7LOA2OHBebAKEcwXDgEJSSPIAaJATMsdAyop1ddgsleRjk2Yko jukAhBa+Iv1SfUp4D5jnGkVYsJExi1qb3DPluyrMZNqhoTZ8y3WyluJLHUooM9c2VZHL Rm1Tch0jKLm3CEqqFxBSnYvQuCd54xCUUD0tPOeAI0VQNZkGUwTVME4tQpIrRVApNXru UIw8jxGU3Ft0pL9gERTBd/DhnnC978o/h3tFUFrbgKCkJSxCkitFUCk1fj4VQRE7sCw3 Zlyr+OwTKWhuFKtIHRYNFaAgLsOU8KUYQqng7dEtsdbo6Ba+1dcRntbTLfGXeu8xJF3b hKFFgkdP64TIg6bxVmAG72AvvMMub5Q6SKaFyNeEHxHLwoLzCwmRV4afQ0YzsJdrkud+ 4S2x1+ZLjchiT76gJckaS/TTrNB4ed+gknwtGfjs3UTsJfkaNi1GEonFYXxJ+tk+DUVP zA9BRsAMya0g3AsNfzvv+XeBX/venYG/clL3Cp4qOMFD5rP0HjsWNTfPTUuYe4PXbHm5 l/cJFjHvD+OviuA4QsvE3BgBFEeLdKSWC6ipWsspuISxee2HfYkwMGBshL88rVcq/tKe 90jqUa7YbRbjr4YsjA1oO+AvdqJJTExg3RIMB4q/HKlXpkcIiGVRuZdi/OVIfjqrlJ1A UaYDjlpUSuuX6lPCe0BL1yhhkgAVuibXyZJSrqv8NOgpoTb9UnzpwHvzLFhNvpKhJFsC c7kWrETTCUwy9xZRNTkhXz70SrI2K/7i2uEvobrS8XOmLPmmeHlaZvMUf3H+pPttuVL8 lVItb+a5w0ByHeMvubfYSn/B4q/GxBbaJ3K970rxl3Cv+EtrG/CXtIzFV3Kl+Culxs8n 4y/ZUk0uTroiiFlfpBCNjkgdFo2+mA1Twpci/OUFb49uiTVJR7fwrT06Qmk93RJ/qfce Q9K1TRhaWUTr4i+EdyOnY7ww/iLVOolS9Qi6L2CLojL8HDo6Hn+N/YW/468jbF+SXV3x V2mMSEdvTSSqVMAHCbrIXOduJsIvkzu7wIRSk8ua/A8G44ivP6GBYyQTbC5WHnb/kW9Z dKqkWCV8C/jl3gV+9b83y5UIMBR0VeJYsvWMbiUHGYyGirfEbJlYeVdeCoTyMDfkPiSH LRXBgxGDL6XFCtLRIsgksG69ivyHePKILW2xOUTKT2lBQTpK/KU97xG9tGEzKG0d3sSn S5J+gXtq/MIXsMJ5GqEvR0ngl9IC3BqkxMHvlZaKIZjSwpSmXEUUy3vsQSTm1tanVyqa HLVMjMG0teKJQls+YDDtsTAVKiXGYNqH/VJ9ylwbWMsxGorB5DrGYHLv0BO224DBWgPc 3RMsyv5KS0fPybZnvikYjGNGOhhsg13aYiy5UgyWUqPnDgfJ8xiDyb3FV/oLFoPJbyvG kmtbJr3S51InxWCtq23AYNISFmPJlWKwlBo/n4zBMN2yhJFlbxA8HZKHRIrlh1MM+0Sj TxumhC/FGEy/vkfFRANeBV1VAN/aoyq0jnF9Aq2LpRjAeDFYCZgLFu+MOpaym808P6Jp APbhfDF+RGX4hFhK9tTI1qSuea+ToP/vWOoILLXh9KCXxlLm7KPjwJQ/qUgBkSh/Pb3I 05gE9OSjCEz5k4+0nNiy9rw7y5ZFXHWEptwJRh4tSc1jPOXOPIqey/sLfz8IpwiP2GDx ovYBbCgt1nWOFoGgghWhHDygug5vakMAvJgQ9tB6peIv7XkPFLkmi0aMpgh84vgpwW+K pgiO2tAHEZpylARNKS1UcJCSoCktFaMppYXJSbmKKIb1BEy52nTLRHOcKxEjKW3OKBwL j7xt9ICktLPChKaUGElp9/VL9SlzkZQ9hMKhFVY7MZKSZxYlbRDQgKRkZ4Nas7h2SEqo rnR4XnDElfkmSIoz6zrxWMWKPV3mt82VQ1IdavTcohnzPEJS5t6gJP8LBkmZ33ZIyVy7 MnAUrhRJ2d0ahp5rbQOSkpawSEmuFEml1Pj5ZCRFFIE5SyJGUl6kIsnrihQhFk4n7BON Pm2YEr4UIyn9+h7tEuuNjnbhW3u0hNJ62iX+Uu89vuXaJkZggdZFYERy4XzvRXLN9SZW BUcryW6ML8SZ6Ph9Dh3NsGXZBnnuB04Pv4b3H/rAed34+IVksS9WJMP08IsYgzlhXMQe GRMPR3bIoDB3E21Z+DfEL8VkzhKzXJkFX58mMwcJHQgqopw9g81ofnaW4CPy7wr86n1v li0L74txJZYkPjRmtuQe0xk1N/DL1Z17C9dMeXku7wO/3P0g/MIZQyhaEspVKS1WkI4W gaZVK8erxa5Ewi02pH1O4JfSgoJ0lPhL/ffkMNa2SV2JElLcFFgHPP4qCeVacximB1aO EKMvJfXK9AgBriz0pQh5KclDKM9ORHFMBxC18BXpl+pTwnscg+UaJcwQi0qbPIAv7aow Byol1IZvuU7WUnypQwllZoIvTrIXeXUAxwBo70o0zwycKlasajz4Qjf4UC65tuDLUF3p 6DmbQTz4MgGcUeos2f3rQrnMlYKvlGp5E5oDPaZsDL7kmYVT+gtyxxlg/LaCL7l2ZZIr fS51cmYsX1sPvkxLGHBlrpQPabtADVfSJ2L496dAhhxZA1kc2FEtBzqkrsS+SNHtbhSr SB0WDRWgIC7DlPClGHyp4O3RLRFkUq5Ua/Ctvo7wNC0FV65UnxKWhAxJ1zZhaGURrQO+ SkK5quoErkS2Wa0kWOKLQV+O4efQ0Qz4NfIX/o6/ppu/ihy8oviLsPNZ+EvC1kXLF3wn tzcT4Rf7iPHTMZVjRcIDZrZDd0kMT7LnrQSj8XvoRom35YwSEiaCOtyLQK/et2Yhr4Ll KHYvUny5Kka36HNTc1/nAtTnC8vTUPiAC7EkkKe1PoYIhDhapBi1XIBK5Zq1JCn5gqos iafgME1xhXil52k9SvylPe/R3mT1knkrvMnedOYGSdjljF5ikCQ51zpCXY6SwC6lhRoO UmKjl35dulqj6D0tICblKqJY3mOrl5zmZOrTKxWsD75MhL20/US2XBh95ls+cKW96KdA 7S/aoUcLGbR8qV4Z3psVxgWOkRwvim9kg1/AXvLMoqmcY9sD9iIei991T9qVw15C9TT/ nNWE+aYYvkp7qFf0CyWLKPvbcqXYK6VGzx3Skecx9pJ7i6v0Fyz2kt9WbCXXrkxypc+F e8VeWtuAvaQlLLaSK8VeKTV+Phl7SaJjqUZk+FKRgq1hkWLZ4ZTAPtHo04Yp4UsR9vJf 36NiogHfVTF8a4+qUFpQFMOUoJoWpbZN3A6B1sVe+DSKFsurdz0SbcKhcTgjZ4XRl4Rx bUSNfinYSxk+HfYa+wt/x15HYK/KhNfaMPqaM3nn2L543wAT1qicpWnvJoKvQlS38CEb eWoyXAmU69FQoHJIIzE9ZhMQKa0khreQ5Hn4H/27TJL73p3jeqw4kA1UZbiDNWoa3UvY mHVNat1BY8YVacub55RfuPeHI7nEi0oiP34hwiiWFGtIWypCTuigdSvYVVOMkr9s2ZZm Q3+f1qNEX9r3nkShyc6hGIOxFxxrk3g6FYNhqOZ42yiHKUfHGQrzWaiN0kZQEgym78UY TGlh+lKuIorlPcFgWp9eqWgi1DIxBnNtk2AwbfmAwVwXhpnQEWIE1imz0H7f89I8+IWJ EGFSiGN9hC6Knp22LmdWwQ67CH5JKmGFX1w7+CVUC7+S5yYblqMzTSdR9AUnV7nfliuF XynV8maeOwgk1wKV/BmI3Ftoxamh5hcs/KrET6RPNAtXIVRXOn4O9/JNNur42uovLExL WHglbaLwS64DNVwdYfoiPKk0i90gcjrQYtTRFaZDctETlWcJjIEw6pwE9rVKpEOUnb6+ CPAp85qmVyr6klY2ec+0STKYXDP18kaUaNOCKFWPuTQd17xk8pwzx6IXxfbFYC7H8Akx 18hfeEvM9aWeml1gIBJYY7YuCtZ5EczVyoYoxR2j03BJ2oiSmPi65gzsCHP1aSzYGb2V bOmWjcoOc7HRkfOaJXDc4TXG8b5352CuNT8XY67kHkxFzc1zgz7NvfFPesxlyo/AXGI/ q8zGzaAelRbrR0eLwBLhEYRGiiHKZXYn0mvZQIj1nCP1yiiB+bX/Eq1K8G4SOV/SHGVB JE+AXBin6zUeFeV7AeKzlFjVK01LZb5UnxJASvhWDLn0W2EeU64iiuM9QCe+5Wj9Un1K eA/wYJsmTJKLUhs9IC7trDADKiVUJ6PpbDdrKb7UoYQyc61eNchbYZdcx1YvubeAqZa0 ZeGOrMEKu+qidLCLKy0dPzepsuxXMCd2YJds/7OwymwK5Es4/kgDH1MDTeGOPI9hl9xb wKS/YGGXOQ7PPZFrWya9Ulgm3Cvs0toG2CUtYWGVXCkfKTV+PtnqRQBhuTIjO0hZT6Lo dTeMVaIOS4bKT5CWYUr4UjwgVe72KJdIlShXB/XEc8rFj6BEI9lmSaCXNlUfe63wnpUy yWisPb+5BqNL3ojsv7Jbk1h7cb7LpuWNQADJeYiK+2LAl2P4hOBr5C/8HXwdYfCSE/Y8 +CJj5izwJUtovka0lhi8zN1EgxcbD5cl52fhKmzJf0CEuMwXXZrMG3LmKSYhABj5JTai T0scgViYSv+ugK89784BXwRNGXBFegtX0+gesEXNzXNX97xh7SZgzZQ3zykP+HL3Q8Fe pRxe1RIyF1u8lBbrR0cL4KsgZKItJemZgq+ClqzFEB/pOk/rlYq/tOc99rPLEQDCgsN2 Bd6EoiZk0OOvgkPOanYd8CmXJEIphoUurV+qR4lNXv5bEf7yND+fea4iimE9tngVrjbd MsHepSUi7OWbLoq1942uUyWy6DowTIJKicGXdl+/VJ8yF3w1ZKxS8CXXMfiSewebsBUG 8CVH1Sn44tqBL6G60tFzyaEn3xSXYytJf5NwL7svUgCX2Q3owFdKteDLPHcASK5j8CX3 FljpL1jwJb+t4EquXZnkSp8L9wq+5HBoqW0AX9ISFlzJlYKvlBo/nwq+CgzDRWlGdhA7 HaEBz2c9kWKxMEWkIr92973wpRh9aak92iUa7F3tsvDDYZR2ib/U0y58y7VN0g6e1nE5 FqTgWbXsR9qHwBaKwLLJCKxAs0lGoi8FgDl+T4e/Rv7AW8Kv6gtN21W0dUjb1ebzYr14 34ISidIiiEzuJsKvgj3ILVuICd5i8UcSTmaMPg3tSbB6Q7KZjETT4ng0Wlri2gUc6LvA r33vzoFfEuAAnGpQQwZ+JffAK2ouz7Xu3JtUEra8PJf3F+79YX9jQdQB7pwk1t7TIgWp tAg0ESHREHMVKTrJJFawJShWkEoLKMpR4i/teY9N46Vsm4zxF11GOrIo1r6gI6o6j+CX JRgOFH05UoBaQ4QAVxbuw/y6xzlKCnOZshNRHNMBRPElR+uX6lPCe4AH1yhhhlgU2uSB Ke0+D6K0o2iCPk0pC19KKZmnzAVfOJ09+JLrGHzJvYNNYlL2li/ZMavgi2sHvoTqSkfP 12x2VfC1ltjGBHytWeRZcCVX6nBMqdFzB4DkeQy+5N4CK/0FC77ktxVcybUrk1zpc+Fe wRfLlA74kpaw4EquFHyl1Pj5ZPCFOmDwJ7H2e0QKMXOjWEXqsGj0xWWYEr4UgS8vZnt0 S6xJOroF0d+jI5TW0y3xl3rv8S3XNmFoCY637dUzf8kEwKmyL562q2hR0CZ33Bey01EZ PiH8ck3y3C9Mw19+36LfpvjNV+xVKbIP/Se6gbH/5B+/YlcL7/iP+CL6zlGbHjVdyY/G ePoTCegv7DmF3/6wb2dN2GOT/fBt9hdu8zXJOVaSuX5k7nomaL/p0cQ9zLCDyfsWnkgS c3c3EYjJYq9uajL9EFgpO71ZuXdJ6Ht8HBV2NkoxbHJABroVbFRK4lD3phjB+m/OAWEm abaEFctZilj7kntAFrXmga839wLCXHl5Lmm9iS4x7x8AYaRYyes0d32htFhROloEnQhH t1nNvJGK4HCUZQrClBYUpaPEX9rzHm3NbsoUhGH223DQHSrWxX1hk1ySWC0CYZbArBYw lyM9TwiwhXYzH6andXKiaS0pQCdlJ6I4pgOYWmD0sBXpl+pTwnsZ1j7bmGGmWBTa5IEp 7aowFyol1IZvuU7WUnypQwll5oIwFjQehMl1DMLk3sIqPMcRCOP8FA/CuHYgTKiudPR8 Y46DtnRy2HRA2IZdMRZkyZWCsJQaPXdASJ7HIEzuLcDSX7AgTH5bQZZcuzLJlT4X7hWE aW2DBUxawoIsuVIQllLj55NBGLuAyM2SgrC+SNHtbhSrSB0WDRWgIC7DlPCleDSq4O3R LRF0Uq5Ua/CtPTpCaVoKrlypPiUsDBmSrm3C0KIvPK1rAWPct5yF2rWAselqVtA9ETns +ULDfTEmMMfwcxDp+A2P2iTP/cI0ELZWs9UE7OUR1j86vOaw1+LDF2sEI/8vetkEgKGG Zvkg5X2LSho2Aru7ydiL1ZHkn5dAyHVjjGASqZPSBFbJgUGENREETliSMYKZaCQ5+1bf NfCr/+4c/NUQAmGCedUHGd+Dr6i5eW5aQu7Zye3Ly72UR9WYWPwD+ItYthV5SumaCKA4 WqwjXbkINdFuJPEXl6A6CWmhQgxqQdfR347WKxV/ac97xImsJA+Z8KDfJ9ht3eAFDviL cAwcA9Hex8JRDA9qBlNaqOEgJXFCaqkYhSktgCflKlAc74kXUuvTKwXCs0cDmc2sps4x DHPth4SFctryOmfSyq7HwmyolBiGaR/2S/Upc2GYbApWR6RcxzBM7h2AEsuyt4Vt1mHv I9cOhgnVlQ7PGYLWuYkVnCEqbiaxfrnwfgayOC9xRJorB8M61Oi5hULmeQTDzL2BWP4X DAwzv+1glrl2ZeAoXCkME+4Vhm1cbQMMk5awMEuuFIal1Pj5ZBiGlXAtQWXR3kc/JA+J lOwLsIphn2j0acOU8KUYhunX96iYaMCroKsK4Ft7VIXStNQBpROppoXsDjdtE7dDoHVh GAO/WROy1XFE0m3zYBiRZeAO1h9fii3MMfwcSJoBw0b+wlvCsFpB3SwTmIrO65nACJ+S 5bGDYTiU5pjA5OALaxwy277N3UQYVmzYhtIQS1+y6WxD8k5hrkdDgRIB1si+gZJgDmxL olPBBcSug+Dcq+KK3PPqHBRmw9vYV+Wcrsm9WLlMPq/CNoTcy1yORjflzXNmJlCYu7fq 28eKRniENBrEtMUgLLekWEFaUgSciJkkeCna+lgQyirZMCI9RxImRwv60VHiL+15D7vj RnKRRRCM9SJR/1gqPQTLCWtZETDHtxzcUkoMwTytX6pHiSGYfy+CYJ7mAZHnylPIxWl4 TyCY1qdXKoJWWiaGYNpa8TyhLR8gmOuvMBE6QgzAOmXIYGU7ec9LIrVF9stkQ7dDNWQI ceiLE6BsyJbHRtwbPCVp9gL6QjMIcndPNpVFX4bqaf45yw3EwtJxxHfQlxzHYPmQK0Vf KTV67tCXPBekxKRvISH3Fk/pL1j0Jb+t6EuuXZnkSp9LneSbLFN8bfUXiJCiJQy6MlcO fXWo8fPJ6Iu8WS17jGLwpYPxkDAdkoueqDxLYAz4MaYC19cqEepS2e7ri3hhpxXplYq/ tE+rmDZJ1jOumXr+RxnpHPu0F3LNiL4vCCvOZevQFwO5HMMnhFwjf+GdQy7RxhWRSpwE hWEgZ3iT1Gq5WrOZGesI6d0ADh20bt2Hu/Oeog3+RRlhpNas+SpG2kbs+garr7BQrNrF R5Rma5yQ7p+PN9k3v6+WRMdnHz9nP2Yffrf9KiuzD9dfZU32wV4/fpXVen3xFZr+A17W NvsAnPwp+/gv2XcfyS/4nzA1rkp+NEgkJFVarNjkeKhKcgwzCX32VElyr3artDBVIhjA VunD3S+32wdY/fjnPYySCAGtl0dtj7usXssxXXPanhVjS/rHN2n7g1U6vu17VRrT9rvt dpc9Xp49ZmfZ0/3u8WF7djO9K9T5rufeThoGrM/IZOsSVRMbQAL2vsxkHZk53z48Xn2+ Oj973GZXt2Nkh6iLJlPZ8Qz/aftwvr1/fDq7zh6uEHGJl15XZvzBFmOdXHSwtMEy3EaM fvOHmzz73Z2MqkU0qib1LD9yeFR5RUF2DtIgb5zCHtlCWUa/brPzy7Or2+x2u73YXmSP d9lfz66vLqTVvlpMH29d4XRVoNPi6IlwF3Sd7Mfa0K9e1w108uKb3wfFIPx//8ffZle7 bHd3dyvsb/92f8VmubsH5HVMrxtt3ev1b3cASaPaxncCFvGCxY+twVgx/fb7fxvD5bGy WZEguqKRMzkUU7kLsvmXRV+cK9aYHO/D9MPihFfNadPhlWSSGBZnP36OaMmG7uAsXBct P7YlEeez3e7u/ArZvch+uXq8NOIdte7pB2KDTYKESuW0gZioKiT58ex6+7UK76IzLw83 OdPdwPDrBC+F4VfXeG02qLPjGH+8fNopn138MMznLNGQWGz8Y9MG2f312fnV7c9GHv6C Jr96/DW7+xxJRvYXEjQ6LJcwnow738Aj5gSOoC6xzmSNY1gkYvIg8j8YD6LFuDmh4ajj Db9+WKF2kZabEx7unh6lwe4+mzY7u7h42O5eu6sJ+i5WWPrMjDBWC+zuz86BvBNnrmNE sqV9V6Q6InXEEXxmF9vd+cPVJ1TVp19NI5t57DYMJwb+yYFDQ1hSU2wm6qs/b+/uzx4u fh1qZmAQO+nEddFZDB3TzIpxGg5qqBs5qkYWQyIOLIZ6KweLAicthhZmMZQdXAxxMPRA leIhKhvzxwBbXQylVUJJ7wW23SF692l3/vSA3Aw1P2trOdkian2MXxuCN2cshxo2/rA9 2rW+sPqKS1GyYwzWqDvjjV6J9mu0D3B2G3+7G2h1iUddsz85NDu5oVetHJxop+XFMUuf eoO3jvOQghJ/xWZPqmQmwk6Vsm/CRLgYWBxVxOXiTBGfQajKwESY/KDB5fqDcxQHWZfI EzR1HmEiHOpppnYiDeUUZafeXoRLZhGQWIR5X1G91XGV5vd0VJWhno5/8OV6mtlsbc5T 1ili35DuGgoO9DRaf2OS3GtPq1VvljwykbWtqtJXnsjqwSrNmcjkEKVQpbET2fX2zBgc hsYZWh+ruZjjYxjBwZNzJjLy3ZIK56006qEqHT2T9au0T+y7M1m06Pzfg8i+4vSTdo0l NeoDop5W+ZwBUDETsJX0Tea0wQrF4j/VqJ1WaI9xHoPVwhjnP3w9IOyy5blltdNr6GP4 Usgse6bZnKwh1wOQ2QrGJMhs/Qd9yBwbWKbU6FkbmyJmrZGzr+xvauc0GEJqFefPA4hD S5vUxlXZO896DJT3TW1OIZFtGzr1vOL0PVijjvCAjeXvYfuBb+qkRmN1+tXPt1v8S3uX 3zGbBmRowxs2FyQ3C3By0NaOG3iDV40cmXSibe8BjBH/nIEY+nOzdBd5esWsY7rZNcqA Ry5YqYcRxovyKHERcmYxx1VN5/Hq9gKz+fnj9a9qjxjRiy/XrACIDU68MHz2TWFd5BZN Ydkvl3e7IbtPRb4uSR0aTWLWOTtLEgASGzK0BpZfc8QP1WjWiE9q1HMyJ46XocWRHJdG WF0CGLwj3COcsYYS1a6kHiNxyBtNZOOqNNZbpOpVqzTNU2DcdLhj77JPOO7ubh/PznF2 KKjougpK8sqtcrOVyyFo0D+hmEVHSkYZrXxfACpYy68D47PlfkGwggYl9EFFbAV9rkaT jCy+K1yNpir1Xy6vzi9tL1zd7rLLp5uzyHybRlMMMj5HBZUNe21BMpMmo6fd2adrLzy4 xj/fPdycPV7hPeUqHtcxmhvkf5YoEb3KqC6CKI3R+iYW4Qaf9SP/bR+WyTwV3DgJxwZu dIV/BNogPJ/E22y8ijgNcGNfMID3nrJdnqQ9BxFKwqKZSx2Ls4SCbdqrje6zHOs2AaJ8 vMSLfnF3/nSzvSXY45a1Od5137qpO2KQ9VnyIMh8sjz8MzP/46en3eP2YZd9vz2/e4hM 46fjuq5w+4BYyqOYRnfLuBNN7lv4NTQG2/Na2cTolynjRtw22/3KePvbq/JKsDJBI9GS agyvCPLF9jOK4QLVlv34h1fguGaLABHpJso55vjg6vQ3r8IYGxhXJgVBxNfYVcvvlmfn l1evwSZmW/LDSQx30uNv335EdW7IFtJlbMBR112ePNz/z6s0n6Q84biILpdv3nw+tkty KEsK5Uk4ZXfIlDA4/Rwzc66xfdVyelLCZtJ8XePp5NEbT4tjVz8k/GF7MQcYJHwNCF+X w7tPf2Y1/9PU4QufSZbTERajmlFbYlBP2TzYfClmCzHHcvaQmZ56K/Vj2s+vWIqGc2Bl t0kURt2LHDiRGXRclSavHl2VpiHny7vri+E4ak5vWJLGLvJgv4S3S/IZAJVcXOcre7uG q3SMPPn1YlKlsZZR0WeEVA0MSMk73LBrKBJ842cxfIppNI4Ae8aCq3JfoNgKybUQy/2A sfII8//h7QMHK+QOsvBS/0xImzZ8v0L7EGFXE35t1jJXj7uMoCVZ2lxJUBvx7BO74pip xXcF+RPZTTARd7Mew6Lw3XdZZOhMVWdY7kruxFqSEuyVoG6Dj5UgDAwFx+PEAtRTnJNC rsabep6r0FGmnsJWKIwIK0CcS2xsYO6f4Z0EQyIz1PhHyEzNfkRmfXL8JbwmHHZFfFCU sQVUG5PN3LvQJRaMuTCKFR6LR7wws/Jl5/HbuBWLUVXymuUZQfeaxVXJSXrS2F1Yr9bW bsBzQWIWuEtcuPPdDMTsy4ayaBU829wqe8MuvhoT9jhcpWPkxzd2UqXUz9CV7KHGli3Y 7LeTLGVesuf7GWQbN7vN3wYpjqvSZMl2VTpCstkrTlI/cq+bi1YOIGSD7LrAptkS1S4X Xf0WpRoQPMOeV1I2sTOejpJcA2z/lnMMPU22BUuc/IZFjitncwTIQWJCoU1cwidLwX1B OgCz058kTQnN7AuOKfGX9ryHb4Tja322AfMmaVHrumFHl+eqIqIsL+TUGeXdUQwPXVq/ VI8iu6Nx1BKlhl1Gv0U74IMg94EkWLW/mNXE77dU0aRctVwFiuVdvtWljaLE79W2bdgg Hb7lW95zpb0YeFdKXB9HW/RL9Sk24ZPBtZKA1/w9ItEuKNkkIitdijbuJVdbYe9NzgB6 STLmmgKYmMibJhl7gEvGYudu+YfmDI+FfOguKuuSbfjSjI3KnGrjfthkqvV8mTt52/G5 52n6jHwGK8IlhWlTVnLEVdSZXAKWwK3JzSbnFFDTcCtJRPgl/5h7vqWF5Wl6F5U1J1KZ X7Kfds3lf1gaM/Blmlbednzapj5wJ50v56eqeQFXU9iUZIhisDTZlmsyVediXoAl1EG0 mllh85Kdw2uL3ew/H2/wU+MWc0FAy+Uy+zGPzCB9DVXgspajpiIF5UgyJlQTaCmvZgrM M6gGdyCpqI+CFMXrjXipec2pJ6UFZaSUfpn0PZB3y7eEBf8t3CN1LcrIKU05oorg+IYy ThV5ivDQpfUoQa3F76l68rRIPXmaVxay0LNcqSoyx2QJ75Ga8bToPVfDHiVWa761IvUU Wl7Vk++cwLrp01jZDpUJ6lhLWM3UlcjfBAENEyMr7A2bxGVyZdAaRdRwToTNCGwHuL2P FJElqLZo+EQt4u0UUyPSGGkic58+7dwxAty75vgqmyfFaDWODEk0UUsElGg1y5i9k7fj +0N3QRPZdyNN5D7tlIv9Ya9dLF+iH6zuMfdeE9mnybNIa9n6B03k20tVkWlOr4ps48pP WVXkGvvA3RGqSER+nXNiil8Xj1ZFRaSK/vP/AS7ZUFUKZW5kc3RyZWFtCmVuZG9iagox NyAwIG9iagoxODc4MwplbmRvYmoKMTUgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVu dCAzIDAgUiAvUmVzb3VyY2VzIDE4IDAgUiAvQ29udGVudHMgMTYgMCBSIC9NZWRpYUJv eApbMCAwIDYxMiA3OTJdID4+CmVuZG9iagoxOCAwIG9iago8PCAvUHJvY1NldCBbIC9Q REYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8PCAv Q3MxIDcgMCBSCj4+IC9Gb250IDw8IC9GMy4wIDIwIDAgUiAvRjMuMSAyMSAwIFIgL0Yx LjAgOCAwIFIgL0Y0LjAgMjIgMCBSIC9GMi4wIDE5IDAgUgo+PiAvWE9iamVjdCA8PCAv SW0xIDIzIDAgUiA+PiA+PgplbmRvYmoKMjMgMCBvYmoKPDwgL0xlbmd0aCAyNCAwIFIg L1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCA4IC9IZWlnaHQgNiAv SW50ZXJwb2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSAyNSAwIFIgL1NNYXNrIDI2IDAgUiAv Qml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlCj4+CnN0cmVhbQp4 Afv/HydQKHmpWvVKoxaBIEqBgiY9r62nvIFwgWwIA6gSKOi64C2Eq98GFYdw7aZD1QOV QUSwkgB/Y3mJCmVuZHN0cmVhbQplbmRvYmoKMjQgMCBvYmoKNjEKZW5kb2JqCjI2IDAg b2JqCjw8IC9MZW5ndGggMjcgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFn ZSAvV2lkdGggOCAvSGVpZ2h0IDYgL0NvbG9yU3BhY2UKL0RldmljZUdyYXkgL0ludGVy cG9sYXRlIHRydWUgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29k ZSA+PgpzdHJlYW0KeAGb9h8MpkEoTBImwcAw7f80IAIAVBQq9AplbmRzdHJlYW0KZW5k b2JqCjI3IDAgb2JqCjI1CmVuZG9iagoyOCAwIG9iago8PCAvTGVuZ3RoIDI5IDAgUiAv TiAzIC9BbHRlcm5hdGUgL0RldmljZVJHQiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+Pgpz dHJlYW0KeAGdlndUU9kWh8+9N73QEiIgJfQaegkg0jtIFQRRiUmAUAKGhCZ2RAVGFBEp VmRUwAFHhyJjRRQLg4Ji1wnyEFDGwVFEReXdjGsJ7601896a/cdZ39nnt9fZZ+9917oA UPyCBMJ0WAGANKFYFO7rwVwSE8vE9wIYEAEOWAHA4WZmBEf4RALU/L09mZmoSMaz9u4u gGS72yy/UCZz1v9/kSI3QyQGAApF1TY8fiYX5QKUU7PFGTL/BMr0lSkyhjEyFqEJoqwi 48SvbPan5iu7yZiXJuShGlnOGbw0noy7UN6aJeGjjAShXJgl4GejfAdlvVRJmgDl9yjT 0/icTAAwFJlfzOcmoWyJMkUUGe6J8gIACJTEObxyDov5OWieAHimZ+SKBIlJYqYR15hp 5ejIZvrxs1P5YjErlMNN4Yh4TM/0tAyOMBeAr2+WRQElWW2ZaJHtrRzt7VnW5mj5v9nf Hn5T/T3IevtV8Sbsz55BjJ5Z32zsrC+9FgD2JFqbHbO+lVUAtG0GQOXhrE/vIADyBQC0 3pzzHoZsXpLE4gwnC4vs7GxzAZ9rLivoN/ufgm/Kv4Y595nL7vtWO6YXP4EjSRUzZUXl pqemS0TMzAwOl89k/fcQ/+PAOWnNycMsnJ/AF/GF6FVR6JQJhIlou4U8gViQLmQKhH/V 4X8YNicHGX6daxRodV8AfYU5ULhJB8hvPQBDIwMkbj96An3rWxAxCsi+vGitka9zjzJ6 /uf6Hwtcim7hTEEiU+b2DI9kciWiLBmj34RswQISkAd0oAo0gS4wAixgDRyAM3AD3iAA hIBIEAOWAy5IAmlABLJBPtgACkEx2AF2g2pwANSBetAEToI2cAZcBFfADXALDIBHQAqG wUswAd6BaQiC8BAVokGqkBakD5lC1hAbWgh5Q0FQOBQDxUOJkBCSQPnQJqgYKoOqoUNQ PfQjdBq6CF2D+qAH0CA0Bv0BfYQRmALTYQ3YALaA2bA7HAhHwsvgRHgVnAcXwNvhSrgW Pg63whfhG/AALIVfwpMIQMgIA9FGWAgb8URCkFgkAREha5EipAKpRZqQDqQbuY1IkXHk AwaHoWGYGBbGGeOHWYzhYlZh1mJKMNWYY5hWTBfmNmYQM4H5gqVi1bGmWCesP3YJNhGb jS3EVmCPYFuwl7ED2GHsOxwOx8AZ4hxwfrgYXDJuNa4Etw/XjLuA68MN4SbxeLwq3hTv gg/Bc/BifCG+Cn8cfx7fjx/GvyeQCVoEa4IPIZYgJGwkVBAaCOcI/YQRwjRRgahPdCKG EHnEXGIpsY7YQbxJHCZOkxRJhiQXUiQpmbSBVElqIl0mPSa9IZPJOmRHchhZQF5PriSf IF8lD5I/UJQoJhRPShxFQtlOOUq5QHlAeUOlUg2obtRYqpi6nVpPvUR9Sn0vR5Mzl/OX 48mtk6uRa5Xrl3slT5TXl3eXXy6fJ18hf0r+pvy4AlHBQMFTgaOwVqFG4bTCPYVJRZqi lWKIYppiiWKD4jXFUSW8koGStxJPqUDpsNIlpSEaQtOledK4tE20Otpl2jAdRzek+9OT 6cX0H+i99AllJWVb5SjlHOUa5bPKUgbCMGD4M1IZpYyTjLuMj/M05rnP48/bNq9pXv+8 KZX5Km4qfJUilWaVAZWPqkxVb9UU1Z2qbapP1DBqJmphatlq+9Uuq43Pp893ns+dXzT/ 5PyH6rC6iXq4+mr1w+o96pMamhq+GhkaVRqXNMY1GZpumsma5ZrnNMe0aFoLtQRa5Vrn tV4wlZnuzFRmJbOLOaGtru2nLdE+pN2rPa1jqLNYZ6NOs84TXZIuWzdBt1y3U3dCT0sv WC9fr1HvoT5Rn62fpL9Hv1t/ysDQINpgi0GbwaihiqG/YZ5ho+FjI6qRq9Eqo1qjO8Y4 Y7ZxivE+41smsImdSZJJjclNU9jU3lRgus+0zwxr5mgmNKs1u8eisNxZWaxG1qA5wzzI fKN5m/krCz2LWIudFt0WXyztLFMt6ywfWSlZBVhttOqw+sPaxJprXWN9x4Zq42Ozzqbd 5rWtqS3fdr/tfTuaXbDdFrtOu8/2DvYi+yb7MQc9h3iHvQ732HR2KLuEfdUR6+jhuM7x jOMHJ3snsdNJp9+dWc4pzg3OowsMF/AX1C0YctFx4bgccpEuZC6MX3hwodRV25XjWuv6 zE3Xjed2xG3E3dg92f24+ysPSw+RR4vHlKeT5xrPC16Il69XkVevt5L3Yu9q76c+Oj6J Po0+E752vqt9L/hh/QL9dvrd89fw5/rX+08EOASsCegKpARGBFYHPgsyCRIFdQTDwQHB u4IfL9JfJFzUFgJC/EN2hTwJNQxdFfpzGC4sNKwm7Hm4VXh+eHcELWJFREPEu0iPyNLI R4uNFksWd0bJR8VF1UdNRXtFl0VLl1gsWbPkRoxajCCmPRYfGxV7JHZyqffS3UuH4+zi CuPuLjNclrPs2nK15anLz66QX8FZcSoeGx8d3xD/iRPCqeVMrvRfuXflBNeTu4f7kufG K+eN8V34ZfyRBJeEsoTRRJfEXYljSa5JFUnjAk9BteB1sl/ygeSplJCUoykzqdGpzWmE tPi000IlYYqwK10zPSe9L8M0ozBDuspp1e5VE6JA0ZFMKHNZZruYjv5M9UiMJJslg1kL s2qy3mdHZZ/KUcwR5vTkmuRuyx3J88n7fjVmNXd1Z752/ob8wTXuaw6thdauXNu5Tndd wbrh9b7rj20gbUjZ8MtGy41lG99uit7UUaBRsL5gaLPv5sZCuUJR4b0tzlsObMVsFWzt 3WazrWrblyJe0fViy+KK4k8l3JLr31l9V/ndzPaE7b2l9qX7d+B2CHfc3em681iZYlle 2dCu4F2t5czyovK3u1fsvlZhW3FgD2mPZI+0MqiyvUqvakfVp+qk6oEaj5rmvep7t+2d 2sfb17/fbX/TAY0DxQc+HhQcvH/I91BrrUFtxWHc4azDz+ui6rq/Z39ff0TtSPGRz0eF R6XHwo911TvU1zeoN5Q2wo2SxrHjccdv/eD1Q3sTq+lQM6O5+AQ4ITnx4sf4H++eDDzZ eYp9qukn/Z/2ttBailqh1tzWibakNml7THvf6YDTnR3OHS0/m/989Iz2mZqzymdLz5HO FZybOZ93fvJCxoXxi4kXhzpXdD66tOTSna6wrt7LgZevXvG5cqnbvfv8VZerZ645XTt9 nX297Yb9jdYeu56WX+x+aem172296XCz/ZbjrY6+BX3n+l37L972un3ljv+dGwOLBvru Lr57/17cPel93v3RB6kPXj/Mejj9aP1j7OOiJwpPKp6qP6391fjXZqm99Oyg12DPs4hn j4a4Qy//lfmvT8MFz6nPK0a0RupHrUfPjPmM3Xqx9MXwy4yX0+OFvyn+tveV0auffnf7 vWdiycTwa9HrmT9K3qi+OfrW9m3nZOjk03dp76anit6rvj/2gf2h+2P0x5Hp7E/4T5Wf jT93fAn88ngmbWbm3/eE8/sKZW5kc3RyZWFtCmVuZG9iagoyOSAwIG9iagoyNjEyCmVu ZG9iagoyNSAwIG9iagpbIC9JQ0NCYXNlZCAyOCAwIFIgXQplbmRvYmoKMzEgMCBvYmoK PDwgL0xlbmd0aCAzMiAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB zV1bc9u4FX7nr0DzUmfqZYgbQdrTmXptJetmY6e2dredTB5oiY7V6raS7Gz66/uBBECR smVSLhVmZ9YiTFIfDs4N5xwc/07+QX4nyg+iMIxjQpXwJY2JUNRngoQ08HksOFmk5Dcy JW9Ol5QMliTI/lsO8Gjg00hEQZAPFVeC+zxQkhMVSp/yWHmDCfmxT/Ayfav50Z+QN2+p HxBK+rfkgLwm/X+TXh+g6sDyXgJLhj4LY04yWF7gBzQISX9gkT0O8Hy6ShfTdNU6zoj5 lIGyRJVxbiXfD+3DCv1Y8RCrWoZVk3xni+R2Rcy//l1Krj6+Pyfv7mbL1c39EqRdkqt0 MFsM7T3kYvaQTm7SBWFYn9deE+7YgWl5zPyQhwXVu8a0QvmMCsigliVvKzPsU5Z45HPB o67BYrEvFG8o4mC9F4qRHwcyiqA+oTxZLCiN1j5tVZpS+VHIYqIMcsN+NaVrPpvfj5NV Ovxu+GlAfbmJfyc+zWySChSRMajCwpAolX/YUPvPERxkjYNQgazKDxlskoj8MMgXKIxD FsX6lbe1bM4OWgWGxedREO24rKMlSZbkdjYez74uj164ts8bbu0CcDCwQ/sSqW6wiBYZ h12OJM0WSwjY5MCXEh+oIJEfqYCHVK9BvdXaYBX7LXUcFxZoLolfMv8n/KkXwaKQMaGU gVVTN2QG9cfeu/OLo4fTZPFSFfE8GSmoF/OQEVXGu5MuaIOMAUy9Us2NAyG/9q6uzy8v jrgftC+NjoxlvF0hIzxoPwpCKyQNuLF10oXMV1QA2o4Y314c/XQ/SaZ/XpKLZJK2jpcK +AsC7koFb2eWOhK+knQXxXN59e7ocvElmY7+m6xGs2kyJr3parT6ponq1d7v7WJ7IxiN kDISGvQd8+hDJf0ooruooZOzq+P+vz72/vrb5dX7o+NjwUj/62i5+kY+Jstl8iU9PkvT OTlNHrBlPSa/nRyTGLv88PgX/9o/8dvfTCnuMxaD9GaOXSN9CO+EBjuoLtLv/ZyT/tfL 89Pe4Yfrd4fZIvyFts/QULgK/BIa9HWI2n5cgMaRL0MROVjNvBNwZevqlVGOkEpAqxC3 qtf2KccoNicKITe7oM0oJ6Vsn3KcYVcHV6kC8XtTjiufq3hjQWv6IAivsfZJhzCZihAv a0K6l8YfnnfOXXA21FtjKXex6U4Hvj3557r2y8K3Xp3w7S7mPBR6TwZ6GuAdUX8hIk0S 8fISObFz1UFl77mg8j60H0LJfhDEVYjbQ4jtaz/q3LMS5eqG4/ei/QLuC4rwU3lxvzfl WBAhf4EEQQVWfe3H29d+Ot6mpKxi3Go49qn9RIzEF+KBjXJAWSil9+Hk3PiA5xf93tVF r390p3eLf0v/SCbzceoPZpPWXWyGfEAQMUVCM5M66nCvBA6Qr5A5feuqw5y+F2c6UNU6 i9qIdYjNd2Ok+wijIXrGOIP2KQEsSZD3sizquhn2GiZ3Q04RsxB2hTsDizEEkWHtHsk5 f09qYQsiaGR2nEYeNnLOVYDCJ+Th9OTqjHxczG5H4z1EopiE16qwJykB3m7y9qlWAlQp iMhwXWdgyVj6It4h36gz4V9mCIqNpmSerfFo+oWsMJqvOzJA09mKrGa4YTC+H6Y6ITS5 H9zh+na2mGQxtdaNjUuO23l2zNjIKER2z+VrajpCsDYg5ny2XI5uxukhublfkUUC2i8q 9L5Nv5LbUToeZuk4+wD5eqclsvXCBBXB0FNi59g10iMzqySsVFNHCtz+MBpabp+MpqMJ xGCaDlJEMBffyDBZJXod0mmC1SGzaaqvBrPpKhlAIO72QXkTxZRmjl0jfYhcNmpyGpN+ koxAxdEUjD67zUjZdu2VS3DI3TBnxUIZR0DooPxWd4sU5Q7TZaYqry5PPi0/67mAPQYI ee8jwm2k0syna6whYxROmNhOua6t6mM0NN4vcRmlRGJYhtZlfEJNbwAkRFvJUqlYbhzn ybfxLBkSXSZBjAZBFoQs72+W6crwtjGkybJ9TW1LyOw8u8YUguliT1tC9gT5SXVLQcgw XQ4Wo5sUlJ6ST1dvT5lg4Wff7dDaC/nlsTVpgHeNnhxlANxlkUo7oA0qOmLVKjV6SZWI ZMKnYWBd5PrLnNWINFQHOwCFr5YXklaAbqVf+/HImEJjgtNIBVZt+sGhQakWXHIyTwb/ Sb5o1ya3Vh9+ue6TG/gvUGO3owU01BjGVwvTXtwYmCiulHAT65oYUemzOGCN3Rj477kd SKZDktH4DgnvjMoPyfg+Ja1rfJfBk2YOhrQ1eeaVrcrCDv+V3ousK9rWwXMJ91GhdLcC fqsctq8eXIJKonaS8bKz8GxCJYsgPmaj2lK7rtitDLdExA2PppkxeInLJVBBi6p2sz3r jCcokPwRqI82Ubon5GWDbq4AryEbgoJew0MsMSIKSjGKguES1K0L29BK7bCwNmhdQVWb gPWM1BInMaBT92qlcOwl5ixy9O6YlRIKvigvx29raqPtRurVWk3phhEg3Ie31L4piBDE iRDLN7PsHO1RCB66oO8TzL7hcme2AEGBR3YsrVkDruPASHsJVYJc0hobQJuZgx1cbmdT RUgRMoqsr9UZWJLpcIU9RVR/gd9eNLQEOxBPMZ25QTBFlFFuJV5DS7ALLJwHUwEOSVRg 1Sae3o1MUd18WPU8oXSoT3X4pHXFw2yRlJ1EMwfaSfahRpvY6LAOGLcOnTudadiia0oT Qg8HpnlgHmpzjuOYsyl2rzO4KMv5bJplSPTuNttdIcS6Gt2OBojAth9pZREOCYM9iDAT 6hqducARM9Y5lcpCBKdw/rBpXgYF+3vQqU55lWF+Z53qjl4jvrkT9ZIpma0ddnhEs0pf al3lNFf7AsR5jHIxnIG0k+qaAFEdEESVXc6pW1mgfc4sXCVU2aGE08p1bbNKcDijfZjI SBrrX4a5lXrtOyWFAJVh1aYegqfoCIBEcDIcwvRkCff1qBh8E7RH2LcECUTUdUcGYWbV MQniMSScu1LurTzQPms6CeKx7gkCD7WpCUJ9efswnQRVYG6l3h4lqAKrgQQ9zEYD1AlN h2/gr90mf5D5na6e2Hd8GUe5/ShWxE7ECE3diaCJzIag2zKFthKO3AahKpi38kT7rFpI FHxhTl2qpDOw9BaZx819zayUun36uYwjLwPdSr/2Rd1lHCuw6koIRJz0UMuzzVjCXJaM ZfvbYjTYiBVY1E6qa7Yy5Igl2vrgzhSQcqm7byH73NRW9i7O2hegwlaWYX5nAXLe5q7U q5cNGSfljH2edW5fkpwxMkTvmiQJ6YdF66faWkuH5Z/K2L8CO+Pwx2P58L1ume35dW7m 2DXSo1MOGpiYQw7dUWI49KUQKm+sxHR9X1YLcWg7rCAojQRkz2RG4O+1daoUaT0qVUi4 wd7MS4Xy1UnSZV5+ghIfU6WfVcolCJ7qjnY4xNGf7VFdlGeyVUe3bzoK35WiHYfYIccD qt4v09v78SFBukezhd7NYGszmaEZFGJpCLgc6r4Mhmf08Txy/dPlLz+foeiqfbrbMhoE W7MJdk1XBDEcMpR/NfUsLCsXdZ61hHCHVJYtakAt5RrUzhSr8ABly8xG+DsDC/1V/EDa CH93YEXYt0do2ZbxW3dg6d52tGHB0Y/3y7usimDjf70/5iPEJ8mH5Buh7FD3KKUbN5FP H9GLh4jP7SshW3rO8mm+RAc937jvE3r2UvIZzSaGeV/g02ucaNzW+vL6dKNf8A9Fw+Ds G3UPYtSg+DHlXMNHjXlEOOr/8JGDnRD38OMYQYYxuc4UUfG87ir87Os4qjLAACjPwDvw TrV2mb/StTjeNhUPXTxxuIIGCoc5dbNOJVFqPXlkbEx0Y4MYXUp080kucIYLQyFiYgGa 6JonPQxtvG1M7tDk8FNO4Gq7wmcnihiRJAxdeexMywNjPXXc4WiBAfSwWHsEA/oRz71D 49E016tOSUYA9Cuj6HqhZxYolMBrAlTH9NQQGJKR8tx9MkYoHX038aT0OYcLuzYCxRGj S48msLvLjNkRvKkygjc98lzGLDiPqTHYdyF4jxqiAlOgENVnesQityMaQXXs6REPrUrz N6GFNFYTHRqx5nZsjDEsP0ehrRsTEisQ617KOSZ77SmLW7/J3mPH6owUzxWU0gjsuyzV C0x2BQvkdqSYTbF+m3dtjgwy9mXka2OZB0/BE6eoBMQ/8FT5eoxrtL6SkF93D6doh8lx 5htdQmMM6yscy9DPe4Py9dYrey8yKXhUK5nsXejgi+9Tkee+WeiujPqODJu70s8Du7ve cgVcTKBflrsX8iawoRMImrkxaD8kbM23a12o4+gGm35+7dorXZV/B1nKf2tognnl15Zi 7pstRfE2YLNX2fPr1+Xflq/0ums14UwBerk82gW5YEd0wIr0CZrJOosacX6Ebb1mbFuo pw0mxZusoBbsXoi4HStUWPGuQqEYYfLWRh5TRWaO6/Ox8x6bZrYaDUyKzFQEmgKhHT/a K+DcaUiyXUUc0qpf7ZSxNhBBzMAekJmsF39xWbwXbMsgGWYXgG/Sd5of2YkvOJNQ7mjF /4kcXKPLPe4nB2g4AHuDD3P74c5+ML/yDqZ2BJvJ7N737in3K7zvM+n/Pe/v3wiw8WQK wGi2hA4AFOgz2CB4DvvgT0UZ5f/1G9YJY6eIZn85XdyHN9nkvYPI/iYfIAfuDnSMzZ95 +iVo8ZxR0NzqHaDDW/mZjx/WKamDIlokBGqjMlvC0OoOrCNxzi+K0DRZBoHCHzpoXv5e MA6sD5q8GsbRrAY+1YXPXGUsZH5ka4E+U46FzsAEnByMX5MwYyN8BhNI+xldiMFVR689 lf3ph4I56k+p+mcpvEC7Jnrpn/izFDDpAlkJtCWuTgmNdHQvjtKUqocPEIMYrodL/gco U0pOCmVuZHN0cmVhbQplbmRvYmoKMzIgMCBvYmoKMzY3NwplbmRvYmoKMzAgMCBvYmoK PDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDMzIDAgUiAvQ29u dGVudHMgMzEgMCBSIC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iagozMyAw IG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3Mx IDcgMCBSID4+IC9Gb250IDw8IC9GMy4wIDIwIDAgUgovRjMuMSAyMSAwIFIgL0YxLjAg OCAwIFIgL0Y0LjAgMjIgMCBSIC9GMi4wIDE5IDAgUiA+PiA+PgplbmRvYmoKMzUgMCBv YmoKPDwgL0xlbmd0aCAzNiAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFt CngB7V1bk9u4sX7Xr8B581Y5XF7Am6vy4LUnWz7J2o5nNnlw+UGjoT3KaqRZXey4Uue/ n68BNAGSokRKQ4Wpiv0wJHhRd6PR+NDobv4u/ip+F6nnZ0mS5yJIpRcHuZBp4IVSJIHv RbmMxLoQfxdL8eOrTSBmG+Gr/5sZHvW9IJOZ7+smeyYjL/LTOBJpEntBlKeT2YP46Ubg ZXSr+XPzIH78U+D5IhA3n8Uz8YO4+Ye4ugFRXcianENWnHhhkkdCkTXxPT/wE3EzY8r2 E/hmuS3Wy2I7OJ1Z6AUhJCvSKp0HxfeH4clKvDyNEvRqlayO4nu9nn7eCvPv5r4QH97/ +Y34+X612d7uNhDtRnwoZqv1nb7lh0kfbThBSaMg9nw/TUt2jJJ2ZAdUvl19LR5ui7UI oT8V8U8GGFRRHnpJlFitGNugkqkXBhI2gsb65KCyXnKsR5kXySgbG1lh7sk06mmCYk+I V79ci/fT2W/TL/Pll4rWHTXlJ9jMIIy9NEtzkVYJHk33hr6X+GE+tu4NAi+WMC69ZhjY FDKM+2zifCOmqus38y/L4m5w6xhiNPtZCOtoOOlibYafg8I48PJIwgieJOC76XYqVrf/ KGZbMVstP6/WDxhEYrsS2/vCjKVJN/xxyoxTWvAeMr2kqfQxw6RpT5sEpVUz+bVSTPGa RPxOi/imeHhcTLfFc/HxzfAaG4VeHIL61LAxEo2NUi9K86Akq59JeO1NZ/fzwc18mCSe zPKsTuVBM3+B4Y6lSCSDpE5WR4y2fvztAqLLfS+V2ehEl8eYGLGs4eHQT+/MNDP0kiwK pQdTbgdtl3l8eL2LAHbiJDp10OoZ5pM3+LCNEoDbNMV0WDXdB4ftBWcUrLG9zE/Ghs6S DFoXB6ehs5fXb71AADoQZhCvVvAKLLc33x8LQRhtgyuLxerb5sXwEx4bR2any4R3yc5P Yy/LMLbHtSBMEiDbwGed7DiVaKeEWMNnUYHnL178cXDcSI65yI8zwaSbju5K+vXVX3+9 evvqSvxrcIMUhikgZByXpI6t8+PUy+O4/8g3/U9//gZX1Xy1NC0f/U/izdubq5+vPojX V396+etfboT/fPjBn2Fw5alIDENjG/syx/IRHuC+619Hzl9fTdkZSFJ/9fLD6/8bXq5+ BtcwfK+J4WB0gvXhZYu1XKv+6sl5DnV3QTvp6ecHVAJOl0xWi2FqEKg7W/Ws0+8CNlW8 X8+X2+ntorje4mh4P1fpWKiyMho3ZhKGXpjlcmz2NIg8GWT9J1Pyc7nYafUZ/q3KzGo2 AwCq7orPc/i8AK4GH/5RkHtZnGP+MoyNbfj72KOTmRloXXeuMLhoKeyK97mYLu/EPfAq odjl7qFYz2fThfg6XewKgd64eTe8sP0YuAY7Bonhqieu+elKvLy+fvPz26vXF1xqMbEj G4lQWk/mfTcUoBk39xhi7968Fr/8en0jpo+PxXQtblfbe/Ftvr2fL5WCFO5Y1W3Dqwcv wpm1kY3FOEs8mOX+tq9YzqaPRqBv4IRmjzQG47disaBFZH1pqd0xYrrFbHi72xbDCx+b 0HkUZoK5HJvw0xRL+DDpDTCNQiuBrh3pY2ftuigu4qgOsAZJEWgRGx66iHZ4n1cIhJGF UVqS1U+0l3JU8wYQC6+LGb6A8BASkWaIjaiR1YKERQ2qX8ZRnSZegM2zOo0HnYUXEF2G GCAZh3WyOoruUo5qREMFcWwH7Tj0rgxiOU3vLueojuEIDut9PJr1aww/eoLgJt2p4yEr xmoEe/DKiYJou71hantW1YzWXqhwgpl2UROobyyxKg7BIaKWwiRA1BJghGalH8JX0WBq AbiZAffQEvAWMVdiviS6J51jBV3XRscQxigDvsjg0agSftBWXtC3Hsc+/JhJ/3XgNUIf yHkptSiHXzcFEa1L4LGqkTwaScqQAmDHFrYWR5HnRyfsUlRGdP+IMC/HRkOG8F8E/4a5 DILMOToY9AtHdJZgNcSU9xvqf5n/xgE4pwYAn046cHiY0l55jfaTdFSFfqY+cHQOiSCw QqR4Px00wu+OUUy+fT/Bm+BeDTLIFrvloY9QA3ROkifwB9IrP3eKlz7BBpZxyDWxtExE dVA7FR/evXyulrKu54mjfM9cwjZlB28Yq+xBRQ05UIjZ6je/Yj7qN8ZcySvHepP0rmOs jMpj0vsNsq9w8n2eI3rwvLCOM+g3u1Y18k8aZy3pCr0HWXsaQ8iRPTVyO+r/bnP+xsXp orYrAzOTdPEytGn2E9o0NfokQG1p1IC0ZOBH+YWsWuniP61Xpwp7DpqnUkYfMYVd1ppP 0HWc2BMhOyaLA/QQQGaeheiYOJbSD6TIvCz1I6ClzvNOYzzyr7SPuzJ9KMZ8FyR+f5Rb LM+1ccepTEPa+SJFrlJ50JgN706xWKZKVkejhVim+fa7mBXrLaaKGYJ32xRrePsbJMiR iOGvMpz0m+zmm80OK8bd8g4ZOsqf/rLC1nSzWc3mYPBObXSIFjzSbvrceV2tKpvGugpJ iJ84JB8SXK1RAOc1GUNk0GnLFydIsxh0XCFIMIqQ6ccCNXalo2qQDFuQQ7uQWod/aWQg iyBEpkTNyEh4iwYVBucoxsgDw0wf9hPGutisdutZizy6jo0OVqZcmlTJPGhlzl1JHSfL Lg16kDW88cOOnE5RrHXqQWm1KfXTdaKd0HxMrVE1TGZyLO8Ue7T3q8UdJaq4ZvkbMicL 8TClOBmER6wp/PSuYEeZ2eb6SlFTXotpa2Gwt11rn8mRLUoWDwvrCuOV7mj4L1vGVLuN cQmuRC6VNgbxBaEfBk9rY5rmnuy4cZocXIGW+iDhIkBKZ9JvZrt+LGZqcl4svuv19dUV K/Gp2UtNZqpzV3sfBxI53jngIjPTbzntqHRLx7er6aSSl95koWt/BHmGcH/Mw8zCOWul FnIbE+Hp5IY+BV3BsVQjt+M8vtsA8iDlTXkDvgMawXCsdeY1jmiWXy0L/J1uL4CJzFAA KzGKD8ChTSYjSwNadBgfl4YBZdkBHtT0RBQp/2R1dZKHJOsTvWLNXuk6DuygzjJ4vDkR Gnx02rbRgTcb7G1osIosX5WtuNmud7PtDhzpHvm3uW7Ya4ZUJ8VeP5tFm1CYpvr6zp5y 1PD292kMHEC/FxjxnMx1Gu2P0++L1fSO54jLO9ijSMJiSdQWOUl5ygBQ2v1r27Jqxwe9 lag0ShThJeHtiLB76SeovaCMUpxn8gwTcxxdS16o1cRVwU11d3tb7/aQC1NWmljwH6aY aOzaDHKI4xBbJZ1NbEP6/CvtkMKa0hQeAHgG9QZ4hf2usLFlcLZixk5UQR4JB+GOJloA ioogBrjreoULJAh8+9t0Mcdkg33hfhDshK4NkPoOrwewS4Xa0cTZIxCJQi7GVi5EYkik 6QnhjjeAc4jpNt0rHterWXFHaIJtKvAGxwRECBE5c6l4fGyXmyrM0iWw9nGyrMnBVAVv UE93ENboKHFwHjY7TiQyF2PMQilMToXIimGszwvDe11KT3iNrBbkWyfwQpGjgY+SLNhD rxJ52Hr3lN0JkwoKj3lR5mPpWenSrquG/oGjp9DINYBqNFbUrj4fX0B02J5KUFzuRNGd EjhqhDfpUQsvAHRMY+xhjUx4iaS6SVGdrJYxW+9dEziqUt4fHxeIKSCPQiO8kAL42vB6 CzA7AVNEaYYQLjigqkPooHq2oeUWqk4YNXZGCROEcsFR0QuXYUZ5+RlV8bDsh1fGztuU snVbFEvxWKypflFxRy7AytQzTBynKRAjDTf9lv9FmTWNVDMqmYcwlAXv0Z7qszw+YUZp 5CFDJxQ1qiuqUZ+PeqrGCQprVSOgDQsssJRqwNO011XUIFC4qVm8uIeWzO6L2W+kEJTb Rw6Ld69uECR7ffPhzdufqeAVuWBUwStUuxq8viKPSsPj2HAeEr0x+fbHeWpLRfvmIPLi n9v1dIZNZCyjgLWxI6O8dlMgbNMbYvqFHF9b1SEYx5/niwsIn8OXpWFzZNLHLjRthPWv w7Bn2SIpsl1ZybvVDImsyy364t1y8V3MEfGOfDp1mbpG9cgFkog5d465HJ3wqVQvfDh9 rc4jYiZoyifTokI6K9NO/2Dj4wY8kPC4SWS1RojF608zF5ZlG3lXFJgw9YJYGcmH6V0h pl+n8wXVGgCGGd4sWuXQHI1NOZCOFQV9wyGAVkgpsImxoKAhyjBQ2xXr4vddgeK+ejoy 3XDufvRxtSnL2UWGm7EJmZbMEcrt6RE4FjiituuT0RWZiGIqTC57TtWpyuid7dYUz4Zs 680cgWBKNTfGbA2HO2kVoSo2Melj0z/s2SfjK4ocYeMB9Ue5yEl3OHxzv9p9uScTBNyF CWqJnHq9j/ptjhagru1qtlrozVVc33AEBVkqFUKxviAmYzbHphSo3ZUiorU3LCCwi8oE qEmNAgb389k9lhq7BSXrIdRAzQsKE5fBSRiYL4efZzlhNzJsGWl3VCoNcohuqMcKK24H 6kwG+WhCWd+9RvBoJocAwd+y3BnpKEcAAyjB593iuVgW2kt0iwG5uwVOeC4W8+0WsGs2 XULC4k7FncCN9HU1J8CgllePqw22K4aHDFb8hs+xjU4/h6sApT5HBhl85AigdMTIyILP BxvV7HMbze5imEVYxSCPYlydGBJcCUwKLNyoCmDrP3XHb0/n2Dl+0xAfjwljlL1UwhoP WSj1EWVISxgZWSjYj6hnQ1WLda735k+7zT0s9J5/V/98BHLaiF+m30UQPqdPnATN2z6+ n34pRPxp+NmcS+dTBiTYPMc4Hw+I+YhPEgXiE4bBnf7s0atrbMgdyoy+ftX4HNIfaHmv v46kfpE+sYSKAl4eRBGRH0pUV8LHkTKB4wg2IYhg3RfiWqXz2ocp8PHou5Dtp573Ynpb Wp7o15XbVQd52Mwm2KsK/BTl/CjzLML3H/C2ZtsCpVqQGIaa9ipDjCrToilBPVIfBXDM kxM0Nd62EPcIzPyoJVuPtDnKJNbyxBgCRxSX7umCmFZX6SNWIAefd7I349S5GZTdKylT JwcCkdoxnEuQIDKNaEsRuW+K7XobMYRle5xR7qK+DwJDhhoysZFSA3SUY4w4LVjMqE+A 7Glr3OW+ac9zAbhCiDWRwD8YgBb6fJElCog3QSFwvIpJNy3CZZHbmnc1Wib4IhY6EUyA L35ugTZErUdU1IPbZAzh51T+iKlyWhTp6lXlTZqb+j14ce0O+n1uwr6TEudi4rQZoVuK uAMt3dzi8sLd17yr2TJTOhuKb71HOFQqoVGZQJ3s8QLHFMiBga+uRQE6McCMgu4McU2d YVd7Zo8nttUe8XUJsdM76TlJ2o8X21+QKGWrf5uOZngT0VRttW0zWCWEwavrGDQS63Ei Sp3DXjm/QGeTgH6bnlFXcLzviK/TTj29k+5lbvkXJkoS+rdJXkwHHdtWe0R9QnZyj1Gu hms7qgK3ZqZGttPGKuWqWU2lJjzWcQ8PhQMqtecufs6+yR2O/K491sUZ7HXrMkHpuz3W xfBIQ7QcNmWbjognamDjUY+FIvFCVLgJUF0C5aOgFrTAy5OgvqNZ2kmy2H4eYlsDc5kK yLen9r0hQtUwN2iIix+iG80fVfYMyBxmF5/8+yieXeNreihoLJ5hfQ37j4NHPsCetm4x lybPEJ2oWwBC1b1/Lp8qL+F9n8TN/+r87D70GkRh6UXmKUqtBiBeUQ3grql+9j/WFfCU P+CKhRkMmOPy4EfF+uRZxld0g3hW3oEv0VWlVF4pD14Y+ZlbJ8+S+jPvf3HlWPkeYzt8 AthXGTkXhE+YbwjwPCl8ktgZIyymcARZmc7wCas7srwlBgJpjaaFwAZQaECWtl8wi4An fp6j3I8Dn/Y8egZ6kpiZHfRUOYW9QBiaAxolVvXlzbjqPHsIPcFFEaNwcgU9cZtr30yb g3l8qpCDQG8Lb1AbOMko9X9PW+Mu903N51AWFx83Al5x4BNKUmFjEe8v4RM+f4SIqMii J9OgKDCAiptKpNTaYNHGhO9xgBM3lWa6JMdpMURbDDQpGWne1WyxzyH70gjFTgyTmEVu sRN3FU9YeM50qOXGtvFdeJO5i1vsPediJ5n7JXaiYxc70blBPQgmsNgJ8xq6TF/BscFO 1Fq22esATYydUPaqhp00kiK8REeMnaqtGjup6wap0LGLnehcox7+BTqbBJhyQYe5guN9 R+V1UM/YSRpuLXYiSRjchiPGTtVW93pv7ARrEOHTnuiKUs32qBS63YxiVqnDqtFUl/YW +yYXO7Hi7bEtrtWo2Ra8q2kjYubRDhHwY/hemGxCok9hJ8gW1UBRL/KpsRMSf9Kw/Fip BSOEoUYJngzBA6Knjr/wX/hUups6eYyU9ylBRslTw6cgpG+Jn4SfQqm+1Ut+pdL91Gwj Q4iqGAgLUn4Ycssp44jqxnAXl88CqOx79gwIFWBL38KiBzDpni/gJ4VpdlAUzlH+ALcp jxWuq/ux1jXnbV4ozvpzcVTZ5tg6brPoRyJhD1/nJqeQcRNhpe8BktEyvdnWaHHftOc5 leiBaFUXR6VYidF3jC2OQi3dOIozB0iZFkUDIylus1CqtcV1Q0m+y0VT3FbOTpKpclqo XBNqMDqwSDI/jbvsPFfe4z5nZAoNs0+y5HnuK1NdcY/xG3B/QQ6NNji16nc1W86FU/h0 RQmn6NiFU3SuAZL69EnpikpCwuDmShgbOEWtZZu9jmU/wyn6IqGGSuzsoqR+DZfoiOFU tdW5biANXXfhFJ1rqMS/oOFUQi4Hc4WO9T3Vo/I6qGc4xdxaOEWS0HCJjhhOVVvd633h lERSaxgjnMmBU+UwPaRSWEmYygL7VKPZ1t5i3+TAqfLte0yMazxqJgbv2mcqDI8uP8x3 E07BWe/nPhwsT+uKklhWJ8iY+4/xRTHBw8Gprr/wXzh1ApxKJS1Xn9YbFWAuxbg4xR0V wseBjx1apxIR12iDIcRqBpE9le081Bb20iir7Ofte/YcOAXvqoVHgFOVc8AlcF6BU8je tPfTdXq+A5zCBES7DrSVWaIP3eRaOn2Xg4AQfpBk+BSYRUlUzYrKQbhYitsad7lv2vMc vmMSoUoM5iH7JD45iNIKtIdo9hklgC4QT+JgKdOiaGBuuM3y19pSwVJ8l4uluM0iG6bK thjaK1iK+Wnc5WAkvsfFUkZ+FSzFkrdYynShndFMg4ukavdMZK0BJQd0r58LoxAkCWVi qEKLD7vfRtc0MEoRd2i9UilVseArUW5gFLWau53r5PZkGJUhe6oKo1BJHM+QV4qOGEZV W53rBsrQdRdG0bmGSPwLGkZpl6u5Ajr2HTGMIuoZRjG3FkaRJDRMoiOGUdVW93pvGBUj gQt78S6K4sHooo66Mh3Si4Z+HW3AGLCjzuhX06o4Y5zJsaNeEx2qN/GqzfDm8lE21fbx sGHroV4BrbmfdB9PJtgDsF+cHL8vigkeEDwZkRz7hX8neEr/U7fyMvhuGDxR8ddzIqHw PJAC3ob4KkQvqLOeoVASRfZifCReFcuVERz0MDSNNgxQrHNlQqEv+BU/wiePqQ2TOx4u n6XZbc+zZ4AnuOMVOJLkA1ecuuewyuCcwBLzjnPli9L303W6HxEc6vn2iCgp4VYDJy54 Mk2umdNNDuSRKPgVkQRKRxS+s4LamFj472lr3OW+ac9z1KFUhMoFTyHQEJJH8HYGT4hn QH0I1xFlWirgidusGW9tqYAnvotstImHQj1w9YsO5GGqLCwytFfAE/PTuMt9k+HZBU9G phXwxJK3VJn+snOZaXDBU+2eCff7nodIa08Ph8rgK2TwRMcueKJzDYcycGbBk4q25Sux NOCJWs3dFI1rjhG/ot6JARvkcPBVwROVx9LgSBXKwpsISFVbbRuDFrrugic618CIf0GD J/ptBkd0bO6pHPF1op7BE3NrwRNJQoMjOmI6qq3u9d7gCZFdORaWLnjiAUoKDdtA4Xyy rkyH9KKhKkcbKuDJaGDTqrj2os2qVMATM9KwKu6b9lgVLZPKYDJianqs8J3ogKxZCboQ j4UiE5hukAzFZWmpGHG/4CkkhSK0krM8OGxKYy8dvO1iix7RU8KNnkKMHCKtniR6igk+ BolOD5/q+guuYC4dP9UBdJE5xnDC/IS4uxSV/unDaPiWU4ZvamCjmT65ZcKnynAjFTl3 uJA0b0jH+Fx5Ah+HzklQ0f8pFRbH51xpN9D8UTvI0gm/e40Aukg8W/wgEhWCh2ME0MV8 jAIt0JMXP0xS8QwitYF1FBDWiaFyKJjP7k18iremsDmOjSfy7BltrAM3IJ66zhAFo9cZ qqczXM8fkMi/RuUHG6JXIZVen9I3zarCT/OoHvOoyDpCKwtfAnHAzcbZ3Fr6DWL1/n0v 6U+U9MVB6bezVLdEXVhi8VdZQgeRhjZYqssfiZJtgoeHPwGmaAreUNmnpBbNKzoMIw1Q ipi8IA/ipxuiEs2XUnt5jCUbNyj8znoPN2yNpS6CR6bkbrNDrZN2zW+l9gTNjzEtqk/f VKml+kX7qK3XLzIfM29TFfgzEBtF+TClgYR/zW+EJXfR51JT8L3MkAI7dVTyhYdoG0fu CIWBhJLQ/24GUlY46jpCb9sVBIgmRfyAFTs8j8gvAXjViOa0EQqXfVBm9F96hB5j6bQR 2mBpn87XTaPOi59vnqsaBLs1qg606X8r1SeMVGsqQzgH83IrtN9IrWrN/wO8yvYiCmVu ZHN0cmVhbQplbmRvYmoKMzYgMCBvYmoKNjUyNAplbmRvYmoKMzQgMCBvYmoKPDwgL1R5 cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDM3IDAgUiAvQ29udGVudHMg MzUgMCBSIC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iagozNyAwIG9iago8 PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBS ID4+IC9Gb250IDw8IC9GMy4wIDIwIDAgUgovRjMuMSAyMSAwIFIgL0YxLjAgOCAwIFIg L0Y0LjAgMjIgMCBSIC9GMi4wIDE5IDAgUiA+PiA+PgplbmRvYmoKMzkgMCBvYmoKPDwg L0xlbmd0aCA0MCAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzV1b c6M4Fn73r9D2U7oqo0FIQjBv6aRnNzvTvdkkVfvQ3Q80JrGnie0BnEz+/X4CxC2xA2Rw 6KmayDLgT0dHR+cq/iT/JX8SRS3XcTyPMCWoZB4RilFbEIdZlHuCkzgk/yMr8vNpwkiQ ECv7Lwlwq0WZK1zLyruqT4JTbinJiXIkZdxTs+COfLgmeJi+tPhzfUd+/pVRizByfUOO yHty/Qf5eA1QXWDNXgNLOtR2PE4yWDOLWsxyyHVgkD0P8HyVhvEqTEfH6dqU2aAsUU2c e8n30/iwHOop7mBWm7A6ku8s9m9SUvy7XoTk8uK3c/LPxTpJv28TkDYhl2GwjufmGvJ5 fR/efQ9jYmN+3s/6cMcApuWeTR3uVFSfGtMKRW0msAb1WprtZYZDriXuUi64OzVYtkeF 4j2XOFjvYrFeheOvpXKJD8P5easXRvILIXol3Z+eXJ4l5M5/JMF6lfrLFfjfj8jDOo7m JA2jcKNHRVb5XeMvJUgwj9suUcXopraUbIs6lu31k/+5XHpYLIMFyLwFZb+HxIfsCufk Zh1ndL7z4x9hulzdHmffLO9DEvhRlByTMA3o+IR3OJW2dED4fIRTIzxjVAqlpiYsLIh+ pfoLi493/jIiJ/N5HCZJuGc55hf65kJS46LxmcJVVLlCElUMc2JMAUWMupYzaDU2V+Bm G298zANZ35Bk49+Nv+Bs26auzRUxg5gabV1BlWRTW3COktR1Wf8FdxlGj5CuZOPHo+/R DMLK5rZDhqFNl2BEH1bKgw+rAdvwwk/xv5DM/dQn2KL9Z5Vf3DG+RDCqrhnZ1LjWgVHK rP4SIQmjm9H5QkEPVxYMRqcJc69GfgDzzKiULVgdzTMfG1ichnOaqZRJwaYLHxrMap1C 1QlX5D6MlzdL8PL3x4yTT08yrh6fXx3YGErBJ1FQfGr8KhX1pDRStiPFoU8uk2QLcvrk 69Hpydf3JMAUgMKBn4YkXWc0DlfpMtXkhvQoLtdC5OPH8anOPXhJHOxtxfCmRnXhwXUF L1MvLw6oXqdypr2D1Pd+tIRgBtlB3GecEuOrEpxJalnQjZ1iXJMjtwX/g8yp3fSUzV7n yqs7a2Y9PYwOZ3A/QLl9xsP4lrCgF9quJwpYOyRCG6AL4Xt+8vmk3xaWkW/Wy0Fbehid 53DOXvKEktP1KlnOw9hPl2j1gzvAccukoK7nYmk04E7GB+YwTgVzjb6yVxE4oGvOseDQ F26xNrq6uSEgrxfLhMzXwfYOuw9Z+AlUgIwxWxM/vlCELwO2K3zOZiwTE4rSk1R4pZtx KjMvXYdirUyNISVUZyVhUfXasT1IxZPgx2r9EIXzW82SB5A4XM8rdrsW5MlMMDRiB9GY gpKTgSU9uEMKPRjhQR1Xe3k3yZ3Y/jZdwIv6sEwWMJwz7ddf/SCX2yQh/1pvkyh8zNys yfb2Nky0j5Vs4vXNMtItaG3j68PGjybzUU5NFEkLRojTX9pn0QP4y8IgNz2wpR9nanA+ I5k37cv56OS1BVQmDqNfFgPpQt/xzWobYTdL87SB1U94nVE/WCxH15Bs5VDmcdFGuVcw HIB4LuL7QtptWDv0YdKyI+LNj/FJxy2LAiJvY3xj0nFLIokC4d5hfJcsb+F0HJ3vOBfQ fEW1aLtsSOPzHTeui2HEW3//IwzSb8fjk0+5EC7tOZ6McS0hkpEcVKQcFPv5kzyZthUL A8JfzbWLPl0G28iPo8fXGj3Us6TrIikJKUm2Jxhza629qUhM4BYBBd2MpdhVOkqgq9dm +7wCObZBSyAsNgw5Qv7h6pUM/ArwyCWDBHPb4PcK1V1ckmWoKQtbsKegXjoIb8OQ0I0n voSXEGfsYCvo9eALm7s2QfqKa2Xs5EB7Up5+5E2nDLS626pjYhxTHmVSOW2ydOTG32D7 0FfO6cvZe7alvRmgsmG8LjL9b5g7g4wjOc+VEIoQ4q4D94VFpRTCYoLA4SuxVStN+m6T 9IRDzK90yF6UnFNLa6TTyriStqDMsYyiP2hJ7cj1fBW14L+2Pcvupx8jyZQg7+8mjMNV EB7AsGcOtjQBRbkJdzJUtMD9fGrubAHBi9TIwnHTVRHA3DLM7ud1fAdHMQKJh5xnswE1 oU/GZSxcFw6myWVzCmxQghcSr5jnLg4c+AfGzt5G6Fc6jlDIT69jbCzctira09Ko7+gd A1HK1p5/uAeaqHZs6G18Q7wDBchZj3x8ZiHtDt7gJsY3phxcg5Rr1auJqiPl+rsGBkwu syWiD2pqhOPI7URRxTDCDXEMDGE5+EiVhJLSnN235jlH6MRf3kLVkecKt0A/SZfRrl90 lnkuRJ1or4y9tNulf+9Q9AYshrKoRygo5Fovz0PuHYkHr0Dt3+/hZrlKfiyPySd6TE4X aJygof0GV5RoO+eYvLvKfFjkP5k3ZnT/M5dIQ7VtsEY+vC7u555Uf416LRyGiA8M1l6x sxrJ0bwO7zaRTnLJ0tWR6HIZJuttHITkYvs9WgYg/CM5X93EfpLG2yDdxuG74/EJb7K7 zBCnRnmpc3yVqXDZwe9t33WT8nNd/NRPcAxgFmailvBn1yE3JEcbaE8daQgs44NrwepI yYMEUFi5X02LdOWG1YTVkXT9taQh04scc8tCrlNret+a62BhwXcNgT6IdEP0pAHEsxlS R5Wuum2ifGPilXUNLVgd+S7XlEaXd7ZkqDODM6eF8q2JZ5KWWrA6Eg/l1F+PULr3QxcJ IMXhVhcXfX1fj0bNRinbRm1vXj1mcE9tI4YKqlTf9KHmRnyyvUWxcVZRXHnSZ10Kzusq c1d3vwNPhQR7FsCnRk8Eb+GwNSrl3lVzSE3XhouWI8TXV9P9cvnrqc2Y942QD7E/X4Xx MawJGBJarcWCmieZ4ouUb72ycHGWZnS+mmcJ9+PruRI5WwqV0qIY4NTYAa5xTyHu05fu tRV2Gf65XcZhljf6e3gfRsm7Y/Lh9IIwcawpTvT8wOjzYxTRMg9u5QOQvbDriuFNjeqW S+EKm9oi5B6KP/iAkpZsEYLDsQjP/IdE55L9SjPD/poij+8hRC30u/tTH+c8fDr/9JGc gV2CdB2PzweoRZcoFyBmaAUjdNyVH8lFlm2oLeKxXd2IS+f18wZqsSSnIqG5p896QQXc aySFFgbgE4jocJPm53xAILjjCwTUdELNQe6sGcbEJAJH0hxnZSB1MpOuQx3c67ktIwZo 66qWFVxOu6KAUL/GUsCMacoL8FObaq1xO6ZMaDLBSY56G8mE2ZM6SkioAYcMA7ZA7l0m 4/u4yjhgC1ZH2p3RZZiOX7psAoFNkPvzDXvSrm4mdYyhlpHAFqwdtGsHUVGJ1vMwgCEY TSiwhbHBdm1kByCdiQW2YHUknVbDv/VTZwra9Qo/m/K9Fsi9tOtpcA6Y0jKgxYWkTnmE VdfslprVg2Y9oNUKY52sWjEVXdxytd1s1nE6vtZbZBibMU5tA0SyHw7eKepke5Qo1qh/ FQYIVIHG+fF85HK91dVBMDzzqMvYB8fZOjIHs54XY+lC4p6SYYhj2XGoQNFsCaufsn6Q 7QhpnqjrVS2Ib70dIYmRKuRntWF1lKkH2Y5gHyCRWHptjHtFak+mGyBSyzMMzFrIma6r SNXb0aDdKDuctKO2UZastDC+NelMyUoLVkeuY6wKGvQj4QDZUh6V2cQ6HfvFRp0xsvL6 ibxsSxmddmUaIx8OUiOtBYZqHhR9UuohPChIB1YeXGnFGLpseT0VugFsWSl0DKFfUWZs NFZ2O/3hkLAsDw52HGPU1212ULO6CXIv7XpuKAOmtDKrm7B2SMX25B7arG6AfGs9pjKr m7B20K5tvB5EjykzbFFmU1sbb0660qxuwupIumAzzKjuo8YwGK3MQ5lUH8r1FHYDNMBK BqOs2kMaSaEBNuRIm9UOCMvG0YeWNMHl/Xx2SFguR0QFFW7Z1jAdWLqKBqpljqoj93/Y JouaeV5rfvxrg2hfgvDvI2H2sc7CYLWvi+aXC/82JM638X0j5hhMOx/ma7SYl2tUv+A9 B4x8Q/3hPH+XwukV7KJ9hc1Xp0/esfBT9ZKF7Bf1extwti/1GOcaPiJqLmEcBfloc/AT 0weYRuQqi7BUN+vXMLz4LFhz2f1U4mnKBnw8DB/yx5X1J3vHkAQznFmPeBtO79L1pEwh cfwO6QDtvgh9OIgBIcCs8FMplJ2jD1YRGBDFoMW9M33d03sXKAf9ktO2Xdj50jAVdFg9 TpzhlY+z9jHSw86+LQauUDUoPP2yjPx6fUF1PcAtMlLrmWYEhekSvgSQEeWGGIjjwkt0 90xfhD4E16SmUXHdTHqo8vSQFyA5MgQFjsCq9cBtYuHsn6ddT64xHTOJ3OD2TTZHNURG Z3MZkRivcMBEFSKGSg4bxyyasczwkpC8pz4+02euQoFl676qBy/aQLotzgFn1bMi9MGq 4CBReaeQkkpPD92gqvUU2PWz8qtmqAzOx2N6cN/Onuo+UDgnjYZgHmWIXoEyE2igl1OF eXjaZ3pA92LiTU/9Ps22NnnovczBUo5ejQrsVLUjtLV5Cadf9h1nOE0SggGOQESTi08o Kwmq9qzqrVrmexzsgSWY9wvEP/SDq18QqFLNf1u3AjxJY2r2Vn0BRBN+Ovs+QrsAlX2G 0AJO8wv6k5YZ2Au1ONPfoP1cy3zP8WD9TH2tGa35hVlGify3Nb0MDt2ueqtWUKzgZyQz vNPm8AmsbMMqmE6ILYGa9Lt6X5ujcFmxjA1H7eeMp9yyu6d6Un1BGr57RrjU5UZLuDwr J8wIqwVSjToqCvE1PIaX/mDNIeSv4NWFiKQ4Pg1Moa1xz2Ft+6+UklpkW56NbBdI1uxl QtXH6rlI23BRIlJYz/glfWXxJzs4CJodpC7eJfSFHOmDO4CDHOFdHtgB0NiYBlyMeU/x 1ewI52TkPdD4smt/K+8qv8LzvpHrf+cvKOoFuFArKsBICcW5jAzoM9jQ/HLYR/+ovE9/ 6y/UCWOGyMyYy8bP2eBnR675Ju8gR+UVlvlm90N+KShYXFp7mrnn4lOdkjrxQ68IgSWU sY7LkXegC1ksFy54nPuMygxUYMbhrO9LqCqGxN7qGbeLZjXwqS5qxprVLFT8yeYClQwl C52BCTg5it4TJ2MjtMEE0rRxuBK46pf3M5W9u6piju5Dar9Xa2ZpnUFP/Y73akGbgKSB ToBzUJtDwhFl+mCexpDaZtZViozMFeahfJPS/wHqyCQgCmVuZHN0cmVhbQplbmRvYmoK NDAgMCBvYmoKMzkxNAplbmRvYmoKMzggMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVu dCAzIDAgUiAvUmVzb3VyY2VzIDQxIDAgUiAvQ29udGVudHMgMzkgMCBSIC9NZWRpYUJv eApbMCAwIDYxMiA3OTJdID4+CmVuZG9iago0MSAwIG9iago8PCAvUHJvY1NldCBbIC9Q REYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9G My4wIDIwIDAgUgovRjMuMSAyMSAwIFIgL0YxLjAgOCAwIFIgL0Y0LjAgMjIgMCBSIC9G Mi4wIDE5IDAgUiA+PiA+PgplbmRvYmoKNDMgMCBvYmoKPDwgL0xlbmd0aCA0NCAwIFIg L0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzVtNd9NGFN37V7zDpsmpO8z3 jFgVAqUppU2T9LAgXRhbSdQmVpAUSv59rxzJWAJcSTkyAwuUxOFc3Xmf9715T3/Qe3KM e2ujiITTzIiItBNMarKCMxVpRVlMb2hJjw9yQfOc+OpvPsevcia89pzff+vTV1oxxZ1R 5KxhQkVuMr+mZ6eE/6z8aPXP6TU9/kkwToJOz2mP9un0b3pxClBdYE0eAstYJm2kaAVr whkX3NLpvEb2ZYCHyyLOlnExOk4vmZBgllwT51b6fhgflmWRUxan2oTVkb7n2ey8oOrP 6WVMx0evDunlZZoX725zUJvTcTxPs0X9Gfot/RBfv4szkjif/Ukf6xhgtCqSzCr7ifXQ jFY7JoWGD5a+NNlqDLv0JeWZ0sqHBktGTDvV08XXprd6eBUviymdsCm9SpcXU3qOp5M4 xZd4mI1ukBJu5nzpb9W7VAbZ0d+WCzpm9GZWZED86CDOiuQ8mc+KuAwUk85xdognOY+c Itq4g7FYyZnlMuoX/ZumcZReJfM7Ots7ODrbp/M0o6KMaHGe3mbzmMrIdrZXBrhH09Ht RHGDdIvA4KoXCy1wCcGMdu4hfC/K5DF6hhPKMB0JQ64Jeavljp94hUYlphHLWrA6BoIk Ls7Hp85EzBkeHHVWl74+lLo8WWTjU+c14zxC4RGW1XnPvBWyDauj1c1vxicu8sxY7dsI v7G7Sq6YFta2YXUkDuHnbO/fNPuHkiXdZOlFFuf52f6Ufp8XaV0Ns/GzSp3EK6MMLalw VOvO1fXd1iPfYTWMppJ5bvvXFm8PR3cX6+AtVjtqgdzK3fjZzUl4i5efweroLs/ZbvIb RxGDmrHJXVMwmLQUjZ7cbVbak25CC2QLpjz3bVhf4a4NsH96G4JRGrQxLjjqFLoASFMD qcvimzTv57IVd5MeQpowmvnIfway4bLtU92B2dXFXssbuppdkd3Oi78GsDfpJUMKBGMn VPuEt5LXM1cM8Ie1OGpR9zkjqr4IYuoXVcj26Tb70J+hnKXLKb2EIvFrml7PlvkUbT/k CbT/Lxm9TuaXs/gqLz/z6CkdZel5chWXDev4BUStp9XvGVgFYZ1h3sM8eonATfrXDf+G vAIVAKEhKdLsjk5Wln6bxbuQAUTEvIkM1S8WGt+oP2Dh/UujDcp3LAPYJuRG4KCHJfsB 44u1DNCC9ZXA0Qa4mzJpnRnCoq6WAYZR179OGnK8tQzQwvitra6WAVqwOlrdgDppAHdS KIzMuKAWyG/MnRQOIzOMVFuwOnKXr7JHvzJpCHkYLPFVAxaUz0ojWKQ0BtFNWB3JgxT5 RRllg87JKMNvZTyUCQzEatyh5WEDozTmQXJ8U4q6n9tPus3tNyvmjusE5WIChhxgtIIe GqM6ggNh3SGsyazF2EBCTVyh2q5U7LLrUQLDDF3D+oo3t7uep7fFZZp9l9PTxaLUQze8 uMMKy4CgiGyC6GMl2QbeYMbuVkomPYYGgdkcEjHUvP5F/jEa1jt6dptfjn+0a9GsCXZr sdDTQwZY3CddgGMPS/vKQ7puJ6FLqheU8JAUyaxIPsT0y+xmht7/cDkff2QgucdaFfaW bPUGgcVpNMcY7w7YCTECqvlBdpcXsys6ucmS5cVmBBqnjlhrfzXs0Nj0liEK9Xf1Z7Nk +S5LRvfzSDAvjZZkBiFdXMR0mF8hLk2xRZNf4tAhtRFFXmAbbeyaRyqJeQPmWzX40E7f OYiX0vZWz/48Gf3g0S/cD7pME2QoAd5YdAhYpQwsdxtoN2UbeF8v3hdmk/9bikXaObpM l/ET+l5gTxNDb48VX60EfRSNg56MsGcsXMSEcZYq6KH5iEENaWz/RP7iepZcPaGsrIl+ vMkv2Dy93iBz7HxTwQ6NTS3LTfXQ9l+NUoyrtawdTIyRmgkLESSs/sAIw2TEZWiw0BJI VfekjTNsd6I9G4FNuaPjUH/dCOjIMSykVzk2mA5eQxHWUb2IHg4sJAOtqnI0IFQcxUjd zIUDywqUIL7yw3BgGVmWINVlgnBgwSWdq4vdcGApzRBLgztEaZERRXCHKMr7S1jLDEsP 1RBNsMYV2iGqKCozYt0NhJISVVTeMkSbEdYhKg9RW9RlTTABQpW7lSoKzRNxhxA5sdau w2ELy3ZQ+oLzRG2YXV+wC4cthdtpTlUDiHBgSehSWCcOLUAIXKbQwRU26FuRE11wh8gh nMjgChuJjUZugitspMfyixehHaIsp/aikmu6breWA8CNfb+NxxcfbxJMfun17I6EnJZ3 wsXGj6vHt0czyPbur91tt1av2Vcs+w9JFOO+CmVuZHN0cmVhbQplbmRvYmoKNDQgMCBv YmoKMTczMAplbmRvYmoKNDIgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAg UiAvUmVzb3VyY2VzIDQ1IDAgUiAvQ29udGVudHMgNDMgMCBSIC9NZWRpYUJveApbMCAw IDYxMiA3OTJdID4+CmVuZG9iago0NSAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1Rl eHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9GMS4wIDgg MCBSCj4+ID4+CmVuZG9iago0NyAwIG9iago8PCAvTGVuZ3RoIDQ4IDAgUiAvRmlsdGVy IC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGlzrEKAjEMBuC9T/GPuuSSS9u0q6K7UPAB ig7CCWffH66eguuBZAj5ScI344IZRpxizBlinoJkeBMaPaIwafaK1w1XPDEcm6A28Fqt 9lMmST4xf6Lf5JWULSgsBhLN5uqEQ0F/9l79tjJhOAsxBOWOHfYoD5xKR21huX9YIdIY s2Jluc2sBWDoP9cKZW5kc3RyZWFtCmVuZG9iago0OCAwIG9iagoxNDAKZW5kb2JqCjQ2 IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyA0OSAw IFIgL0NvbnRlbnRzIDQ3IDAgUiAvTWVkaWFCb3gKWzAgMCA2MTIgNzkyXSA+PgplbmRv YmoKNDkgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9yU3BhY2Ug PDwgL0NzMSA3IDAgUiA+PiAvRm9udCA8PCAvRjEuMCA4IDAgUgo+PiA+PgplbmRvYmoK MyAwIG9iago8PCAvVHlwZSAvUGFnZXMgL01lZGlhQm94IFswIDAgNjEyIDc5Ml0gL0Nv dW50IDggL0tpZHMgWyAyIDAgUiAxMSAwIFIgMTUgMCBSCjMwIDAgUiAzNCAwIFIgMzgg MCBSIDQyIDAgUiA0NiAwIFIgXSA+PgplbmRvYmoKNTAgMCBvYmoKPDwgL1R5cGUgL0Nh dGFsb2cgL1BhZ2VzIDMgMCBSIC9WZXJzaW9uIC8xLjQgPj4KZW5kb2JqCjUxIDAgb2Jq Cjw8IC9MZW5ndGggNTIgMCBSIC9MZW5ndGgxIDk4MzIgL0ZpbHRlciAvRmxhdGVEZWNv ZGUgPj4Kc3RyZWFtCngBvVoNdFPHlb4zT5L/JEuyLWNbgJ8QBodnsMFAbKKAjC0KOCQ2 OESCAjLIxJAABvMPAYfE4AiSJoSWNrRpsu12u90SnmW3kdMQe5O4B7pNS7IhoW0KtOlP Tjdu0242ZNMU7TfvPRnsOjnsaXdHuvPN3Dtz586dO6M3krZu2dZENmojieqWNbasJS0V XQA8umZDY4teH+cAHluzfaus1zNTiSzfXdty9wa9ntNHZCu/+95dRv9x3UT8h81NjRFd Th8DZzaDodfZdOD45g1bd+p1z/vA0fduWmPIx30ddceGxp3G+PQW6vLGxg1NevsiFVjc sql1q1FvA5a1bGky2rMgkfUUMXBTaAfZ6Q4gIweV0R4i82VbOebLNLmFWeyhe06tsvv+ i7kxLaTu/S89L7DPfPrtK9s/cts8aYtQTdPaCwH0pjx/tQ5zHntl+5Vqm2dQIqQipcRp sxKnu0ErQEuUqkx4ZB45QJz28xpifA73oZ/CZ3NfjCl/+B6/FcxbUckppNOQOUCcHWId sYJCf5w91OXIraSqTNZBDhBnD7B26FLYgwYeZO0xrrR9j+2H2ktsr38tu3Q5d9To188j 27M3123fU7indI+0Z2/+q6+BtX0Hsg0tyO7dhOyejbnuVRv338Pv2bh/S8HWbTmu0Xev R7Z2HbKm5hz355qeajrXJDU1t28uyG/N3V2d79kF4j3SYmkhRnacluZRHYiTX6qMZWRW 9iT6pIpYplHoSrNW1lVlSJOJSWXSVKyAwt/n/0mpwLdjL3Alzt/qeiGCufKfdU2dVSkw 5p0otKCQk6MVfhIrrzQKk6YYBY/XKIzKNwqZTq1wLuZEgbfxncK8KoVvpToQh2tXoLQC pQx+G7lB94Ak1GpRqyXOZ3ET5VIhrwBmAafxqcLZvMzAUuBY8KfwqbGxhXIckJVb2cOu sLdjkpJeJbP3ibE/sN+LXmzAwHcN/A8D32G/FW5gvwGagL8Gon3iB+ztrgyYXjUGDEbb kR8UInaMHdUUPm7gUfYoWdDxMWAK8HNAMeAj7FFMubcXVUYtyNuEgN0VO2pS4mxJ7DEB d8SOC5jZtV9SEGCVsay8yqo0Np4VaUY5mFNDk/+Wj+G+D+s+5P7fFBRUPnFCUr58wqSc OJ6uPA59jx21KEeh6fOgLx7nyheOS8pTx9lXj5863ntcel6aLy0Qk5MWxNq5IkKiusvh rCx8QcImoMsil2ZI0+E1uSpLKqcykB9UBzJJ5VKOMEKaZmCplIOWpb2oYhciemQQ5+/F TlsQP7+M9aaKIfgvYqOKtRD4RQyxEOeXY4fSIb/U1WvCVPmbXd4iEV9vxlxYNLR/LQaT qmz8+7xf+JO/yPs0/FcDjwjbn+fb+Q4xFb7DmArfrE+FbxFT0XI/DyeVhmPpGZr2VbFR eVphZWz8TVphmdavKocv1zqK3M4XIs/lC2gCiFMan0z5IA7zlJjTpfW7qcvmrES0eUW0 nebjuCyWm3u4HDMpZ6FPxhkyFrnYXIW6lH3Afqwt5GX2HZLJwy6x78QmeOQ4uxQb66ms KmA/Z29pUfMzA39q4E8MvMDe1BS8yd7Q2r3BXkd0qb2oMnaeva4x/11jrqvKYK9hHj0i Z68Zslc1GUY8F8Mh0IP4/rGIb6WXfY2+DuoGSYnL7BuxbBeWgT3MjmgDHjYwChRhvTR2 EMcEuzPWJgEaYgfNgMWxQwLqYx0C6mIdQnZ7rF3AbWKh4qwidkjA1FivYI7TmZn+DAg/ +rNJ+bNolOjzp/+XCMwP2OUPmKimdbpGV/p/jZAXtSmnbPZKWOrvrusOd7d0t3X3dZ/r vtz9Xnda96lI4Tu/NSkPRVOU6GGLcgSELs8+Ujat8pGHMSS65zw81lv58GGuHG5PVQ7c b1LuF3NI9HW1LVwk9He1zanWcXqljsVTtHGtbWO8lW37uLJ/n6bVb70vsKDyPlT2QZNQ LXdAdQdmeAiMg+0W5YEH05UHgS3tbe28t51VpUtLpAbKlOqkeuS3S3eIPCZFCqvulG6T FpFdckujpTFkleySQ3ICrZJNygROBN5ENskDuRc4FnIZOJF8kgc0FuQG2UFW8vGT/Bl+ iqz8af4P/GvAJ/lX+VPAHuD3yMa7IP8OUIU8BuxBny6QKvqCngY9CbqfH6BMvo/vR76X 3ydyzd5tfDffg73i4E6eBb02nsntQMY5l8jKrrIEx2c/TnInnQBx0RZnvYO+CuoFXQKZ cXLbaA5oP0iiQnYV+yYffd2wKRs6XcB82JENcoBsIAuIkQ9tfew0e4H1YrxOFmNdwGfY KaYCzwL/jWzsJcj7gX2Qvwg8iz4vgfpEX1An6BnQBraRbUK/RraarQGuZKtYWKuvjY0q LKyay9bSHNB+kMR2QboH2lrRaxuwBb22AHdBUyuoRWgErQU1glaCSthksrMJbCLyYnYT ZbJJTEGex/LByWLZyHOYC5xcNgq5mVmQcyYhxxYWuf+bCJWrCbv7ZlfeTJdrhitruste 7rJOc6VNdVnKXFKpi6a4JkzMLJ5on6Rklij2cd7M8V772MJMudBudzitaekZVktKqlUy ma3wtJUkf3aBl6TsQos0urDQPse+3y7JEiuU7pB6pYRkcrMxtryUApvLMcqWZcqxPepm Jb5JvmLfBN943zif7Bvrc/vyfC5fls/uS/NZfJKPfHXlTM2qpdqGuWo2Ay6Zq5YrtXFJ XqxOU2rVtLrlwU7GHgmBq/KOOKMG1dQR54Cs6mXLg3GWL8Tt7h4xb7U23P5wqJPTXJV1 qN4lQQH++qAqd8Qd1BDs5GxuKBRSb66tQ5nmhpQxaqQWzdrGhNRpovDomBDVqrPqVbd3 rjI8tQpG61YNrsk6iycE1EmBRrUkEK65xlYUQgUGB9SrgcY4494hwmTDYcqSbGArklGN 872BON8NNXzfyGoG+8Wl2wNx6TY0lepE062tbFA2QqF1K5hMy4dLtcG3boMhQyRgILXC DaKr8IcG12Wa2a26gK4X06CmJDeJ1w1y3bQNnaJXq8Kqg+6Qoqh5qhdBkuxgaBTA4myv HFhfE2f36bBPh/06tOlwvw4HdHhAhwd1aNfhoA6HdOjQ4SEBxszwVHKLxuU+HW7VYbYO c3Tw61Clw1wdqnWo0SGgwzwdPiMAfsPcWjvTRPTXLZ5bq6YuBtUtVwu8qJxBZSYqVu9c siiUj5vRGSpK5vpFRs9NsylPlBI/0/J3kuWr2xJamejqBcH7W5K4ewky/S1KRN9+woGa uCXxWOJ96qVmyklUJb6YeHdEtQcS++gSvUZnqZtO0gm6iHI/vUA99C/0NsrfR+kkfZ5W o/fX6SvUDvwWPU3HaAv4AgWn/691s+IhvCt0hY6zKloIHJ6OQcux4cxPrP8mUTCC7GJi HO2lvXwb/xVtw+sJaPw2PXVdy3Uo/yO14v7bzwZoNXue1mI+HRShz/G6xO/MZylX2okr zybTUyIShqQvUJB2UUT6cuKPiBN7Sh0+VE8l/iju0kPSp7XbhLGTqYeOsHTaB79Nxc38 CZqbFAxF+PAK5rAGczmA13GsRhdeezHuY9e3tNSIWtLuVNKjNRlHZvFdA1Lit6CdWrFf +NuI2F/Qdozgo8m4ztkThYib+YmmxK7EVxKnEQ1i9b9hREUvav9Mj7HjsGA1fZaW8h/i Yidqm1BfSgvZGGajJ6F7hjbKYGbsKklniBgXKWmfyfCisbdgpZ4StyRL7Cg+mK/QGXqJ 4po9X6ajFKU2+GEr4nsZ1cH2WfhaQm/3ay2GheXX2qykBsQeEmJwNuZzMalboPm8tveN 727+yj6x9/ulF/U+wot6uposEL2CldR3Qwe8sQ3+WIOVvaLtHrF+/Vi1pxFrSdnSQen3 tbUV7WfTNGFFYlZiH3z/I7qLNvEuPLA8gH4d14YaLH0b3GQk59FFNntQMrTwt8T9Xuyh fvrCEIXttIKahnCGVYb7b5h4hKp5AI+Ox7Bq38V4e/DaO0KjHsR3P/y0m+qpig5hHS9i fzRjD0fg8deYjPV5FafYSKkRes9hVTZJayVjlUdqhggRrxGSeUBnphIzIfIHYzfZVI/d ZG0IzjZLdIFlIT4epwuIiZP0LM6SuwUXUayn/90aHaCNNMl4kd+/eMF83y2zKitunjlj evm0qWWlUyaXKJNuKp44oWi8d5xHLhw7ZrS7ID9vVK4rJzvL6bBn2qwZ6WmpKRazScLz fAnLU/Oqg4H1an51GJ+FNV6HrFpvf29RqUpZbo/XKZeXhiYbrVSzolJ2rZqDZz7yV4RU izK8ye2qVOT4kwedF7nlgGoqwtu7sDGiFi8OeryON9yD8hDUqgXVQY/HrfIivBdAhPfC RjmiOurAh0DjLFCpLigonvhlBZhU4QkhXxxUxyareBQdwcge7Ki+YWbezqKOTmt+dY1K OZ1k/aVKLtHsvQrCJUwtxqNxkQMlTRuVqiznTyrLVplrEaY0dAjR7XLFCD4IRNZ7A5F1 8GgkfM2n7+ke9chRObo46Cx3ezya0XgSqQ92ZqRXe6ub0jELPDSDQZ3pGeBkCAaWpaWT WWczrcCtgVl44k61wX1ZwtyAoPWq/3AYBW8N/AZJ9jUJLslHrhcRuumNCM20EtPGVC3V aopuhLxO9TeqdFjuLOmLHsET/+qwYo14I42fDapSI4zqJKko0Nygjq6tWwYWjACFm2Wx 3DVaJhZPDjTLUdRF2zBybw26DuVHmpvCIkxY2FsDWVp18JCnz40rSfBQQHUqqg3dbbt/ 5Zaigbx1sqhGo4dk9SlcRa6TekQbBEHe5BI5GvBiNCgLrJ8rVqx0cNm0aFwQ0RbHf7hR VttWr4fP8G48kox/T9ShWj/wYHWwPugpdodwsKBIeL2Yynr0NAHk6OEmbapHtKkhXsVj pyDREdFPd6L3smCg2RuAP40B4RD0l4qG9/V41HxFdIxGA8LExgisF57BOx8P6zBDr2BP uBUGe6pVf4MG1KCtAUb0N9aEDJbRABIT1kH1h2tCITEpfQHUlKJD5ileOSqUphSpOYrD 8zJkfZNLahcHAzUiOtGSVwdvHchzD6CMi16SzfLQJlo6IJwkJEu8tfV6FDQL/4gs3KBv YHjNWHk0NdprWl/Jc7+CvvO888LR6DyvPC8ajjbGE22rvbLDG+20WqMtgbCs7XwG/nOH 3eq8IyHVEW5ms7DIIt7m4Qk+u365WJ55cnMjOHjP8Xoq3B4nVOttcHKMLDb2GSIecS/2 WdTxLmZsxYnklueJ4yWOU8GtOirENoUldwaxD9ZgiEBEy7A/cM3lbrFTpFBRYN0Sw0Fu D4bUAkace/UGF0o8HrGHDsf9tBoVta0+qNdlWu2Okb9UwdqFhaQvKXHdKSRtSclg97AX a5UnrtlaTHxSTOM8H4znqNObJVeKwxzW4b0govY1YI4fVqip8Ji23NnVQcnNRROUuFsS pXQFHwk+dZSidRQ+wSkZdXjlc17Voajm6mCf2xeSHU4ckGwwGAyNIkwd57xnmThEKceh Mp/KcsW2IhyqcCMO/VEVEA52lAPRsBF9188PTUXrSPPgPtJngY0rJgk3OLzYt27dH84s r5jqD0W06x9wqrlonthUWBvNYwtDaqb4sFMz39UyTM5dHZRxDGHb1msFOSA3i1VX5XCN dh6E3EKeZMcTl8M14vwLItDQxG3EN6IcbjP2hOGG2oZgsrQ4eJ97d2gyfhUrqY1TGj5J xXcycZZoj1PNmB78ziatWglxQ4ksB9bVYEBU7iwBY5IHpaUliE0R+kFvSHySLIhEZRH8 EUxLQwiaoqFSxOuSIM5LfFXjUf0h92CxKRSaBT13CT3ogubREDSsNzQANVbpX9AoWFKL k2pCXRCHbVsNAr1GbGFMtw+7qk/MWEwkNGgpLL5vXZ5h8zLYHJoE+XJdC2K1DSpC0ajQ uSToRZhHo+4o5mHU8Q3PcIbfYMRJdMHEA3HWVoe+AK/2fBDwerzC86EaDPVZ+D15SuG3 x0/38MpBu9FzFaxdqXk4/HfycOONeHj1DXl4zaClQzwcgc1rhIebRvawyid8io+vd6lf d6l/BJeuHeLSuz/dpc2DhsKqdTCvWXPp+r+TS++5EZfee0Mu3TBo6RCXboTNG4RLN43s 0v+LoG0Z4uHNn+7hLYN2w8hWWLtF8/DWv5OHt92Ih7ffkId3DFo6xMM7YfMO4eFd/38e 3n2dh/HDJiOOOzXojNnOppvt9C3+BPWDxO1P/1+E+BHFQgdRl3E3Z8BPSvi9BUn6q0vh J7W/cb4ZTS1acxlWzKK9+KGiAj9u4NaGby3wwqgplPOshZtIUOkrr7+iZVPLPE6PswgZ g1kf+6W2j9vM9Gfym9rQE7M5g6wXt1GJ3H4bPoqlU5CZ6VRZmcIK8hyLBqh0YGpZ+Yxy 15krV7Sv7Jj4z4ppIW7CaRT0lz1k+pKpx3TWZDI5MpzzJRNbbDphtuSYLWZLSgo7Qanf TDlsYt+UYSp+q+IcV5DvZufN5zwj3ZlVWaqs2Dww7S9ilGlzfj617JCiOF4mZbNnhsdp nlHk9LjYdFZ89QL7PSs+Znp04Rf3fPRP+MqK4btHMo2DDfn0c/+TN9tZelZBFv8oi31o Y1cc7IyDRbOfy/5p9u+yTRPT2YfpLD01O3f+zhR2S2ptKk+VRxXMT80uzuYlqczqGu3i M/k8ztM5S83Ny+UXct/J5elm9gPzR2Z+0Mw+42B3OZj1hD2jMINnZKSdcFoyU9ioL1Ge Jeoc9ZA/g+zOQie3O3/svOT8g9Nkk9zO8/gxjuVLBbSHK2zVyhVatjnP8XLBogHHwMva fCsr//LGyhVwL1uxeQXem5FW4G8yK/AGA2nz5vIZM4vEhX6Cd1zKjJnl03B3t9iZJcXj +tZSZtn8088feOLV/hfPfbz/5G0DRfyBk2cHmvpf3PvIjmdWXO5p/9HjVWefPamtc//V C7wO31mm0Hh/lukEI/MJkqUU88PkT6Um2Kgt9ivTaM7AHFiUDc97neWufnb44sWrF1KW HPvv85rfF2Itzmt6bhb/5nkOS8FpKf7ZwxxxMr0VxyLHyXKOnhNBqQnMjufQRNLK3FE2 lUF1udPrYuevbrtet757KFGB73FGSilgSuSkHHJhH/pRY/hDir4fLZRNVF9fU7+gQblt 25p1kcbPbGncGNG+nrq2Y8ejTxlI9MV/ligMEv+TaksYCWUaLDPstKH1KcPqU4fVpw2r Lx9WXyHq/wOBgWIICmVuZHN0cmVhbQplbmRvYmoKNTIgMCBvYmoKNTQwNQplbmRvYmoK NTMgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Bc2NlbnQgOTY3IC9DYXBI ZWlnaHQgNzIzIC9EZXNjZW50IC0yMTEgL0ZsYWdzIDMyCi9Gb250QkJveCBbLTEwNjcg LTczNyAxNjQxIDExNjJdIC9Gb250TmFtZSAvUVFEUUlUK0x1Y2lkYUdyYW5kZSAvSXRh bGljQW5nbGUKMCAvU3RlbVYgMTAzIC9BdmdXaWR0aCAtNDkwIC9NYXhXaWR0aCAxNjQw IC9TdGVtSCA3NyAvWEhlaWdodCA1MzAgL0ZvbnRGaWxlMgo1MSAwIFIgPj4KZW5kb2Jq CjU0IDAgb2JqClsgMzE2IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMzE2IDAgMCA2 MzIgNjMyIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAKMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMzI1IDAgMzI1IF0KZW5k b2JqCjIwIDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFz ZUZvbnQgL1FRRFFJVCtMdWNpZGFHcmFuZGUgL0ZvbnREZXNjcmlwdG9yCjUzIDAgUiAv V2lkdGhzIDU0IDAgUiAvRmlyc3RDaGFyIDMyIC9MYXN0Q2hhciA5MyAvRW5jb2Rpbmcg L01hY1JvbWFuRW5jb2RpbmcKPj4KZW5kb2JqCjU1IDAgb2JqCjw8IC9MZW5ndGggNTYg MCBSIC9MZW5ndGgxIDg5MjQgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB vVoLeFRFlj5Vt/PuTnceHZI0JLdpAsgNhIePBFvoPDoKEWxC0G5Q6IYOBBCIJLyRtGgg NvgAHZlPHcWd2fn2McpNJ46dVUxWFz/ZHXeQ9TWrK6jj49uVHWfWEb8Zl96/7r3dkEzG j/1093ZO/VXn1Dl16tSpuvd2p3PzllayUIQk8i0Nta8m7RqvAipXbQi1623nN8DSVVs7 Zb2dm0mU/vPV7Ws26O3CISLLrDW370jqi36ettZQWJeT0L+6DQy9za4ETmjb0Lldbzu/ BGbevmmVIR9fjHb6htB2Y3x6D215Y2hDq95/fA9wcvumjk6jHdTam1uN/sxPZD5GDFxO 28hKN1EGWjaaTruI0s5aZmG+TJOns3RrYP2xFVb375kD08LV3/XyCwKH0o5/dH7rHxwW Z9YCNLO0/kIAuxkvXPBhzmXnt56vtzhTEiEVF4/THUqc1oBuAy1WanPBbCQbiFMXbyDG 53I39BQ+h7tjTPnN8/w6MK9Do7CcjkNmA3G2n/XESss9cXZvn62ohmpzWQ/ZQJzdzbph S2H3GLiPdce4EnmedcHsGbbbs5qdOVs0Zuwbb6LYtbvIYd1Vvqtql7Rrd8nrp8Haug3F hnYUt29CsX5jkWPFxq71fP3Grs2lnVsK7WPXrEOxei2K1rZCxwOtR1tPtUqtbd13lJZ0 FO2sL3HuAPEBqVmaj5Ftx6VG8oE4eaSaWE5uzUBiSKqO5RqVvixzja82R5pKTJouzcAK KPxL/l+UCfwo9iJX4vy9vhfDmCt/t2/G7BqBMdckYQWVwkKt8qvYrBqjMmWaUXG6jMqY EqOSm6dVTsXyUOERvl24V6vwTvKBOEJ7G2q3oZbDbyQHaD1IQqsJrSbifDY3URGV82pg PnAmnyGCzacbWAUsA38anxErK5fjgPyimgF2nn0Uk5TsWpl9SYz9hv2n0GLnDPzcwP8w 8DP2qQgD+wRoAn4MRP/EP7KP+nLgeu04MBhtRblPiNjD7LBm8CEDD7MHKR2Kh4AZwAeA YsD72YOY8uAgmozaUUaEgN0SO2xS4mxx7JCAm2JHBFzd1yUpSLCaWH5xTW0Wm8AqNKds LE9Dk+fabxC+r31fc88npaU1jz4mKY8/ZlIeO5KtPAR7hw6nK4dh6QegHx7hyiNHJOXo EfbkkWNHBo9IL0g3SPPE5KR5sW6uiJSo77Pl1ZS/KGET0FlRSldJVyJqcm2+NIumgzwg H8gkzZIKhRPSTAOrpEL0rBpEE7sQ2SODOP8idjwd+fNhbDBTDME/iI2ZrKXABzHkQpyf je3PhvxM36AJU+Vv97kqRH69HbNj0dD/dAwu1Vr4K/yEiCd/iQ9p+PcGHhS+v8C38m1i KnybMRV+hz4VvllMRSs9PJg0Goxl52jWV8TGFGuV5bEJV2iVpZpebSFfpimK0srnoyzi 82giiFMWn0olIA73lFieXdO7os+SV4Nsc4lsO87Hc1ksN3dyOWZSTsKejDOkDKXYXOW6 lH3Ffqkt5Fn2LMnkZGfYs7GJTjnOzsTKnDW1pezf2Hta1rxr4L8a+CsD32FvawbeZm9p /d5ibyC71EE0GXuTvaEx/0Vjrq3NYacxjwFRstOG7HVNhhFPxXAIDCC/fynyWxlkP6af gPpBUuIs+2mswI5lYPexg9qABwyMAkVa3xzbh2OCLYlFJEBLbF8aoDm2X8CiWI8AX6xH yBbGugXcKBYqzqpj+wXMiA0K5nidmevJgfAPfzQpfxSdEkOe7N+LxPyKnf2KiWZWr31s jedjpLxoTTtmsdbAU0+/rz/Y394f6R/qP9V/tv+L/qz+Y+Hyzz41KfdGM5TogXTlIAgq z90/fWbN/fdhSKgX3lfmqrnvAFcOdGcqe+8yKXeJOSSG+iLzFwj7fZG59TpeWaPj5Gna uObIOFdNZA9XuvZoVj3mO73zau5EYw8sCdNyD0z3YIb7wdjXna7cfU+2cg+wvTvSzQe7 WW22tFhqoVzJJy1CuVC6SZQxKVxeu0S6UVpAVskhjZXGkVmySjYpD2iWLFIucBLwCrJI TshdwDLIZeAkcktOUBnIAbKCzOTmT/Nn+DEy86f4X/AfA5/gT/KjwAHg82ThfZA/C1Qh jwEHoNMHUoUu6CnQE6C7+F7K5Xt4F8rd/E5Rav5u4Tv5LuwVG8/j+bBr4bncCmScc4nM 7AJLcNz7cZLn0WMgLvrirLfRk6BB0BlQGk5uC80FdYEkKmcXsG9KoOuATwWwaQeWwI8C kA1kAaWDGLnR182OsxfZIMbrZTHWB3yGHWMq8CTwn8jCXob8BHAI8peAJ6HzMmhI6IJ6 Qc+ANrCNbBP0QmwlWwVczlawoNZeHRtTXl5bx1bTXFAXSGI7IN0Fax3Q2gJsh9Zm4A5Y 6gC1C4ug1aAQaDmokk0lK5vIJqGczK6gXDaFKSiLWQk4+awAZSGzg1PExqBMY+koOZNQ YguL0vNXSJULCavjGnvx1Xb7Vfb8K+3WWXbzTHvWDHv6dLtUZadp9omTcidPsk5RcisV 63hX7gSXtaw8Vy63Wm155qzsHHN6RqZZMqWZEWkzSZ6CUhdJBeXp0tjycutca5dVkiVW Lt0kDUoJyeRg4yzFGaUWu22MJd9UaHnQwSrdU9yT3RPdE9zj3bK7zO1wF7vt7ny31Z3l TndLbnL7ZjE1v4maWurUAgZcXKfOUpriktyszlSa1CzfMn8vY/cHwFV5T5xRi2rqiXNA fv3SZf44KxHibseAmLfaFOy+L9DLqU5lPaprsV+AZ5FflXviNmrx93JWFwgE1GuafKhT XUAZp4ab0C0yLqDOFJUHxwWoSZ29SHW46pSRV4dgdHRqcFHWO3miV53iDamV3mDDRbai EBpw2Kte8IbijLuGCZMdRxhLsoEduIxmnO/2xvlOmOF7RjeT0otLC71x6UZ0lXyia2cH S8lGqXR0gsm0cqRUG7xzCxwZJgEDVwfCIFRFPDS4pNDc7tAFdKmYUpaS3CReMsgl0zZs Cq0OhdX7HQFFUYtVF5IkqWBYFMDibLfsXdcQZ3fqsEeHLh0iOtylw14d7tbhHh26ddin w34denS4V4AxMzyVXKtxuVuH63SYo8NcHTw61OpQp0O9Dg06eHVo1OF6AYgb5tbRmyWy 39dc16RmNoN8y9RSFxqvonE1GmZXHaUrVII3o1epIlnqLzJ6aZpD4o2MEu9q5WfJ+oUt Ca1OdOEdwfsul3j3EmT6LkaE7gnCgZq4NnEo8SUNUhsVJmoTP0x8PqrZvYk9dIZO00nq p6fpMXof9RP0Ig3Q39JHqL+C2tP0A1oJ7Z/Qj6gb+Df0FD1Mm8EXKDgn/tQ2mzyMd57O 0xFWS/OBI6+HYeXhkcw/2/4kUTqK7P3EeNpNu/kW/mvags+jsPgzOnpJz7Wo/yV14P33 BDtHK9kLtBrz6aEwPcB9iX9PO0lF0na88mwyHRWZMOx6hPy0g8LS44nfIk+sGT7cVI8l fivepYdd39ZvE8ZOXgN0kGXTHsRtBt7MH6W6pGA4IobnMYdVmMtefI5gNfrw2Y1xD13a M71BtJJ+Z5Kerck8ShPfNeBKfArarlVPiHgbGfsBbcUIbpqK1zlrohx5c0OiNbEj8aPE cWSDWP2fGlkxiNZf0yF2BB6spFvpZv4LvNiJ1ia0b6b5bByz0BOwfZU2SqowdpWkM0SO iyvpn8mIorG34KV+Ja5N1thh3JjP06v0MsU1fx6nwxSlCOLQifxeSj74PhtfS+j9PtZy WHh+sc9yakHu4UIOzsF83k/aFpj2prb3je9u/sQ/sfdPSC/pOiKK+nUhWSF6DSup74Ye RGML4rEKK3te2z1i/U5g1Z5CriVlN6ekr2hrK/rPoZnCi8TsxB7E/p/pFtrE+/DAcjf0 ei4Olar9DNxkJhfT+2xOSjK88l3yfjf20Al6ZJjBbrqNWodxRjRGxm+EeJRm2jk8Oj6M Vfs5xtuFz+5ROg0gv08gTjtpEdXSfqzj+9gfbdjDYUT8NJOxPq/jFBvtCsHuKazKJmm1 ZKzyaN2QIeIzypV2TmdmEjMh81O5m+yq526yNQznpEn0DstHfjxE7yAnnqbncJasEVxk sX7979ZoL22kKcaHPJ7meTe4r51dU33N1VddOWvmjOlV06ZWKlOumDxpYsUE13inXF42 bqyjtKR4TJG9sCA/z2bNtZhzsrMyM9LTTBKe5ytZsVpc7/euU0vqg7gXNrhssmpe+MWC KpXyHU5XnjyrKjDV6KWmKSoVNKmFeOYjT3VATVdGdlmoShW23zmhvMAhe1VTBf5c80Nh dXKz3+myveVIyQMwq5bW+51Oh8or8DcPIvzND8lh1eYDHwKNM08ln19QPPFhNZhU7Qyg bParZckmHkVHcXIAO2pohJsLWdTWay6pb1CpsJfMH6pkF92+qCa8hKmT8WhcYUNNs0ZV Kiv8ncoKVGZfgCkNH0Kona0eJQbe8DqXN7wWEQ0HL8b0Cz2iTjkqR5v9ebMcTqfmNJ5E Fvl7c7LrXfWt2ZgFHprBoN7sHHByBAPL0t7LzHOYVuFm72w8cWdaEL584a5X0DrVcyCI iqsBcYOk4KIEL8kHLxUR1PROhG5ajWljqun1aobuhLxW9YRUOiD3Vg5FD+KJf2VQMYdd 4dCtflUKwalekiq8bS3q2CbfUrDgBCjYJovlbtAKsXiyt02Ooi36BlG6GqA6nB9uaw2K NGFBVwNkWfX+/c4hB15J/Pu9ap6iWqBu2flrhxT1Fq+VRTMa3S+rR/EqconUKfogCYqn VspRrwujwZh3XZ1YsarUsmnZOC+sLY7nQEhWIyvXIWb4Cx1M5r8zalPNXzmxOlgfaIrd IQIsKBxcJ6ayDpomgBw90KpN9aA2NeSreOwUJBSR/bQE2kv93jaXF/E0BkRAoC9VjNR1 OtUSRShGo17hYigM70Vk8FeCh3W4oTewJxwKgz/1qqdFA2rR1gAjekINAYNldIDEhHVQ PcGGQEBMSl8ANaNif9o0lxwVRjMq1ELF5vwHyIamVjY1+70NIjvRk9f7rztX7DiHOl70 kmxWjD7RqnMiSEKy2NW0SM+CNhEfUQRb9A2MqBkrj65Gf83qa8WO16Db6GoMRqONLrkx GoyG4onISpdsc0V7zeZouzcoazufgf93Bxxq48GAagu2sdlYZJFvjXiCL1i0TCxPo9wW Agd/c13OaoczD6b1Pjg5Rhcb+wwZj7wX+yxq+xwzNuNEcsiN4niJ41RwqLZqsU3hyRI/ 9sEqDOENawX2B15zuUPsFClQ4V272AiQw4khtYQR594igwsjTqfYQwfiHlqJhhpZ5Nfb Mq10xMhTpWDtgkIylJTYlwhJJClJqQddWKti8Zqt5cSfy2mc56l8jua58uUacZjDO/zN C6tDLZjj19VqJiKmLXdBvV9ycNEFNe6QRC1bwS3BrY5RNEURE5ySUZtLPuVSbYqaVu8f crgDsi0PByRLJYNhUaSp7ZTrJBOHKBXaVOZWWZHYVoRDFWHEoT+mGsKUouyNBo3su3R+ 6Cp6h9tS+0ifBTaumCTCYHNh3zr0eOTlu8RUfyGyXb/BqWkVjWJTYW20iM0PqLniZqfm fq4VmJyj3i/jGMK2XaRVZK/cJlZdlYMN2nkQcAh5kh1PnA02iPPPj0RDF4eR38hyhM3Y E0YYmlr8yVqz/07HzsBU/CpW2RSnLNxJxXcycZbojlPDuAH8ziatWA5xS6Use9c2YEA0 llSCMcWJ2s2VyE2R+n5XQNxJ5oWjskj+MKalIQSt0UAV8nWxH+clvqpxqp6AI1VtDQRm w84twg5U0D0agIV1hgWgxqr6b3TyVzbhpJro8+OwjTQg0RvEFsZ0h7CrhsSMxUQCKU/h 8Z1riw2fl8LnwBTIl+lWkKsRmAhEo8LmYr8LaR6NOqKYh9HGNzwjGR6DESehgol74yzi gy7ApT0feF1Ol4h8oAFD3Yq4J08p/Pb47RFenvIbmivg7XItwsHvKcKhy4nwysuK8KqU p8MiHIbPq0SEW0ePsMonfkuMLw2pRw+pZ5SQrh4W0jXfHtK2lKPwai3ca9NCuu57Cun6 ywnp7ZcV0g0pT4eFdCN83iBCumn0kP5fJG37sAjf8e0R3pzyG052wNvNWoQ7v6cIb7mc CG+9rAhvS3k6LMLb4fM2EeEd/38R3nlJhPHDJjNevFDRq2YwzWCK/2RICmWSwcEbEr4h wAc/k2RQ4XPp3ESCql574zWtmDHdmefMq0DB8F74jUeKfBNJoz+SxxSBJn6A0a5ENd5T R7uEXB+R4Yd2vZZOBUTNC+fddH2TcuOWVWvDoes3hzaGtdduvYewZAONTRiXYKTqRp// AU01gKsKZW5kc3RyZWFtCmVuZG9iago1NiAwIG9iago0NzUwCmVuZG9iago1NyAwIG9i ago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0FzY2VudCA5NjcgL0NhcEhlaWdodCA3 MjMgL0Rlc2NlbnQgLTIxMSAvRmxhZ3MgNAovRm9udEJCb3ggWy0xMDY3IC03MzcgMTY0 MSAxMTYyXSAvRm9udE5hbWUgL1JOSU9HSytMdWNpZGFHcmFuZGUgL0l0YWxpY0FuZ2xl CjAgL1N0ZW1WIDEwMyAvQXZnV2lkdGggLTQ5MCAvTWF4V2lkdGggMTY0MCAvU3RlbUgg NzcgL1hIZWlnaHQgNTMwIC9Gb250RmlsZTIKNTUgMCBSID4+CmVuZG9iago1OCAwIG9i agpbIDAgXQplbmRvYmoKNTkgMCBvYmoKPDwgL0xlbmd0aCA2MCAwIFIgL0ZpbHRlciAv RmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBXZDBbsMgDIbvPIWP3aEi6RkhTZ0q5bB2WtYH IOBESAsghxzy9jMs7aQh+cD/+zM/lufurQs+g/ygaHvMMPrgCJe4kkUYcPJBtCdw3ub9 VjU7myQkw/22ZJy7MEZQSgDIT0aWTBscXl0c8KVoN3JIPkxwuJ/7qvRrSt84Y8jQCK3B 4cjj3k26mhlBVvTYOfZ93o5M/XV8bQmBEzHR/kay0eGSjEUyYUKhmkary0ULDO6ftQPD uHeeWq1KNXxq/8MpaPniM5JdiThN3UMNWgL4gM9VpZjKg7V+AG2acBAKZW5kc3RyZWFt CmVuZG9iago2MCAwIG9iagoyMjMKZW5kb2JqCjIxIDAgb2JqCjw8IC9UeXBlIC9Gb250 IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL1JOSU9HSytMdWNpZGFHcmFuZGUg L0ZvbnREZXNjcmlwdG9yCjU3IDAgUiAvV2lkdGhzIDU4IDAgUiAvRmlyc3RDaGFyIDMz IC9MYXN0Q2hhciAzMyAvVG9Vbmljb2RlIDU5IDAgUiA+PgplbmRvYmoKNjEgMCBvYmoK PDwgL0xlbmd0aCA2MiAwIFIgL0xlbmd0aDEgMjc1MzIgL0ZpbHRlciAvRmxhdGVEZWNv ZGUgPj4Kc3RyZWFtCngB1X13gFXF2ffMOee23bu31729191bthfgLix1AVEJ1VW6KGID VESDqEQRsUREBFsUEYhRpOlii7pYEonxFVuisWRjSTb7+hqiBJfD95u5d3HZ5P2+vz/W mTPtzJ155ukzc1x++YqFpIJcR0QyZdbcSxcR/m9hLSHKGfOXzr20mDecg+eR+Vcs9xfz 5ccIEe5YdOn5S4t53c14bjj/opWl941HCDnrmsUL5y4o1pN+POsXo6CYp+ifhBcvXX5V Ma93EELbL7pkfqnemEX5tqVzryr9PvkIef/Fc5cuLLZfaGH5Sy9ZtryYXzAFz+5LL19Y ak9nEFJ2P6EoPZPeSTTkaqIgAjGQAjESovqq7BeYL+X1aLPu9xf3nKdv/Sc1qnl3j6wp Pl9yN116/JX+Z5Ve9dOoUPL2rAXeUaplNFJuOv7K8ZeV3lM1/H1EZ7adFK6jbcRMRFog WsTDiYx4GI+byXCkm8iziBt5SQNP15NOlNSRTYhreXkNL8+TBSjJ8pIqHqdpGE8FTfJc gixBfZzUIY7xdJT/ZoTXspYiDfFe/dRHgnjPz8tYWqRe3tZD3eRs1Hh4O5YWqYtMRFzJ 007+hoPa8VTwWKQ28hLPWXidmf++iYzFO0ZqIMfRzshrWFqkep7W8ricx2VUQzxoxWKR qsk/SBlyaqyTSFXkv9CTAs925JS8vYLHUqmdxHMijwUOUUqq0ZawGZCTKNdh1dmTtTkB LGDv65BjaRE4idbkB15/nPyLXIv64zzH0iI5RkyIvyffkY2o+Z7XfE9+TSSU/JPMRRmr ERFfh7J/kqPoT8FrRPLPtpPANQllfE68TuRpkXxDrHjrv3l/feTvpBxv9fEcS4ukl3xB 7Cjr5WV/I3/lLf7Gcywtkq+JF/FXZDviL0kT4i/IX4ga77A3RZ4WSQ95ksETTwaBP/P4 c4Zh5DOe/hT1IvmEp//E4z/y+A/EgvIPyQccIh/yMpYWyfu85j1e8i7ZR9rQ+7s8d4TH 7xTXjLzDV4Ctn0je5jW/5/FbpBIlv+O9HObpN3n5b8lv2FqT3/IcS4vkDfI62inwZKNn aZG8Rl7lZSwWySGG6aSbUQh5hbzMa14hEZY7yVbp5dL8WY3IMVUkL5Dnya3o9QXe6wt8 NZ8nz5GZKGM1ImK2ms+h1yjKWI2ImK0lKxHJwdK8D5I8cl0cLs/w3p7m8QE+r/1Y/yJ8 9vPS/Sd/jx5YiUj2kj18DHt5zV4+hj3kKT4GViOino3hKbKbj4HViMixMewuzYnViDwt 0tEkDqxvZzF5gq/pr3jPj/P4lzzeBewQyQ6efozH23m8jTzC6JTHInmY0Sn5BelA/BB5 kPEDPBl8WVokD/B37if3ccxgsUi2kHtRquCxSDbzFnfzmo3gmM2o2cj7u4txGfJzXn8n uYPjNItFcjujXXIb2UASaH0bp0qWFgELtvbreXwLj9eRm9FaQdbxX2BpkdzEa37GMXst x4kbyQ0oU/BYJNfz+jUYiwi4guOR1eSnZAzqV5NdyLG0SFby96/i/V7J37iCrODjv4Ln WFokl/H0xTxeSi4ievSylNSghqVF/Dob8YVExvqL5AKyGLxMgSejNJYWyfmkAfEiMovT 5iLG3chC/qsLyFTeegFfhflkHiCmIPN5jywtgufMgaxW4FmFHEuL5FyMm9EJi0Uyu9Tv bP4W+w0R2MPGNKPU+wwO2enEx/nhdF43jf/+T0otfsLL2FhErDp79yxSz9frLJ47k/cw hacnc2yfxN+fyOMO0og3JvDa8UxukXE8PZbzhDGcZ43mJaM4FxtZ6nskuQpt23jfBawr 41wF/v6IUm4E74HViGQYj1t5Py08buZxE48bAWMH3m/kkGwo/QIrE3laJLW8rxreOs/j HI+z/I0MSaNlNS/h8hZ5BocUj5O8TYKoUBIv4Xiczz3GaSXKWrVtAidiciiMX2XrE+a4 GuI9BHkc4DGXxHw1RMBD4m29HCs8gKJI3KUyN2/tArzj6M3FcywtEmfpF5y8jP2aCCnA xmvjMZfO0ERMXEKwWIQWZACkFTwWgbk6SHoFnoz+WVoEbhWpt4L3ocX6M4pisQjYa9C3 gsci+mNlqlJ7FYcBe1dEi+J8FJwDsLSIP9aacrwhXMJS6li7gab+P/5H/v8au6eopW6G LJsFyXoYXHs7KRNcwjiyCni8D/n7yOPkkFBGN5F36Qj6DLmLrqMv0QV0HW99GB1YxAyw R0tfktRCL954AmXrwIsP0z9LH5I/Anc3kD+KW8hKcQRqVpIn6CxxJPS8yySmu68k29Dm XUKkJrGFbKJl9Dn6If0jXU+209cofl2cQb5Ff+vE+8QDGOU6yUm+FWtEAb+0Cb+xg/eB flC+WRTow/Rj2kcOEDtdRJ+gWrJD2IzfuJIeBw/fRNbRKnInuZOOAM+cJz2EsjXgh+zv G/zKZrKB/hbz3oDwkjgR7Z/AbA9TF8ZxmOyjl5EFopqugb4o0+OiTrSzviALb8LfXWSz cAMdQ+8UPNCkGAQ2ICbSd9LDxT9kfIBbH35zAwlIfexPoSMrBBdGgjYo3aC0KKfR14Qq +gx9DZBeINiFDXQpdBpCnHQBe0ssQ7s7hcniarJBfFtwQiPZgDmsoaukh4VtwiLktJjJ 7XSzMAtvbRJawLNXKS1SGeDH/1C6gc1UGKc4rBim8GDOm8T76O3ifeQFqiROPFeRB8RN yrWA2ZV0F6B3LYM/uQxQWyA9hJFegr/LEFahrxmQcd9Aol0iqiGBDrPRYtR2QKqMQQp9 XAZIBcgqxWXQtZYJb5NlPL4L0FoJufsJRoN/q09iTJshobMFlVIhYSFJ2m/YLUTGL9hd OHOG//WZgar0kKzfoPLvJlN2V6z0P3Py5JQZkksxc7fCvVuMqHdLkdBn/1vlZ1Xpjikz /M/QUaPbS92OntOOwrNn4BfwHyvGz41ur8LIpMNkEQKedIZ0WFDjeR/CFpTNw3MpnkjT h/H8EuEw0hKeLH8AYQ/C4wgoJ2+VwhvF9vxd1vdxhI+lwydlPKciTEZA32QkwjkI7aX8 C3iy3xuH0ISgRQggTEDA2PizBc/bEdh7wxB0CALCNISJ+F02dgRyEwLrdw4Ce5eN4zmE tQgLELYjfI2wGOFgaWwsPQuBjYuNkY2FzY+9z8aUQLtePM9CYON7Db/lYgFgLNrYBNip hO5OiB/YAgMNtvjAPxEyQoGMEhJEDYlSBhmjhfTRQRoZIKdMkFwWWEw2tLEjOCDvKiH/ 3OAlXshNPwlApwtBvkagE8cgERMkCUmdho5UTTIkS3LQ1Al0NAKpX/xXBy2gAdpBE6RU C2mFNjGcjIC20UZGklGQvaOhEY6F3jIeXKwD0nASmUzOwKvMy0Dwa0H4Ex4nfbSZ3kJ/ Q78TbMI44XGItjukoNStaFXsUOqUD6gMqjGqh1Sfq6eov9Bcpekvu76sr/xGrUm7p2Jc xSadoHtZH9b/zjDLsMNoMj5hOtfsNz9kCVoesDbbDLYtto/sfvvjjnMdf3LeUZmsPOC6 2p12b/N4Pd94x/mG+771F/zHA/uC+VBj6M3wgvA3kT3R38Qujafj+xLDAd1F8iZpkWIb JK2K2AsaiSipWiFIJPPmR2/miOHIm0fezJqNAWMkYAwskkj/MtHV/xd5k0p37NvLlQk2 S4HOEJeKKxSzsAYhMrwQ83vtVp1WIapN5OlK9d5wyO+qtJqUXptRp1GLRKkVJJvgDRuO 9H7Ua28ymuxN+KH+1p68vSlLg9GYWFdb30LzNg8VdTQU+LcSUeu0ST67ba7N7pNsTvkm p1302exz7DYvsuJSZ5RepnU6HE6tfHvUeXoO46WCWlwqHOLjDRf4SCXytHqv6cfhmTC2 4qh6/uOYhFlsBA77eXYHG0HpJx1Op4P/JH6D3idfIuakQ8C9QMEoavSvufZ6tcR8h5Iq jVYv+u/sybNp9zRh0halSilYLTa7l1otyhBmHBXqak0Nw2lN3ibmRhnbm7I553SzwTcx v+TC6TOb50UNZmmzdX3iQfnYbTf88+qRe602Z9u4e+mUrp205o7z5jjZGLacGkNNIagR Xa/p93qdGqfoNDvtCU1CTJgTdvWDfERmLcGgWo/2duY6B0ZVW99Qb6qrjcaqKVYEI7Hb TFaLoMKiBKN0S7tpVHMuXznNYgh0YFQzZw7vjBos8gOWdYmHqGbDdd9fM3KvzeJsG7tZ fqJrp/zmHfPOqWT4QmGvLJIulG4CTRYKAb1Gq/I53b+1kze1vzWo3vDbjRa9iko2NbFb bA69H8PqAXY0AVOaGKYcHZTN0kDexkAWMHK41RmBLmywASMfsVXYTZcEq9Ih+e540Fsl 3xOqyvrpBclAMC68lPb74/K6cBolV8b93mp6RTidDgNuS+UXxCo6ERykqlDpMBnLJV0Z cerEw06WKZOgyaqcVucpJHkTAzMyRBlOGd5iPCrKgZShAF0rbaDfqCt9f9SbJEn+u8qh E1XqMQaDQO1Bs1ajMKhOdOtNglipMmnLNQrAZws4f42QAV8LFFAmiZLqbfJ7g16tIlK5 aDAc6ebIeZQhpzkYHUbZhBm9AAaHLHa7RRxmr/Sa6VKn7UKzzWa+0MQUOUofPvmtmKLT wDctBY14RPOOVukiWkyDQbU3GymCjAOSPrx0+syLls6YcdG2yQvmTZkybx7G9eXJ2yVJ sRl81lswiBWWRWSRWTCXaYhkUFqKowLyHOnOKvjssQ4NAAkQh0NkrS3mcieVCuFSZ9Tl TSoUrnw44VFbtYq22kjcrbZoGLc/fPITsHkdxmgnFxVmK7u0pMv0gvZdR0t5i6qW1io6 yjtU7bRdMds4u2KqeYlxScUC89byraqNdKNiZ/lO1Xa6XdFV3qU6QA8oXqWvKt43vl/x gfkD+5fGLyu+Mn9lD2tUVlGldzswZcwcA+7p7zX0gfOAAk01eWC8IAYFo4GljQZBWLTs uuuWLb/uuuXPffzxc8/96U/SavmbY/+S/5sa/3WMGn6YQ+fTOlpL58v3yYfxt5XjOJUI EY8r1JA5bYVwwAAgKcSKF3zGbkeZ32GyGohT45P8SqvB41fq3dQdNBzp7D7S383YIUN0 E1A905vvx1Jni8jEwBkpgtNYhCnjjShtgRP1yooKhS8W9NNEubXcbHtoZjYeP7ErHs/O 3C7lBCHkcYQ1U0Qx5P3hVU88jH9xj/g2o8WHMc4/A941ZG1hflgJfa+ia7WFWjyJSLfn BeJ1rtJerVil/llwnfSgeqtii7TFtcl3v3Obfptpl3KXapd6l2KX9Cvno5Eu9f7Is6pn lc+6npOeU7gz6ZpsFMw+rFAHIyq/WKZK+yN2sRbo8esj3b1smphoE+Cf6e3vNrza2cdm 3ZTlUxpB6xsIOE8oCMaoYgyRTb6ESlSpp4EBtLIybkTL6mp+7fE00FlXzx2xLKSsiFSH vTpz4fn52z+RH59evYq+IcUCgSgYv9eRqmrb63bX0jF3L1lbm1abR6WHhwPm4ePfu69b fvbM6itSVemoqBcn+UKcVx04+Yl4DPDJkXsKy4nHGurKRmk07emy6ru0ynfTL1jzUpWl 6qzwWbrZhvnh+boLDJeGL9WtsqzyrjJshCmxMbcx/PPqjYo7dY9Wb8ttow/pHq14KLxb t5fsy+2h+6p3h19UB6zE6VdlTKpLRSrOSVyaEBIGp98pODXevOFod2d355FOIKsR/A/4 2t17tBsYW4JZlg4IDcAIeFGTr2c8G391tQ0MaEU4FmFYxBtRWLHm2KHNf0/5jO+ec+Xd 589ypaee5bdOnnPF7KlP2dyRT2++7635wm7/zquf/GTFGG9s0c0XzVxlVIiKtpYyUdIu nnDeVYvDrmErn7/lgpsZze4BDvUptEg1knsL82+hB6lA/R53pdWiijjSekNKKo8ESHem PKfpdrwgxq2N1mnCIuEK4WfCRmG7sF/QpOKN+UxQSvsFi1bUKz1uv0a0ikpC6mhdOq70 lRGPPk7jvqx/tZ7qm0AskAqdEAuGV/OdDJkYC+akM4BVfX35I61y66ulwmwnNWpoiV7q gGXgmgAP5092m48BEVTFAAhmpQfFpai1RGXCQXkt1WeDodhyucrp9ihEul1n0iv1krRI Z6yBjLK4BVGtcnmmhgqgO3pY2H5illzjS4QDO/ze0fE0NKo3nTqBUoPgsp1Qh7w2jV6d CFfu8EXDYc4vyOPge4LUB430ysIZvkSQeMURrjNc57lEl6NLD7R439Q1BVPXJLqD72ne TS2xX2Reol5lv8a80XmHcZvzIaMm6E2EiFUV1UOiE88l2tVaQTvHS70pxlqAP50gO85Y SjwPNPddp9zdyUHHpRefsHQKVYqoBCJkJUygDghbunbkpTVPfi3Lb+z4c9Jd/u7snz32 wFWzfmXyOhM19Hg2m6+WW0Sdw/6PfS8em91WmZj0i9XXPDor3Uy/DXhisUiiyOfFfs7n w2RuYbTfFdRaNR/qMcP3xS5rsMv1gvXdiBSyhKbapgpL1EukBcIC2yr1Kmm5sNx2Y+WN lhsN20MGpcobNBG/VmUKONwRw9Ge/h5DT98ppv5dZ5+JcVNoWCW6wGRiA7wjxLg84XNi XEagt1+/aM6q1QvmrrbV3zj5gY/fe+zQ3+m51Dd3+BWTMw8comtXbf35FVdv/vnmMWP6 njjwV9pEFXQqvd8dKwhU45VPcn7x1sk+sRfrGMSsCl67zyZVBrVwXhu03ZXviQdDF5Sv Jeu1W7Rbyh8hO7V7ybParvIyu61SNFcEXdpyBfRwr7rCq55jpuYQW7jukkiAyC+uWzcW 0dgEtM5GgKVCkTfSwIDIHcFQuqQNqIQVap3ZONZiF0W6TpbEcCgYoLQMckC42+MqK7c4 dAadWl8mpTJVwXBZmTTL7XViKWIBkDR5C7xPLsniDLmzsCzs0D+poZo/iF1Ja5f3heS7 2TKPwlfpsfquVl8trShbIdxou1F3fdn1wnrLesN69Xppq2draqNvY2KrY2N4a2arc2No Y2RbaFvkl5lfOne6t/sP+A+EDkS63F3Orupo2KE1qQIhpSqmVblCMaKqcmchpbuPgtsd 7StxPy6tj3b+juvNP66qedAKmwcUVqZ3DOKOdNnaiy9Ze/NFS24uu2HR+TfccP751wfm zvvTr3Z9Pmfhwov+vH//5xfRGRfeeN2Fi9espn3zf7p6wZxrr5VXZu+at/W11+9YsjGb eHDJo7//r8cWPchoViBvlGSDAzbl0sKZRCNa9Lbgh9hjEd93d2lsXfp3NS9EytXlUrnd ZZ8amO2aXbbAsyCwxLWkbLlneWCVa1UZA9Ituq3qrbqd9l1lNqefqLQBn8oUVHJ87j3a 38PWvZfBAOgMZOb4PLDaXEchXGiCm9WbzFxowpQA7YoT6q8HGr+7vfsb+RfyHzqHXXlG 9QOHFDcsmnvVT+fPvU44Z3T733914G/yIblf3imf744WREHjgSH+0TUM0e+9i9l2XGeE N4npY/6CQXNE1B+xviP+w2FSurTEAeW8l9kxfHxZpogW9fFgtKSAD9EmB7RK4XBJrZRj A/qlAL37JTGG32LwbCtEBjTviO4tMXjE/Q/xMIqsRQVc6bSGVT6XM2I40n+kl/F4bhv0 QpX7gvEzRh3/URuHHmEeNEr6tcbheavCCM1cVpt1ao04EjxITGGcF188c8ZFRwMmrUaE iv6lQQf3s9JULpWViwcmL5h/xhnz5wEHFtG10iJxMfwQLpIoOHRvWj9RvUn+5LZZ9Tq1 ihK1SYo4y90cTkWTEmPMmgc4Kafe03PbxTXeQMDbv9oXCPgGpQVnLBSOQmBE6RlRpCKR cKSIh8eh1/9F+gvWKEc6ColcSp/UKqo9gbDfY6sWD2hsn3rCezX78yg2x2PJGFP7Y1F/ 3vBRz0dQKwwMq7CGPf1QK+TDyDAkYxAcBCgAjSHYaUoZNzyK2j0ojQkJesnCs6cuOv/s sxZdHKly1R26/sIxV1SIonpEIPbB1sfe3vV6ElJ03cipZ48aNfUn9Pn64Xadc/bV5yyL 2JT2Wdn4vIaJL29ZtXPClEAiGizO7eOTm8TDihmY2XCyojCuJu8RW4m7PhNtTVDi/Eyq /zxTURZq/SyTKPvMnBghaaRKi8aiSDlaHM3JDseE5GzHrGR51ED8eZIyuJuSaVXSlhhh ONqPqXf35sFdi0rVR72GV/u6Dd2GvneLQgMVRauOz7loEJxC72LWZjUOsJfYjxRpMxur YSIrS1QYOGfqTzc88ouqq4zmypsXfvjXD7rv/7lNn/cbQ47EhOj8G/ZtUdqVaoP+nCXj Rxrz4jbH+o3y7+S/yq/IL0U9ttwoeh09n3bSn/6lX17s9lYEaqyVZsPWlXf/SpDb6ERK L+rsOEvL+NFJGV7I96WHgZVZsrGQ7xBmC0Jc7CojXb4/l/VkAh5R3x23ZcVynR5eEK/P H9CmK6sMkDTVkSpVOp0zHOnpOdrZg7WH8dHaa88XyRqOzzYneEE7+sWODJ4+BC+CHn86 XiPCmGgnfoQAAmuXVSkMvb29hl4Ve6h7Z5JOGoD9yVGeSSh7yTQ8ZcbEAqoS++AMDYYN 3Uzvff/2nw/LpeZQT0PMQG8y1sejtfI3E1OZts65sjRt7shsarz8r0Iy2WoWiGAKxBI+ T6w/48XTl4j6+vp8UZaKeRk+idi5JNIywEgNb1WeXFE4I6H5UvWFy9AV7HGSbpOUkCKW hAWkNTNxgeKCxAXiSnGlYmXiZ6lbRJ076DRLvsp82pSIGsqoKmRSkoqKqM8WlSrSNg3R V2ZqDP3AqSO9HJHAhTi7ZsQEJp7py8vsPxBWUbNK0bqBhHlgxsaS9lVkEEXpxW2cO//0 3Ja7ur56+7Z11yw/9oZcCIXSZwcCk9LhIH3nyJ/aR110wayzclddvOG8iy85d9Wsc2ee 90Mft/LW+hKhyKP3n3FFNHbrRbM3Zd1wDcHum3zyz9JZ0ktYqasKM9RpdZUw27jEuMq4 3rjJtdX4SHa7a2/2WevB8LGqY+mK5e59boGYNVrRecgX135t7ha/qt4b35+DS8gatUet yx3LLesT26r2VWkMNiXJBTW2ilQ2x0zs7t6imQf2wrSzVxmzMTV1ZjsvY4oK4x62OsY8 YLEwqika4aeMPSX3NhHoaWgqPlwWDka8kj8x0qKSzHfMfeq9D/c0X9XsOtfiS2UKU3ed +738Ah3z/ch10hqXLdw4b2d5JnCuW99xnnziD3+QTwQCulEJr7ch3lALgjLQCrrAz+T4 vJP90grghBa+4JmFZo1d2+UVu5NW0u3tqXCpXVJKnZJa1C3SL4M7Y8+qn5XK9F6HVbKZ AkRZEa5xmWr9FURvy1exxc/35I/2FhkoW/Pe3jw4rNx6KBvxYroDDNRYogPY7sUFbxHz BD4sPt0ovdI/wvvdX744kclZH6iKRFKtJkNrVSSWeuDjf9H4T87seH+n5bwNovjR3/s+ FES20DGvuNYfj4TkF+X/XtszbfJYCWs8ErjehHkNI7cWpsSrM6lA2Gc1aGqa6ptVJNzn +zLVRzL0mwzN9Ho0Xc6/GXpyqu76v5JhJrfVUAYfnFqq9udieXfOSmL0mxiNZb36Jmtd haTODDf0d2Oq/a3dnZcZ+vL4r2h+MTGcge0ls9B5WY/cg/VmGitW3cjipmxNacanps6c eNx5xawy+JmLhuz/UnIwE46kJhUKHVWRaJXYHAwxSj/RS5WecMjlDodd8nHBwig/HBjA /0goEeutjacn3S4/WVefrJpwsCOZHR2SRz88KZ1o6g9HASucW5TOAawa4QfpqMvU5+PR lNthTPVFv8z3kXr6TT2t7w0bu/x/c/ToSLdKRWIRZ8jtMOnUkqEc7p66WK46lHNLpJp+ U02rGyJ6t7Xc0GT4qDvfzaEEycKhxGUrAwpgwWB1OqgGgAQWwSzRAd4oDOYLRV/nfwaV cG4sGQ0HZXMwHMsERoyYmAoHxRXBUCiY9J74jKrdUApcwbBbPrYhEA5FIqGIX+QsIhGT ZfAUBqPK8floUs5H8+M98mjApv3kZ9Jd0ivYA9lUWDwhOzs727bEtiR7bXaV7fbsg9kH M4/4n7UdrN1Xv9evD+TjsVTY5DASY6Oedo1QU/V/N3Y7Ul/nu8Nfefc69rfYam310dpo /fKa5Q3bPCq9xqBVC1WBjEIRyykSRK811FW4si2cd/T3cN2OQYobP4yD9MmdQDaOUQyE sO46I3Wncc0UNTLNHxLZX+Icds5qihh1OqMRtx3zeiojdHelM5Cs0Jqa/nCpfFQ+QEcd b183oSzkzviCyVq7WhG5Zebe93q7m1Y+3ucPRN2BQMQt/83hspYFs3QahQili3y+Snvj wptzsYK57Ixp8omP/iwfhdRh/m4Cf/fD2CtaWRgX7Br9RU3YLxq7Uo6eUXV6HExrVdVU tdZLtdlRw1IRKR7SaxwmyaD1V4IEJVKIN7aH9E3Z2lqP1Bgg+lqrttaQH4utg/ybbNfE 0JOX8Tjl/WDKcEmC99lRxaI+JnIYPpXsxR/ZjlAsptjiKZHlqZLSG0WBjTcC9MpRLdnk 2D8O5khvT0nVd1TRT9qbclUzXqsKR5L1DkNrOjnxrTPTteNzcmCDP5Lw/cigfIm4X95G zwlCKqM00L9qQD7ThxisXgCsdIBVkDQUfH5Dl51Rm1Knthslfbm/Ukkkj9gU0FvKm/Qh 6K95QOHUfOEu7c1nIyXC+XcuMzAho7hpUio16cQvMuFoetLnn3dUR6NVwnlgLFUdn2/w xNnI4B8FWURC4XDC1882sjG2pZCZd2FsGXJmoabcPDU5tXpBckH18uTyalUmGnGbXMq0 L/0lnLtdqh7r/qyhzFiBJST6CmMgknNl4Wk/2t3fzVEXpM8cz2CcrzJjBaoR14taaODU KLlKDaFYUrOxOQQEZntETIwIsvxtRzoUqxKqMuFQesKalz84d9fUkM0TdgTVkqRU2q4/ 55ZrJNPAHE6s+ctvU1XmSO5vY0JmU5k7XBZocJ0xe+uTmNc4wJzNaxx5ujCmfGxqbKIm UpfKtwfag1MDU4OaeE1g7DiJGPNBH9A26eipx5oMUwXzNfXD28aqqolbahw3AuKhujkw Tg+ulxnPpAMk35HuTsN3rQwdoU/25YvYyLJFlbINqmI9GYuYbaLWsCcC26ZFYCmEPGrG 8VKUqQxSv6pX0WtQ6Xr7lbpeg6J3ZjZHOv9v3BJIDwf5IL2TkQGFw888AGm238a2amIq uoVheIu8C2ZKxl8oTEyGgnRaS5Kh+C+0tlwaG1+xYDjTqpOvnf7wL03DUT/H79FrFsVG /HTsxcD1uP9HluqPA9cvoPeg/0AkFAvIt5iek1/0xkIRnVP3/PgVK8oWc7xqAvwvAfzj ZEohqS5XErMYsXa5e8SYubs84osG3TZzhWQxoCYYJTlls9MQ1VsSho96u6FrGJgJU6T+ kkB5FWomY41GOL64CeehTGQE/i8UERA/8SZhWgb712XC4dTEa6+dwPQN+gpIpGriDsFC 7+pIo0B+OhT7D8RBoTsR6SXMoY1sKVyiaNNjc8/aliGRtjpPXQT7Nm21hXYP9m3a2gsL yZOeJyMPkxc9L0b2YLs+EvZ62qgqMCxQX941TOqpjbrEiu4qS9hL2qjCE3EU3B6dulXb 4tYbR1QkC9GIrrm1vqVi2PCoPjeizjcSfr/efM/Rnh7DF4Yv+tgTSkfRhilywPyrpiKR mU/5BFIDyz8gYWl5cZslVl7USk+JXvjhSqQJk0VY/L4uV73NH0g0GNz2Nmjf8pfNyfzY lPVVfTqdTOveMBUx6CvI0jabx9CQDPq3VecqaK9wedgfCkQ9/Zd74pC6cahs55x4KYmu hBH92xjmcMDe5okGQn54hSkJnPxGWgeYtkBHb4wG6gKLAhe0SPHm2kCLX+FW54OmrqS7 x0C6G9TN/paAbVRFbGQglqmtUYxsidVU1LqNmrZW7Ky39nQzv6jM4dIEUuyG0sHIkUEp C1J8kVMajjiAzvzsoARMNkPvTEZYpQ3NoXKjJsu36O30lCJ7SmwU2Ral02om1Fenxh8H PiVazM6pLTVNccu51REnPRYbW59LjvrvbDiUatK6cjm760RvSU4wvgtFNiBYU/1bRFuI C4+4v9/osZVXi3eDXgQyAfrIDdBHmE9qWCGt7RZN3Zq94n5H2By2p4ypipaKWnOtvcXI nGs3lt0oaPUVpN1aocyyTb+jgzf9DCQULOoIhPKtP263m6Qb5N///W/yW7S67+80e+LP O156acfOF18SzpL75F/QOeAnFtopP3RCS+nnn1N6sudz7v7F2HCfhOuRalDzuYVhtItg u8gBC7zHpunWR4PR8GzVbHGJaom4SrVKVPucNoNkN+s1aiHqV+IYb0VIGyP60Gi32Q4C h4oN3ZE5aEpCbsCKfK8TO5Zsw4I5J8ynqYoDajUzsTmrM9IXnr3/vvvvA/sCa7MHofat GTMDeiF96x/9x//5pGSSs8tXLFvevyoQZuwrFCxqhM89/fRB+S0Gb/k4h3cKZ2HuKFys byRpbcTXbfsm+KXTnO9WprvN2v3KvY3hmnBDqiqVq62pbWipask1qcdYRlnHeMZ4p1nO tk7zTPMutC7yLPKusF7hucJ7Y/mtdK13C90Y2uTdpvilaic5UNtFg3qcJq7LVLg17XUV cTHbiP0vtt8F+i36Qd9kW1/dfd/JjO1B+YvgqASzDtkqhpLg4VzVA2SK3B20iyXlFAz/ VWmJmZFJ33jibdrY8wVtkP/rn05XxZLWq0emt0Z80/XO8NUjG9+u69hZZquaU9217VD3 o9u6u4U8Hf1Hqqbny5vl7+Ve+QnhAoc9E0l5fKNGjstWuman11PxT59QSe7/5BMZrhgB dEukPaBfNSmQxwrT2cKf08qWflH1FdWqqlYab60eoUkBR0YYRggjKklXoCdj13TXG+qz NXGX3RiQnJbq1pRaGNGUUcepoSw4QqogNYqKeEUj3A1xr8WZaWOiFhYGFGNABB4HQKqI LozSudDtywNduL1RJPYmkHmGtCKuZiefVDpDL1w1jNxhFg8glViCX0kvGWyAFI+pwDdh /1GEQqsWqyFl6U1v3brhlnXvtjdnk83y7mA4Xh1oboamEqLb772ndtSkDT+tTJjfCDRC cl6WyyjFX7dMGrFWcskXLVywcFH/5ack6G3uWDDoCVVt/MmyR/36uFt+0xcNRcYpJRqa yY9nUXL7yXekGpyxGUVeKdyRaB7bss75s5a7Wu51bjTcl3sAdsmjwV+O2t7UNWp/y0Hn vqAxGQ9WRYiyTGxxOJulNl/V17XlX5vgy2ir7Y585dvbtr/dNmJi/pz8QsMC74K6BU1L zEvsy73L65Y3rbKvMq8wrDWsN9/YeqP3xjrLktyq3PqcqCfuZoezJZhTNsQTVqVblbCO Gd4wRuVuB/HCt1qUzWy3BhYLP1sDE6Z3gBezlSpqg8yI4R7ETPGsjX1Az6vlmknRIi5a Mb7iGaGSGcO8jHz3krNdOlIRjiUTYgVcBpXa8tA9F6z5xfzzNr71wonnG66eJLiD6aCk i4frPDpd4JozVt5z2fKHnth9/O1xt4WqQrmGr0zZ+LSUbczEq887Y47O4nnoznt/7/F5 bJW5t8tCsQlJa77+qrkTZxgs9sdu2/HbINddmN18GXA8Ry4pjHC7SA46r8tq0iiJ0u0Q s+6uip4qb3c0VpVJ+qOekM5kFF3WijIN9nZdOeu40FgPFJpxHn1ybCYP9yNzOPZgr6fE 7wbAU7KT86/mgd0AWValU5k5vOqy9XWQ6tyfiD2guqL0EQPGkuAaEO+CMfCN4KsKhYQy IRwVF0bDtFyIRuNeoUz+bAu3mU+8xW3mLfJnoq4jEQn7DHRCBIaefMDkp+FQooNKjEUO GM2YPmT0MOzbbsD88+TawqR2a7tzqnWqc4F1gXO5Zbn1cqem0pjOS8TenUm6YOp1BVU9 mf01yVQ4Fgqlgm5fJTN/mY3ga6yMxWpT2kaDPiXVqkkbPImn5PYAGNiTOw5wcIKZD8xF C+HA7IcBJeVHMTyAQf9m13EQ1R2ARwlmz2FmpqWsjtC1E2+/oW5yXXLkx9lwJN2s+/AP h/4mmZhPiZlsJz66ZGFyWPvjvxYafAluH/lP7P3HP/7xOwYD3cmj0guAAe42FDJTDTQe M8ThajLqMGGHqie8P+Evz1gFyDWjP2CIq92SdbwBZ17Kx0sJrPmRTq6udZ6aEkgFS8xM BAMxgEsR9GwcUE14iZ6Xopz7mKGtcPdyCQanBJ8G/sTiabCSJOTb+sEMTsvkkxB/mZZE Onsx9nA71maqks0UzqRkrVbe7Au7m0YmBAnOZKaoRUL9m8XFIa7aw2A9qyNyIQ4mYN4C cP8Q5t1M1hfyLwbp2MrplUIwSONNKYdY1pU39khRj78+oxOclckUVTeToKYMkNBNsNZP yLSwqQ/MPNP6KrfU+awtRIP5aSA3KkkZUk5+kpX519mvJkkzUin8JdnsDWo42GERFR3s neDhJSXX7ho6fRynZGYQNNxSQhwKnwWPa+zeKo9T88q8+6tTiUY6yhaMRrW3iUbzWLtD 8+GvVTZnhwVHD7WxmN9O2xsSqaoNAMQ0v9HkOrFddPlDUW/MEwz0O3wWk1PYfWKy02AO il8EA96oNxry8xlMA9yuBNzayLeF6crA+LYxgZlt0wLrjDfp7zXeo99l3K7vMj6tf6ZN F2/LBQxS0G+sACo5lT2FfEYMdjfFs2XZ+hG2EWnY1gbgVDCbyxfatMMitrQnUlYfEYeN xDmj7iPwwr/HhSLUJu4HYREjF4ZbaZIDHJmJaYR8NsLWaOe4lcUYB7AtT/IoLfB61pq1 YXseQf4ew80iJrJ3ssgFWZ0C+Mj3PFhUTKt5AiKWdhY3p0+p1a4By3SAX2lK53kG/AH0 dEHcQF9KRULB/kgsnzaX/bm3zJqtT4b7g6FERn6JnpOGjJOP1obThcRJ0l81OovNku+C 8WQ1PUsyCbBC4fELRuUXaRsORMUioWhQniKnxKA/EGMWCZ0rP+iNxf2xANCYvgVsm4i1 wt0BnIheU0gpApcHhHgA/n2faOhK2Hsq4JsJGPLVlujk6kni2Br3ZMukGn3ZWH0d5+Uw OI5+wZgWNBFucgD6ReCbOABrAC4Dt/QBaBxBY4uh55tIBlbD0ZtBUF0yRobouSX8bhng eQMIf6qAGsWR8PS0yZG2ZGbCnfJeYyuM2Kq/tCRybYFvf0gAcuMrH5iYSrUa5Me54we8 zkMnCk2M6rn5Ppnu8ceTXs4Du+SXGf7ibO8GnO19GNZHc8GvtenLyf+ovrX9j77HoVeX 2wyMnZuxPQHonVGOHXJ21LcotsDh+iHhmNTPKgbpVz+erUlRYdwOTzjokf/hSyZ9tMIT DHt2HPO7PKGoW3GnOxqA9/b0MQwvBNkYVAQj+BYj+XEU0oN8CGazxPbpcbYXowBvLY0C g2DjGMwkuJegZOwKa3d4QwEv1fqTSb981ANH+w6conN74P08fok7GvK4feCAN538UrpJ 3Af7v47cUJh+tWK9AqcErXerfqnYpsI5j/gu6/6yZ30HjRWVHmddRU5DtElnQvz0Uxu1 9WuOG/zHPJ9Gvze8k/whlzI2mw6axFyqui4Peq/2OUksMUUZD5nrmTJ1FDY+02+5LzjT 29Nf8gUzP8eAHgU/GttEKm291tmLKgL3gdiHnoMrHaLkHFFsbzi/ZsueS6at/lB91kuL 7n76Hx81XzH84uWTf+3zRD9+fPe+3Fgc7LrfHVbSgybj4hntM9aOe2vC5O1rH3hCb1At u3hqJtJy1t4n5RYvvCNBP+DSfrJPugGnKcuxw/Zh20+go1bgjmQFbgPYcIe2AvdybLjf y+7OZbHrFAH89EizG3pu4NinuMcQoQQ1SqT1uFNuxV3pNO6oh3AP3Y27BuymHMUtTgUC JY+Cfz2Kc7n78dyPpxo3HBJo68E7Igx6N+44hCFRWP/sfmgctyWwErgFYSI/Qcuz0eYs tDiT5OBX7sFJAKgVJagynOG7l309MnYwBioY7nRGBja0oIWKzPAiVgss6miMG54lTBpQ QCjIV7hvw+69t6x/6qlfNe648A2qlf/+6gX35c22p2PR6naruR27B5u9rvV7blu/b++t t+4T1oyZIP/P64fkvgkdU1wO5iCRiB8HWC1WzHoOcK8KuJcmqwrnrHXfrr839KB+q+5e 07b0s/qDoX3pMnU5jmCIRumM8vPKLylf4F7uXl3+YPmT5dvcu71lXvvxcLnxUyn5ffid qnZTu22qaaptZ3Rn/GD0YFyts5BcQDXVEo9NY/t6zAQtbUJ0Y3cXx+a4jso8t6dtV/FN zBL+sQMTnMpxpA7HWfkW5l1RuJejUVfMnV03875Xnr1r1Mp6s78t4ovJ7+74UP6E+j+Y eK84Rwr4sh0HIxFf7syzn/n53c9HIlpnXcx3xqPU9vvfUzu7eAFfA+a/BTgWBg693zYN OKbHSuqBYwrcV1YDz/TAMwVu76mBa3rEbqy/ESy3GpjH7tMwzepT3PwwAtccKP0U5d8j /w5yJ4E9P6AFsxXbgSlT8ZyK5y7g9C5gz0E8D3Ithe0opzAKL9y27BdM6Jn1bkW7FH4t hvLpqPkJ8DyOezvTGJb14rBeN06wA49O0TSImln3JdTjGAYxOIw75nAhggHQPhibSiQc Gny8T7zLamzdd8HzJ6nht+dva6mbXpOIHfa6qnLpqL9/9551t+x5av2GJ6zeszrOphWv v0XN48fS1TiqCZT64d5AGA7el27Z/fSG9fsOcBgvAoxn4WahG9T0fNtksgjwvAJhOw82 shPz24m1OIA8u+fLqDWA2ArodZHrQL8U4Xb09SnvD+IDdd+j1TuAWDvenIqwHbJkJ+h2 J1ZnJ97Yj/xB5A8ifxD5Mn6PCd8+Qa8mjEUDWMcRO+Bv8nBqnkbCA1gKuOE/vmHW289O fjKQAk/ZxkG4KHWKu+ocoqBYuMMjAc43qUW9d+sKnP72QmVY8O4FoHga/Podasss1p9Y KKzX71y19gB9+I77r426PVl7rpaqPvyYmk6SA43RG66881YMEKN9DjpDi8IHm/D2thqs PrvZ7AK/CyD1KVLsZkMXRq1HGSU2KqDsJDCPAN+UKDMgjasOgEEZ8gT8KYMcO1NiR28x PL2g+RhKYoBRGU6g4ChTN87KQ+cD8pRsR24zYrMQLhCQKyDCnEVDNIii/ttSImFAAgUQ H54fr5WIWxKpROzE5SzetS1RlYw/8LsvLl1SHTaty102j85LpNJRefvtYWwUhREJ83E0 K9y+/5F8nS/uOO/iJoiD2In7GVwEsla+TForPgC6aSB/b5sLek1Cv/KDZpPYf/bjywB+ 3H5MkmvwfBzhEaSfw/MgcG8v0ux8QgobJhk41/m3WKBvKrE3TVDCIPwpcIPhGbtr/inq TJRx+u+xxy9hX7sdsG4Hlk7FcyqetwBzdkFO7MKqHMTzIJ4a9J6FIpbBb2nwW15AuAa/ djvyTyIICFMB/xhwOEIaoWT3Hu1kLkocSC3u0fb29rATZYD4wErAlOukp0RybZTddhok l+GpKxI4t9RA4GCnA9oxFSbcsH37Ddc/9hjNuoONv1l3+QU1Idelno3XDNs459l/9h+c dFeHy3NPPJ4fbRLVD69Z/cgjq1dvO1F164r0hEnprC+jv/nRlWNH/uvFX59oah5ntYRC cT9mv4DptOCbTeSNtnHAtRgwTgvuyGyrMDCKzY/pWARlMdx0NwCGamBoCjBlN9MZnuYB bzfyIbbRgbQD76VRyiDXBJixu/P1gCGDGbu16IN8DWGVHeCEZrSaztczhrqzkZ+Ntmeh 1UzSDPkLNgh3XvHoBND2Ry8RkBjaGzdl+pgsLvn5UJxtOI0vch8oO9A++AwBNRYPh55e XNNnbgeL3Ozyjr990j2/yuTT8bj8XSaQaApduPD8raHWZCAjfxeLZdo3FEWvzSy3tLc9 t11uwQGLMFeYH1qx6pZF8hx2EoOJaIbr2wHjKYo5wPUYubotiTgEeLHv82iogrgB2xCw shLw+QHztyDlB3WHAUncksOaGIDDTH/xAyrnIl1ACeXrFEM7P9rFQfPYTe3k9yIYZBBK AGIbwUdxx2Rg/6tI2OaiQ7zkEcIVsSL1c3eBUBYrDI9H2gqxLphGkVCm/1g8nkzS3CuJ FE70R1w+6bmLGjMzpiWi/RUB7AmD2IPCGjjLQzYzm+/X8gpxC59vklzRxm6WRjmN+rDi fNanKNSHuTMYRDF/RqEpUKIbc4th5krMLAp8Ks5Zi1QIpTH0hEP8OEtlOFKSjaXjEDhZ xOmM6cCnnb79dyL78WocU8PWx9uGxcKFtjjVe4NNv7n5sgtBWJd7fn6NvHJuLh4XYmzC S5qqZ86IxX44uPpG0FM1o6ebtgtv4UAZmzTFrW4ibQYdtZLv2sYAk9O4D5vGKYcqnDxK gU+kgdMpfPelFaEFFBHHKscxQ/bliQqUpqGPpjBXBUopMEUiFYCNhcQR+wEdC2iuBb2V A0dqUcveqMQbVSjFITO8yXSfRqTUoB+mhcQgL7VkGDMX8j1HIA8YhYBgcCyLHQ0GwbAj nUVEYT4AG0lTNmb0iWcL/lpJipUgtPIaXPHGk3tgmCGKk4zMKoWzJQtbnm2r/ttBLqbm GiPFI+gc43C5QEf19PRtxQZKdwcqu2LxzKRsYlo+EXvR5aU48JtOUn00PtdcnpiXv5Ou mpaK4GDO/6TjsZj8Pl0tfxjPFpVgprHYzCdqvtUF7V5vMNhaJgiKuvRqeQHbgPYGXDEt jGkKrk4kdovfRWa2+QBJFEG2njxFeUVaU6NGhSpGhxL+CCiNUe4U0BpFYCU4w9zd3Vm8 oQYwck7ECG2ICTmEyITQrrm5RIxOwPSaIVszJ8AlQFhWaUNxCkzpKpITfoPyM6xfQt86 g1a2XYgvAjWSuzGmu/g3UQgkpgUzUXJcOwPSTodRD4M0reE0w77achzeuDTmWAP8KSD9 PWReknEetPwBNlMI74wGfmJ9oY+ORGglCxFWIChxtzuG+Y5Gu3H4rSrIwlrghgdvMY4z DBoL+yqKDrBRMs8IWs1HfA7a+vGtHRfKmVQ/D7UNyJ2D96ejR0YFrIxZW1PYIZAe7Fcb 2Da1oa+nyLSK7AtCtHhGju0UZFqZt4odD2PHxhjAGXcDPkOcnsbIGQYOo8bS0ezTufuP B32AlsX9g2I8IBw4+oof1gyfMN00LBEMrU752luqOlyR1mQwC74fybRbTGNq4vF7A1Yh cW7LmNm25MVj11xpGJ4Mh1bGo0LVhvnXXSrPYbcK4yM9dPvkjul1tSc+ZLIALlOPsMYf D4XskXRy2PARrTueK5rIWezgFPnHathvLeSttgngCDrwATVWOAXdgn35hVknx0HRXBJj PY1YzTTWgn0VjcngGqwrkxFhQN8NvdGJd2v4qlWgH/YVtxZ4JdgX3BqhJVaUJHHR0j0H raejPVuhFOqKktgCSdyI9WIbTDMJ2zv/j8KYLcRA+A/yeJA0hmvKUzrnWlqYH/nF6YtY vMhT8y2kcTKTmfOjOM60flwIJ5shjRfdB2kcHnOgPpGANGaQjQRs5vYBYRwLeJNw4Z0S xkkvWwDMehZsmGXiHmCnnYwu1JJP9cpPrd/r33G0q9rLOxQddKpqavlsxWy6y7jL/Kj9 0YqDxoPm/fb9FQYxrl2giZumObjfqih0wEahR5cOssLup8ziL5q3RFi05dCr9957qFt4 TP7o66/kj2j4q69oZNkr99xz6NA9m1+ms96Tv6GG996jevkbwFggI6ET3wCdOA6Y/6lt OvTeMEIMuq8Hum8YIQbd1wPqYd9riICq3JiFAbjCMECFsk9RmgGe+OC9xZcfgCcqKsJ7 okLJ91j/Dti1HeABs/GcjeejsEO2A2/243kATzXkUR59GtGnGpxODzgxXsh4Xhq/GkSK aXtMugTBLyyoZ1b2maSOncFj2u+ADGaqWnGbGi4UbnYVT3wyZAHVDlXHBqyPARyBKQZP QTR2GnQXfBONRjLy2HiiZrTZPLomEYeDpP3R896gupPktQv3tNL69Xv23nLL7idPEhyo 84eh40o6RnQW69wxY+RvDh+SO8YIT66/+and627ZzWA+GTC/ndshteQj+KZ2Ye6/xOwf ASSYxfks0nuRVoLzOrEGuBMMiIvQTJi2xr4o9inyYUDbA+r6FJT3PeSnCPiriAfwrwPP LUNgtm0ZgoBfMKFnE+eBSWgzzBuFNcIK1GJVcujXgxyT6cwHxjQe5jFIAs4RQJzxATO8 BoA3450M4ABokQD/F4izSmyKDboURo3M6AiXvAiDjYzTOWZN/+718E+tv/VJYdnwPUsO ySep/jfnbhvj8t4Tj+ZGmZmPKi6PyUTiUfrazU88te7mp/b0P0FvH9MhH/od1Y8ZM9dq wa63/4dvsQZhP/yBGD/ODkIOXwJelyI3tGWATXFgnJtzOshahreYKfPFMJxlODyA3xsB iW0I+xDYF7cYnjIstWB99CU8LeKmBdhZjrI004u7ASS+V1i8edAL9Yf79IqMKxs5TUqf JiQG2NWALawSJDqRacQnLo/FE6kn2udmY/Eel/u831058+KGgH1pavKvLsBZ4gGVmGmH VsuuK5ePa4o0DbvkKsx9z8mvJTvmXqCz2+7GUb88dEQj1jePNTXi+z4t5Hpg2vWAyvWA yXqs9Trgyo3g5T9Dm/tRfxfXAVx4uslW1N+L+o2o34T6TcDOe4Erv0K7R9DuEfTzCNrt 5LReAehlgX/VwOoWYHUlggvBDXxMwgtRBcjmAPsgQgA1aWAnzm1ACpSjbxPGx6SHg/OD cqxPI75JFMGXjeLA6ggtoP2neMOBVRuOunfIpVgb8A7UtEEnrcUvVIDLMN9FOfpVo098 W4X3a8VqLsT3EgOwrAMER7DQJgDayaCUQMa1MS0WByjZpV0orYz5sp2E/u7e3k5ossD/ QYYhkL2B+yEHHRwoSRpwneJpmNOOPzMX5Y+fG+H2+J5AJOEwVCS3zb/wuvOvbXjzvbef n/SQVD7cGwz4Q960z1J31ZnnLrvild//+si+plsvDOWNOI+xJx1tDBrr26aNGdt62003 /jwVy+dX1GVqQqZc6uzCiHpJcdOGmx62Ou12pq9T+Cz7pHnSQUDkobZmWOIVZDnCjQgb EbYhKMAL7ICUF0EHfpABj0/jXaZ1HUeND2VdKIlyrxpIh+JLIYB8DiV+8HMmK5iOKyJt xNs4qY8/PcopAu44dcIcYNdqizKc7zp3tsJgKHqJBgQ7+HXJejZyLjLIccZuqkDhGmDf pfO5+FzNlbmqZFJe8pPzZ8tedyzXMu/+0SsejFmMu5LR2p9cFomlg+KCIGxGec+2xRfG PYGcPRbumBCas8BHJwP43sN1qUR+5m8ZnMbhS0nL8K2tHNnRxvCRcUcRmJ8D7jCtl33R qBIlzM8ThcQjwGQd+EYQkDCDS1dizlXA8AhSFsBHD9z+UXetRjkBPJkfiemldlCjCb5N xnGZnItAuuXBbXFYBSpQidky3jEAM7b/AjAyPOQAY2ppyQt7Ci7MDipCraihFp0+g6vp 0guXLd26LhaKJt+N+qpz8LHBDzFn3cRHH7W252OJe0IuetlPl9+ymN4fCEXDgcKJs/wR Zve0T2h48in6MpNybrb3Skni5MfSQ4BXlPyiLQaeoIfNGQGNMi+jsoQZXq43QHfk/FYJ aIUArRjejwISfsCVbUeqACkRMGM8mn1BMga7B/9xS7J05gKThkBnBqQJG8Cj8WoUnRiQ Yt34eFkUyzEapeh86D4mvtnCaLXIg1P0Px1TYGrAfSNhiVNHUzQ/KkIlGmidVB9tonXx eG6kST7gzGVSGafIJb0PW7YnVgo34Zqbj/m4TsQaAv5G/DQ92Qu4vA24NJMjbSMgqVVY Y6bbEnxrFCIJcwwBZ9yYLbPDW8CxKNoy76sPoQZy2gkYqAGxNKYlwa6RALMWtGCnE1xo zfarmvFe8dtaNaBgLfIXgGrPB5VTpMxIaQk774ADD2wPD2dXcHOIHV55FTystB9vgkdo NB9NGM8a/NUSF1JM46vEU81+k+2tq3uLMdtN55+IAqxOP8kAezuFr/JxLxiOQQwwwiLA VeyrUnhFmLOmLB4Pxw1/0SQjsSgtr4/ajMYqf/Pja8rjsXDCcO2jjtTobLiWan2+cP6z ilgsnNTRfjmCkwx54cMADoL7Yo6QpJBO7KD7cO4hJ88RZsAh5sUugl84YWZFDNng2ZPw fUIyil4Bm7Ye8KoHmqzA80rIg5sQ1sESvQnYdyPK2BnXuzH7nSjbh6cWkA1AUyBoFwBk R0FqBnCnJIAv640CzQbxBb5R6GEUpOAo0HQcMWtpwErhVALqfVhBtsOTIA6sYBv61KGE 6c9spfXgkjmU+dFyJErVWONyIPRS8I8lkGpLkXcjtiIn4VlAfgrCHAQRoZy0gzw6cf7a 8AXb7S+e9S/dPBlY3GpMfjQOU4zGjxSPT4zm9DISPx5EaQ5/+IdU8XgFoyX2xkgENjR2 EGM0zgeA1hCMGChCqa6G0RfwonjGYuiJC3aoccj1gFMUd8rPbG8oMvNBNPkj5+K6Yoyu 9+Qbc3Vyrzde32Kh7fLLuuaqmnGH63MNter3D1sb67P1VPLF8g1u+TN6blk0me14sy6f TTb2b4gEw8G4NxLEdd06HzeMg+F33gmEYqGYD3f23pV3RVAfDAei3zF8aYJ+vgH4kiEv tOUBMD90aT9ZiLCIryrzoWUBAKYjdmEFM1htb2mNoVdijZkFlAUo2XfxMmhV/PqdGjRs AVc8H08J6+biKdjAWD94ywzFxTt1rozdISidR2LLwQDP+mMMjy0E23UgvNSHHO57FQ9s 8JWAn4wfJy0CceAMHi5J/WfOV1oHleBKja+Fv6smE4nFPnxYvpNzQHsj54B6aomNro02 fZ+IpRtPEuiZXLumI4S3mBzgPPBDgR1jAQ8E/WFwgOVroD0tYBmjQtt8eHYIdM8YpF0M 1GMhC5FfiedK8KiVkIDrkF6HNNM/70X6XqSZrrkT6eL+nAkQtyCYEUxI4bIGbKAYOKsZ nDIGujGDzmKArBkrw+yWGFoxr2YXoKfASjixegrAzok1QBqrxVZRATqvQGsL1pJJJCUJ o70WOQrSCIMqrXgaQIlxrFYv++wC1wBxmB/fT4KSCOkMgfQipyF0gyVhag9hrJKdnsly Ohh8tRI7q8DsBhooese5FlPikHQD/RbwDdaOPPFIY7OzWmiVcQowHB41TrCPGVtVtaF2 GjxC26ti1WlXtlpoqZkOm2hXIobb+eMZo4LHxiWvF/coDMDC69qqwEl80MD9mHESWGfC TNhepgtzkpBmOrYVOMt28lyIrbQcwlNLkkiH8FV6xhrwLTa0ugT9GMnFgHI5NG0H0+Zw 3Raw4B8wgL6C46NcJSkqJRxC7ANJ/OIUu6zMrRpMlalwbPb4K6lv+FYR89MyJVlwLZiS bq5wzKhO7rxl5JoYzmnq3dtv3ZmommEsG5GbQg/7NmzfuHiMThS1Y4LRHV8tXzHXpozA 9laLqtDLV365KxYcXS5SbcdFdz1W3BM9BY8cubEtA1ikAA22W8Q4O/NcuwEV5uFi++ZM Sqcw9zD2RsuwV1IOW1tbgk8P3goDKhTvONEPgwluOQImTkAkBrjgGG3r0RJMYDMMAIVZ C3ynnfkYs5RfKyt9JoodUsC8uekACLGP4RRtBSAIIDSc30AT9iw8M91YUTktmdx568M+ g9/j85dbdt+yM5WaZlK3Zc+khz0btt914XgGlUI0tuvLK18JKiVNyB+MKwUp+Oryr3bE YgWtIJSPWbpx2+3Qzfg/+S7sp/+nf2eikH0Zuvidz3//yqcd6z/4C59Mfv2/vu7JdIqh 3/QcDonWDs7wn77kOQV68FnQiafCCzENXGMGNKdZ8CKdg6+onwsJyDiMia8Fo1jw4zOm TJo6si016pIVl1+w8PJSDWsGbzH7f41Q7JnQqxBuRtiMsAPhGYTXET5A+ArhGJw0agQH QhyhEWEcwgyExQhXIdyMsBlhB8IzCK8jfIDwFcIxAE6N4ECIIzQijEOYgbAY4SqEmxE2 I+xAeAbhdYQPEL5COAaeqUZwIMQRGhHGIcxAWIxwFcLNCJsRdiA8g/A6wgcIXyEcA9tR IzgQ4giNCOMQZiAsRrgK4WaEzQg7EJ5BeB3hA4SvEI4BmGoEB0IcoRFh3MnSPwCTnEpT 4P7p+eCQPOOlg9ujv9Py7CTN4HrOvgb1zyzPwfXYDzotXz0kz2Ti4PbMOhmc52rOoP7z Q+rZ12cHt+dXHQa1rxtSz7TJwe0bhuQBu9Pqm4bkm4fkma05uL9hQ/IjhuQLQ/JtQ/Ij h+RHDcm3D8lzk2nQfMcMqR87JD9uSH78kPyEIfmOIXnQ5WnznTQkP3lI/owh+SlD8oxr DYYf29UfnGf29eD81CF55u0cXD9tSH76kPyMIXlm2Q1+f/aQfOeQ/Nwh+XlD8vOH5BcM yTMNavDvLRqSP39IfvGQPLNCB79/4ZD8kiH5i4bk4Vc97f2Lh+QvGZK/dEj+siH5y4fk lw3JLx+SZ1bc4PFzWTYIf68cUn/VkPzKIfmrh+RXDclfy/L/B56FnYMKZW5kc3RyZWFt CmVuZG9iago2MiAwIG9iagoxODQzOQplbmRvYmoKNjMgMCBvYmoKPDwgL1R5cGUgL0Zv bnREZXNjcmlwdG9yIC9Bc2NlbnQgNzU0IC9DYXBIZWlnaHQgNTk1IC9EZXNjZW50IC0y NDYgL0ZsYWdzIDMyCi9Gb250QkJveCBbLTY1NSAtNDA5IDc2NCAxMDg5XSAvRm9udE5h bWUgL09QTVRCQStDb3VyaWVyIC9JdGFsaWNBbmdsZSAwIC9TdGVtVgowIC9NYXhXaWR0 aCA4MjMgL1hIZWlnaHQgNDYyIC9Gb250RmlsZTIgNjEgMCBSID4+CmVuZG9iago2NCAw IG9iagpbIDYwMCAwIDYwMCAwIDAgMCAwIDYwMCA2MDAgNjAwIDAgNjAwIDYwMCA2MDAg NjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwCjYwMCA2MDAgNjAwIDYwMCA2MDAgNjAw IDYwMCAwIDYwMCAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYw MAo2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2 MDAgNjAwIDYwMCA2MDAgNjAwIDAgNjAwCjAgNjAwIDAgMCAwIDYwMCA2MDAgNjAwIDYw MCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMAo2 MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDAgNjAwIF0K ZW5kb2JqCjggMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9C YXNlRm9udCAvT1BNVEJBK0NvdXJpZXIgL0ZvbnREZXNjcmlwdG9yCjYzIDAgUiAvV2lk dGhzIDY0IDAgUiAvRmlyc3RDaGFyIDMyIC9MYXN0Q2hhciAxMjUgL0VuY29kaW5nIC9N YWNSb21hbkVuY29kaW5nCj4+CmVuZG9iago2NSAwIG9iago8PCAvTGVuZ3RoIDY2IDAg UiAvTGVuZ3RoMSA4ODY4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ab1a DXRU1bXe5947wyQzk7kzySSTTELuZAhEbjAhAUlglCHJIBh/wo86I0UmkGASIOFPRdEy gnmwBrRQCLq6upbW1tf32rq4mVSd4A8pq1Lb6itaUd/T+ij6tG9plviDaIXM+86dmxBS 5PFW7buZffY5Z+99zv475557bzauv72V7BQjkZpuaV67kvSrhJc/WbGmeW26Xfgs8OEV d2xU0u3MSiJTzcq1t61Jtx1tRPbq21bfZcgX7SOSbG2tzS1pOp0BvqINHek2mwY8oW3N xk3pduEPgZXVXSsMelEMbdea5k3G/PQ2p3c2r2kFxuV7DUX52q4NG/Um+R4FnrZ2favB z8JEljeJoddCa8hBN9A4tGSqpM3QLG6vhr1MpzPaNtB58KNljsAp5rXow/1y52GuLw2Y nnv/dNOZzfbjGbeAN0Pn5wSMO+7ZoSaiLDrddHqW/fgIhVP5ZUnSOjVJtwGWAhapc0ro BiEbfMtQdgG2AL4HeARgIhJcJAMUQCVAA5gEF2i55NVxfmqAvR28PcNa+5/Hc/MKXzuG YvM9ud7N9+S/8irqd9yJYs1aFKu7UKzqzPUu6+zq3NIp0iq2qnPL+oKNt+e4C2/rQLGy HUVrW463q21L2/faRGqVW5VWrfV4q2mglbW2da8ryN+Qe3d9vu8ugCD0C/uFnidnFQ+l BDXJhD6gYJLRU5mZtSd7xqlzsoRZwkyaRcWCIhSTmVRhIjsLD6upAaEo4XTWPicUCYVG R2GiorK2H5TCRH6BUXHIYCkckSlIZGfrlIKEPQuUfFD4qLnsbMKsZs6pZK8TY8fYqySQ yl4z8B8N/IqBjxr4ZfYbne8lA//ewL8Dho7stwZ+0cBH2G8Skmqdk8FeQLys6PUChNRR 9uvEFbXQ63VUin1GJScvXenLyKp1PMvuo2KAwNTEfhG+uiyxh6NJfXss3GWlfRmZtcD+ PqtNxwm0k8yb6PEVJ5kvsacYyJNG0lNw7Td4PJkaCM5635Vdu3WvRd3RI6l79jKVHmQP 9mSqe3pEdW+PoD7cU1X8yEPs6P7j+0/uF/f3MDXYk++tDfbA2UmhM3GfSU0KqxOHTCoP xvI+BDP2jDCPGFrevomToB9wbq6OEza7HhB3QikxKnme2n7BK7gTIiwT8hK5aEM0J5Fh AyGHnUnoWXKmD2rC5DMJpG4/e4c9lBjvQ/udRE5+7ZxMdpgd0qPzKwMPsEMQpDmT2Z9I BgikoKzUazH2POL+DEvqEgcN3G/gpw38lIGfNHAijVPHWTJhy4IOfawXU1ifYb0w9ijT hqOqDUdVSxhR1RKI6nNsG9tKTirGCtzKR3iWtbF2qkKk8xJbzAjv5EQ3R2WJHRLQxMT9 HE3ouw92HGQlULmkDwwwOj+RP557CRWP7i5UspzIgOKgvM1XfPYMfPk1HPt1DFmTGuj7 0u2u1bHTxXHQ9qXdXvvFKVE9FbPoDJ9VVesMn02YoDNYP8stqK3sDfY29Yq6QK/TUxt8 b0pFrfwe4yMlCsbrjFckZGetdsCkHug2qfK7Te/uflfc1Y0kPZGfX6ucmH3ikRMHThw6 cfyE+d4t6P2uw1H7XWPO2MxZ+pwxY+7Y5PJ026sP3Rfzp3XJieV4amPdgrq7W1Lvwyhb MD5Xyru9rql2e3emuo1P2F1aWhvsLi5GgcUw5y5BFCTBRDZ2mn3JvgL+nJ1iX5ANuwvf s4vZaZoNaAKIgoOdEpxkFzIgYwU2sy8FC7CDAkIGwAwQKQDeAPsc8Ah7lP0IY+5l+1gP 8G62h30f+OfAT5CdPQ76T4EfA/0nwD+HzOOAx7gsYC9gN6CGzcLmX8xmsQC7EvIVrJJN BS5nU9jlwFcDz4f8HNDrga8CPQh8NWTnAK4CzAJUAMqDewPeGW7PFW73dLdrmttR7bZV uTOmus2VbrHCTZe7J07KKpvkmKxmlauOEn/WBL9jfHGWUuxwyE5bRqbVZh5nsYmSyUZM sJHoKi4WbxAPiSlRKnbMdjQ5RC8rsnvGFdjdcp7dJeXYywOTA2WBiYEJgZKAEhgf8AY8 AXfAFXAEMgLmgBigQFM101yN1Li4TstmwIvqtGq1MSkqC7UqtVHLaFoS7mXswQh6NWEH 7gWLNWlHUgBy1d+yJIxM5+Rubz+Sn7TGaPcDkV6B6jS2Q/MvCnMUXBDWlB1JmRaHewVW F4lEtBmNTahTXUQt0loawRYrimhVvLK7KEKN2swFmtdfp17o2rBhdG9v2cSQNjnUrJWH og2jCf97XR+IXYAPE+hzoNg4lnze5OcaGzZckJMgntb3b8jDc5wbg/OOnU5VWX3YG+Gg qppHCyI80MrwwShXJNkbSqijIcneTKN/T6P/SKO30uhtjnSVNvZm8OBetbCuUbMsBDQt 0Qr8aLyIxhVo2Px1ZpXycfZ7kfzpg875pXQNpxKl/qSXH+jlW0RDt6f+QmSegdpLvO/v ufgZjYP09wzCZX9JN0HTa1M/Q72flqJ+derH3zwo1u6nbBqzsen0KtbuKVaGg+BEehHH SG7zWcCz6LHS740x+um/6af04jePyCnsn0fTsV+UQZcj1EWnR/fr9SdQcjh33XeuepHa ozR8iv5RmkucIrjEOB2iPuqhd8ZI9mPmfbQHN64M+oSV4ha2kz3Lsuk9egVn553C0+I/ 0b9Cpn+MHG++g78dkB652GV0msVoDr2BE/hU6mNe1kovMRyb6UNY+jZ9SFvpECsc8Zkh yePLL4mkJ9IZlW7/A8rN8PULtOLSR2ZlTGSeb+LHyijF+hDT9HN2pNuS4e0U1gTyTV8f em1Wmo586EQOzMAchSwXuWZhIn1JH8H7byAr+mk33U+beDx1vsvBp8CnMpOYQF/Bqyfp efrBMBfuNESqnuXHUj9jpTQJ7ReGZ7o4Nq3kfh9ezxaCHq+cW3OmY8Y6T6/wz4fHGvpE rz1FT9Ff6Th9TP/GZHqK7YJmL9Bh5NsuRH0XNNxMy+kzxoZIPAy7mvB3kctUaOKWnH9t pn2wnq+WLujyDnsZM13o2od8HJPj5iZ2bMxKIvoV1vGjGG/09YvRDaO+T9xEn9M151He gz2vCE/TTqybrdSp07qkR6V+zDI5/RcMLpw/LzBrZm3NjCumT6uumlpZcfmUcnXyZWWT JpZO8Jf4lOLxRYXegnxPXq47J9vllB1Zdps1M8MyzmySRIFROfNonvpwqEPLr49iK27w y4pmu/7kdRUaubw+v1OprohMMbg0k6pRdqOWgzsqBWsimlkdy3K9JpbKn/ogfJ1XCWlS KX7+a5pbtLKFYZ9fft07Qo9gWK2gPuzzeTWhFL/5IOF3TbPSoslN6AdB75mvUVOYQzJ1 ogadVOOLoFwY1sYPN3Gjv4CS2E1SA2PUvJ7F5V5bfn2DRjm9ZDuhkZuznawhjQJaGQ4e pTJq+mhUobGcTzWWrTH3dTDp/Cm42PGaC/gg1NLhD7W0w6Mt0XM+PZn2qE+JK/GFYWe1 1+fTlcaNcEG415pZ769vzYQVOJKgg3ozreix8g6EZW0vs13F9IpgC83EecZih/tcXN0Q hw4tuDOKir8BfgMl+xwFh+Ndo0kEsTQTgU2vMX1OzVyvjUsrobRrwWaNdiq95QPxXThP LY+qthZ/S/N3wprYDKV6SSwNtS3WChubbkEXlABE2xQe7ga94MFTQm1KHG3OG0Xpb4Do +f0tba1RniYs6m8ALaM+vN034MWBL7w9pDlVzQ5x+93vecV4yNOu8GY8vl3RHsVBbxTV x3mQBJ4p5Uo85MdsGCzUUccjVjESNj0b57fowQnubFa02PIO+Ay/5l3D+e+Ly5rtCx+i g/hAkq8O7mAOLdEObkoHJCUgJb6zVTd1l24a8pUfejhwQWQ/3QjpW8KhNn8I/jQmhEMg L5aOlfX5tHyVC8bjIa5icwu0557BLx8HMqiRbmBNeFUGfeq14GId0WI9Bpgx2NwQMboM BlAkxEELRhsiEW5UOgDauNLtpsv9SpwPOq5Uy1Fl369BG5hS3rgwHGrg2QlOoT585aDH O4g6jtHD3cwDnnjFIHcSpyzyNy5IZ0Eb9w8voovTCxheMyIPVoNfH/Vlj/dlyM71z43G 43P9ytx4NN6cTMWW+xXZH++12eJrQ1FFX/kM/Qd3erW5uyKaHG1jMxFknm9zcYDMXrCE h2eu0taMHvxm+301Xp8TQ6d5sHNcmGysM2Q88p6vs7j8ESy2YUfyKnP59pLEruDV5Bq+ TKHJjWGsgxWYItSiF1gfeIgQvHyliJHSUPsiw0FeH6bUE4bvewuMXgzi8/E1tDMZpOVo aLEF4XRboeXeBAUrVMQuyikDwxT3jZwSG6aMiEf9iJWHP8ToOfFNOY39fCSf406/S6nl mzm0w29+izawGDZ+WaNZ4DE93Nn1YdErcBbUBK/Ia5kqbgkBLU/VBblPsEvGZb9y1K/J qmaqDw94AxFFdmKDZCPJYIzI01Q+6v8t45so5cgaC2gsly8rwqYKN2LTz6sBcURQCcWj RvaNtg+snLulbWQdpa3AwuVGwg2yH+vWm/aH0+Xnpr7Esz19g9NMpXP5okJsdI9dE9Gy +M1Oy/pIL2Cctz6sYBvCsl2gV5SQ0sajrinRBn0/iHg5fbg7mToebeD7XxiJBhavkd/I crjNWBOGGxoXh4drC8P3eu+OTMHb2/LGJGXgTsqfeJMs1Z2khqJ+vA8Wl90K8uJyRQm1 N2BCNG4sR8dkH2o3lSM3eeqH/RF+J5nfEld48rfALB2D0BqPVCBfF4WxX+JB2KcFI96R amskMhPj3MzHgQjY4xGM0GGMAKx3VZwFU7i8ETvVxKYwNttYAxK9gS9hmDuAVTXALeaG REY0hcb3tnsMnW+BzpHJoC9Jj4JcjWGISDzOx1wU9iPN43FvHHYYbTzwj+0IGh1J4iIw PJRksSbIAvn180HI7/Nzz0caMNV34PfhXQrvyC/u4VtH9IbkMmh7q+7h6Lfk4eZL8fDy S/LwihFNz/NwC3RewT3cemEPa8LEi/h4tEuDaZcGL+DSlee59LaLu7RtRFFo1Q712nSX dnxLLl11KS5dfUkuXTOi6Xku7YTOa7hLuy7s0n9E0q49z8PrLu7h9SN6Q8kN0Ha97uGN 35KHb78UD99xSR6+c0TT8zy8CTrfyT181/+fh+8e5WF88mEk4I0M+yu1m8PUb7qOlkoa 3ST8gPrFq+haPGelv+ER3g6b8T6HSKEb0fd/v4QLiBjP8BegXFqXxL/rjbrMo+q8Os5o z6SZtJIO493xY+x5vLHGx0BugomLi+DCzWcRviFaKnATAljkJNFRAG+jLr6NOrAELAKb 3qaD+suxmyAkyQfxrcRMvC7IlVN9Tp+zFAUDx5mgGDsTM9HXFJRi4GqHO/fgiZ/POSXo kQ6YHOwAucwHTGbBJBxgQUsGO1BVqbICj3zd4IA8IA/S7MHZg1MrqzEqA7SzsqE3+VP5 0JtiCS+5LfxNkekM3otYKJs6gvOWW1mXzJqktVJM2i1JS8axxSJbYmZ4d+8yJ8yHzeIa B7Nbi6yCXS6ShQwpYw9lZ+9hon2bKWMLBd2mLiGHVgl4C6orMqIFW3br0qVLaek6lLig lEJOmXyl1VUu57RJlzOV9Qv3sjDrHLpn6MdDr77/2cfRuoOJg6YXh/YO/cvQ94dWvcrs zPXaA8386V6gpakPpB6878wiD90bXHCTzLod7MFsFnGz7W4WlpgVn79UoVGQMvPKMu3z JGuOdYJVFMkluwS7idwelrtfzHVYnT0Zso2sHurOytlmDhZktQn55pXnDDh7dIBmzx6s qtJhaiU3hJYtVbk5uNhS33Szv0SYLruqq/K4qyf6S8xuubpqhrh6/akjJ1Jv/OIBdtnQ G6vuXrP1zfs3/eEvrGSI5bB5O4Smr46J6qZXe4cO8Fd2sOkm2DRDWoEv4W56KDjBiS8U 9gX2V+x/tn9iN3VLrEd6XBIKzMzsceXOu1q6WRLwGelksMCVN+8akd2dyWwPOZzskPMP TsHpzMqhh2X+QUdxZM+Tsx4WcnN6LLLscLEM0bXNanNuMwWtebkmmMo88pEC+bqzL8iD MA7mDs4++7o6iM9aFUvXIYPY0nUqvpSvQ/DWlZr9CNw04mHzuXxVM5hP9pdIM/743NDg 0GHm//iTd87ePJ7N6nnm7CIWfzJZehU+x2Sl2Iyho0NPDx0JsR/yF7KM5x37M+InUmEw i9yMxG5kuom6R3IYXk8nbz8rM6tfHeM+YnRt6gPhY1MpsvWGYFWmhXqynT1CbpbJauqx OOwOs2R1WKRsR3dUGpAErDBJQS7vxuseTTouWSQYdPYIFseAfEQ+AkNRg62D8stTK7ll +cw/vXp6qbva7XfmIITCxx1XDm3ZvJmVffjh4xOnm4tZm1DX31/yVv/Z//pdFo+ZfqVq aPh/KdIdw6UFFZGK8G7vapqHt6w36wRGLmMfNCN7qT5y4w1N16vX3r6ivaX56vXNnS2t U+q6VvMRz+2W/N3XNEADYDGAUzcC7gfsSxkX6jRSZ9hvz2/PHNPmY43m52OObreOaa8e 0+bz0/8A3YeH/QplbmRzdHJlYW0KZW5kb2JqCjY2IDAgb2JqCjQ5MTAKZW5kb2JqCjY3 IDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvQXNjZW50IDk2NyAvQ2FwSGVp Z2h0IDcyMyAvRGVzY2VudCAtMjExIC9GbGFncyAzMgovRm9udEJCb3ggWy0xMDg2IC00 NDAgMTczNCAxMTY5XSAvRm9udE5hbWUgL0NZVU9QTitMdWNpZGFHcmFuZGUtQm9sZCAv SXRhbGljQW5nbGUKMCAvU3RlbVYgMTUwIC9BdmdXaWR0aCAtNTIzIC9NYXhXaWR0aCAx NzUwIC9TdGVtSCAxMDAgL1hIZWlnaHQgNTM2IC9Gb250RmlsZTIKNjUgMCBSID4+CmVu ZG9iago2OCAwIG9iagpbIDMzMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDI0NyAwIDAgMCAwIDAgMCAwCjAgMCA3OTMgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCA2NjMKNTg2IDAgMCAwIDAgMCAwIDMyNSAwIDAgMCAwIDAgMCAwIDQwNSBdCmVu ZG9iagoyMiAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jh c2VGb250IC9DWVVPUE4rTHVjaWRhR3JhbmRlLUJvbGQgL0ZvbnREZXNjcmlwdG9yCjY3 IDAgUiAvV2lkdGhzIDY4IDAgUiAvRmlyc3RDaGFyIDMyIC9MYXN0Q2hhciAxMTYgL0Vu Y29kaW5nIC9NYWNSb21hbkVuY29kaW5nCj4+CmVuZG9iago2OSAwIG9iago8PCAvTGVu Z3RoIDcwIDAgUiAvTGVuZ3RoMSAxNTczMiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+Pgpz dHJlYW0KeAGFewlgVNW5/znn3jv7cmcymZkkk5k7mWRYJmwhEAKR3ECCYtghmCgpCYss AQEDKAgSFEEiCtqKYK3iDlZkSAIOAR9RqVaUSovFpS7UUqW+Rqh/SlXIzP937kxY+nx9 c/Od853lnu1bzne+c7P09mWziYU0EYGoMxfWLybazxtD9MbM5UuVZNpSTYiu/62L5yxM pp33EyL9fs6CFbcm0xkvExKqnju7flYyTS4hHjwXGck0LUScO3fh0juTae80xNMWLJqZ Ks9YhXT/hfV3pvonnyKt3Fa/cHay/nVTeHrxosalqbSIeMLi22en6lOMz5S4Nm0jhKKW B0EpmUkkwohM+pGphIhWUwLzZVq5YDn20XUrPphuL/mnIcugNf/MX3r05kj72MNrftzT NUcearAgadTq8wI0qR8eH0dGyuTHPfGB8tDLJbyU/zx7p9jLcgQPOQtIAAQSQNgPMB4w HbAZ8BRAR+ypnEWI1wAOA84BdEQVPC2PDFRjiB7Qotb5Cwq0ZH0yOa1WS7beVJOMx05M xuWjk9WGJqsNKExm9x2RjHvkJ2NnXkETGm81WQs6ytyCmxwHMLIYIWVHiJ1SEiA7hHQS BTABQ9VyVMHZmhsueOqwIBIqMIGSWSSQ6BBoi9VRUGZiCXaWOEmAfcs6kyWss9XmKHiq 7Eb2JdkDOAwQ2Jd4/sz+TNawU1hAGWEp4CnAYcD7gLMAHTuF5ws8n7PPiZ19RvoBSgHT AU8BDgPOAvTsM4Qy+5STQws5Xgpg7FOEMvsTpvUnhHb2CbBP2CeJDnaipai44ICGRPql kEBeCvFkpRCnuyDG/tDyQ69AjP2lVYkEdpT1Zx+QKIChsw/Q+AdEAUwA1AEWA3TATgI7 SZoAWwA7AFGADu+cxDsn8c5RwHuAk6Q/QAVMABjY8RZ0E2Pvt4RHBMrc7HfsbeLBoh5j v9Xi99hbWvwu+40Wv4PYj/Kj7K0Wf4CUmVFO8I6MWEbcD+USe7011xlIlDnYYSxSAGE/ QClgPGA6YDNAxw6znJZZAScaOUiOQioCrIX8TYtfIM8YiDo/oIZHgscUHoSHXgcMwVPK U2GmhrduR5IH4YceAcaD8LpNwHgQXrkWGA/CC5YD40F41nxgPAjfPB0YD8LjpwBDEGNP vprbI1A0voEqZXZ2B1bpDqzSHVilO4jI7uAP+QEKIcB+2dK7N1bscTXSq3egqZ02HaJN k2jTM7RpNm26mzatpU0ltOlntClCm3y0yU+bVNp0kA7BUjRRte2aZLHqpU1HadNu2tRI m8K0KY825dImhRapMRZsGQ3BQlShRa1lXK5YsPW64QV2jDGIFQ2CrYMQ+8MI3wcktJSK SkpOsnKGn8c5rb1Lk+m+QwsWld3A3sSLb4IMb5IvACII9CbY6E008iaasyMsBUwHdADO AhIAHWrnYB6btdCOsB+gFDAdsAZwFqDThnMWQ2FkEUI+xD3awPohLAWM5yn2Jp4cPEEW VLNlnxyRbxA2+6jdT8f7E35WRNxuKDmnw+CIUev+f1m//5eVGMuM7CG2mWSDEFtS8eaW H7IDMbqtJXwwUJZOHyN+EVxHi0mY5iEeQhq19CDiM/D8QuJjv0Zc0OKbitfsLeH8QDu1 8bf2B37wnQ78zRdjQM/4DgY+VGIibQn8ETm/3h/4wLcx8E6/mAE5h8Ixiqhd0aoe8A0J 7D6qVV2LgsdbAnfzaH9gte/6QINPK5idLPhZI1KqPTApfHPgBrRX7psRUBvR5v5Aqe9n gZJkrUH8nf2B/hhCJIn2xmB7+bROQ36twaqiGJ2r5uu36qv14/WD9QX6fH1QH9Bn67P0 LoPTIBtsBovBZDAYdAbRwAzE4IolTqkRvrO4dDKPdGBoSkQNl6FhKFczCAmjBkZuJNE0 oZJVTh5BK6MdM0nlDCV6YXIoRk0Tb45KoRE06qwklVNGRIdEKmP6xKRoUaQyqp9wS/Ve Sh+qQW6U3R+jZEp1jCZ41n1ZUefI6gOEUsd9D2bxuOd9D9bUEK97eam31DncUTyq/CeC Oi2zrjxy5ee9gka8kezo1srJ1dGXsmuiBRxJZNdURn8+WZlWfYB+R89VlB+g/+BRTfUB YTj9rmISzxeGl9fUVMboVK0eUeg/UA8cgwj1DH6i8HpEMfiT9R5P1svD+6iXyyPUMxpJ nlYvz2jU6omU19vbmFtRvjcXAep4FNKo1Wn0KFfXOZqHOnkIUMfdRI5qdY66m3id6HCt GZ8PVfwIUIVmEp9WxUcztSrayPdqVfqlqmy8XGWj1pOQHI1Whwdoxnqqu471FOpctZD/ GZ09IhKhrcNqZk6rmB2qqAtVzAbURR9YPtcbbZqhKHtn1vACJSqE62bMnMvj+tnRmtDs 8ujMULmyd5j23r8VT+PFw0Lle8m0iinVe6eps8tbhqnDKkL15TWt108oLLqmr42X+yqc 8BN9TeCNFfK+rtfe+7e+injx9byvIt5XEe/revV6rS+i8fiE6r0GMqJmJOjH41ZmNoFf 67KCNSPc8uLhGvMOC3rvzmqHQbKTmCM1UUtoRNQK4Hzdp6xPGS+CTPEiG7LtqSLv3cOC We10Z6pIRrYjNIJEli5rXEa8FfPKk3+N+CFr6TJOimQY4Xk/+UOViqhaX86t1cpo78mV 0dKJN1fv1euRW1deg7yh3Xlmc0Us0ZHM7IvMobyiIFyuyPNKeJ7RmKr4P3lBGxOysToH YGgcbKWqny4ljTVC1F85hUEVTLkZyzDt5up2mEt8k2iswQQbaYQ2drfG5xEhyRTBlBu7 YemyFJZah6WpWKvKX2nsXo7upiJ8lYjUTjIAmdKLJEMMEy8hia8BZ3gcn5c4w8t5zL6B WoulgJCdZDedR3aTw+QNeg5v7SEHSBvhBk85eYKsIr8gG7CJ3YycjWQSHgn5v6AZiTZY 9k9je3yaHEPdm8jdpJ24qTfxN7KG3CecwFv3ESvJIWVkAllEHqRjEsvINPKFeC8pImPI bWQxbUpUJx5KPJJ4jjxPDgi/TXQRM8kkM/EcS3wrfZT4lPTBG4+S7eQL+ohxH1HRSxNq /orcTh4XakWamJP4ESMIkjswBpGMJcdoB4ug9dnka+qlq4SRaOXZRDRxBLV8pJbMJY+T djqIXs+C0rTE2MQx4kYfd6LV7aSF7McTI6+RT6hFOpd4LnGOZJB8MhrzaSO/ox1CvGtt vBTrJmGVepFilCwi/0XeJsdpiL7OFkkWqUBSpZWJD4iLDCBVGO2LePMr+i92N541wlvi qMQIYsO6PMxXm/yG/Jlm0n50PJ3KerFF7EnhdmJAjwPwzCLzsN7b0PrnYJr9zMLeF54V fy1e1GXHTyVsoEiY/JL8irxOrZipQhvpPfQk/QsbyaazX7IvhV+Iu8Q/6Osx65+RheRB 8mvyL+qkQ+hEegudS1fRDfRhup0eo8fpGVbGprAGdlaYKywRXhNH4JksNor3SuulB3Rn 4tXxI/Hfx/+VKEisJxPBD2sx+kfJk5jZAfI++RjPF+RLKlEzteFRaJBW0bvw3E0fpM/Q nXQXbUMvx+mX9G/YgP5JLzLsq0zHsmDqcIMnxG6HPfkL9gR7H89x9nf2g+ARcoSIMEgo EWqERRjVBmELnn3Cn8VM8X0xgXUukLZKT0k7pV9Lb0jndBb9PdjR37v0bFfvrs/jJH5/ fGu8Jd6W+DNJBw2xV+BMVYLR1+OZD3pvBcftISeoBWuXSXvT4XQMVmY6nU+X0Duxkuvo 4/R5beyv0ENYpQ/pWYzZynzamPuyQWwEG4/nZ2w2WwLT6xHWxk6yHwW9YBbsQrrQW7he qBVmC0uFFcJWISq8J3wmfClcEC7hSYgmMSDmiGExIl4vTheXiU+KX4tfS9Okd6W/6ky6 hbr1upjuH7Bhhusn6Cfqa/Wb9fv1HxjqwJ1vkn3kVXDg5R89JawVKoR95CE2UMzAgeV3 4OfpZJYwloFT2U56P1tN21iudKduGBtGx5FzYhhr/RZ7il1gw4SxtJJOJvPZgGSDOpf4 ErAS8U3SKR7C3H6Hlu/UWejd7KzOQlpgERXDIvqN0F+MCO+ST4QvqF58mvxJNFEP7WQv ChPABa+Jw6VqEhSeIK8IS+hqso9VwFNw0bAJfDyOvgS9MIUW0O8F+APYOHBRkfAXci9p YB+RTsjx/eQxOkucQx4iA+kq8jV5AVLRS7pN11uXTt9h88RmlkbbCBN3YXbFNJcKkous o7XC47qz7GOyjLwvmsjnwssY/fvsFWGseE6aROdCAlaT9WRJYi1ZIVWLf6BziECnkjzx FLTbKqFADCJeA60yDTptP6S7HXqgTBiLHC84Zwz4ogoa4nE826AnRHDQPMj4TdBivyNt uiksRuZINgqtA0/Hu/FJ5ObEC2R7Yg65LfEI6QN9sCGxCi3uJH8lm8lOel/8LrIYB8eP IdtjpFHsfWlUog9rZh+zyWzrtfTFaudRL/kGzytkFBkuHSTN4odkMilNbEr8EdzdExp2 O5kB8/Q0ZvkterhB6CAD4+PY3sQoYTHm+wWZmHgxEaAmMjexgIwnh8jzeonU6yPqyKop ZWrp8OtKhg0tHlI0qHBgwYD+/fr2yY/07tWzRzgvN5QTVAL+bF9WZobX4053pTkdst1m tZhNRoNeJ4kCoyS/IjSqTomG66JiOHTDDX14OlSPjPqrMuqiCrJGXVsnqvD36lF0TU0V NW/9t5pqsqZ6uSaVlRJS0idfqQgp0WPlISVGb55YDfzB8lCNEu3U8LEavkXDrcCDQbyg VHjnlitRWqdUREctn9tcUVfeJ5/uNZtGhkbONvXJJ3tNZqBmYFFPaPFe6hlONYR5Kobu ZcRgxRSjmaHyimhGCK+iGSGvon5WdMLE6oryrGCwpk9+lI6cGZoRJdzmiWhVyEitm6hu ZFSvdaPMg7USJQ8oe/M7mjfFZDKjLmKZFZpVP606KtSjjYqoI4J+y6Oelae9V5JoHNbV hqtLs4TmCu88hVdubt6gRHdMrL7q3awgb6GmBm3gXZY3qq55FLreBEpVcqs6yu6rqY7S +9AlTMQ8bVbJ+SXt17y6+UrUGBoRmts8vw6kyWyOkkkrgi2ZmeqBxCmSWaE0T6kOBaOl WaGa+nLfXhdpnrSiNUNVMq4t6ZO/V3YkF3avzZ5CLNarkdlY9GSZhmnVOVY56fLKUj7G 0GjYdFFlpoKRVIcwpyE8mD2ENM8cAgLgV0PxVnQWKDIvahxZ1ywP5fmYIo1KeXJIaf4n AQeEOv9+bU59KkeXJ/+T8ELOJ5dZLUrru/FoJBLt3ZuziH4kaIoxDtfSg/rkL4+xUGix jJMwN//JBKxtfc3Qflj+YJAT+IGYSmYgEW2aWJ1MK2RGVgtR+8FKZnW8pKO7JL2KlzR1 l1x+vS4ETm7jJ1OSHjWEL//ZZXdaxdyhUer+D8Wzk+WVk0OVMHKViua6FNdWTrkmlSzn C4p1Q1kKi6aNrBayGPI4xrIErTRp63ZXgeFbbYmKefjTaUw9K6Y3gCu1HKqMisp1NyTD GlMwmJKZ/+ulWOIcf0uLrryWmkZ0aCQ10OSwo8OuSV8zPEuzUDkFKofBRm9uNl1TBlZL jnJ0KgLH48geVEZGSRUkMw9/ODwM4VCTFVWxZCiZAinSsmuyUslrKmalXqrBj3Nnn/xR 0JnNzaNCyqjmuub6WKJpRkiRQ80H2BvsjebFFdB2ScaJJdofyIqO2lSDFZtLh0I8GBnB xXjklOrUzLU159wNMoEfdNxrgT2ag9hIqgBfAEoAUwGZAJ43FlAPgJ1HqlD3gDSVbNW9 RLYhfhIwDfmVgA3dgDq5aJ5qTEdwe6HDzk2IAiuXs+H//mOwvEVYzDqih21rJCbY+Bac C/6vH64SiF2rBH8Mfg4t/M+BUytOu6qSC3h6Ks3dZ/w3GM9tsPfaYVEfEhdIo3WFumbY V98afaYi83uW8dbnbPfaq+QhjkzHy/D94BUJD+ahJyPaGD2t08fYdjWNSOJpgZj04mlK Mgw66TQTDsGQMsKs7ku8EflCSVfJOPl8ydiuElIKXL6EYED/oCPoyEMATxO5pAgdl1SJ XCSK2MFXFyc1ViydQF+TDxAh8XmLq5jFEp+riqv4MYEy4SlhD3z/ywnFxCiGhv6FM4Sd oTG6ax8o3roSHZfI5zvlTvRZWrJB6hupXS0fGdCf1kYi6XQgpbu2xKszpL//iBYYqUp8 LTqkDtzSZNOqvYzzlWrK9IuSy2+1eoyxxJk2u51VcUTNsFqBOYiF5xC3xYLQwvNIP5xD jyE4Rko7SzsH9M/aq/ufLZ1HSzre0ldtVquGfKtmmM3AHETmOUS2WHjI8y43eaXNNp2S Ifsg/i1MMf8Xth43wAmww403Q9RtYPeb77e/Y5OMerOXVaSNSb8xY2TWlLRp6dMyJmU1 6BvMM9MWpDdk1GWtYHfolptX2jfotum3yu94P2EndSfNf7JnXp54o1ENhgr7GykxykZm 3BJwNBKIvGpDroJjKCNb/G8/wGlcG+lEsCSC5damTmuX4Jg5hP8ooKYmTXYOHljgdjvT ZaYL5fQIp8nugQWDHXI4lKPXVTWc2LG8ZemI+See/mDFwwd2rVq1a9fdq26sZSeoSK97 eXprPPFJPB5/c/e2V+mv4o+dPYez2/xv563nvPIFCHgRtDORPaoiqFZHYYO4hm1m2w3i yyI1Ep3EBKNELYweNWmjN/E5EargXbg+22QZpIslvlEdGkF9GkFtGkGxymoGJ1c3TTT6 ZFok1WovlLpXor9EFZx3mZRhbqcl9D4w/Tj5NBYD65LyTCCR5P9STzF1FHM2JLWRYMih 0+kHDR5cNJBdbCs7MeWxL/stFe8avirwyvVHp/O5lYCX9Zibn76d4iWjQ7Z609J0VdZY 4nybw6Eh36pGWQbmd0l+zqIeXsHv56V+nw0lfjAowhg7qFqYyeNRArKDMSXgcBb3++AY D4+Rfp18sKU8PAIDOCslBrxDi9PJtA5Vo90BLNnPKdXsTGNVfhfP4223oGkuKmYzqwLy d1VbxZ/qjcsI74/3pnWmDh4mDdMdlA7rDurfNrzj04+21Fim2Boss2wrnSvTNjoPOf+a +desc5mWw+ZX01gWLgayZb+s+y84J/RgfgNiI6iV6TfJBp3uqC/T5fNlGnyZ0BaGTJ9g 9csx9lzreAfFtYF3H58B0ZbDTpnF1Og5gdXmvE4PsrXQ5jIdoloc+0rhRFjE1jCRtbNc XA5s3ptkduiVCxGuXjSFVtrZVXva4eSURbDB1jdig6pBAnTWRIBLwBBSS2tvr6nJSw+G i0DxwYMHFYL1dfoeg7lcpLvACfgT9ZeKmCfv2cfP7tx+1z1P0ANp3//+xIUbXnzjmWn+ 3bvLSmZ23H3kr7c2/PyJ5rT3P/5md/VLh567v34AOGVq4ivRDU6J0JoU4cwZXpVzsddH KGfViAUJ2itkstotdr/J1Cvd7xP9vXxSL2vIavFmUOJUoHpYlaIPcyry6uF+XKEd68cf 4iwuLZWhUcEtnW/JbzmL5SORAg5gFrWnZHVbK6zrrWKF4ybH8ixhknuBPN81y73MusK1 3trs2pj1vNUkKQK/bTCbLVabqKfol3KyqJjAQRzvehErHdRmsaSL3nb2HMlgc9UeGKWE YVqdjdOVRQpTvJyTlSZ9Y1jTTWFKwnKYYcTnX+Ul4S19vDE6pCXjBG2nQ7CRdKjmK9oq P0YfSdEw0qlRkeus85HapN7qAhkxOVmjZ5KcEFWoMEgrXVKTVuTmOksjnL7oMtpNQ05E vRshCeWEp7YFHm1Ys+eZ1QPHuJzmxtj6+fM2udqC37xy59GGW2fdsyV+5uTrCXqvd/uG 6D2rnnY9ye5cPfOedeuUfW/PaZk1/Ym+/tce6oj/8yuo2EzoAFlqh36z0rA62FltmWt5 3LLL8o5FGiOMsf5CFJzgcWLRCXrJZBb0xAJhPyqILkEQBSthFquoFw7iMtWATXyHaiKi iCrkqEmMsVtflSSTmh0oNHVrQiB8Y2JVQL7VdihTjBapVr2aEyrUNwUH6bfYsRVjVa2u QsJkpjAB6VPaO0BO7+dUYPtsMbpJW+m/RyK1miI8z9VLifyVzO2AUhgEF0ocxXyRi4s3 9I2IEBm73Y7l1nzJVuz5zmLouA9U88BiIadPsSBmZ5fwJmpADNRRXRbVXGxpmlBsUcPF lhwf4j7FvEKkBmbFIDrQMTA95BAclG3tWsd+9fO33mqLD6LTnxf2X7rx+fjTEOpHuxrA eHzvD0ovQMdOTUoO7qAwPytfBOqzmfzp6T4n15xmuyj6fVYbJXov9gvNItAQTcr4vs+l hO9/YKKuI5AMLhi9nJrutWthZeaK7ObsrWkvpr1pOWn5U5bBmOa19c4UjP2l/uZ26DEB 0iGnmdKdaWlHbXaXLc1ls1shImoaH4hq22FjNptdTaepQb1qF+kJLj7QaqrCh+eYLi+S 18ibZVGGkHg1IfFS4pW9DINNCol3i+I8RAfhk4pHwVRDWmz7fkpYcA16tbBcEZdaEJDr PG2itY7ifrVQC6c3GPpGJFCRaIpP03l0Cayta8QGspIWTA8K0Hkk3aWHJRCuei19+4J7 2nZvumlTz10PsY+7Xh2/7uEOalj64PnfdtEmufmBI8883jK+1M3+8XJ8+bT4hd+//XDL KW61jQXl0qHzsklvOj6l9QJ2GoADU6BZPf2qlVqt2BKzpBy/y2ryU5InYwmSFpzs98h8 w/doOs8D8gBPWXDHPjgm/6abkrWd8pFaTsk+DRm0XK+ml2eUKzc7pygNwiz9LMN85yxl qWGZ7z7Det9Jwwduh17hEtAjKRO6qpCm8HhWUCvQ84IeSkgJ8gIHH+UEK8M4s+iJ6ZyQ UHrG7jHDnh2iOsm+vEZZI6SMb1Vgr2AW517lVqK8Jd/E1ZyfFqvuUs90zyLPGo/ogVGq q/K4eaeeGMttjSSNNEhiJ9+5NJ2X0nh85wIBYa1qFOPiw7VdDdWHe2immU7PNygn36BC OcQhFyHlpq4rmlAnXGz15o9umFpWNYOVHZrT1nXH8XV/jp/+1cYzuz/rKhr/0Ljbn3vm rpUviZNt8/uP7T/8209n1sX/9YfmzrvhdF1Fd72+841Ln9W+VBN7ctuePViAeug7N+5u rGSxajtipSL+mEE0QpdxKezPqGi0WBsFgfElGa9t0QLLtBsajf9NxoP205lQimgRXQPj MQOKSONiHEFql5SMPd85Tr7ArTF+MuDHkWKHpoMw/yW1aYOC6Toi6PShwU5nUb2wb1O8 s3Kw/YBwz//bKP64e9OjcWf8YuxPu+k39O0n+EloMjgwAxzoISF8G0KSPNhmIVn+vlxH wg5jVX37OoN+ndTT77T6jRa+wcL4Pw81CSRiByU1RQIkaThxRCu0e7FXntPMUw3hzAok xb5CbrqF21npWovpGvump9g3eQq56igCCkc6i2GOpE4kr2oD0Q4ffCBA+EBOaycTjmh5 qf65+YtuL6k5vCLvljMX75CHfKZX5tctMuiLavowORLtTMQlqGiQm/Zyj3aPDn9l+Vt/ ydgfbvHVdJW41LDEfLtlmXWl5wHSTDeJ6w1rzess660Pet5zvJXmzIGktPiUTB4pSj8e 9VGw459S/b0UC/F7iQXD2NGXXhmJv/GwkRpjbI4qRxrtqgKL306JXbYze4w+vL/A2xgV qIDyltzG9G5DXklX01n6lgGXjzTnIfvgGlgIKQPBWVzbj0+Ob1opieG2HSy7JWRJTQ0N hwcVcvm4yhIgyElzubvtBp1wtejQ+YsXfHW445uGhRsejF/4+OP4hYdnrG+Ye9/GW+fc P3T0lslrd+6+Z82LQlavbfN3fPLFjlsf65V/5P5DCXwk0bH5dTpl7rp7p8/csO5SYuyW 8S803fPSzu6zLOdJP7TiK8lTw6vmALaAPAc2gAsakflOoG3uQM6pPTlFvQ6NpA7t9Onw OvIj5p5+uy1gG28TbDYXmUCpZkZaZZwqKN9poFQljeJHIrUFmhIp0BYGlOeMKHMt+tlv ONNpB+qrBnFl71R7a5unQ+Pi/6XXa/v6t67Q05WO1MKhmWPcaugW902hW4UF7oWZc0Ir M1f7N2U+4H/cvSvzUOY37q+UC0rade4n3bvdwtBes3SsB993Q2Amb1DRKT39423T+Sbr 49OjJyYkVXIbHwQ+CComZmhkx7Xb6pZ8rqfbuJp2XOYlh+pgji0pzYvjMd8+OStxvXt5 7+xWu6R2Ca3FIVkzMIezQYU9uLZFTMBMuG3gR+Yw1Q4M6RovLd7tXlU/efWEwXTwwYX7 L1H9W5s771r5j2de/oS9+/zSO1t2rVr9NJ0sr7xtzJqPFlu8Uxuo4aMvqPx4/C/x7+Jf x1tfOSwU/nL/kSc2QeViJz2A48963JVz384Q2BHwU+mNTFciCiVUJ5pYCewawhSsxdOG p7fhwA+p4PoTpwGN5Jo4pA0amC4ADhw7dkyoOXbs0ovHjuGNrfAbTYL9aqZx1S/kFBUb jEN7mAbpBpuuN90krBc+FPTLTR8LH5sEHddusO9ZVU9pk9gsvSR+Y5BMIh0knhQZlOYp 1egMFgoKD+ANarUUO3luK9KGVCzyODtYiLij1enm+Z+r12Wgz7y86wzGjIzrcMgy4t7G JAmiqEgmFwxgo8Gg6HUuvV5nMuE7RZEyvRnXqCaBmeGdirGhqh1n/B1SVOqQTkmidKOB 55n766mib9JH9QIcYetVi1nhC6Sk/Alc0DTHwgXNNIaH4UecbLQcjsCnEEt8p5q4GiW1 lmE7+aLy3Zdv0l1YXb7CcGGVlHCvWQl8WCUlkDHuyOKnS8RezWbWG+QSQwk+xfLic40s eLIPEDHx0ZCapODzxLlWi4Ov1znVA0Qn2xyFBtkmFxo5ZpKtcmHq44saaLTkCPj3HKrD mIN1y88oFjnkZBXD4fH5fjdQdzEo9TlO/8WGHFexqLqK+TLvywOanrTAk83gUw9YE0tu r40QbgjCIHfgVhx/esfWN9hHVN+1nd2TIF0XzkntXb3Yh12vXNrGvvomjg9pcL9IdHZw jcxOd1vlhsQF1cyX0GCzwuOAwwYOKEAwrm/VnhyzOHmxZLcI+GCaGYxmGzEYmcms4zQx w7uGEHTYz2uZZRDgq27vz/fd1LqUpBZXYHzb4n630o4O+fjxDn64j8Ck52tEul17Ab3C /XQ6LRS0UNRCSQuxLt+pIV6DYbfG9qnjlGc2HnJbQFdl0kIYhd9r+hgvfK8GOFOE4bJS TM5CuxZIFoFQm5kYDJRpJzPemoZojRxkU4kTazVVtRKtI6J1hBkmmyV8O46c7wcO0/yh JcnJwKztpnjqC5wsdQ1hdoOLZRnE5Zb1lt9iKS2jLaPtQi8xz5pvqxZuEZdb77RtsBrM TDIUWwfbxrNKAWaxYax1hM20jW0Xtuq3GnYKL+p1Tma32fpLDDLGDNhd+ksGoAbLJPsk qlLGDAajyWy2Wm02mdOpztnkZM52thNnkgEtkmKI0QGqyWI0KapljZma2zFJGzWjhMWo Ga4oCJt9sUzh2Zn6qiLVSU2SIMXYzlbHsBpvJAM66nxtiRcO587MDBnyVJJ5OXG6lnhh /UG8rjyZcmcnF68Nq49sgHAhgvumMmqGXPkhV68RS+Ii/EwnCUucxJ5fA5mzoKynJnPW xPd7bSaemzq+frA/WGzLD2pH2P1FxbaCIg3d1we5qWNqpOb2JbWQDK75B8IR7vYMLqJB R8iBz2gc23Cnf0t/dwZOrFQ6GJ+6J14ttV/87uEbJvxSuPTjKPHdi4PEUxcV6O4nYS93 QVKsuKNvUfNnOxpcrFKudN0i3+ISzRbs4Tbi8foZxaWtM2yAxoEEad5lMNt5NYszkCFT yaT4y/RaFc0x+h+0WFIGU2yW1GqaMjvXrcwyhk3jLmEwHP/Vau7/JbU8PTZlc0ORaXcA /KSBmRd4/CzdxYJBB3DuXsHJI/gk6/XI2AWP1Hwbfyd+P73r0JO1Ywasi2+U2m3O2fsX Hox3db0s0E1rpt2bjksUSqbBEv9v3Bj0Z+lqj5nCTLFRWCqKeT0GCcW+kcJo/ZjsikB5 7qgek4Ua/bTsm3puTLOFIJya/Od2I7i8SubAuEwiOMYlEVSGIocaQeUkgspJBJWTCCpf UEfxSj2t4VyWK/TIG2zHt4d5Ff1uVqaGqvIWmOdbG2y3umZ7V5hXWlfaV8vLchvz1gvN 5o3WZvuD8n259+Y9Yt1q35ruT7l7+wTDzqxwpjHci4YJ6ZXpFAsGhPFZFyPWPiuyNmax rDy3tY+/Rx7Nk9xQhOdVTZ9I/j5Gv98taOZZBNZqLSAV1WLH9sDLlXxwrM3LtVnNUtCX 7c/C5wz4mkFH83JzkKfDMbRPJlpkVZvBG534RkwzATUtK1OFTsC18GK6hepg/0TVtD68 S941RnyjMUx60V7cT2KzsSog51Urb6lXZgHmRMNOOIi1IiBYPjAlkO9VO6+DwzVImjFg 5i3clX6+duxpMA9sDRzdwFBjYUtpE4OfLnKaB+f5jBz4gx1CgWIng0XFuS/5w21EWpGf wQZPclduD81Q55a626MP45yrS3d53Dg4a47YUE5ueNqr1um/Xb3opckTpg2LL5g4b87d 3/3i2R/WS+323buiTxcPoR9XN61cf/FXb8f/33b6oXzbgzeNaCyvmBPy1EeKnp296PVZ 895ba3vgobW3jB84sKHnsH3Ll73fuPRv3NaqTJwR/eJwko67psmqJ0B86TjY1Uq1xirz bKFBWmScbTbgTHJa2xBgUJ5WJ/ENIdvHwx7Oj6UfXRcyxQHOoRkDfGXOsZllvolO3O34 6p0LM+t9d+ruTL/ALnhlfIRot3o8E9x17sX4/xqffYu8A64DWczymfSknb3E3Vwa/2tE hV8B/gQY+Y+m+USzR4Xv7VONLECSjkAg32iWC5AO1dijd2EUDpbMADe18sKFPFbL/Dhp BWjAPVDO1au5vQsD+lJ8hy7wbZJV6b2cunpMBKGNb2F6XLcgdPOp6TP8hUUawZNUq42M 7To9TgYdcWDHj2sPmEaRSMrxVNK1pCRlfWIfgypBHVgb1JPyVMB2Jg6XPqi5KmhQ82fo hJ+153974G/xs9T16R/xnd6lM6aW+2Zu6vqETbQMmbpx1S461fNsG3xIAj6K6xn/PP6D rOxpn0sfXT9y7gtgyg049vMvSF20/gCu3jpa0z3cuDrF7zp0VXniIHyF1m4VtayhnoxC j8FhcbgECYdPn6R3mU2WPKM6cHBhwkg7jNSt8mVxq9w+MfbUQhcXF5i1f1cdfJmMIl8y Yyavh1xYQHzZjC5OLaS/hx8W/RpNqUvFC7BtkBzn5sTwFA4ujLrPudli9w531J1wi27m yuO3Xh2qjDGcw3xw2XGcnMIdLNfkKdP1R9XDB0G0romBd01E3i2vpLq1CzHG+8GngOic jEu/fsJVGp/7l6DeZUQpizZFT+16sAQOUgd3uvDrkZErVJvOps+z6SxZ1GqwZ1FcYEQi awl8xlQzGDUZTcemqB1+dOmODW13dyx/pbJtWcOEB0tgN373SO1zT3RNZ09vuGvyQ6u7 DqZo9BUkzE1Xq2mSoEtjO+WY/Bfh67RzwoU0Hc4G59QSs7VwhUy3yce9p7wJr6gYXDaX 2wkaUZ3barLaLLZcr0YXr0Yjs0Yds0Yd2JAp6pi1JTLn8CVC7vkkdcwadZD+IUkds0Yd pC+oUJ26KrPGAGaagFEzDifwDjWTU8p7zssWe3d4o94Or+gV2MB0t0asC7jmS50bfpJA sKGuIRDuMTlpNAKJGoF4F85/J/g4j3YgTdIGIUh2XiMaP6Ze/euEkcStxtLOK1Rz6xxG k8Gkx6FNDjt0tixqNzlT1Ou9lt/+ggu4Bz6pY91JCmqK1rHhmWWf1T09QTa19W64ofFF MfzYnorFYwtWdzWy9bctLHvkva5DXE9uiM8Tg6CiE97NGepDFrmPfJ1cKYulSlRhAaWX JZRdkF6QPSJ7sbJFMQz1DM260XNjVo3hFss0z7Ss+YYGyzx5oachq0M54frM+1nmCf9p 12n/KSWhuENiRI6kDxKHyqPEG+Wb5b+a/zs7LpsdNqhJn45zgA+2ti0j97iJyibVVGdq MomKxgeKdqfGb0lwH4ADnkk7ryKdPN1dbZsnb/qRc0YNcWKYltK0gWygM4+QDopdcweN 0nNUDNBSfPksQAlfUrO53FHtoEI1vzSFoYYczaZHjQsQUXhfeFVNDKm221MnpzLNCFxf 5KV8w7xMvdolt8PT2XUeu2R3XurgrlFTu6GE/bnkdrIkjRMrKW0uzd3QwwFX1WW31Ybn hj4y9/7j85d9cdfNm/s6Xlh+569fXNq4Nz5Peq154sRNiW3Pxi8+MGZo10XhuWNH3v3j u0c/5FZZbuI71lvaDv/oRwfwX7IdraFwIbQW9gkgTbhypBariQrELcMDacKyC2a7nENy qNWZZ6EJvaHCWFGnX4xT9ha9SPSKfgeO2x3643p8e4JdiYsDEL7QGvKdZlAgh596tJzv tTM3crhywxbDRR90A6YdkJA+o22z+nY2n3jp4L23Xq3IwMNYuk6uzE6f55ce3GHsKIYp NXCg/A7fdCKRPA/3zYQHOUKDBjqKtDsnzcPH5MwxJTMW5K9b17pvX1qkp//pp+Ths59h MzdR/YL4g5u6fj42H1d7jGi/RA/uJ/mJnwd5AmQgDd/ZphM3VtKrfcmdhW+5s0lf0p8M xHc8N5BKfNU9GV/i8lV3AvhPh2/syYTJkyvG3hQpu31e/YKxU/4/ioVSQAplbmRzdHJl YW0KZW5kb2JqCjcwIDAgb2JqCjExMDUzCmVuZG9iago3MSAwIG9iago8PCAvVHlwZSAv Rm9udERlc2NyaXB0b3IgL0FzY2VudCA5MDUgL0NhcEhlaWdodCA3MjggL0Rlc2NlbnQg LTIxMiAvRmxhZ3MgMzIKL0ZvbnRCQm94IFstNjY1IC0zMjUgMjAyOCAxMDA2XSAvRm9u dE5hbWUgL1BTU0VNVytBcmlhbE1UIC9JdGFsaWNBbmdsZSAwIC9TdGVtVgowIC9BdmdX aWR0aCA0NDEgL0xlYWRpbmcgMzMgL01heFdpZHRoIDIwMDAgL1hIZWlnaHQgNTMwIC9G b250RmlsZTIgNjkgMCBSCj4+CmVuZG9iago3MiAwIG9iagpbIDI3OCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMjc4IDU1NiA1NTYgNTU2IDU1NiA1NTYgNTU2IDU1NiA1 NTYgNTU2CjU1NiAyNzggMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA2Njcg MCA4MzMgMCAwIDY2NyAwIDAgNjY3IDAgMCAwIDAKMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCA1NTYgMCAwIDU1NiAwIDAgMCAwIDAgNTU2IDAgNTU2IDAgMCAwIDI3OCBdCmVu ZG9iagoxOSAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jh c2VGb250IC9QU1NFTVcrQXJpYWxNVCAvRm9udERlc2NyaXB0b3IKNzEgMCBSIC9XaWR0 aHMgNzIgMCBSIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDExNiAvRW5jb2RpbmcgL01h Y1JvbWFuRW5jb2RpbmcKPj4KZW5kb2JqCjczIDAgb2JqCihNaWNyb3NvZnQgV29yZCAt IGRyYWZ0LXltYmstZ2hvc3RidXN0ZXJzLTAxLmRvYykKZW5kb2JqCjc0IDAgb2JqCihN YWMgT1MgWCAxMC42LjQgUXVhcnR6IFBERkNvbnRleHQpCmVuZG9iago3NSAwIG9iagoo U3RlcGhlbl9LZW50KQplbmRvYmoKNzYgMCBvYmoKKE1pY3Jvc29mdCBXb3JkKQplbmRv YmoKNzcgMCBvYmoKKEQ6MjAxMDExMTEwMzA0MDBaMDAnMDAnKQplbmRvYmoKNzggMCBv YmoKKCkKZW5kb2JqCjc5IDAgb2JqClsgXQplbmRvYmoKMSAwIG9iago8PCAvVGl0bGUg NzMgMCBSIC9BdXRob3IgNzUgMCBSIC9Qcm9kdWNlciA3NCAwIFIgL0NyZWF0b3IgNzYg MCBSIC9DcmVhdGlvbkRhdGUKNzcgMCBSIC9Nb2REYXRlIDc3IDAgUiAvS2V5d29yZHMg NzggMCBSIC9BQVBMOktleXdvcmRzIDc5IDAgUiA+PgplbmRvYmoKeHJlZgowIDgwCjAw MDAwMDAwMDAgNjU1MzUgZiAKMDAwMDA5NzAzNSAwMDAwMCBuIAowMDAwMDAyODU4IDAw MDAwIG4gCjAwMDAwNDgwNDIgMDAwMDAgbiAKMDAwMDAwMDAyMiAwMDAwMCBuIAowMDAw MDAyODM4IDAwMDAwIG4gCjAwMDAwMDI5NjIgMDAwMDAgbiAKMDAwMDAwNTc5NSAwMDAw MCBuIAowMDAwMDc5MTA4IDAwMDAwIG4gCjAwMDAwMDMwNjAgMDAwMDAgbiAKMDAwMDAw NTc3NCAwMDAwMCBuIAowMDAwMDA3NzA5IDAwMDAwIG4gCjAwMDAwMDU4MzAgMDAwMDAg biAKMDAwMDAwNzY4OCAwMDAwMCBuIAowMDAwMDA3ODE2IDAwMDAwIG4gCjAwMDAwMjY3 OTYgMDAwMDAgbiAKMDAwMDAwNzkxNSAwMDAwMCBuIAowMDAwMDI2Nzc0IDAwMDAwIG4g CjAwMDAwMjY5MDMgMDAwMDAgbiAKMDAwMDA5NjU5OSAwMDAwMCBuIAowMDAwMDU0MTY2 IDAwMDAwIG4gCjAwMDAwNTk4MDAgMDAwMDAgbiAKMDAwMDA4NDc2NyAwMDAwMCBuIAow MDAwMDI3MTA1IDAwMDAwIG4gCjAwMDAwMjczNjMgMDAwMDAgbiAKMDAwMDAzMDM1MCAw MDAwMCBuIAowMDAwMDI3MzgyIDAwMDAwIG4gCjAwMDAwMjc1OTUgMDAwMDAgbiAKMDAw MDAyNzYxNCAwMDAwMCBuIAowMDAwMDMwMzI5IDAwMDAwIG4gCjAwMDAwMzQxNjEgMDAw MDAgbiAKMDAwMDAzMDM4NyAwMDAwMCBuIAowMDAwMDM0MTQwIDAwMDAwIG4gCjAwMDAw MzQyNjggMDAwMDAgbiAKMDAwMDA0MTA0MCAwMDAwMCBuIAowMDAwMDM0NDE5IDAwMDAw IG4gCjAwMDAwNDEwMTkgMDAwMDAgbiAKMDAwMDA0MTE0NyAwMDAwMCBuIAowMDAwMDQ1 MzA5IDAwMDAwIG4gCjAwMDAwNDEyOTggMDAwMDAgbiAKMDAwMDA0NTI4OCAwMDAwMCBu IAowMDAwMDQ1NDE2IDAwMDAwIG4gCjAwMDAwNDczOTQgMDAwMDAgbiAKMDAwMDA0NTU2 NyAwMDAwMCBuIAowMDAwMDQ3MzczIDAwMDAwIG4gCjAwMDAwNDc1MDEgMDAwMDAgbiAK MDAwMDA0NzgzNiAwMDAwMCBuIAowMDAwMDQ3NjAwIDAwMDAwIG4gCjAwMDAwNDc4MTYg MDAwMDAgbiAKMDAwMDA0Nzk0MyAwMDAwMCBuIAowMDAwMDQ4MTc0IDAwMDAwIG4gCjAw MDAwNDgyMzggMDAwMDAgbiAKMDAwMDA1MzczMyAwMDAwMCBuIAowMDAwMDUzNzU0IDAw MDAwIG4gCjAwMDAwNTQwMTAgMDAwMDAgbiAKMDAwMDA1NDM0MyAwMDAwMCBuIAowMDAw MDU5MTgzIDAwMDAwIG4gCjAwMDAwNTkyMDQgMDAwMDAgbiAKMDAwMDA1OTQ1OSAwMDAw MCBuIAowMDAwMDU5NDgxIDAwMDAwIG4gCjAwMDAwNTk3ODAgMDAwMDAgbiAKMDAwMDA1 OTk2NyAwMDAwMCBuIAowMDAwMDc4NDk3IDAwMDAwIG4gCjAwMDAwNzg1MTkgMDAwMDAg biAKMDAwMDA3ODc0MCAwMDAwMCBuIAowMDAwMDc5MjgwIDAwMDAwIG4gCjAwMDAwODQy ODAgMDAwMDAgbiAKMDAwMDA4NDMwMSAwMDAwMCBuIAowMDAwMDg0NTYzIDAwMDAwIG4g CjAwMDAwODQ5NTAgMDAwMDAgbiAKMDAwMDA5NjA5NCAwMDAwMCBuIAowMDAwMDk2MTE2 IDAwMDAwIG4gCjAwMDAwOTYzNjUgMDAwMDAgbiAKMDAwMDA5Njc3MiAwMDAwMCBuIAow MDAwMDk2ODM4IDAwMDAwIG4gCjAwMDAwOTY4OTAgMDAwMDAgbiAKMDAwMDA5NjkyMSAw MDAwMCBuIAowMDAwMDk2OTU0IDAwMDAwIG4gCjAwMDAwOTY5OTYgMDAwMDAgbiAKMDAw MDA5NzAxNSAwMDAwMCBuIAp0cmFpbGVyCjw8IC9TaXplIDgwIC9Sb290IDUwIDAgUiAv SW5mbyAxIDAgUiAvSUQgWyA8NTYwZGZmNzZlNWM0YTczNDU5MzU2OWM5N2ZmNjI2ZmI+ Cjw1NjBkZmY3NmU1YzRhNzM0NTkzNTY5Yzk3ZmY2MjZmYj4gXSA+PgpzdGFydHhyZWYK OTcxOTQKJSVFT0YK --============_-922677598==_============ Content-Id: Content-Type: text/plain; name="draft-ymbk-ghostbusters-rev.txt"; charset="us-ascii" ; format="flowed" Content-Disposition: attachment; filename="draft-ymbk-ghostbusters-rev.txt" ; modification-date="Wed, 10 Nov 2010 22:08:05 -0500" Network Working Group R. Bush Internet-Draft IIJ Intended status: Standards Track November 8, 2010 Expires: May 12, 2011 The RPKI Ghostbusters Record draft-ymbk-ghostbusters-01 Abstract In the Resource Public Key Infrastructure (RPKI), resource certificates completely obscure names or any other information which might be useful for contacting responsible parties to deal with issues of certificate expiration, maintenance, roll-overs, compromises, etc. This draft describes the RPKI Ghostbusters Record containing human contact information to be signed (indirectly) by a resource-owning certificate. The data in the record are those of a severely profiled vCARD. Requirements Language The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119]. Status of this Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. This document may not be modified, and derivative works of it may not be created, and it may not be published except as an Internet-Draft. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at http://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on May 12, 2011. Copyright Notice Copyright (c) 2010 IETF Trust and the persons identified as the Bush Expires May 12, 2011 [Page 1] Internet-Draft The RPKI Ghostbusters Record November 2010 document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Suggested Reading . . . . . . . . . . . . . . . . . . . . . . . 3 3. RPKI Ghostbuster Record Payload Example . . . . . . . . . . . . 3 4. vCARD Profile . . . . . . . . . . . . . . . . . . . . . . . . . 4 5. CMS Packaging . . . . . . . . . . . . . . . . . . . . . . . . . 5 6. Validation . . . . . . . . . . . . . . . . . . . . . . . . . . 5 7. Security Considerations . . . . . . . . . . . . . . . . . . . . 5 8. IANA Considerations . . . . . . . . . . . . . . . . . . . . . . 6 9. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . 6 10. References . . . . . . . . . . . . . . . . . . . . . . . . . . 6 10.1. Normative References . . . . . . . . . . . . . . . . . . . 6 10.2. Informative References . . . . . . . . . . . . . . . . . . 6 Author's Address . . . . . . . . . . . . . . . . . . . . . . . . . 7 Bush Expires May 12, 2011 [Page 2] Internet-Draft The RPKI Ghostbusters Record November 2010 1. Introduction In the operational use of the RPKI it can become necessary to contact, human to human, the party responsible for a resource-owning certificate. The primary example of this need is when the signer of a Route Origin Authorizations (ROA) detects a problem (or an impending problem) with a certificate or CRL in the path between the ROA issuer and a trust anchor. For example, a CA certificate along that path has expired(or is about to expire) or a CRL associated with a CA along the path is stale. These sorts of problems can prevent the ROA in question from being accepted, and thus place in jeopardy routing to the address space covered by the ROA. As the names in RPKI certificates are intentionally not human meaningful, e.g., a hash of a public key, see [I-D.ietf-sidr-cp], there is no way to use the certificate itself to identify the maintainer of the offending certificate or CRL. So, "Who do you call?" This document specifies the RPKI Ghostbusters Record. It is a signed object that conforms to the syntax defined in [I-D.achi-rpki-signed-object]. The record is verified using an EE certificate issued by the same CA that issued the EE certificate that is used to verify the ROA in question. The Ghostbusters record provides human-usable contact information for the maintainer of the RPKI data with which it is associated. Note that this record is not an identity certificate, but an attestation to the contact data made by the issuer of the EE certificate associated with the Ghostbusters record. This record is not meant to supplant or be used as resource registry whois data. It gives information about a maintainer of a repository publication point, not a resource holder. This specification has three main sections. The first, Section 4, is the format of the contact payload information, a severely profiled vCARD. The second, Section 5, profiles the packaging of the payload as a profile of the RPKI Signed Object Template specification [I-D.achi-rpki-signed-object]. The third, Section 6, describes the proper validation of the signed Ghostbusters Record. 2. Suggested Reading It is assumed that the reader understands the RPKI [I-D.ietf-sidr-arch], the RPKI Repository Structure [I-D.ietf-sidr-repos-struct], Signed RPKI Objects [I-D.achi-rpki-signed-object], and vCARDS [RFC2426]. 3. RPKI Ghostbusters Record Payload Example An example of an RPKI Ghostbusters Record payload with all fields Bush Expires May 12, 2011 [Page 3] Internet-Draft The RPKI Ghostbusters Record November 2010 populated is as follows: BEGIN:vCard VERSION:3.0 FN:Human's Name ORG:Organizational Entity ADR;TYPE=WORK:;;42 Twisty Passage;Deep Cavern; WA; 98666;U.S.A. TEL;TYPE=VOICE,MSG,WORK:+1-666-555-1212 TEL;TYPE=FAX,WORK:+1-666-555-1213 EMAIL;TYPE=INTERNET:human@example.com END:vCard 4. vCARD Profile The goal in profiling the vCARD is not to include as much information as possible, but rather to include as few fields as possible while providing the minimal necessary data to enable one to contact the maintainer of the RPKI data which threatens the ROA[s] of concern. The Ghostbusters vCARD payload is a minimalist subset of the vCARD as described in [RFC2426]. BEGIN - pro forma packaging which MUST be the first line in the vCARD and MUST have the value "BEGIN:vCARD" as described in [RFC2426]. VERSION - pro forma packaging which MUST be the second line in the vCARD and MUST have the value "VERSION:3.0" as described in 3.6.9 of [RFC2426]. FN - the name, as described in 3.1.1 of [RFC2426], of a contactable person who responsible for the certificate. ORG - an organization as described in 3.5.5 of [RFC2426]. ADR - a postal address as described in 3.2.1 of [RFC2426]. TEL - a voice and/or fax phone as described in 3.3.1 of [RFC2426]. EMAIL - an Email address as described in 3.3.2 of [RFC2426] END - pro forma packaging which MUST be the last line in the vCARD and MUST have the value "END:vCARD" as described in [RFC2426]. The BEGIN, VERSION, and END lines MUST be included in a record. To be useful, FN and one or more of ADR, TEL, and EMAIL SHOULD be included. Bush Expires May 12, 2011 [Page 4] Internet-Draft The RPKI Ghostbusters Record November 2010 5. CMS Packaging The Ghostbusters Record is a CMS signed-data object conforming to the RPKI Signed Data Object Template, [I-D.achi-rpki-signed-object]. The ASN.1 for the ContentType is as follows: rPKIGhostbusters ::= SEQUENCE { Version [0] INTEGER DEFAULT 0, vCard VCARD} VCARD ::= PrintableString The ContentType of a Ghostbusters Record is defined as rpkiGhostbusters, and has the numerical value of TO BE ASSIGNED. This OID MUST appear both within the eContentType in the encapContentInfo object as well as the ContentType signed attribute in the signerInfo object. See [I-D.achi-rpki-signed-object]. eContent: The content of a Ghostbusters Record is described above in Section 4 above. Like a ROA, the Ghostbusters Record is verified using an end-entity certificate issued under the CA certificate associated with the resource- holding certificate whose maintainer is described in the vCARD. Specifically, the EE certificate used to verify this record is the one that appears in the CMS data structure that contains the payload defined above. 6. Validation The validation procedure defined in Section 3 of [I-D.achi-rpki-signed-object] is applied to a Ghostbusters Record. After this procedure has been performed, the Version number field within the payload is checked, and the OCTET STRING containing the vCARD data is extracted. These data are checked against the profile defined in Section 4 of this document. Only if all of these checks pass is the Ghostbusters payload deemed valid and made available to the application that requested the payload. 7. Security Considerations Though there is no on the wire protocol in this specification, there are attacks which could abuse the data described. As the data, to be useful, need to be public, little can be done to avoid this exposure. Bush Expires May 12, 2011 [Page 5] Internet-Draft The RPKI Ghostbusters Record November 2010 Phone Numbers: The vCARDs may contain real world telephone numbers which could be abused for telemarketing, abusive calls, etc. Email Addresses: The vCARDs may contain Email addresses which could be abused for purpases of spam. Relying parties are warned that the data in a Ghostbusters Record are self-asserted. These data have not been verified by the CA that issued a (CA) certificate to the entity that issued the EE certificate used to validate the Ghostbusters Record. 8. IANA Considerations This document has no IANA Considerations. 9. Acknowledgments The author wishes to thank Russ Housley for suggesting profiling the vCARD specification, the authors of [I-D.achi-rpki-signed-object], and particularly Stephen Kent. 10. References 10.1. Normative References [I-D.achi-rpki-signed-object] Lepinski, M., Chi, A., and S. Kent, "Signed Object Template for the Resource Public Key Infrastructure", draft-achi-rpki-signed-object-00 (work in progress), August 2010. [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [RFC2426] Dawson, F. and T. Howes, "vCard MIME Directory Profile", RFC 2426, September 1998. 10.2. Informative References [I-D.ietf-sidr-arch] Lepinski, M. and S. Kent, "An Infrastructure to Support Secure Internet Routing", draft-ietf-sidr-arch-11 (work in progress), September 2010. [I-D.ietf-sidr-cp] Bush Expires May 12, 2011 [Page 6] Internet-Draft The RPKI Ghostbusters Record November 2010 Kent, S., Kong, D., Seo, K., and R. Watro, "Certificate Policy (CP) for the Resource PKI (RPKI", draft-ietf-sidr-cp-15 (work in progress), October 2010. [I-D.ietf-sidr-repos-struct] Huston, G., Loomans, R., and G. Michaelson, "A Profile for Resource Certificate Repository Structure", draft-ietf-sidr-repos-struct-05 (work in progress), October 2010. Author's Address Randy Bush Internet Initiative Japan, Inc. 5147 Crystal Springs Bainbridge Island, Washington 98110 US Phone: +1 206 780 0431 x1 Email: randy@psg.com Bush Expires May 12, 2011 [Page 7] --============_-922677598==_============-- From gih@apnic.net Wed Nov 10 19:22:05 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 276E03A695E for ; Wed, 10 Nov 2010 19:22:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YM8JaXRY8UMf for ; Wed, 10 Nov 2010 19:22:04 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 415923A67D0 for ; Wed, 10 Nov 2010 19:22:03 -0800 (PST) Received: from dhcp-220f.meeting.ietf.org (dhcp-220f.meeting.ietf.org [130.129.34.15]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 2A280D58A0; Thu, 11 Nov 2010 13:22:27 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Geoff Huston Date: Thu, 11 Nov 2010 14:22:18 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: <3F59A12A-49B3-4FDE-8208-5A18FCF1BEB0@apnic.net> References: <20101111031644.1EF263A6965@core3.amsl.com> To: "sidr@ietf.org wg" X-Mailer: Apple Mail (2.1081) Cc: sidr-chairs@tools.ietf.org Subject: [sidr] WG Last Call request for draft-ietf-sidr-rescerts-provisioning-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 03:22:05 -0000 Hi, I've revised this draft as per the feedback from the WG in today's SIDR = meeting regarding text in the Security Considerations that notes that = the protocol itself does not describe how a client and a server can = "reset" the CMS signing time attribute value Given that this addresses the WG comments from today's session. I'd like = to request the chairs to conduct a WG Last Call for this draft. thanks Geoff & Byron Begin forwarded message: > From: IETF I-D Submission Tool > Date: 11 November 2010 2:16:44 PM AEDT > To: gih@apnic.net > Cc: robertl@apnic.net,bje@apnic.net,sra@isc.org > Subject: New Version Notification for = draft-ietf-sidr-rescerts-provisioning-09=20 >=20 >=20 > A new version of I-D, draft-ietf-sidr-rescerts-provisioning-09.txt has = been successfully submitted by Geoff Huston and posted to the IETF = repository. >=20 > Filename: draft-ietf-sidr-rescerts-provisioning > Revision: 09 > Title: A Protocol for Provisioning Resource = Certificates > Creation_date: 2010-11-11 > WG ID: sidr > Number_of_pages: 31 >=20 > Abstract: > This document defines a framework for certificate management > interactions between a resource issuer ("Issuer") and a resource > recipient ("Subject") through the specification of a protocol for > interaction between the two parties. The protocol supports the > transmission of requests from the Subject, and corresponding > responses from the Issuer encompassing the actions of certificate > issuance, certificate revocation and certificate status information > reports. This protocol is intended to be limited to the application > of resource certificate management and is not intended to be used as > part of a more general certificate management framework. >=20 >=20 >=20 > The IETF Secretariat. >=20 >=20 -- Geoff Huston Chief Scientist, APNIC +61 7 3858 3100 gih@apnic.net From ggm@apnic.net Wed Nov 10 19:24:13 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C668E3A693C for ; Wed, 10 Nov 2010 19:24:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I0qv5yLSks44 for ; Wed, 10 Nov 2010 19:24:09 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 431EC3A6977 for ; Wed, 10 Nov 2010 19:24:08 -0800 (PST) Received: from dhcp-6763.meeting.ietf.org (dhcp-6763.meeting.ietf.org [130.129.103.99]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id A2396D58A0; Thu, 11 Nov 2010 13:24:31 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: George Michaelson In-Reply-To: <3F59A12A-49B3-4FDE-8208-5A18FCF1BEB0@apnic.net> Date: Thu, 11 Nov 2010 11:24:26 +0800 Content-Transfer-Encoding: quoted-printable Message-Id: <10906F2B-0CF9-415D-A1DF-6122331E9F7F@apnic.net> References: <20101111031644.1EF263A6965@core3.amsl.com> <3F59A12A-49B3-4FDE-8208-5A18FCF1BEB0@apnic.net> To: sidr-chairs@tools.ietf.org X-Mailer: Apple Mail (2.1081) Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG Last Call request for draft-ietf-sidr-rescerts-provisioning-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 03:24:13 -0000 On 11/11/2010, at 11:22 AM, Geoff Huston wrote: > Hi, >=20 > I've revised this draft as per the feedback from the WG in today's = SIDR meeting regarding text in the Security Considerations that notes = that the protocol itself does not describe how a client and a server can = "reset" the CMS signing time attribute value >=20 > Given that this addresses the WG comments from today's session. I'd = like to request the chairs to conduct a WG Last Call for this draft. >=20 > thanks >=20 > Geoff & Byron >=20 I support this WGLC. -george= From Internet-Drafts@ietf.org Wed Nov 10 19:30:02 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 373093A69AB; Wed, 10 Nov 2010 19:30:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.159 X-Spam-Level: X-Spam-Status: No, score=-102.159 tagged_above=-999 required=5 tests=[AWL=0.440, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ps+zUaKuTh2R; Wed, 10 Nov 2010 19:30:01 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5A1103A684C; Wed, 10 Nov 2010 19:30:01 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 3.09 Message-ID: <20101111033001.11330.3897.idtracker@localhost> Date: Wed, 10 Nov 2010 19:30:01 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-rescerts-provisioning-09.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 03:30:02 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : A Protocol for Provisioning Resource Certificates Author(s) : G. Huston, et al. Filename : draft-ietf-sidr-rescerts-provisioning-09.txt Pages : 31 Date : 2010-11-10 This document defines a framework for certificate management interactions between a resource issuer ("Issuer") and a resource recipient ("Subject") through the specification of a protocol for interaction between the two parties. The protocol supports the transmission of requests from the Subject, and corresponding responses from the Issuer encompassing the actions of certificate issuance, certificate revocation and certificate status information reports. This protocol is intended to be limited to the application of resource certificate management and is not intended to be used as part of a more general certificate management framework. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-rescerts-provisioning-09.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-rescerts-provisioning-09.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-10191644.I-D@ietf.org> --NextPart-- From andrei@ripe.net Wed Nov 10 21:08:12 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1E7503A6894 for ; Wed, 10 Nov 2010 21:08:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.469 X-Spam-Level: X-Spam-Status: No, score=-102.469 tagged_above=-999 required=5 tests=[AWL=0.130, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JxKsfqOrtZmW for ; Wed, 10 Nov 2010 21:08:11 -0800 (PST) Received: from postlady.ripe.net (postlady.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1341]) by core3.amsl.com (Postfix) with ESMTP id 0A2283A6835 for ; Wed, 10 Nov 2010 21:08:08 -0800 (PST) Received: from dodo.ripe.net ([193.0.23.4]) by postlady.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PGPOd-00041G-HL; Thu, 11 Nov 2010 06:08:33 +0100 Received: from andrei.vpn.ripe.net ([193.0.21.36] helo=dhcp-76dd.meeting.ietf.org) by dodo.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PGPOc-000825-B1; Thu, 11 Nov 2010 06:08:26 +0100 Message-ID: <4CDB7A45.10700@ripe.net> Date: Thu, 11 Nov 2010 06:08:21 +0100 From: Andrei Robachevsky User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: "sidr@ietf.org wg" References: <20101111031644.1EF263A6965@core3.amsl.com> <3F59A12A-49B3-4FDE-8208-5A18FCF1BEB0@apnic.net> In-Reply-To: <3F59A12A-49B3-4FDE-8208-5A18FCF1BEB0@apnic.net> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: 4330a47f43bd7e517cd9d6f2bba43afbbeedac2a03b62e565da34583a977b7a8 X-RIPE-Spam-Level: -- X-RIPE-Signature: 4330a47f43bd7e517cd9d6f2bba43afbbeedac2a03b62e565da34583a977b7a8 Cc: sidr-chairs@tools.ietf.org Subject: Re: [sidr] WG Last Call request for draft-ietf-sidr-rescerts-provisioning-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 05:08:12 -0000 I support the WG LC. Andrei Geoff Huston wrote on 11/11/10 4:22 AM: > Hi, > > I've revised this draft as per the feedback from the WG in today's SIDR meeting regarding text in the Security Considerations that notes that the protocol itself does not describe how a client and a server can "reset" the CMS signing time attribute value > > Given that this addresses the WG comments from today's session. I'd like to request the chairs to conduct a WG Last Call for this draft. > > thanks > > Geoff & Byron > > > Begin forwarded message: > >> From: IETF I-D Submission Tool >> Date: 11 November 2010 2:16:44 PM AEDT >> To: gih@apnic.net >> Cc: robertl@apnic.net,bje@apnic.net,sra@isc.org >> Subject: New Version Notification for draft-ietf-sidr-rescerts-provisioning-09 >> >> >> A new version of I-D, draft-ietf-sidr-rescerts-provisioning-09.txt has been successfully submitted by Geoff Huston and posted to the IETF repository. >> >> Filename: draft-ietf-sidr-rescerts-provisioning >> Revision: 09 >> Title: A Protocol for Provisioning Resource Certificates >> Creation_date: 2010-11-11 >> WG ID: sidr >> Number_of_pages: 31 >> >> Abstract: >> This document defines a framework for certificate management >> interactions between a resource issuer ("Issuer") and a resource >> recipient ("Subject") through the specification of a protocol for >> interaction between the two parties. The protocol supports the >> transmission of requests from the Subject, and corresponding >> responses from the Issuer encompassing the actions of certificate >> issuance, certificate revocation and certificate status information >> reports. This protocol is intended to be limited to the application >> of resource certificate management and is not intended to be used as >> part of a more general certificate management framework. >> >> >> >> The IETF Secretariat. >> >> > > -- > > Geoff Huston > Chief Scientist, APNIC > > +61 7 3858 3100 > gih@apnic.net > > > > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr > From achi@bbn.com Thu Nov 11 02:35:39 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7651F3A694C for ; Thu, 11 Nov 2010 02:35:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_39=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7MMv2mS9SsTA for ; Thu, 11 Nov 2010 02:35:37 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id 4A0993A68B1 for ; Thu, 11 Nov 2010 02:35:36 -0800 (PST) Received: from dhcp89-089-231.bbn.com ([128.89.89.231]:57911 helo=[127.0.0.1]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PGUVh-0002zW-IW; Thu, 11 Nov 2010 05:36:05 -0500 Message-ID: <4CDBC712.3080107@bbn.com> Date: Thu, 11 Nov 2010 05:36:02 -0500 From: Andrew Chi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Sandra Murphy References: <4CDAC19A.1060208@bbn.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 10:35:39 -0000 On 11/10/2010 11:55 AM, Sandra Murphy wrote: > Can you say a bit more about how you generated this test data? Sure. This purpose of this testbed is to make sure BBN's validator is (1) correct and (2) fast enough to handle ~300,000 objects. Our testbed generation software automatically constructs one or more statistically realistic repositories, based on current counts for RPKI certificates, CRLs, ROAs, and manifests. We are *not* running up/down software. However, creating parent-child relationships in a top-down manner necessarily requires us to carry out similar request/suballocation actions in memory. The input to our testbed is a specification file that defines (1) the resources of the trust anchor, (2) a number of CA types and the *amount* of resources assigned to each type, and (3) the parent-child relationships + branching factors. For example (this isn't the exact format and there are more fields, but it gives you the main idea): [IANA] ipv4resources = 0/0 ipv6resources = ::/0 asresources = 1-4294967295 children = 5 * RIR, 1 * MISC [RIR] ipv4resources = /8, /8, /8, /23, range(129)... ipv6resources = /64, /64, /96, ... asresources = 10, 3, 78, ... children = 6 * NIR, 200 * LIR, 1 * ROA_TYPE1 [NIR] ipv4resources = ... ipv6resources = ... asresources = ... children = 100 * LIR, 1 * ROA_TYPE1 [LIR] ipv4resources = ... ipv6resources = ... asresources = ... children = 3 * ROA_TYPE1, 4 * ROA_TYPE2 [ROA_TYPE1] ... [ROA_TYPE2] ... The testbed generation program starts from the trust anchor and recursively builds an RPKI hierarchy (suballocates resources and instantiates children), based on the counts and resources defined above. There can be an arbitrary number of sections, so as we get more information about how many CAs/resources are out there, we can build a better simulation of reality. Currently, the ~12,000 objects at rpki.bbn.com are all valid, and the BBN validator can process them in under 5 minutes. However, we will be scaling to ~300,000 in the next few weeks as well as hand-constructing some error cases such as data mismatch, stale CRL/manifest, out-of-order certificate arrival, and directory being updated in the middle of an rsync. -Andrew From achi@bbn.com Thu Nov 11 02:52:12 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B6A6A3A6905 for ; Thu, 11 Nov 2010 02:52:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.539 X-Spam-Level: X-Spam-Status: No, score=-2.539 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1Okfjdmzqxt4 for ; Thu, 11 Nov 2010 02:52:11 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id C01EC3A67DB for ; Thu, 11 Nov 2010 02:52:11 -0800 (PST) Received: from dhcp89-089-231.bbn.com ([128.89.89.231]:57933 helo=[127.0.0.1]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PGUli-0003GC-Lm; Thu, 11 Nov 2010 05:52:38 -0500 Message-ID: <4CDBCAF3.2070907@bbn.com> Date: Thu, 11 Nov 2010 05:52:35 -0500 From: Andrew Chi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Andrew Chi References: <4CDAC19A.1060208@bbn.com> <4CDBC712.3080107@bbn.com> In-Reply-To: <4CDBC712.3080107@bbn.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 10:52:12 -0000 Btw, thanks to Rob Austein who generated a trust anchor locator for us (*.ita). It's published on his web page containing lots of current trust anchors: http://subvert-rpki.hactrn.net/rcynic/sample-trust-anchors -Andrew From Sandra.Murphy@cobham.com Thu Nov 11 09:44:20 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 416EB3A6970 for ; Thu, 11 Nov 2010 09:44:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.266 X-Spam-Level: X-Spam-Status: No, score=-2.266 tagged_above=-999 required=5 tests=[AWL=0.333, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h+yRZwJ5HAho for ; Thu, 11 Nov 2010 09:44:18 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 5C2233A694A for ; Thu, 11 Nov 2010 09:44:18 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oABHijDW023414; Thu, 11 Nov 2010 11:44:45 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oABHijte016659; Thu, 11 Nov 2010 11:44:46 -0600 Received: from sparta.com ([130.129.72.242]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Thu, 11 Nov 2010 12:44:45 -0500 Date: Thu, 11 Nov 2010 12:44:41 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: Andrew Chi In-Reply-To: <4CDBC712.3080107@bbn.com> Message-ID: References: <4CDAC19A.1060208@bbn.com> <4CDBC712.3080107@bbn.com> User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-OriginalArrivalTime: 11 Nov 2010 17:44:45.0836 (UTC) FILETIME=[211074C0:01CB81C8] Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 17:44:20 -0000 Thanks for all the info, Andrew. On Thu, 11 Nov 2010, Andrew Chi wrote: > On 11/10/2010 11:55 AM, Sandra Murphy wrote: >> Can you say a bit more about how you generated this test data? > > Sure. This purpose of this testbed is to make sure BBN's validator is (1) > correct and (2) fast enough to handle ~300,000 objects. Our testbed > generation software automatically constructs one or more statistically > realistic repositories, based on current counts for RPKI certificates, CRLs, > ROAs, and manifests. What's your idea of when the software would be validating all 300K entries at once, and would need to do so quickly? > > We are *not* running up/down software. However, creating parent-child > relationships in a top-down manner necessarily requires us to carry out > similar request/suballocation actions in memory. > > The input to our testbed is a specification file that defines (1) the > resources of the trust anchor, (2) a number of CA types and the *amount* of > resources assigned to each type, and (3) the parent-child relationships + > branching factors. CA "types"?? --Sandy From rogaglia@cisco.com Fri Nov 12 06:14:20 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F2B3B3A6A37 for ; Fri, 12 Nov 2010 06:14:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lqbZsM0PBK74 for ; Fri, 12 Nov 2010 06:14:19 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by core3.amsl.com (Postfix) with ESMTP id 4DE443A6837 for ; Fri, 12 Nov 2010 06:14:18 -0800 (PST) Authentication-Results: ams-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: smime.p7s : 3815 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ArEEADva3EyQ/khMgWdsb2JhbACiURUBARYiIqMImzyFSgSKVw X-IronPort-AV: E=Sophos;i="4.59,188,1288569600"; d="p7s'?scan'208";a="13222596" Received: from ams-core-3.cisco.com ([144.254.72.76]) by ams-iport-2.cisco.com with ESMTP; 12 Nov 2010 14:14:50 +0000 Received: from dhcp-144-254-20-191.cisco.com (dhcp-144-254-20-191.cisco.com [144.254.20.191]) by ams-core-3.cisco.com (8.14.3/8.14.3) with ESMTP id oACEEoeR008070 for ; Fri, 12 Nov 2010 14:14:50 GMT From: Roque Gagliano Content-Type: multipart/signed; boundary=Apple-Mail-214--121027922; protocol="application/pkcs7-signature"; micalg=sha1 Date: Fri, 12 Nov 2010 15:15:00 +0100 Message-Id: To: "sidr@ietf.org wg" Mime-Version: 1.0 (Apple Message framework v1082) X-Mailer: Apple Mail (2.1082) Subject: [sidr] Top-Down vs Laissez-faire algorithm transition model. X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Nov 2010 14:14:20 -0000 --Apple-Mail-214--121027922 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Dear WG, At the Maastricht meeting, we recommended the WG to adopt the top-down = approach for the algorithm transition document. At that time, the WG = directed us to try the Laissez-Faire model. At yesterday's meeting, after further analysis on impact of that = decision and changes needed to existing protocols, the consensus was to = reverse that position and adopt only the Top-Down model. I am planning to write a new (and simplified) version of the document = using the Top-Down model. If there is anyone that objects this change, = please speak-up. Regards, Roque.= --Apple-Mail-214--121027922 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKHjCCBMww ggQ1oAMCAQICEByunWua9OYvIoqj2nRhbB4wDQYJKoZIhvcNAQEFBQAwXzELMAkGA1UEBhMCVVMx FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAxIFB1YmxpYyBQcmltYXJ5 IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA1MTAyODAwMDAwMFoXDTE1MTAyNzIzNTk1OVow gd0xCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNp Z24gVHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZl cmlzaWduLmNvbS9ycGEgKGMpMDUxHjAcBgNVBAsTFVBlcnNvbmEgTm90IFZhbGlkYXRlZDE3MDUG A1UEAxMuVmVyaVNpZ24gQ2xhc3MgMSBJbmRpdmlkdWFsIFN1YnNjcmliZXIgQ0EgLSBHMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMnfrOfq+PgDFMQAktXBfjbCPO98chXLwKuMPRyV zm8eECw/AO2XJua2x+atQx0/pIdHR0w+VPhs+Mf8sZ69MHC8l7EDBeqV8a1AxUR6SwWi8mD81zpl Yu//EHuiVrvFTnAt1qIfPO2wQuhejVchrKaZ2RHp0hoHwHRHQgv8xTTq/ea6JNEdCBU3otdzzwFB L2OyOj++pRpu9MlKWz2VphW7NQIZ+dTvvI8OcXZZu0u2Ptb8Whb01g6J8kn+bAztFenZiHWcec5g J925rXXOL3OVekA6hXVJsLjfaLyrzROChRFQo+A8C67AClPN1zBvhTJGG+RJEMJs4q8fef/btLUC AwEAAaOCAYQwggGAMBIGA1UdEwEB/wQIMAYBAf8CAQAwRAYDVR0gBD0wOzA5BgtghkgBhvhFAQcX ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMAsGA1UdDwQEAwIB BjARBglghkgBhvhCAQEEBAMCAQYwLgYDVR0RBCcwJaQjMCExHzAdBgNVBAMTFlByaXZhdGVMYWJl bDMtMjA0OC0xNTUwHQYDVR0OBBYEFBF9Xhl9PATfamzWoooaPzHYO5RSMDEGA1UdHwQqMCgwJqAk oCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTEuY3JsMIGBBgNVHSMEejB4oWOkYTBfMQsw CQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDEgUHVi bGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHmCEQDNun9W8N/kvFT+IqyzcqpVMA0G CSqGSIb3DQEBBQUAA4GBALEv2ZbhkqLugWDlyCog++FnLNYAmFOjAhvpkEv4GESfD0b3+qD+0x0Y o9K/HOzWGZ9KTUP4yru+E4BJBd0hczNXwkJavvoAk7LmBDGRTl088HMFN2Prv4NZmP1m3umGMpqS KTw6rlTaphJRsY/IytNHeObbpR6HBuPRFMDCIfa6MIIFSjCCBDKgAwIBAgIQL5vTKNUCwWQOjacT KoWGmzANBgkqhkiG9w0BAQUFADCB3TELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJ bmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1 c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEeMBwGA1UECxMVUGVyc29u YSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAxIEluZGl2aWR1YWwgU3Vi c2NyaWJlciBDQSAtIEcyMB4XDTEwMDUxMjAwMDAwMFoXDTExMDUxMjIzNTk1OVowggETMRcwFQYD VQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazFGMEQG A1UECxM9d3d3LnZlcmlzaWduLmNvbS9yZXBvc2l0b3J5L1JQQSBJbmNvcnAuIGJ5IFJlZi4sTElB Qi5MVEQoYyk5ODEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTMwMQYDVQQLEypEaWdp dGFsIElEIENsYXNzIDEgLSBOZXRzY2FwZSBGdWxsIFNlcnZpY2UxFzAVBgNVBAMUDlJvcXVlIEdh Z2xpYW5vMSEwHwYJKoZIhvcNAQkBFhJyb2dhZ2xpYUBjaXNjby5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDGyowL31WLYDEbY59gvyg0OcBMh/AqsE5EpWzobCsYs1secYJvZlKm 5+2CjNWTQziHYo19cp7DG9XDLLGdLW7HC0VikR65cxIURXJoUKQO3QJYV99mrtnwCKf/FyzxeF11 pRILFbkgvpAZjCLig/RgNLt5cGGl8FGCe22sBWdBxU+sQiffsS774edvd3xFiRPaB/sOVPc4fbvw twOkEuas4IaH9Oivt1ZUvrFmBnS8mCYbk0OKjKjIEeS62TPsGCZv3f9Ffgm0Az4On6MiP1dARKp/ it5aow047hoFNXFCsWVLeEyDLk3avqS3/9fH//9NWvj0Mq/FhkaEw4Sv66TLAgMBAAGjgcwwgckw CQYDVR0TBAIwADBEBgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LnZlcmlzaWduLmNvbS9ycGEwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwME BggrBgEFBQcDAjBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vSW5kQzFEaWdpdGFsSUQtY3JsLnZl cmlzaWduLmNvbS9JbmRDMURpZ2l0YWxJRC5jcmwwDQYJKoZIhvcNAQEFBQADggEBAIxI8f9LAL0e mThKlUnwxlBH+q2htxBy9vBt24uGl8dunGyK4Aq7PAQiCF2XJfM2sWSRpdkIdbd9cD5upkcteP4s pL/T85qsfT1dLiQDTZ6/o19umk6DkqG0DpR+n+7jTUGdCzDhhzTZZblqY0afimcQ79uqZcF5ojDl N5Np93N3djqAmD37aKG1KE8xzBP0WiwxfVIGYua098YIsioWb0zvGmPd9JdMO55+jwkjFAOsT5kK ivXkjDnZJ1HM8GVQjGPnYBDEJBmC2B+kdbpi17cntYE/6V/SgrpB4t14YuswgMYRh1lGP7eKiiAj mwnaJL9aMMrqBwHLY/BLEA+3hRsxggSLMIIEhwIBATCB8jCB3TELMAkGA1UEBhMCVVMxFzAVBgNV BAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYD VQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEe MBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAx IEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYabMAkGBSsOAwIa BQCgggJtMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEwMTExMjE0 MTUwMVowIwYJKoZIhvcNAQkEMRYEFOBg5+1et/cURm0MF4pUp6T6cuPuMIIBAwYJKwYBBAGCNxAE MYH1MIHyMIHdMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsT FlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1zIG9mIHVzZSBhdCBodHRwczov L3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTA1MR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0 ZWQxNzA1BgNVBAMTLlZlcmlTaWduIENsYXNzIDEgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBIC0g RzICEC+b0yjVAsFkDo2nEyqFhpswggEFBgsqhkiG9w0BCRACCzGB9aCB8jCB3TELMAkGA1UEBhMC VVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3 b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3Jw YSAoYykwNTEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2ln biBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYab MA0GCSqGSIb3DQEBAQUABIIBAAcBuWH5+S5fnCVOMAYakGu9Y1PJ2bq0JFXe8OgsTmo/794JVLgg D9GIB3z4pnkgqHGIRTb7iKT/LE4I/hCtGdGfu7GEZnbwX/5rA6uBIEPdm1eLRLypZ3wz8Ls/Vn6F sIftN+d51+4QoH9BjWTVz5Gv/ZiwdgV7QIlf+3uftLEqrMlfjdMRDiWle9ZhCtSnh6ao5W3IgUqv qYfR16Lp2O5r7N8nhEnG5jQltTyNpC6IxgdqAFAROM5qAUSHYtiqw0B2N7Ltsbe3vxAavSufMirp 4Eo8b4T259hLHjch8wu2hs50YTqAbdoSoURI2Oy0vW7MaruwrKpbuw30jLcIs4sAAAAAAAA= --Apple-Mail-214--121027922-- From kent@bbn.com Mon Nov 15 07:11:01 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3453828C14D for ; Mon, 15 Nov 2010 07:11:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.063 X-Spam-Level: X-Spam-Status: No, score=-101.063 tagged_above=-999 required=5 tests=[AWL=-1.108, BAYES_50=0.001, DATE_IN_PAST_03_06=0.044, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mumsf6uYf2NR for ; Mon, 15 Nov 2010 07:10:58 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id C1E9328C13F for ; Mon, 15 Nov 2010 07:10:56 -0800 (PST) Received: from dommiel.bbn.com ([192.1.122.15]:38813 helo=[193.0.26.46]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PI0iV-0008RX-60; Mon, 15 Nov 2010 10:11:35 -0500 Mime-Version: 1.0 Message-Id: In-Reply-To: References: <4CDAC19A.1060208@bbn.com> <4CDBC712.3080107@bbn.com> Date: Mon, 15 Nov 2010 04:21:09 -0500 To: Sandra Murphy From: Stephen Kent Content-Type: text/plain; charset="us-ascii" ; format="flowed" Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Nov 2010 15:11:01 -0000 At 12:44 PM -0500 11/11/10, Sandra Murphy wrote: >Thanks for all the info, Andrew. > >On Thu, 11 Nov 2010, Andrew Chi wrote: > >>On 11/10/2010 11:55 AM, Sandra Murphy wrote: >>>Can you say a bit more about how you generated this test data? >> >>Sure. This purpose of this testbed is to make sure BBN's validator >>is (1) correct and (2) fast enough to handle ~300,000 objects. Our >>testbed generation software automatically constructs one or more >>statistically realistic repositories, based on current counts for >>RPKI certificates, CRLs, ROAs, and manifests. > >What's your idea of when the software would be validating all 300K >entries at once, and would need to do so quickly?, If an RTP looses state it will need to download and process all the RPKI data. Steve From Sandra.Murphy@cobham.com Mon Nov 15 07:29:32 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EFD6B28C185 for ; Mon, 15 Nov 2010 07:29:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.001 X-Spam-Level: X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[BAYES_50=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AYSzKVpOXMD9 for ; Mon, 15 Nov 2010 07:29:32 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 0E1B628C184 for ; Mon, 15 Nov 2010 07:29:31 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAFFUAiQ031932; Mon, 15 Nov 2010 09:30:10 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAFFUA9S011774; Mon, 15 Nov 2010 09:30:10 -0600 Received: from sparta.com ([193.0.24.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Mon, 15 Nov 2010 10:30:06 -0500 Date: Mon, 15 Nov 2010 10:30:04 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: Stephen Kent In-Reply-To: Message-ID: References: <4CDAC19A.1060208@bbn.com> <4CDBC712.3080107@bbn.com> User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 15 Nov 2010 15:30:06.0465 (UTC) FILETIME=[FB094710:01CB84D9] Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Nov 2010 15:29:33 -0000 On Mon, 15 Nov 2010, Stephen Kent wrote: > At 12:44 PM -0500 11/11/10, Sandra Murphy wrote: >> Thanks for all the info, Andrew. >> >> On Thu, 11 Nov 2010, Andrew Chi wrote: >> >>> On 11/10/2010 11:55 AM, Sandra Murphy wrote: >>>> Can you say a bit more about how you generated this test data? >>> >>> Sure. This purpose of this testbed is to make sure BBN's validator is (1) >>> correct and (2) fast enough to handle ~300,000 objects. Our testbed >>> generation software automatically constructs one or more statistically >>> realistic repositories, based on current counts for RPKI certificates, >>> CRLs, ROAs, and manifests. >> >> What's your idea of when the software would be validating all 300K entries >> at once, and would need to do so quickly?, > > If an RTP looses state it will need to download and process all the RPKI > data. So at startup kind of events. I get that. But what is the "fast enough" part of Andrew's statement? I speculated that this might mean "fast enough to avoid delaying any updates" but that seems a very strong goal. --Sandy > > Steve > From achi@bbn.com Mon Nov 15 07:59:31 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BC45B3A6CCE for ; Mon, 15 Nov 2010 07:59:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.549 X-Spam-Level: X-Spam-Status: No, score=-2.549 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XzOY311g+7o5 for ; Mon, 15 Nov 2010 07:59:31 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id A6CF228C18D for ; Mon, 15 Nov 2010 07:59:28 -0800 (PST) Received: from dhcp89-089-231.bbn.com ([128.89.89.231]:49659 helo=[127.0.0.1]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PI1TU-0009Uo-Ec; Mon, 15 Nov 2010 11:00:08 -0500 Message-ID: <4CE15905.8050808@bbn.com> Date: Mon, 15 Nov 2010 11:00:05 -0500 From: Andrew Chi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Sandra Murphy References: <4CDAC19A.1060208@bbn.com> <4CDBC712.3080107@bbn.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Nov 2010 15:59:31 -0000 On 11/15/2010 10:30 AM, Sandra Murphy wrote: > > > On Mon, 15 Nov 2010, Stephen Kent wrote: > >>>> On 11/10/2010 11:55 AM, Sandra Murphy wrote: >>> >>> What's your idea of when the software would be validating all 300K >>> entries at once, and would need to do so quickly?, >> >> If an RTP looses state it will need to download and process all the RPKI >> data. > > So at startup kind of events. I get that. But what is the "fast enough" > part of Andrew's statement? I speculated that this might mean "fast > enough to avoid delaying any updates" but that seems a very strong goal. > I think there are two aspects to "fast enough". 1) The "startup" cost of downloading and processing all RPKI data needs to be on the order of hours and not days. 2) The "update" cost of synchronizing changes to the repository must not cause the validator to fall behind the rate of change in the repository. I.e., once we have a large collection of objects, is the slightly-increased marginal cost of modifying one file within acceptable limits? I believe our RP software is well within these goals, but it's always good to test scalability assumptions like these. As for the 300K estimate, I'm happy to be corrected, but the order of magnitude ought to be similar to: (# AS's participating in BGP routing) x (small multiplier for crls, manifest, and tree structure) In October 2009, RIPE published an AS count of 15,495. If anyone else has better numbers, please feel free to chime in. -Andrew From randy@psg.com Mon Nov 15 08:11:36 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DC96F28C185 for ; Mon, 15 Nov 2010 08:11:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.535 X-Spam-Level: X-Spam-Status: No, score=-2.535 tagged_above=-999 required=5 tests=[AWL=0.064, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S53e86h1-Lbb for ; Mon, 15 Nov 2010 08:11:34 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36]) by core3.amsl.com (Postfix) with ESMTP id AD74628C0D0 for ; Mon, 15 Nov 2010 08:11:30 -0800 (PST) Received: from localhost ([127.0.0.1] helo=rmac.psg.com.psg.com) by ran.psg.com with esmtp (Exim 4.72 (FreeBSD)) (envelope-from ) id 1PI1f7-000P2y-I0; Mon, 15 Nov 2010 16:12:09 +0000 Date: Mon, 15 Nov 2010 17:12:07 +0100 Message-ID: From: Randy Bush To: Andrew Chi In-Reply-To: <4CE15905.8050808@bbn.com> References: <4CDAC19A.1060208@bbn.com> <4CDBC712.3080107@bbn.com> <4CE15905.8050808@bbn.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Nov 2010 16:11:37 -0000 > 1) The "startup" cost of downloading and processing all RPKI data needs > to be on the order of hours and not days. no, it has to be minutes not hours > As for the 300K estimate, I'm happy to be corrected, but the order of > magnitude ought to be similar to: > > (# AS's participating in BGP routing) x (small multiplier for crls, > manifest, and tree structure) plus roas (300k now, 1m soon enough), plus ghostbusters (o(certs)) randy From ggm@apnic.net Mon Nov 15 08:12:00 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 60AD928C19C for ; Mon, 15 Nov 2010 08:12:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.961 X-Spam-Level: X-Spam-Status: No, score=0.961 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_DHCP=1.398, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EBxwGvZQx5tx for ; Mon, 15 Nov 2010 08:11:59 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id C9AA828C19B for ; Mon, 15 Nov 2010 08:11:58 -0800 (PST) Received: from dhcp-26-224.ripemtg.ripe.net (unknown [193.0.26.224]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 98CDCD5953; Tue, 16 Nov 2010 02:12:37 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: George Michaelson In-Reply-To: <4CE15905.8050808@bbn.com> Date: Mon, 15 Nov 2010 17:12:33 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <4CDAC19A.1060208@bbn.com> <4CDBC712.3080107@bbn.com> <4CE15905.8050808@bbn.com> To: Andrew Chi X-Mailer: Apple Mail (2.1082) Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Nov 2010 16:12:00 -0000 On 15/11/2010, at 5:00 PM, Andrew Chi wrote: >=20 > I think there are two aspects to "fast enough". >=20 > 1) The "startup" cost of downloading and processing all RPKI data = needs to be on the order of hours and not days. >=20 > 2) The "update" cost of synchronizing changes to the repository must = not cause the validator to fall behind the rate of change in the = repository. I.e., once we have a large collection of objects, is the = slightly-increased marginal cost of modifying one file within acceptable = limits? >=20 > I believe our RP software is well within these goals, but it's always = good to test scalability assumptions like these. >=20 > As for the 300K estimate, I'm happy to be corrected, but the order of = magnitude ought to be similar to: >=20 > (# AS's participating in BGP routing) x (small multiplier for crls, = manifest, and tree structure) >=20 > In October 2009, RIPE published an AS count of 15,495. If anyone else = has better numbers, please feel free to chime in. >=20 > -Andrew >=20 Your thinking models my assumptions. I did a tree of around 30,000 objects. This was based on a distribution = of the resource pool to the entity count I saw from delegated files, = bearing in mind the number of ASN. But, because we have split roots, and each RIR has to cross authenticate = for ERX (historical) data, I made substate for my modelled clients that = made them hold a distribution of resource under multiple chains, some = from their 'main' RIR, and some from other RIR via indirect chains. I didn't do roa. they didn't exist in code at the time they would have = added 10-20,000 more objects. Likewise manifests. So my total size was 30k, but it would have been of the order 100k once = I add in what we have now as required structure. I also did sqldb for indexing. It makes things much faster to have = direct index to SKI, AKI, date/age and valid/invalid state flags.=20 I last ran this around June 2007 btw. cheers -george From Sandra.Murphy@cobham.com Mon Nov 15 08:31:20 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A7A6628C19A for ; Mon, 15 Nov 2010 08:31:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.299 X-Spam-Level: X-Spam-Status: No, score=-1.299 tagged_above=-999 required=5 tests=[AWL=1.300, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zo6Mvqf90z-p for ; Mon, 15 Nov 2010 08:31:13 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id A7E1C3A6B8E for ; Mon, 15 Nov 2010 08:31:13 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAFGVlS5000917; Mon, 15 Nov 2010 10:31:47 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAFGVkEH015690; Mon, 15 Nov 2010 10:31:46 -0600 Received: from sparta.com ([193.0.24.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Mon, 15 Nov 2010 11:31:46 -0500 Date: Mon, 15 Nov 2010 11:31:44 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: George Michaelson In-Reply-To: Message-ID: References: <4CDAC19A.1060208@bbn.com> <4CDBC712.3080107@bbn.com> <4CE15905.8050808@bbn.com> User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-OriginalArrivalTime: 15 Nov 2010 16:31:46.0645 (UTC) FILETIME=[9883F050:01CB84E2] Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Nov 2010 16:31:20 -0000 On Mon, 15 Nov 2010, George Michaelson wrote: > > On 15/11/2010, at 5:00 PM, Andrew Chi wrote: > > >> >> I think there are two aspects to "fast enough". >> >> 1) The "startup" cost of downloading and processing all RPKI data needs to be on the order of hours and not days. >> >> 2) The "update" cost of synchronizing changes to the repository must not cause the validator to fall behind the rate of change in the repository. I.e., once we have a large collection of objects, is the slightly-increased marginal cost of modifying one file within acceptable limits? >> >> I believe our RP software is well within these goals, but it's always good to test scalability assumptions like these. >> >> As for the 300K estimate, I'm happy to be corrected, but the order of magnitude ought to be similar to: >> >> (# AS's participating in BGP routing) x (small multiplier for crls, manifest, and tree structure) >> >> In October 2009, RIPE published an AS count of 15,495. If anyone else has better numbers, please feel free to chime in. >> >> -Andrew >> > > Your thinking models my assumptions. > > I did a tree of around 30,000 objects. This was based on a distribution of the resource pool to the entity count I saw from delegated files, bearing in mind the number of ASN. > > But, because we have split roots, and each RIR has to cross authenticate for ERX (historical) data, I made substate for my modelled clients that made them hold a distribution of resource under multiple chains, some from their 'main' RIR, and some from other RIR via indirect chains. > > I didn't do roa. they didn't exist in code at the time they would have added 10-20,000 more objects. Likewise manifests. > > So my total size was 30k, but it would have been of the order 100k once I add in what we have now as required structure. > > I also did sqldb for indexing. It makes things much faster to have direct index to SKI, AKI, date/age and valid/invalid state flags. > > I last ran this around June 2007 btw. Can you share the results? --Sandy > > cheers > > -george > > > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr > From ggm@apnic.net Mon Nov 15 08:36:44 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8ECA128C185 for ; Mon, 15 Nov 2010 08:36:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.961 X-Spam-Level: X-Spam-Status: No, score=0.961 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_DHCP=1.398, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ci1gga08h2Eo for ; Mon, 15 Nov 2010 08:36:43 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 171EF3A6BAA for ; Mon, 15 Nov 2010 08:36:43 -0800 (PST) Received: from dhcp-26-224.ripemtg.ripe.net (unknown [193.0.26.224]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 2EBE6D5953 for ; Tue, 16 Nov 2010 02:37:22 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1082) From: George Michaelson In-Reply-To: Date: Mon, 15 Nov 2010 17:37:19 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <6F994527-0F33-49F6-9BCD-D3E30BFB76DF@apnic.net> References: <4CDAC19A.1060208@bbn.com> <4CDBC712.3080107@bbn.com> <4CE15905.8050808@bbn.com> To: sidr wg X-Mailer: Apple Mail (2.1082) Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Nov 2010 16:36:44 -0000 On 15/11/2010, at 5:31 PM, Sandra Murphy wrote: >>=20 >> I last ran this around June 2007 btw. >=20 > Can you share the results? >=20 > --Sandy >=20 Nothing formal written up sandy. And, Randy is right. the size of the datapool is not my 'bang all = resources in one roa' but the total number of discrete routes in the BGP = cloud: if you fold them all into one uber ROA you fate share the age = date of the resources. And, not all resources lie under one cert chain = anyway so you wind up unable to combine them into one cert. So, the experience of a 30k tree won't inform the 300,000 tree, or the = million-tree. Not enough. The churn rate is a function of several things, every CRL is updated, as = is a manifest, each cycle time. So, there are many non-ROA objects = changing. No manifests or Roas in my testbed. But, on the plus side, rsync is pretty quick.=20 -G From achi@bbn.com Mon Nov 15 08:45:55 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9ECD628C170 for ; Mon, 15 Nov 2010 08:45:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.556 X-Spam-Level: X-Spam-Status: No, score=-2.556 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H-ZKsgFEWseR for ; Mon, 15 Nov 2010 08:45:54 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id C45223A6CD2 for ; Mon, 15 Nov 2010 08:45:54 -0800 (PST) Received: from dhcp89-089-231.bbn.com ([128.89.89.231]:49714 helo=[127.0.0.1]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PI2CS-000Afm-8W; Mon, 15 Nov 2010 11:46:36 -0500 Message-ID: <4CE163E9.40607@bbn.com> Date: Mon, 15 Nov 2010 11:46:33 -0500 From: Andrew Chi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Sandra Murphy References: <4CDAC19A.1060208@bbn.com> <4CDBC712.3080107@bbn.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Nov 2010 16:45:55 -0000 On 11/11/2010 12:44 PM, Sandra Murphy wrote: >> The input to our testbed is a specification file that defines (1) the >> resources of the trust anchor, (2) a number of CA types and the >> *amount* of resources assigned to each type, and (3) the parent-child >> relationships + branching factors. > > CA "types"?? Sorry, unfortunate terminology. Internally we call them "CA blueprints" or "CA factories". In the RPKI, obviously nothing distinguishes an RIR CA cert from anyone else's CA cert. However, for hierarchy generation purposes, there are significant differences between: 1. RIRs (they all have very different distributions of resources) 2. Large ISPs (a small number of these with a large amount of resources) 3. Small ISPs (a large number of these with few resources) We model this by allowing the definition of an arbitrary number of blueprints for CAs and ROAs. These blueprints do not contain specific resources ("110.35/16") but rather amounts of resources ("/16"). Blueprints also contain a list of pointers to other blueprints (for future children). To instantiate a child CA, start from an already instantiated parent, suballocate the appropriate amount of resources as defined by the child's blueprint, and create/sign the appropriate child certificate. Then, take the child's "future children" blueprints (i.e. for grandchildren) and append to a todo list. Process the todo list using the same procedure. Clear as mud? -Andrew From kotikalapudi.sriram@nist.gov Mon Nov 15 15:27:14 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3EAD428C174 for ; Mon, 15 Nov 2010 15:27:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rs8UiFtC657L for ; Mon, 15 Nov 2010 15:27:13 -0800 (PST) Received: from smtp.nist.gov (rimp2.nist.gov [129.6.16.227]) by core3.amsl.com (Postfix) with ESMTP id D95D028C103 for ; Mon, 15 Nov 2010 15:27:12 -0800 (PST) Received: from WSXGHUB2.xchange.nist.gov (WSXGHUB2.xchange.nist.gov [129.6.18.19]) by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id oAFNRhxg023937; Mon, 15 Nov 2010 18:27:44 -0500 Received: from MBCLUSTER.xchange.nist.gov ([fe80::41df:f63f:c718:e08]) by WSXGHUB2.xchange.nist.gov ([129.6.18.19]) with mapi; Mon, 15 Nov 2010 18:27:22 -0500 From: "Sriram, Kotikalapudi" To: Geoff Huston , "sidr@ietf.org wg" Date: Mon, 15 Nov 2010 18:27:36 -0500 Thread-Topic: [sidr] WG Last Call Request for draft-ietf-sidr-roa-validation-10 Thread-Index: AcuBRePw3qkHNJAHQlaLOGrYHTX9CAD004yA Message-ID: References: <20101111020725.D08B63A68C8@core3.amsl.com> <72030833-DB5D-48F6-A9AA-C0A579646727@apnic.net> In-Reply-To: <72030833-DB5D-48F6-A9AA-C0A579646727@apnic.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 X-NIST-MailScanner: Found to be clean X-NIST-MailScanner-From: kotikalapudi.sriram@nist.gov Subject: Re: [sidr] WG Last Call Request for draft-ietf-sidr-roa-validation-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Nov 2010 23:27:14 -0000 This comment applies to draft-ietf-sidr-roa-validation and also to draft-ietf-sidr-pfx-validate-00. One additional question that I feel the origin validation algorithms need to consider is as follows. Should there be a fourth Validation state added to the existing three? 1. Valid 2. Valid-i (Valid - imperfect; AS matches but max-length exceeded) -- proposed new state 3. Unknown (or Not Found) 4. Invalid The rationale for the proposed additional state "Valid-i" is as follows. Let us say a prefix owner has prefix 10.1.0.0/20 and also own AS1. He has a ROA registered: {10.1.0.0/20, AS1, maxlength = 22}, and has announced 10.1.0.0/20 with origin AS = AS1. An adversary has AS2, and announces 10.1.0.0/23 with origin AS = AS2. During partial deployment, the adversary's announcement gets accepted in routing tables because potentially the /23 could be a suballocation to a customer with AS2 that does not have a ROA yet. The legitimate prefix owner detects that there is a hijack attempt, and then announces 10.1.0.0/23 with origin AS = AS1 in order to recover quickly at least some of the traffic. But both the hijack update of the adversary as well as the recovery update of the legitimate prefix owner for 10.1.0.0/23 will be marked as "Invalid". The legitimate prefix owner has no advantage over the hijacker! I think this is not desirable. The origin AS in the recovery update matches that in the ROA, except that the legitimate owner has momentarily exceeded the maxlength in order to recover his hijacked subprefix. If we introduce the additional validation state "Valid-i" as described above, then this undue disadvantage for the legitimate owner can be mitigated. Routers will give higher preference for "Valid-i" over "Invalid" and thus mitigate the problem stated above. The same principles will apply if the legitimate prefix owner wants to recover his traffic by announcing even more specific /24s. Sriram > -----Original Message----- > From: sidr-bounces@ietf.org [mailto:sidr-bounces@ietf.org] On Behalf Of Geoff Huston > Sent: Wednesday, November 10, 2010 9:12 PM > To: sidr@ietf.org wg > Cc: sidr-chairs@tools.ietf.org > Subject: [sidr] WG Last Call Request for draft-ietf-sidr-roa-validation-10 > > Hi, > > We've revised this draft as per the informal poll of the WG in today's SIDR meeting > regarding the text concerning a "origin AS" when the AS_PATH contain as AS_SET path > element. > > We request the chairs to conduct a WG Last Call for this draft. > > thanks > > Geoff & George > From mingui@huawei.com Mon Nov 15 17:20:05 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6C63C28C1C8 for ; Mon, 15 Nov 2010 17:20:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A8rDsMR8swYB for ; Mon, 15 Nov 2010 17:20:05 -0800 (PST) Received: from szxga03-in.huawei.com (unknown [119.145.14.66]) by core3.amsl.com (Postfix) with ESMTP id CB03528C1E5 for ; Mon, 15 Nov 2010 17:20:03 -0800 (PST) Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0LBY00BB6EE1RP@szxga03-in.huawei.com> for sidr@ietf.org; Tue, 16 Nov 2010 09:20:26 +0800 (CST) Received: from huawei.com ([172.24.2.119]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0LBY003I2EE1YQ@szxga03-in.huawei.com> for sidr@ietf.org; Tue, 16 Nov 2010 09:20:25 +0800 (CST) Received: from z00171239 ([10.110.98.39]) by szxml06-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0LBY006GNEDY0S@szxml06-in.huawei.com> for sidr@ietf.org; Tue, 16 Nov 2010 09:20:25 +0800 (CST) Date: Tue, 16 Nov 2010 09:20:22 +0800 From: =?gb2312?B?1cXD8bnz?= To: sidr@ietf.org Message-id: <9156C6CB4E5D417FA9A85C01121C1FB9@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.5931 X-Mailer: Microsoft Office Outlook 11 Content-type: multipart/mixed; boundary="Boundary_(ID_ICuXPqK3RSSyye5ZlJOrzw)" Thread-index: AcuFLHChCBnCkr5fTZ2tm7NaJ7fbww== Subject: [sidr] To request your comments on the new draft X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 01:20:08 -0000 This is a multi-part message in MIME format. --Boundary_(ID_ICuXPqK3RSSyye5ZlJOrzw) Content-type: text/plain; charset=gb2312 Content-transfer-encoding: 7BIT Dear SIDR members, A presentation for my draft was given on the SIDR meeting in IETF 79. It was really appreciated that the SIDR working group gave me this opportunity. The comments offered by the meeting attendees were valuable and helpful. This draft is all about the security of BGP which is the mainstream of Inter-Domain routing protocol today. This draft proposes a novel mitigation scheme to protect the inter-domain data delivery during false routing announcements. A new optional and transitive path attribute is defined to Decouple propagation of a path and adoption of a path for data forwarding in BGP (DBGP). DBGP does not use suspicious paths for data forwarding, but still propagates them in the routing system to facilitate attack detection. It can extensively protect data delivery from routing announcements of false sub-prefixes, false origins, false nodes and false links, and works well with ongoing attack detection and prevention systems. Although the title of SIDR working group is called Secure Inter-Domain Routing, all works are confined to the solutions based on PKI. I guess that was why one attendee proposed that DBGP was not proper for SIDR working group. I knew DBGP does not fit the traditional style of solutions in SIDR. In fact, the draft was submitted to IDR. I gave presentation in SIDR since there were experts on the security of BGP and we can get comments to help us improve. Of course, if you ever thought that we should let in some fresh air on securing inter-domain routing, I would love to be included. One attendee said that the introduction of new path attribute will certainly increase the complexity of BGP, which will not appeal to the operators. The design of DBGP is made to be as simple as possible. Only one optional path attribute is added to the plain BGP. In addition, DBGP can be incrementally deployed across the whole Internet. ISPs can make their own decision on whether to adopt it or not. From the evaluation results, one can found that with only a small deployment rate, a large proportion of ASes are protected from being attacked. I heard that "draft-ietf-idr-add-paths-04.txt" had just been accepted as an WG document in IETF 79. In this draft, a more complex path attribute was devised. The meeting minutes, the slides and the draft itself are all attached for your information. Do you have additional comments, please send us emails. Best Regards, Mingui Zhang --Boundary_(ID_ICuXPqK3RSSyye5ZlJOrzw) Content-type: text/plain; name="meeting munites of DBGP.txt" Content-transfer-encoding: quoted-printable Content-disposition: attachment; filename="meeting munites of DBGP.txt" Q: Please go back to slide 7 please. X which is generating the bad = prefix. This working group has been about, has been doing that, you = know, doing that which is using the certificate PKI infrastructure to = validate or invalidate a route. Could you go to you next slide please. = And the propagation of bad information belongs to the work of the IDR = working group. A: Because our solution is based on plain BGP and we presume that PKI = are not widely used in today's Internet. DBGP can collaborate with the = solutions based on PKI together to protect the data delivery in BGP. = Although the title of SIDR working group is called Secure Inter-Domain = Routing, all works are confined to the solutions based on PKI. I guess = that was why you propose that DBGP was not proper for SIDR working = group. I knew DBGP does not fit the traditional style of solutions in = SIDR. In fact, the draft was submitted to IDR. I gave presentation in = SIDR since there were experts on the security of BGP and we can get = comments to help us improve. Of course, if you ever thought that we = should let in some fresh air on securing inter-domain routing, I would = love to be included. Q: On slide number 8 on the second bullet you propose enabling parallel = validation. How do you suppose to do validation? A: In DBGP, we do not reject that validation solutions proposed in SIDR. = Actually they can cooperate. While the "validation" we assumed in our = implementation were simply systems that were using the historical data = base to do filtering, rather than the traditional validation in SIDR. Q: I certainly appreciate the idea of identifying suspicious information = and making that available to potential registered parties. I think = something can improve there in operational operators in helping protocol = proposals and so on. There certainly good ways. As an operator, I am = really horrified by the idea we ask our appreciated vendors to flow in = an additional complexity into the BGP. So that additional information = that is not really needed for the operation is handled in some ways and = takes more resources in our routers. The central thing is the addition = in complexity of the BGP implementations in the regular production = routers is something that is really unwanted from operators. If you were = saying this is proposal to set up some BGP listener on the free on the = open source ware, open BGP implementation box sitting on the site = valuating staff. That would not expect to do harm. But asking for = serious additional complexity in the BGP routers is something that is = really a bad idea. I think.=20 A: The design of DBGP is made to be as simple as possible. Only one = optional path attribute is added to the plain BGP. In addition, DBGP can = be incrementally deployed across the whole Internet. ISPs can make their = own decision on whether to adopt it or not. From the evaluation results, = one can found that with only a small deployment rate, a large proportion = of ASes are protected from being attacked. I heard that = "draft-ietf-idr-add-paths-04.txt" had just been accepted as an WG = document in IETF 79. In this draft, a more complex path attribute was = devised. Q: I have one additional question. With the expectation in your = suggestion that you pass on information you discovered is bad. You don't = act on it but you propagate it so that other detectors can do something. = What would other detectors do with the information that you are passing = on since you yourself has blocked the BGP update. You are not = propagating it as an update. What would the detectors do with the = information you are passing. =20 A: The detection systems can notify the victim AS routers. Then the = victim AS routers can take actions to stop the attacks.=20 Q: But the person who has detected the attack could also notify them. I = am uncertain whether (the detectors could do that) the person who = actually notices the attack could also do or could not do. A: The mitigation system runs a rough filtering based on the limited = information stored in the routing tables to protect the data delivery = from being attack. It is much less precise than the detection system = (high positive). Precise notification relies on existing detection = systems.=20 Q: If you could go back to the slide. I think it was number 7. Kind of. = The most important interesting communication path that they detected = questionable information should take would be the way back to X. And = exactly that will not be done in BGP with the most in current = implementations. A: That is an only a simple example to show the effect of black holing = attack. Maybe it is not precise. For example, the relationships between = the ASes are not shown. In fact, in our implementation of DBGP in = SSFNET-2.0, we inject prefix hijacking from randomly chosen ASes. Most = of the times, this kind of hijacks succeed in cheating a lot of ASes. --Boundary_(ID_ICuXPqK3RSSyye5ZlJOrzw) Content-type: application/pdf; name=sidr-0.pdf Content-transfer-encoding: base64 Content-disposition: attachment; filename=sidr-0.pdf JVBERi0xLjQNJeLjz9MNCjIwMyAwIG9iaiA8PC9MaW5lYXJpemVkIDEvTCAxNzg4MDQvTyAyMDUv RSAxMDAxMi9OIDEwL1QgMTc0Njk2L0ggWyA3NzYgMzk1XT4+DWVuZG9iag0gICAgICAgICAgICAg DQp4cmVmDQoyMDMgMjQNCjAwMDAwMDAwMTYgMDAwMDAgbg0KMDAwMDAwMTE3MSAwMDAwMCBuDQow MDAwMDAxMjU1IDAwMDAwIG4NCjAwMDAwMDE0NTIgMDAwMDAgbg0KMDAwMDAwMTYzMyAwMDAwMCBu DQowMDAwMDAxOTc3IDAwMDAwIG4NCjAwMDAwMDIwMTMgMDAwMDAgbg0KMDAwMDAwMjA5MCAwMDAw MCBuDQowMDAwMDAyNTY4IDAwMDAwIG4NCjAwMDAwMDI4ODUgMDAwMDAgbg0KMDAwMDAwMzIwOSAw MDAwMCBuDQowMDAwMDAzNTM4IDAwMDAwIG4NCjAwMDAwMDM4NjEgMDAwMDAgbg0KMDAwMDAwNDI3 NyAwMDAwMCBuDQowMDAwMDA0Nzk0IDAwMDAwIG4NCjAwMDAwMDUwMjAgMDAwMDAgbg0KMDAwMDAw NTI0MCAwMDAwMCBuDQowMDAwMDA1Njg4IDAwMDAwIG4NCjAwMDAwMDYyMzIgMDAwMDAgbg0KMDAw MDAwNjgxMyAwMDAwMCBuDQowMDAwMDA5NDgzIDAwMDAwIG4NCjAwMDAwMDk2NDAgMDAwMDAgbg0K MDAwMDAwOTc5NyAwMDAwMCBuDQowMDAwMDAwNzc2IDAwMDAwIG4NCnRyYWlsZXINCjw8L1NpemUg MjI3L1ByZXYgMTc0Njg0L1Jvb3QgMjA0IDAgUi9JbmZvIDIwMiAwIFIvSURbPDMyNDU0NzJCQzhE REU2MEYxRUVCQjA5MjcyOUQyRTA4PjwxRDM1MUE4QTdDQ0U0QzRCOEVFQzNCNThDN0U4QUQ0Mz5d Pj4NCnN0YXJ0eHJlZg0KMA0KJSVFT0YNCiAgICAgICAgDQoyMjYgMCBvYmo8PC9MZW5ndGggMzA3 L0ZpbHRlci9GbGF0ZURlY29kZS9JIDM3MS9MIDM1NS9TIDI1Nj4+c3RyZWFtDQp42mJgYGBlYGCO YWBjYOBMYBBgQAABoAwbAwsDh0MBg+vTFAcGiasHdjAwsN9IbtDRUC+xT3GLZ1zpdG2Prv6qAxAd PIdaTLZOTCx1NljIq5sSERtwRsPZO1JMPMSYS8hjYe/0ByZbZ+UeT60EiwhcuubaehWkZWecC4h7 O/O6GERkW1favF1rTLbOzkRSycAaGsHA4OLR0QBkdXQwMBhbAJkg4OLiGl4BZDOKgYQFy4EsQRE3 EBsE0tIygHIsLh0d2NwPVLCWgamRE0iLArEeWIsKAw+XwERhBwamibsEJyoIBcqLH3zI/WCH5ME/ SlJe7BMquQ2mszIcPZfAJfphn5jDDvYJnAwTuBiAZEMlwwZuBIKBYwxMMx4BaSYgtgPiUwxMy68C aUYg/gMQYADuz2fJDQplbmRzdHJlYW0NZW5kb2JqDTIwNCAwIG9iajw8L01ldGFkYXRhIDIwMSAw IFIvUGFnZXMgMjAwIDAgUi9UeXBlL0NhdGFsb2cvUGFnZUxhYmVscyAxOTggMCBSPj4NZW5kb2Jq DTIwNSAwIG9iajw8L0Nyb3BCb3hbMCAwIDU5NS4yMiA4NDJdL1BhcmVudCAyMDAgMCBSL0NvbnRl bnRzWzIxMCAwIFIgMjExIDAgUiAyMTIgMCBSIDIxMyAwIFIgMjE0IDAgUiAyMTkgMCBSIDIyMCAw IFIgMjIxIDAgUl0vUm90YXRlIDkwL01lZGlhQm94WzAgMCA1OTUuMjIgODQyXS9SZXNvdXJjZXMg MjA2IDAgUi9UeXBlL1BhZ2U+Pg1lbmRvYmoNMjA2IDAgb2JqPDwvWE9iamVjdDw8L0ltMSAyMjMg MCBSL0ltMyAyMjQgMCBSPj4vQ29sb3JTcGFjZTw8L0NzNiAyMDggMCBSPj4vRm9udDw8L1RUMiAy MDcgMCBSL1RUNCAyMTUgMCBSL1RUNiAyMTYgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VC XS9FeHRHU3RhdGU8PC9HUzEgMjA5IDAgUj4+Pj4NZW5kb2JqDTIwNyAwIG9iajw8L1N1YnR5cGUv VHJ1ZVR5cGUvRm9udERlc2NyaXB0b3IgMjI1IDAgUi9MYXN0Q2hhciAxMTAvV2lkdGhzWzMzMyAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMzMzIDMzMyAwIDAgMCAwIDAgMCAwIDAgMCA2NjcgMCA2Njcg MCAwIDAgMCAwIDAgMCAwIDc3OCA3NzggMCA3MjIgNjY3IDAgMCAzODkgMCAwIDAgMCAwIDAgMCAw IDAgMCA3MjIgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNjY3IDAgMCAwIDY2NyAwIDY2NyA2Njcg MzMzIDMzMyAwIDAgMCA2NjddL0Jhc2VGb250L0FyaWFsQmxhY2svRmlyc3RDaGFyIDMyL0VuY29k aW5nL1dpbkFuc2lFbmNvZGluZy9UeXBlL0ZvbnQ+Pg1lbmRvYmoNMjA4IDAgb2JqWy9JQ0NCYXNl ZCAyMjIgMCBSXQ1lbmRvYmoNMjA5IDAgb2JqPDwvT1BNIDEvT1AgZmFsc2Uvb3AgZmFsc2UvVHlw ZS9FeHRHU3RhdGUvU0EgZmFsc2UvU00gMC4wMj4+DWVuZG9iag0yMTAgMCBvYmo8PC9MZW5ndGgg NDA4L0ZpbHRlci9GbGF0ZURlY29kZT4+c3RyZWFtDQpIiZSUQWtbMQzH7/4UOrZlT5VsS3q6tutG dxsz7FB6KKHtMkhGmsO+/uS0yZrBIObBew9Lf0k/WfYmMSwheUWfQRmJGSY1FLBM8PKYsmE9WFbp +wWs0+X1VmGxBd4920WsfP7G8Lw99n4f5il9PThdtXTZWg5pe0oE7D339PohqI4RYcbMJNBWh2QU y4RKxXN49aQTIREVaIvU/zzi/U53Z7c37dNkDlePy5/L9fMHOOd8dv1juX44v29f0k1Lm1do1vyu 2iPqo368Uf+lPbL+S7kPzoqs4IYchU0ZJYNWQ+t+zAW17o1v8QNQVS0gJXvl+JorzbuMm+hTwbnG izt+DyDs7taDkJGEYBHNul0xfPy1K+O/CiZCj+5WGZBUNAlJHpDMKB4SPV3CsSFlLEu0OdtYlkzI PJYlF3QZzBJ73fHL6ZLCqIFffEAiWANfBna/OJaOb6dLaqzJGEtV9I5/ukLiAJQxFKmoNoYiMZWd fqCwuCaKDKFonP2Al4EJs7jC+ujPA5Iw2BiKxVDy/rKAPwIMACKfO1MNCmVuZHN0cmVhbQ1lbmRv YmoNMjExIDAgb2JqPDwvTGVuZ3RoIDI0Ny9GaWx0ZXIvRmxhdGVEZWNvZGU+PnN0cmVhbQ0KSImU lCGWQzEMA/k/RU6gxnacxLyksGdY3Ldv70/W/qQ0ImEDRlb0eH2kPX+v9/V39WbYIx/R1puIwSUi VpMtcO/u2n4+1+MMcVh0H0EgAbVE/BwJQ1+JCIFMhKSLHSPaO5ZTLtoHvPQngWyM0j8PWUWhqe+D QCak9AkiEM6pqGGlvS4CWZhpb0TGJhhpb4SLZSvT3oiMLSCpr/scGYqo4xPExC57ImPvmItT8Sxl 2iuRsW9Y2RMZT4XU8c//pM6JXtUnMp6BXT+fCHllK4UaC13rHj4jipxbWcNnxL7kVtbwMUTcu6dE X0Lv3dNvX9q/AAMAlhQ37w0KZW5kc3RyZWFtDWVuZG9iag0yMTIgMCBvYmo8PC9MZW5ndGggMjU0 L0ZpbHRlci9GbGF0ZURlY29kZT4+c3RyZWFtDQpIiZSUOW4EMRAD83mFXkCrLx35Jg79BseLxf4/ MeXYgIfJQEkBzWGBj9f1db2v3gIr+TFvvZkFyvbes/kemNUrd/t+Xh+fT2uPf5DoHbWJDAFJZBBx AVnw2SvWfcQcZkRKQAqb8cMEZGMyvs/7iAcG43sKyEQyfgmHhSEYP4XDomCn/RCQhX3av0+kYzF9 CL7kwDjlC74UrWR6F0SuBLFywZdasFO+UMtwdMY3QeRRWIxvwk8etJLxhbsmn0d9QZc5EUwfgi7L 4Kd8gSh0hndBl0UnT/eCLtt/d88EXTiVZ/fsvi7JqTy7Z/drSU6luHvJqfxr99qPAAMAUdg3xQ0K ZW5kc3RyZWFtDWVuZG9iag0yMTMgMCBvYmo8PC9MZW5ndGggMjU5L0ZpbHRlci9GbGF0ZURlY29k ZT4+c3RyZWFtDQpIiZSUIY5DMQxE+T9FTjBrx3YS85KFe4bFVdX7k05KyqqY/Hwykp/9NM9LmmE5 P9qbNFVDaGbO5qrIkDBt//fr5/eu7fa4/q7nt0hgpkSfhUhiGCN+HukGn4wUEhOmEjrOI6ZQ0qsV Io4kfYHEFhbhrTCXdwzCW4HeB3+5rzyPhMBI36MQcei+fUGXWBDi6zqPDMUivhaWPCgl8b0w2EjE Vr/g8TQY8a3gy5zo+/rniaWQbX7Bl0Up9/ELvqyFudUv+JIdQXot+JIDTno/HyxE0Lf7576E0Eri 2/lgIbPae8GqLPYeV/XuvUJb8Cn2XrApd+95YS5W5af32kuAAQAl+T6dDQplbmRzdHJlYW0NZW5k b2JqDTIxNCAwIG9iajw8L0xlbmd0aCAyNTMvRmlsdGVyL0ZsYXRlRGVjb2RlPj5zdHJlYW0NCkiJ lJQ7TgYxEIP7PUVOYGYyr0xPQ8kZqH8h7t9gappME60iWfIXe/328dL1/v18Pj+PLMNxHrqXLFVD aHfXChN0S/j6ej1vdwrHMQmJgeQgS8L2vcQ3PyWiB5KE0dYeGAuBkj4GxsIhxNczkBQO8X3wyKko 4utAESBOWA0kDSO92L2kDJv0E0VBCB8DX4edJPwepHIcRXof1OUcBOl1UJfecBM/g1g6sYkv93VJ YSmJb/fGUgw9+SNTCkX4fZ9KqiIJ3/fZpwac8Pc5prKSyhfOe8nmHdl14Gvn3+h53beF5NPVSw7l cPWSQ8nV8x60hUP5f/XWrwADAJH2OGENCmVuZHN0cmVhbQ1lbmRvYmoNMjE1IDAgb2JqPDwvU3Vi dHlwZS9UcnVlVHlwZS9Gb250RGVzY3JpcHRvciAyMTcgMCBSL0xhc3RDaGFyIDEyMS9XaWR0aHNb Mjc4IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDMzMyAyNzggMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCA2MTEgOTc1IDcyMiA3MjIgNzIyIDcyMiA2NjcgNjExIDc3OCA3MjIgMCAwIDAg MCA4MzMgNzIyIDAgNjY3IDAgNzIyIDY2NyA2MTEgMCAwIDAgMCAwIDYxMSAwIDAgMCAwIDAgMCA1 NTYgNjExIDU1NiA2MTEgNTU2IDMzMyA2MTEgNjExIDI3OCAwIDU1NiAyNzggODg5IDYxMSA2MTEg NjExIDAgMzg5IDU1NiAzMzMgNjExIDU1NiA3NzggNTU2IDU1Nl0vQmFzZUZvbnQvQXJpYWwsQm9s ZC9GaXJzdENoYXIgMzIvRW5jb2RpbmcvV2luQW5zaUVuY29kaW5nL1R5cGUvRm9udD4+DWVuZG9i ag0yMTYgMCBvYmo8PC9TdWJ0eXBlL1RydWVUeXBlL0ZvbnREZXNjcmlwdG9yIDIxOCAwIFIvTGFz dENoYXIgMTQ4L1dpZHRoc1syNzggMCAwIDAgMCAwIDY2NyAwIDMzMyAzMzMgMCAwIDI3OCAzMzMg Mjc4IDI3OCA1NTYgNTU2IDU1NiA1NTYgNTU2IDU1NiA1NTYgNTU2IDU1NiA1NTYgMjc4IDAgMCAw IDAgMCAwIDY2NyA2NjcgNzIyIDcyMiAwIDYxMSA3NzggNzIyIDI3OCAwIDY2NyA1NTYgODMzIDcy MiAwIDY2NyAwIDcyMiA2NjcgNjExIDcyMiAwIDk0NCA2NjcgMCA2MTEgMCAwIDAgMCA1NTYgMCA1 NTYgNTU2IDUwMCA1NTYgNTU2IDI3OCA1NTYgNTU2IDIyMiAyMjIgNTAwIDIyMiA4MzMgNTU2IDU1 NiA1NTYgMCAzMzMgNTAwIDI3OCA1NTYgNTAwIDcyMiA1MDAgNTAwIDUwMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDIyMiAyMjIgMzMzIDMzM10vQmFzZUZvbnQv QXJpYWwvRmlyc3RDaGFyIDMyL0VuY29kaW5nL1dpbkFuc2lFbmNvZGluZy9UeXBlL0ZvbnQ+Pg1l bmRvYmoNMjE3IDAgb2JqPDwvU3RlbVYgMTM4L0ZvbnROYW1lL0FyaWFsLEJvbGQvRm9udFN0cmV0 Y2gvTm9ybWFsL0ZvbnRXZWlnaHQgNzAwL0ZsYWdzIDMyL0Rlc2NlbnQgLTIxMS9Gb250QkJveFst NjI4IC0zNzYgMjAwMCAxMDEwXS9Bc2NlbnQgOTA1L0ZvbnRGYW1pbHkoQXJpYWwpL0NhcEhlaWdo dCA3MTgvWEhlaWdodCA1MTUvVHlwZS9Gb250RGVzY3JpcHRvci9JdGFsaWNBbmdsZSAwPj4NZW5k b2JqDTIxOCAwIG9iajw8L1N0ZW1WIDg4L0ZvbnROYW1lL0FyaWFsL0ZvbnRTdHJldGNoL05vcm1h bC9Gb250V2VpZ2h0IDQwMC9GbGFncyAzMi9EZXNjZW50IC0yMTEvRm9udEJCb3hbLTY2NSAtMzI1 IDIwMDAgMTAwNl0vQXNjZW50IDkwNS9Gb250RmFtaWx5KEFyaWFsKS9DYXBIZWlnaHQgNzE4L1hI ZWlnaHQgNTE1L1R5cGUvRm9udERlc2NyaXB0b3IvSXRhbGljQW5nbGUgMD4+DWVuZG9iag0yMTkg MCBvYmo8PC9MZW5ndGggMzc4L0ZpbHRlci9GbGF0ZURlY29kZT4+c3RyZWFtDQpIiZSUQWsbMRCF 7/oVc2wLHs9oJI3mahpCbw1dyL3GBhdsU7slyb/Psw2lLSGsWHZ10H6a92Yeekg/k5BxL/hoJiFV 46oR4dRKYw0pobTep+WXvdLnY3p4F6nCYlK1DyDYcCndBhBnV1SZTzTlWqWaDyCVLaTKgK4WnOF+ gHBjgfloA0jjgPmc5yNd2CtaPDCVXrjCvdYBpHMxVBkYS2TOjh4PCAuEEvZtQFgEB4Y/G3AxdpjP 89Pi4txgPubP3lW5wPz8OboikooOz0+La7DCuw7oypkD7ssA0bgj9yMtNuEG8zbg3hBJuI/5YXHr bJCV3xRm7S2k5H8vPbshF0hpRylnpKkTLhRRpUVzrmiA0GmTtGUuf7b26fETHQBdnvP68N/23+AW x6+mtJymgn+n7UWeXqosbgsUhnHLWOrVEE37JAzp17eJRb6WEJrWaYE7WGB5ekofvm3Wv08bunv+ tTmcd8cDHbe0uv9K318+Tj8SvQowAC5CPHUNCmVuZHN0cmVhbQ1lbmRvYmoNMjIwIDAgb2JqPDwv TGVuZ3RoIDQ3NC9GaWx0ZXIvRmxhdGVEZWNvZGU+PnN0cmVhbQ0KSImsVNuK2zAQfddX6FEpaDoa Xf24pftSKKQgWOjSBxNvEi+7TpqmFPr1lSw72BtSQhuM8WUunHPmjO4j+84Ubzkj1ICGBwPGK04O KsOdI1D88MQeeMc+RIZcK6gCl+WBnDQBUilCx+MrQ0BExeMqJcdf7FF8fFrtfu5f2m6zkOQqsVxI hCDq4zZ9ewd2/HPY7etNfWx3XQ4gVKLumvxqwIm7nKNEs9v3Cd/iJ3Yf2ZcT+MqDCdwpQKW4dB4s 94QZOlGVsQ6hV/bwLnFRPF8/Vt2b8LRwPWlfkgZtAgT6Z2noJM1Umfhc6PylEdkAtkLbd+rr+VD2 /yAp8SZdessepskwxTJP6QpsWqc5DvU3hKWNBW3f+kosJ065ApzN30OXG4KzBvM8Stvs1GugZJv6 m+vk0J3G1+uke53uxm2ZIHsfo0vOj+vUjAyX6U4vadus6R2m1Ngm9QeHuqKUkBdlYovmUK+P8ve2 7jaybQ6yORlZopqz0s5M1mu+mLOdPV/MWfjCYmqbmGejEPheNZ/YWQs2TGRLnM0ZZ+19PuFK5bhV m8H9NtN8FJ/bhVRBI5Boy5lE4usCQYvt2Qlk0igunEBzDc6IzsOXiJakkagKgLdjyv8IMADuM0fm DQplbmRzdHJlYW0NZW5kb2JqDTIyMSAwIG9iajw8L0xlbmd0aCA1MTEvRmlsdGVyL0ZsYXRlRGVj b2RlPj5zdHJlYW0NCkiJrFNLi5xAEL73r6ijBqztd+st2WwghOSw0GFhQw4iztiBcciYyZD8+lSr IzrrZNkQRBS666vvUZV8Cqn/xt55ds9uPbvxXoMAv2EcpIaMXg7KOSw0KFugFtyA39HplmUcOec5 +Iol7fY4wnxnAgIwZTUWOSgt0TkBIkduQRiDJodDzR6gje2eNtFCoVLnJhF6wW+toMCimBfAf2Ii LWo3AM+lPjbPECJoZ2Z1oi8r222sywjUQCZQgr8bcW1/YRfIxPC6OZanOmC13y1l6KKIMqxALgRk 1qEBJ3mUoJVEPR3t2MMr0nTztrNQdRRmfLqqvbg2B9hM4dsn4WtSpSVIZdCew4+kFfgT+5LchhY+ hiOkmbERMvGpEBxl0qUkziYkihTRcTz73Iaf9aELP36lX/2HubhcE5uhB9E1kaegxkavR2S4Rbkk NVhZRCv5QO2urJqaXM9k7ojQYxMjGPveLztrI2adXe/03xoP96ehO7HkfR/bNBkjuiFL9JXQFnle D21x7TK05WxM/glU+t/8yyf/JvvWh31EUEqgMbPtG2phdXZfzE+pnLZlvkpiXMHyOWKaPmrc3it0 ptB7Oi8LfXDL9Wwuor+oJc18zem+Nv65YtykOlS0Ki306mhjhFa0Tk0N6XJ3YL+B1JrkzSH83rfl eaThjwADADwIQSoNCmVuZHN0cmVhbQ1lbmRvYmoNMjIyIDAgb2JqPDwvTGVuZ3RoIDI1NzUvRmls dGVyL0ZsYXRlRGVjb2RlL04gMy9BbHRlcm5hdGUvRGV2aWNlUkdCPj5zdHJlYW0NCkiJnJZ5VFN3 Fsd/b8mekJWww2MNW4CwBpA1bGGRHQRRCEkIARJCSNgFQUQFFEVEhKqVMtZtdEZPRZ0urmOtDtZ9 6tID9TDq6Di0FteOnRc4R51OZ6bT7x/v9zn3d+/v3d+9953zAKAnpaq11TALAI3WoM9KjMUWFRRi pAkAAwogAhEAMnmtLi07IQfgksZLsFrcCfyLnl4HkGm9IkzKwDDw/4kt1+kNAEAZOAcolLVynDtx rqo36Ez2GZx5pZUmhlET6/EEcbY0sWqeved85jnaxAqNVoGzKWedQqMw8WmcV9cZlTgjqTh31amV 9ThfxdmlyqhR4/zcFKtRymoBQOkmu0EpL8fZD2e6PidLgvMCAMh01Ttc+g4blA0G06Uk1bpGvVpV bsDc5R6YKDRUjCUp66uUBoMwQyavlOkVmKRao5NpGwGYv/OcOKbaYniRg0WhwcFCfx/RO4X6r5u/ UKbeztOTzLmeQfwLb20/51c9CoB4Fq/N+re20i0AjK8EwPLmW5vL+wAw8b4dvvjOffimeSk3GHRh vr719fU+aqXcx1TQN/qfDr9A77zPx3Tcm/JgccoymbHKgJnqJq+uqjbqsVqdTK7EhD8d4l8d+PN5 eGcpy5R6pRaPyMOnTK1V4e3WKtQGdbUWU2v/UxN/ZdhPND/XuLhjrwGv2AewLvIA8rcLAOXSAFK0 Dd+B3vQtlZIHMvA13+He/NzPCfr3U+E+06NWrZqLk2TlYHKjvm5+z/RZAgKgAibgAStgD5yBOxAC fxACwkE0iAfJIB3kgAKwFMhBOdAAPagHLaAddIEesB5sAsNgOxgDu8F+cBCMg4/BCfBHcB58Ca6B W2ASTIOHYAY8Ba8gCCJBDIgLWUEOkCvkBflDYigSiodSoSyoACqBVJAWMkIt0AqoB+qHhqEd0G7o 99BR6AR0DroEfQVNQQ+g76CXMALTYR5sB7vBvrAYjoFT4Bx4CayCa+AmuBNeBw/Bo/A++DB8Aj4P X4Mn4YfwLAIQGsJHHBEhIkYkSDpSiJQheqQV6UYGkVFkP3IMOYtcQSaRR8gLlIhyUQwVouFoEpqL ytEatBXtRYfRXehh9DR6BZ1CZ9DXBAbBluBFCCNICYsIKkI9oYswSNhJ+IhwhnCNME14SiQS+UQB MYSYRCwgVhCbib3ErcQDxOPES8S7xFkSiWRF8iJFkNJJMpKB1EXaQtpH+ox0mTRNek6mkR3I/uQE ciFZS+4gD5L3kD8lXybfI7+isCiulDBKOkVBaaT0UcYoxygXKdOUV1Q2VUCNoOZQK6jt1CHqfuoZ 6m3qExqN5kQLpWXS1LTltCHa72if06ZoL+gcuiddQi+iG+nr6B/Sj9O/oj9hMBhujGhGIcPAWMfY zTjF+Jrx3Ixr5mMmNVOYtZmNmB02u2z2mElhujJjmEuZTcxB5iHmReYjFoXlxpKwZKxW1gjrKOsG a5bNZYvY6WwNu5e9h32OfZ9D4rhx4jkKTifnA84pzl0uwnXmSrhy7gruGPcMd5pH5Al4Ul4Fr4f3 W94Eb8acYx5onmfeYD5i/on5JB/hu/Gl/Cp+H/8g/zr/pYWdRYyF0mKNxX6LyxbPLG0soy2Vlt2W ByyvWb60wqzirSqtNliNW92xRq09rTOt6623WZ+xfmTDswm3kdt02xy0uWkL23raZtk2235ge8F2 1s7eLtFOZ7fF7pTdI3u+fbR9hf2A/af2Dxy4DpEOaocBh88c/oqZYzFYFTaEncZmHG0dkxyNjjsc JxxfOQmccp06nA443XGmOoudy5wHnE86z7g4uKS5tLjsdbnpSnEVu5a7bnY96/rMTeCW77bKbdzt vsBSIBU0CfYKbrsz3KPca9xH3a96ED3EHpUeWz2+9IQ9gzzLPUc8L3rBXsFeaq+tXpe8Cd6h3lrv Ue8bQrowRlgn3Cuc8uH7pPp0+Iz7PPZ18S303eB71ve1X5Bfld+Y3y0RR5Qs6hAdE33n7+kv9x/x vxrACEgIaAs4EvBtoFegMnBb4J+DuEFpQauCTgb9IzgkWB+8P/hBiEtISch7ITfEPHGGuFf8eSgh NDa0LfTj0BdhwWGGsINhfw8XhleG7wm/v0CwQLlgbMHdCKcIWcSOiMlILLIk8v3IySjHKFnUaNQ3 0c7Riuid0fdiPGIqYvbFPI71i9XHfhT7TBImWSY5HofEJcZ1x03Ec+Jz44fjv05wSlAl7E2YSQxK bE48nkRISknakHRDaieVS3dLZ5JDkpcln06hp2SnDKd8k+qZqk89lganJadtTLu90HWhduF4OkiX pm9Mv5MhyKjJ+EMmMTMjcyTzL1mirJass9nc7OLsPdlPc2Jz+nJu5brnGnNP5jHzivJ25z3Lj8vv z59c5Lto2aLzBdYF6oIjhaTCvMKdhbOL4xdvWjxdFFTUVXR9iWBJw5JzS62XVi39pJhZLCs+VEIo yS/ZU/KDLF02KpstlZa+Vzojl8g3yx8qohUDigfKCGW/8l5ZRFl/2X1VhGqj6kF5VPlg+SO1RD2s /rYiqWJ7xbPK9MoPK3+syq86oCFrSjRHtRxtpfZ0tX11Q/UlnZeuSzdZE1azqWZGn6LfWQvVLqk9 YuDhP1MXjO7Glcapusi6kbrn9Xn1hxrYDdqGC42ejWsa7zUlNP2mGW2WN59scWxpb5laFrNsRyvU Wtp6ss25rbNtenni8l3t1PbK9j91+HX0d3y/In/FsU67zuWdd1cmrtzbZdal77qxKnzV9tXoavXq iTUBa7ased2t6P6ix69nsOeHXnnvF2tFa4fW/riubN1EX3DftvXE9dr11zdEbdjVz+5v6r+7MW3j 4QFsoHvg+03Fm84NBg5u30zdbNw8OZT6TwCkAVv+mLiZJJmQmfyaaJrVm0Kbr5wcnImc951kndKe QJ6unx2fi5/6oGmg2KFHobaiJqKWowajdqPmpFakx6U4pammGqaLpv2nbqfgqFKoxKk3qamqHKqP qwKrdavprFys0K1ErbiuLa6hrxavi7AAsHWw6rFgsdayS7LCszizrrQltJy1E7WKtgG2ebbwt2i3 4LhZuNG5SrnCuju6tbsuu6e8IbybvRW9j74KvoS+/796v/XAcMDswWfB48JfwtvDWMPUxFHEzsVL xcjGRsbDx0HHv8g9yLzJOsm5yjjKt8s2y7bMNcy1zTXNtc42zrbPN8+40DnQutE80b7SP9LB00TT xtRJ1MvVTtXR1lXW2Ndc1+DYZNjo2WzZ8dp22vvbgNwF3IrdEN2W3hzeot8p36/gNuC94UThzOJT 4tvjY+Pr5HPk/OWE5g3mlucf56noMui86Ubp0Opb6uXrcOv77IbtEe2c7ijutO9A78zwWPDl8XLx //KM8xnzp/Q09ML1UPXe9m32+/eK+Bn4qPk4+cf6V/rn+3f8B/yY/Sn9uv5L/tz/bf//AgwA94Tz +woNCmVuZHN0cmVhbQ1lbmRvYmoNMjIzIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMjcv SW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdodCAxMy9UeXBl L1hPYmplY3Q+PnN0cmVhbQ0KqqoAAKKiAACqqgAAIiIAAKqqAACiogAAqqoKDQplbmRzdHJlYW0N ZW5kb2JqDTIyNCAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDI3L0ltYWdlTWFzayB0cnVl L0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCAxNC9IZWlnaHQgMTMvVHlwZS9YT2JqZWN0Pj5zdHJl YW0NCqqrAAOiowADqqsAAyIjAAOqqwADoqMAA6qrCg0KZW5kc3RyZWFtDWVuZG9iag0yMjUgMCBv Ymo8PC9TdGVtViAyMjIvRm9udE5hbWUvQXJpYWxCbGFjay9Gb250U3RyZXRjaC9Ob3JtYWwvRm9u dFdlaWdodCA5MDAvRmxhZ3MgMzIvRGVzY2VudCAtMzA5L0ZvbnRCQm94Wy0xOTQgLTMwNyAxNjg4 IDEwODNdL0FzY2VudCAxMTAwL0ZvbnRGYW1pbHkoQXJpYWwpL0NhcEhlaWdodCA3MTgvVHlwZS9G b250RGVzY3JpcHRvci9JdGFsaWNBbmdsZSAwPj4NZW5kb2JqDTEgMCBvYmo8PC9Dcm9wQm94WzAg MCA1OTUuMjIgODQyXS9QYXJlbnQgMjAwIDAgUi9Db250ZW50cyAzIDAgUi9Sb3RhdGUgOTAvTWVk aWFCb3hbMCAwIDU5NS4yMiA4NDJdL1Jlc291cmNlcyAyIDAgUi9UeXBlL1BhZ2U+Pg1lbmRvYmoN MiAwIG9iajw8L1hPYmplY3Q8PC9JbTEwIDQgMCBSL0ltMTEgNSAwIFIvSW0yIDYgMCBSL0ltNCA3 IDAgUi9JbTUgOCAwIFIvSW02IDkgMCBSL0ltNyAxMCAwIFIvSW04IDExIDAgUi9JbTkgMTIgMCBS Pj4vQ29sb3JTcGFjZTw8L0NzNiAyMDggMCBSPj4vRm9udDw8L1RUNCAyMTUgMCBSL1RUNiAyMTYg MCBSL1RUNyAxNzQgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VCL0ltYWdlQ10vRXh0R1N0 YXRlPDwvR1MxIDIwOSAwIFI+Pj4+DWVuZG9iag0zIDAgb2JqPDwvTGVuZ3RoIDI0ODYvRmlsdGVy L0ZsYXRlRGVjb2RlPj5zdHJlYW0NCkiJvJffbxvHEcff76/YR8oA1/tjdnYXKArETVq4gB/SEPBD 0AeBoWwlFhVLVPPv9zt7dySPFOWbRqgF83i8m187M5+d/dp5c2u6SrYWw946782Ss00mB2ceNl3I lvZP7rqPb8y2e/u3RzbrR+Pb3+Mav/zjJ28+PU7fPlZz0/24f+ndqnu7WhFEVzedM+SsC2bZX5yp 3gY23jvL1bFZ3e3NORuG/+xiDc3wElIOcqt1/9UXs/qjW/z9+svjxvzr/ml3u71a/dr9sOq+9pGm JGZ69d7EaiubVIplFjc/Ijq4d8GpmCAVe6ecmHTN2KfBwo8viWbYTb1o7zPvfQ61qTHfbbf3T9v1 5m6z3T1OvfYcjhZ2kqBJ6oYEHRIzeXqakFG5Z+vZ1Gw9lmQZbAqGKdss73kfLdP4cNDvbGHmjEyk UMnjmiu70ix+xRJEWwgfXuIXBcnXWrMocdklCKyR1fd3wXx/39y4KOGds9VDJClEyOYEkaAQKTZV iPB8EY+ERJ0VLHPIOivBWe91VkK0NSmtINcSfpwvEr10QopVIZIsIfykyD7aM0r4eb4I4beki4XY Vgl/vgQ4UKIulESWsy6UhKqU6BWOARMxqUJh9D6CT4oKy4CWlH5RiOBB1oWSUZReB4vibUq6WEqy UXKvqONSbYg6JNWoBl/lBr40v44DWNnANz+WAFYqwRfASiX4Algp4FOUZZAtScJXSFQt9wJQKdwL 83syAJVK7gWgUrgXFbEAlcK9qFhjoFK4F+Y3ZaCg5F4AKYV7UbHGMjJlXShApXAvKNYYqBTuBcUa A5UCvjC/JwNYqQRf4KoFXwArleALYKWALyoKGawU8EUFX8BKAZ9GojbuBUW91NC4FxT1AlQquReB SiX3IlCp5F4EKoV7cX69RKBSuKeARfSpgS/Or5cIVirBF8FKAV+YX8hRDoO6gS+ClcqBL4KVyoEv xqIEXwQqleCLYKUSfHK8VIIvgpVK8EWwUgm+CFYK+LyikDk18HnFIoOVAj6FX0ClknsRqFRyLwKV Ou5FkFLJvViKlnsRqBTueUW5AJXCPT+/XAioFO75+WkhoFLJPQIqldwj77XcI6BSyT0CKpXcI6BS uDc/kwRSCvb8/HohkFKw5+dXJUVSYo8ASiX2CKRUYo9ASiX2CKRUYo9ASiX2CKRUYo/Ya7FHIKVy 3iOQUsk9AiqV3COgUsc9AimV3KNCWu4RUKnkHgGVWu4Blcp5LwGVSu4loFLJveSylnuAt5Z7WKrG PQUtcFFyL4GUynEPMWi5l6JTci+BlMI9p8gKUKnkHkqrcS/Nr2McWLTcAyca9zRpASqV3Espa8+5 CajUjXsJpFRiL4GUgj2nKBeQUoe9BFAK9pLCr+K02EsgpfKYm0BKJfYSSAnsgeQKEW7Yc/PLhUFK JfbYxYY9hUDWQo/BSUCP6vzcMzipgx4Dk4AelfmbJIOTSuhxYIEe5fnVgsi11GOAUkk9BihBPaqK agEoldRjgBLUozq/jBmgVFKPUxTqUVHkBaDUUY/BSSX1GKBUUo8BSh31GJwE9TAnKURYSz0GKEE9 zHwKEdJSjwFKJfUYoNRSD6DUUq9WHfUyMKmkXgYoldTLAKWOehmcVFIvA5RK6uUQlKNeBieV0Mvg pBJ6GZxUQi+Dk5ehF/k5EXByAr3Ui4iQN7emqzhrFUjAf7yDcYLaiMBsHjbdR7Pt3q2gncDBYJb9 xZnqLc5zcEWKhM3qDq+s1vLxR7f4dLX6tfthdTDhqdiDCfjGuMNIUY5MvF2tsvFmdQMlHstvlu1T brDHh0F6sGXhQ/tfzON6e2T7L84V+uupedldCHZzs499s5IJICjWeOIAjw6E0qLtLwcXmgIURXPB OXFmsPvz4v12t3l4ePp9d7UMmRa7zxv5giFo8f4Kc81CHm83u6t/r/45dY7bQsAb571ZcrYJ9efE sT4zw5O77uMbOCqZDoQHGdlls4wJm01LdO9mSPhex8Md1bHj6STrIdQj5ROzU48Gu0gb/mSxp4+P BW/OojpUVf3/ZnwwP2Q821heJeH5UOSHfI+2Z6kMaMfgB5UHbWbQovH/solqy1mZtoo8cvWiNHp/ lH5dt7DRARanbr0fG2OGb7G2qj7ybVmt45JQOoAcXFp93+uuTffj5uE/t+vNNAht5e87rrheoGA3 wT/xC8MRBpHnO45PO67mS40+dems46aPTzvupU4KuVjP3+6kfRO9UMCjrklPjLpwEMOCNH2H1P50 //RwtvpIYYWT2MWRrmQTyiljEae7TSDYJRiNslmE4f3RaEqUxMDPiw9frnADxt5eDZelLxVIXOza A7kuE86VYfHbGXm1CXmxEGq5iN58UgiR6VIBTl06L4TJ428VAjYDFIJ8HtYRJ6BD8jhRRe58oeiN LCtjEDuviePkNftj9gKGADpP36SGXkzkefUsPlzE6ammAk35BU3Xp4U3x/dzO8GBCcc0ja22v9ye AOtUDJfRvcX6lVwJ6aDzW/ZBpjTsM8vmd2m7jW1fZGC5f3o012NT/FnPkIw4sRYPe9vulO0nwhEr PG4MTRgj7F74+pXWLobcn5nGfRdAmFbahcbB6OrL/9Y4z5fvoPAbjdCvom+efrh9XK7vtze3n54e rne399vpkmh58hLHIqeLG1o54RjFi5Pr1KUzjk0fazY0wlnutTa0UdfsDa3lBJlu7fPdbne9/m3z YNbXW3O1ZEuLX+5P2km7Qi9lhuLl4b6eZqZeHHGmLp1lZvpYs8NQytodZjq/P9sto9ZZ3dKT+d0X 5MV8vv9yu20H0cse1/C6rT0qnOXs0fS73vx+3tXaHL5UOzIBXepq78biQbz4a0e85oAoY4NZyxax QrHYHMZ7KUckJqUErB5uYRXrt+7G+wIfozzuZTH8+YzbQfVwi9cTOH54nFiovhcebve6h/vRdC87 uDVxet3dvOncPqyjhyH3IUFTbD9w5BaEd2KpzZj9vdxmi7G1RRVshkcpEzZXeSHZmBMcR46RcDEQ Wxic+rAiEiXPURgwJJ4Xxn0GLpBcuZdlQcFwHxksoYwTziFJXocZvI0CzdCd2oriEqMo/9zJT0Tt ufh319tDBSZC16DCSJYI9Sv6nG+3macLKeOAhFNQKCIeamjh4Od9ltzgHUYKlvXAZh+cRI9lqtSs 4QTYXt87g6XvN2IvDdfaDRtfq5hydDp9vjsyh36+9/5qmdPCHbgqybiA1GnHnKOtvnSK0mveN1xG lzGCxL7upeOk4XxGYdQq2TlrOD82XL8+UVQv+wskI9lcTMYGF4+mTt/jIrz1bsDEfwUYAMn5ZosK DQplbmRzdHJlYW0NZW5kb2JqDTQgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCA2OTQzL0Zp bHRlci9GbGF0ZURlY29kZS9CaXRzUGVyQ29tcG9uZW50IDgvQ29sb3JTcGFjZSAyMDggMCBSL1dp ZHRoIDI4Ni9IZWlnaHQgOTEvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCkiJ7FdRb9RWFraUV3iHN/IS HkAieY40PwCUSTSv8DKvAb80IUya1cpZKaBBq8aNWtW0RW4Ta8syFWsGdciOW8hSTah36QA7VAZ3 wUJOnGW6zGDITW+CM9nPdjIZAiROmmRCZz5ZI8+9555zbN/vnu8sLLwzmJ+fLxaLpVJpxTjDMNXK J/9s+sHE//6pT47de5y+bfz9tqHcNW5oEz8+evLwybNnM7OV9i+d+c/T2VNffudf3R99dSF9I3nv yZWf8pXXNf2XMT1//cETXO6N/svo/fwKG6y6dCP7x0+knvOjZYejtx9V5T38FkxMTDQ1Nb3+Td8G IxFlmEjGLFBiyRy+fMx0CkKIYVhJ07Wsj5zprCcHREcOpmluIP/fN6rFrA1g9qXzWQW5Tp67fPb8 X5LZhyuIs9p1b+rrf9waEIa7hUtlP++PXP/Xf6aq/XAbRHt7ezqdDmpNTZEFkXywimEvUIPDQHkM iEj2ehJQFCUcDq8/8d8PpqamRkdHBwcHjx8/fvjw4UOHDu3Zs2fXrl0NDQ34xT1GMI5Z2MAS9tVO +Q1w5ue/unGvTIoeUen+cPj8patXssYanLqlD19R3uc/7f74Ys8X35Y9xC/dnHz6otqPtXGMj4+3 tLTMzs6ubboESoht23Qzos/NzTU3NyOHzXD2LsFxnLGxsd7e3oMHD+7fvz8ajQ4NDSWTybt376J8 T09P+18Ev7jHCMYxCxtYwh6rsBYe4Kfaj/IKrv/biC1Rw+XX+atd/Jd/Fi9cSH8v//BTMmskbz9O /vjw8g/3Ln47/lniyh8Gz733gXjyXPJUxSpcifH7dG5nPdoG0NnZ2dfXV5XQiIvoVQldLUCBDwwM 7Nu3r62tbXh4+NGjjTQRWIW18AA/8Aafm57nhmE8KZ5JZCppgkp08tMr3R9d6Ppw5L3BL7r44a4h qfuTr3s+/2YFoXCdvXTz4VSx2g+xOUABam1t7e/v3+a4HR0diIvo2xy3WoCK6+npaWxsPH369GYp OviBN/iE552jEtF2Xb31c+/wtdeJs8r1p79+f/PBxPz8fLXT30wUi0W/SSqVStsQDlG6u7sRjtJN EZU7HdgtIyMjqC9nz56dmZnZdP/wCc/wjyg7Z2cWX/z6t5v3+6SxNTn1QVJV9Unwsdopbwmg2I8e PRoOhycnJ7c0EPwjCmJtxR7bgcBjHjt2bNteLGLtqObr19mXt36eHL52t//CjUo2oaJ9/M2t7+4a k0+fVzvHLUf5aI3H47VztG4pUJRRmru6urZNDPjaAyJkG8KtF88JtZ6+AJUKL2ZqZANUAnL91KlT 2P8Q8JZlbYpP+IE3+NxR7cBWw29g0U5uc9z+/v6aamDfLUBaDAwMNDY2trW1DQ8PG4axASdYhbXw AD/wttVyaKehs7Ozr6+vKqERF9GrErqOIIBiHxsb6+3tPXDgwP79+6PR6NDQUDKZvHPnzuPHj6en p6F2YDY7O4t7jGAcs7CBJeyxCmvhYUcp/+3B+Ph4S0sL3kwQY6LJomJUDDiqyCsmKf/PawrPxdhY PGMEqkRzc3PNzc3IYR0ZO8TQDdv7UAVTNws0+FJdikYlfR2x6qgAVNzo6Ojg4ODx48ePHDmCbbN3 797du3c3NDTs2rUL9xjBOGZhA8vaUX1vRDgcTqfTAQwdktf4EBMStKUBauVk9EqCtkgiokv4G+F4 novgJmUG2vOIjhzWkbGjwXnO9U0lL3zwpZoYCa3Hvo46NoaJiYmmpqZSqbSmpZGIMR6ior8ziRwL +SPiIrOoHGUYPuvbZ3mGYZUgCgDRkYNpmm+cJWYuIQpxjovzYiprLjgmH/GihrjrFzk/gXjKAN8M NSXyrqEgJrS8T2qSlYUYy2IsoeRIBbOIkWJDEUG1vIVyPBaL87yYUN3q65gCy/KSxMe4ynJcRx3B cfny5RMnTgS311ec+VSLlJlFDXaZZa7uYkJiIEW4sMCyrCzLb5qxRTCHlXTTVF1qR3KE6qqEyikq 2n8N1WU7K+p54phu9eQSWdPUROQRTYBaOQHcD8k5PSvHMSvpBMyKSAa1FLe2CiqIb8iuD1HJaapb AF2tSLSoR1hOSGiFmusO6tgUnDt37syZM8HtV6qpSmaRintXGYITYsATHzkgkzfNUEPNoAA5lFha wmMWaooeYSKapwYTuPP6Jsc2MxmNODAsqELEJTXVQZC4mvf8OBmBkzXb5TsTcYteXPXGCwL+S4tP pPmnAXWZxSlW8NdSRx0rsPnM0hfJlM9wwWvW25lFsok4s4yoRvygHsUWiIQ7X50SQ1xSp0zIZQtZ zO0VcusSu2jDpTxq6izzKqJLC/W6DvxNoJTWcr1frxpcjVkLeXAgllpsl3J8iIkkAu7Ot6lBx0q5 Ui1ruR+JavBYZpZXs5aZZSRQZ2Ja3g2YV2JMSCKkklmOKsZTug01i2pVMFD+GB7lzDHRqsUU5Owg QsHIKhmdvvJQtQwilw8r/9ThEsH6TjvFuQtFzZIjjFCTb3JiYqKpqalUKgW0X8msVxUgZlEtVIsU NK/rCSaoEB05mKb5+hQ1XD8JveAQy22zmEjGon5QKWc5YBY+YFxBM+TJPM4g1DYyrNdEWQ6RcRfi 9QIxs267JhmknH/GrYSsTh2UVrjQCpQWNM5XiaTOLB/uwcXEJDWbVVU1IwuuiuYya1cix9PhioEP mE1I2Tzd+lR3Itrb29PpdEBjbOBF9eWDGtjv0rJwypfVVoTPBHyhiqKEw+G3TBYSS8dmNC5w+LRQ mI7lfeMQBKEue3wTNSevLkUO8YJLmxDytPV4ZHE0JqrUyz/q9WWgD+xZ3FNTiJYPZdFyXn+omoUn CfzX5UETQt77NwWW5SWJj3EKahjNKxLPcXGeF1I5nKUkxfkvnc1YBUgFxXyuxKNRTvaOKlvmotHA e+Odxvj4eEtLy+zs7Cb5c+wCEHRbzs3NNTc3I4dVbIhtk0XN7qyq3alt276BUyHyCbDWh0QIe02j moPLrJCQpQ4llNp53T3QWJkSzT+KOCGhFYpuXQtxqqYr3gmVshxTldyDTckVqA1RMZiziZ7wyp1p eRJBsWrlVXd2dvb19VUlNOIielVC17EWSKJczZeUSMpAkXKZ5Ut96nWsKdNjipPnUfZR4xwdtU5z x4gYWuyzcuKipojJRjWfaXuBA7u1tbW/v3+b43Z0dCAuom9z3DqCwatZfKZgF/IeiK8DqNeHemrZ Z1YlopLmGURy7vwys3w+ov2yqvhA1UCxWPTfTKlU2oZwiNLd3Y1wlNaKMHgH4fVZaFdXwGeWxxei iRB+asFZcMA6omeUnEXeyKycGK3BmuXDcZyjR4+Gw+HJycktDQT/iIJYMzMzWxqoAo5tF9BKrdal 1bESXs16nVlkmVkLVIfIi/AZ23GsLFjm8eg1Zvl9lpDNGzLr9Vk19x3m5+dHRkb27dsXj8e3Ytv/ n/3qV5Gb96KGtF8eIGWqFKnyAn6BkMZv4Dq4TZzOTQJOE5PKnSC4c2NSmICbNC7cmIALgRoRDA64 8A+FCBQQ7O9Ksmc8Mzuz2Y+d/ZKsTmXrSlf+c4/OuZDz7du3kB92gb1uPP/F1HjqR7c7Y7hYtQt+ 0Y03v+/fCQ48UO5uD4KGjpNpNwhgpPSWjxtmneKMIL7jY80s4CYiX1NPaZVeMCJ9fTedyrdv316+ fAn1/+bNm2G4GV8MeSAb5Hzx4gXkv5GchyB5YP4w2fw5SWHIjXI6TuOAUxX3WtvY3SykYGAI7iZb rg/wbK9fv3748OGzZ88+fPhAKf0XSWAVrIUMkAeyndlnDjFoUpLAoZg0kxkSNNeNwDJF0sQPSsrP +RgWFlcDmq/Pnz+/evXq8ePHjx498n3//fv3Hz9+/PLly9evX3/8+CGEOqp+/vwJ1zAC4xCFOTAT 5sMqWAsZpDy7teYkAz3CQlRgVoLFb2jNUqqVZnVHRmYPVovfDuDiPn369O7du+fPnz99+vTJkycP Hjy4f//+vXv3/vnnH7iGERiHKMyBmedzfZdB1hEQqpSq2UqAShvLJ0acxaG79AJumI1nZ7mFxd8C jgNnB2HZw7Bg4zjNOsXZ2BbJJmRhYXElhgoUy69J31PaD30Zu46LQLVIBl1XPG0nytxz3LT77570 VsFxgSq6vaV1HAZhGKGiZWvhlj2Ks/6YlK+icuzyLMsXFHlW1AQifGjTKITMWYUPDbdkNE8i3wvS Eh9uciTKkOsgzM2UBiVVz7cv0qvtgiBMi876+3OCaQK1m3vdczllL+RQwYUXFwPjoFmd1qy0m07k +lsg+YgTOGBSPN/rT+H4MUojLeqVKWPBpwaB4HsdvyTLXpSTXDlqDc84bD//bjJ7UZqEaiDDuw/S R9qFozS+RnSq4U6xVIqhK9Rfw4u/nxq1c5DkSC319hJa3CCmBoiV01VlyB7+U5ATuByabNNkAeL8 TpxyNA/N+/poLjycwmdApjqnOjTXghbLx/HxAbNOR/sSksSgZcoYBIWJ6ybXW0+mORAzGfU1ayHq E3F1dCgDJyjlBS/C+RHQzCxZhcrQm2MBzso0746JrcX5ISYFJu7YPyDI22oWZ/D+kk89bRNPFeem wIWSeO+QOyeiciih2ote5cDIc6L62GTFOz+fB3inzkDCr4pyMO1RMy5PgL0tsziscKM0DmDMjbLm yFP/tRDirlXx7wi8YpYByXwjAV7abH4QP8msy6Lafi9sGmswCG7e9tPQxe6ewPHCdzxE5juBfeXG 2RVR1rprd7pmlnYjAOjomgqp3aL6T6u0rRDPhiDK+186IFgZuVq+h8Jb2WOLW8cOs6RcKlDSSvWb 9dJuXpdZsleNTzlsKlq22Ww+3X1mXbTQ7CXtfKM5Uk/ydHSsI8crtp5xh1k0VMdCZyKDdqTDNT7J 7wAlu06YNW3bNE1dpN4vng+SwMkTVxS+SJtn7XgX2prfFCtmaRO1VYdu5a+uzSysc21OzIm2DZ5p xrsUGly6+udaJVNDYkFVqo6fjgoQsrBa0eXADTrLccE6OCLi8eLPgnoFLyObe5y66nvKPg2CJMuS MKpAw8RYZUkUxUmSlh18DV5Gnj69gnqYGhRX/fcq9v2o0N+FFZHvJ7Ul2+1grVnQc4Ga1HTibChV oxWQ5TcY7iwFLxoUJVW/SbIbBTAwYevCGMoAMsMRKiYcwVSkdhR9FYYI+jChBS4uqWBUbau7qlNR 1W257drp8DWzdFsH1QUvMhFlPsPqj3OD6mRKWyEFF4KNRIlWUAiOjVOP0hxP/8t0H9lgUqW+cQh9 Az/CRVU3CZa5zruOcZJruesHUHnHqQZLrFsCKIKpcwVOU39j7b0CT5tpnOYrovHcd7ar9qNKQYBI GVkJj+i3mQM06kLXfJxtISmiJRyZdSeinCDDvlV+5QBXO05FtPQpfkp/qUP5raC+8C68El5Dt5mR FmuhvrlT9vqjyxGE2YejTBLQOqzGOBxups/qUGBShAX9L9/pzoMzhXMcbZxNEzta5UKFp2P7no4e WaJwrSf8baA1K6knNo0a3IiuMb36ADHMWsPPsJ5gzMOWWYaPf2CzaWFx49B91soVzFi1kxwjMH7N JC+kVApfV93AL2VWh3yrWRYWGlqzDpm1bicFAZPnJTWTcmiBZZpHB8wyfVbajrQIdJ/1p3WcFhY3 CQ48UO5uD7vtJCOlt1jBMOsUZwTx5+ZUcRORr6mntEovGJG+PofPt7D42yAFY4xbtlhYWFhYWFhY WFhYWFhYWPwrcFygim5vaR2HQRhGqGiZXM2TPYqzXh6sP4jKscuzLF9Q5FlRE4jwoU2jEDJnFRaH CRjNk8j3grTEh5sciTLkOghzM6VBSdXz7Yv0arsgCNOiO9zOwuKckHzEieu4KZ7vh8oB+DFKI3UR VqaMBZ8aFDiO1/FLsuxFOclhqavhuY5OmH83mb0oTUI1kOHdB+nVfm6I0vga0amGO8VSKYaugFCK 2RJq1M5BkiO11NtLaGFxTtA8dEzho7nwcAr1iEx1TnVorgUtDD9UGR8w63S0LyFJDFpGMs8JChOf mgSKfT2Z5kDMZNTXrIWoT8TV0aEMnKCUF7wI50dAM7NkBduGpTkWxq5I8+6Y2FpYnAkEeVvN4owJ KfnU0zbxVHFuClyQbI8Oa1walUMJ1V70KgdGnhPVxyYr3vn5PMA72Dkn/KoozyFlMy5PgL0tszis cKM0DmDMjbLmyFNbWJwReMUsA5L5RgK8tNkc9fwksy6LMijvDZvGGoycm7f9NHSxuydwvPAdD5H5 TmDYPu3YFVHWumt3umaW7GP9/NDRNRVSu0W11SyLW8YOs6RcKlDSCnyXU0/z/XWZJXvV+JTDpqJl m83m091n1kULzV7SzjeaI/UkT0fHOnK8YusZd5hFQ3UsdCYyaEc6XOOTWFjcAFbM0iZqqw7dyl9d m1lY59oIz0TbBs80413qOAFddVJaJVNDYkFVqo6fjgoQsrBa0eXADTrLccE6OCLi8cLC4lax1izo uUBNajpxNpSq0QrIUv+GO0vBiwZFSdVvkuxGAQxMmJeRzf1QBpC5HYWYcARTkdpR9FUYIujDhBa4 uKSCUbWt7qpORVW35bYb3qonWDNLt3VOoF5kIsp8hpV1gxa3DFAEU+cKnKZzj6XarAJPm2mc5iui 8dx3tqv2o0pBgEgZWQmP6LeZAzTqQtd8nG0hKaIlHJl1J6KcIMO+VX7lAFc7TsX/2S97HUlxII73 k/kheAMewDkhqaN16MyJMxIiEscOSEgIkEgIkNCKk1ixEhIBUp+/oKEbemdWezsX1C+acYMpV9W/ qhwj/0bImotWCwB/k2k0zL9+8Dd2HobxMstn8/Nw9d33v168YviUhQAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EGWsZFZPiwffmHqCpU/UzSX GyyDfr4dP/6B32NpClU0w+XvU5drM6bPmDH3hVJ51b2uq4QTAxVZ0c/vN5mm+fmjy8nafR6Hvh8+ ZSAw1DlnvOznqS3VmyT8CqaK3W6onD7+PL+dQMfLF0p0u7Hy8vc/xKiPcSPltRXmd/oZM9osskeL DgEbS+yPjNazB6q/DGlO9IP86N0WPzlk6US07YZV916rwMpUBtZloplq/jYJv4KpFjo36g+r3T5/ I7Ie+u5Bf32mudLH59V/feilq8q6e2PGUJXVL/rLgZEHPtf3KiiYXkVJ2buPNopZNaQvGy9D16iE ml9D4ZW1TF1ditjsu3eI3fMWCVWXEjstg7Y+QptaTxrvGs/W3f+rZxmlIJ6IGIdBEEY0bd/2L6cs UZ/F3oxJLMJhGOKY8ry2s9lOWW2eRKH+ShBiI03/1jJIQfRLOIpZok7n0r6SMQ4QQkEYp0XrFjvF ME0LJXAQps2PnMdcuZ+mImVRhHFEUiVZTHQXWPqCRiQ37WCS+i+RpZxgY2qUepkcWNpMHzMWwqR6 LFejrNwOPWiRJEBR+uyztZzulbVv9w9lzXWoSxsr/HadNMU3fzZpagtBiXVtRHnmYtRKhkmSSxFb pxORuw9drTvPhNaRmHBXaOZORUGkWh/QVtKQZJOxREWY5qVidhcc8Xod6fsyi/UuQaDDnJV+Wp67 kseRDSNN83bNCL2IA0PI0vI5aXSzjiMq0oTF7mT62mBfayiOEilZpG1pTjfXZmPf50Md316Hn6l5 rIiOKJPuQ30ucIh5/jLP/xWcUkzdpSLhdv5B7Pq64p+nqp3GYcPeGhYV24LLU5lyW3vDan4oa7YV Joi5VKkt27fM5HnPrH9irW3qCnb25P+hsH0hJDKX7pFYGt/WIvRjWYBl+0MgnfKVSfXYHYdzirc0 dllt83lK3HsIc+HsRK/jXGn6SFgv7lDhNi0X1JgbRFQWVff+VmR+G4XeJhCb7pbFzJP7Jj43yVZ4 7f9WaOYg+62ayEk0066NNy9tHogZp3aeDJP6frmuz2L+xkzXG2EjEBSD1rvYK73WtQNx46bKJ4Y+ LGf2o2Ey78KRycTmNsqH+2wLkd5bpCmxH9flTJcn8xoyGnHBDZPmmEyVNxQzKV1YkNSxmKsttN9k c7r50pc0RM6SYlga4cxechsgamyymyB6Ujf/Ck4pLlfvpmQR25Iu+9amxD32/jKlkXZi4x8z95rA JOSqrF6ZnaXv2B3DOGsmt5iu00+bmVAc89wlJ1v9M/Dw5kJf237CC/fLpB/TCbl0JgohL/cbGmXV W/5MJu8QdYZ4xT3dv5ZWZzIi+d1kuvPPWvemhmG0Ozp62+WtinfKMtiIb5m8M8x/On5V1lxHtyDz Ibpn2DyxeSDxwerp+uLpuuuGkZXefW3KoaieDKhNihqD3frmSVtq4max4UCkdSEalH7mW/HdXknJ 5iPhTm1Pup0l13MEzw9l0yX/GlxtIbImufWAuNYzn29u6o0pSsImz2a2Phix9QBbXcmvmxDdPWsr mc7/b65FXomJqqrSURRl54v3WMqEETNX2qwLq2nfszKfi7pdJ7K1o0VlcyCICCWEUFdfD/ca5+RQ 1NtCk2C3s63Mti1au5yyXKXN2mV7PXhVVrBL3bNr4FiytZDKVPhyvVfHPPZ1qRLuq6bOjYsuf66s 4I2y7h19VZYZmZtMcKInIvdFO2FaD2w1eUqCTVkn684z6eMKN3Jk198qa6uxztvlP8/hmKdpWdyd NIipCyO1Sc2GpSNryAkTRfPipOfgztpURPPVRZO383Tzo+seyjJjQOo+S9Z+8SVY87b8vC+9+oiy zu5Z3o3IXAQSOw8elGU2H+qUEbzeQFje16uyPJQxytS+B8w1dnVspX5Sln92VZY179H1fkdZrkg+ YSfGuRWEpNU+Q2ZFkO/OZ976tbKqQwL7ZDsqyw3SRusx4WlmZvbAKeuRTvtzna5bD5jJbWVg58oK 98o6rGtv/3DheCjLDLh+6sPkEUbOqGsmY5GJeAv548b6OCyixcNd2nBWHlx0vfmlstoMeWV9zQ3L H8YpZXWgK9fJr6bBV+m5ZrdNTUNOn+5ZraQRy/3DY2nGLVbaeAXbzXbpVBzzdq9a51ii1v9nm6tu FjpTlk3Ureu5afNzyhoLO35u4fY1EOs5ajJXpKf0qMyY9PvKcteu7XNznTx3bd2mU53OqPC7LNue n1fWbufJHFNr5Fgqx23WOlfWTxuOzQNjgcye382IGCabW+qMEZ7/bFWE2do2JqlL0NlgbJrU7l9z hIOLptPN58ue5Sp8YJt7oP7ELetfAQYAn43RUAoNCmVuZHN0cmVhbQ1lbmRvYmoNNSAwIG9iajw8 L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDM2MTkvRmlsdGVyL0ZsYXRlRGVjb2RlL0JpdHNQZXJDb21w b25lbnQgOC9Db2xvclNwYWNlIDIwOCAwIFIvV2lkdGggMjg2L0hlaWdodCAyNC9UeXBlL1hPYmpl Y3Q+PnN0cmVhbQ0KSInsV62upcoS5sl4CN6AB8AjsaiDbIdph0Fh0AgMBkGCQZCQmxY94SSdtCDh VlU3LFiwZmbP375zs8rstZumfr6qr6pY1x8R1XPH8Ttt/11E5ThO2s1fve/wXl+eTLGD4gZhkmZ5 GqBata668zaFi+xzFgeeY4TVoudwzfHC2ErCWMKqUT206h4V8W4/6DOruee+NUF+cc/x0s64V4ll e91aN+fkhr35dOEQiC5C5yIu6tQjj+O8k8fLVexCBO3B5SNaGfjo8dPDs0XVGTzV/hSjSrvTG2Nu nAiiOM2LNLQ6e4jE3ZU/4ro9JwTc+uG7ZO4Dsd0fRJXevTkHtL+YdPQP55ZlXcaIEh8/0piyhA9Y I3NT8GhPeVQu60EoWDdpHnCB46w9QfRa+dHDY8h6LFyyFpfTbVb+jFimbADOLYN/s/6+UNYL4Lss U0nI2VhknVjCbiiNZRKy2l6eW6gOwJDy5bU7r6cqitLxyFoDbFxt/2uq1XReXzCLCpW11j1Rxc5H mTU3cOKxPd2rHrCwg6xfVetdyqNj3s8wCxA/mtN9dvTfyJBDObuN1bLsOj/OrINmhWECR86tcuab 8ntm/Uvp2BGYGxd1/oejrmyHpS9YnNb/jlUYsHGzV0ILukBBzKqP/2IIJ4jUrXK9vmKW6fCej+zy KnGblz8hxj1wvRrE1BU+9gdGjU1hPsNc3d2/GWoEshfnoxBdlZJOL+/lg1mozmFlN8/z0GRwOSxG MyIdn3WTBOsBdZqnRtNi6Tpx3ggpGo7jJMiHdct1e2aWZaLj5+3Q1ya0jzFrzNFEPhzpTclyE7Eu VUQJi7J+mqaxrzJKIz66R9cU6gmsZ4u6JI9ZNUxDRQhET41tLCK60AsxFIlPFuN+Xj7ELECGfPUL wFr0zN8GsWkXQQoRVXQKfHvFLEC7S/FOBOmYOlxMaA4OBFrIa8hRm6MdL21Xicl1o3yUs5zaxLtp MoEZLkUHLpE26upniO6Vv2BWQ9XCwFFZUg3yl+vXbxZFTdIwnCRspWkP1G/97IlZeshoxl17tK5M 0k2pcYrQYTM1Itx29Mj255hKZooX2OI+TsNGLBfNIou8/YafVMb2gGthuK2luEhYvshudySMIwO+ mTu0dNFN/mCWf1zGTNS2tzyEysktJg3rch4fw3C8gHXz1edNW4DT7tqoT61pGdkhvmq6bNqqj3eM vChNqASTtgdfH7WKnltmvTjXk2GuzRFvTD9Y2mxff/3Qt8wyiO3bC6EdENoyf6TDZeVgrFTsoduL crPJmU64Ky/6c5lvzNolzvvbpNwpt6VoPETie/wLrc1uVBoEe4orKsf1U0VJKYS8fj59TMksQImi Qlu0Uuq55GYxjeM4iTPCixLTJOTLAiX34ArcebmmbqpEVZQ9xoHKdJ/azvxLRc9yxDAmqX4SsIdK CA9Uvk7AIhFaC5GaZ/2DMaEhkPlsCCKScv7+YBTel0/p1TOmcT5jsig5IVTiJnPmoxLW7FVBcPOl Wr6p/C1/TpbBLFRVPw4tLbdOPP5iYr3lF4naPqze8jeIaLPgsTsl/Wft2W/5pugBlvUwHz7bj7d8 QLTGZfSzvXjLW97ylre85S1v+T8SWK/08nQkhZBy1nfXl+v1myvqG1d2S7MES+rW0vGOkF/VuMwS 5PnTa5mHqu4eu+NNpOCrnMZR3Mf6M7KMTVX38umwr8vL4bqqqa7qESKkH9P3gnd8vZEffMmKFk0F IE0nLwG3qp1/TOFbNqljx3HTR/nJNnR2cdN6Ol8fA8dh7XMNH0V3KbzYWo2Ke85FfHo6l4m/H0V5 d6NrmXjobleCarqpfzWWuxY3zI5V26PtZD95jnRVFQt2B4K0/qXsUoACIPUdh6tqGRz/087mR/JV eG8sdewA+MdkLEy2w+HAI1Lo/JjCD5gukyApf7ORT5FFTkOVJVTpfAtwSgyhyqat8wCL2rMIL2rq Wx4hT9LuPvVKir4piAr+Nip0ncZxnBhhSWDzqKHskRB+nLVdzegd3j/D3DA0F/Kqb8tge/EsU0wB ZHXX5PjTjeutRiTDB8OLSFdR4X0vzoex4y8c+AnRmQc4PrUL7DNe2l/uyq7thMYJ0jat+KAXqucQ R/cjvs/p1veO3dIo/N3MGgALl//yXeHzRbWPYbLXm2pxfNTC/Lcgwk5KmCucRFZeMOs4nvzbRJti LkaAc8bLQb4BSwQJihPOugfueayxzkwl9vPNt6PCfONbi0y0pheB94tpuY90GSNkarHRcGJhmHfP e5oaG57Ege/7QZikxUgvjyUL4qwueRTik5jXD7Z2RRyCRGmWwTDw7pjlRDznqNPzrcVFNEkY15Pe f1D4osoYWQiiJN13yEX28Lbrul4QpnkNO9uRWXqqo8CHWQAqxjoLwYrn+UFcXldQxKDAdHOOXSsq 96lFuY7GBYmeRoGH4rO8fWaBHpIgzMqShX5cDBR+CdfRNz/Km9HcgtkEjzeIVBmDd+NYJLSLuH7A TPaGOgPPAec44a34ywmHUFKFe3u9zV3Tmj1/0ZK2Na/ZaLTA8YxV+mpmGWlT/5ZZi6iQPRl17AWp dCg8naEpftSrh4xYvCkyRDvXasdPtpRpBeTemAePVfAaqe7gzSirqzyNIqjc4mbTXIbQsLEo4RbN TOS+mbZYjCxNzISmoGTDzEqacuZZHj8zK/Pt2sozTiuBW0vbtcDt/QfYrozBNAfbgWlWGouefntp UaS0P4RAd8MsiHGqyG7YzYsec7wXpWWV00XnGqFpRP1ibPmPITXXPrQg03xc5A6nZYMWgGOGOguE 6/1TDjZ8Py7r0uwmUYnk6lMc3ltmFXdxlE9NFnq0MrAcml9H5HZDlmcGOv+DG/H/oChT0mceHKaP n5/nCIL5dWb1/JZZM9VjvH22EZWc2PQrNRQE88mNI01QKNFPzCJb2F0vr8yQwfPlU6QwAffvN+jr 9NerxXJUDlwOHa+wrXctAjQ/o1Esg8yujiKxXtFm5SY2QNkgCteZBacuExbL1KwEu9sH/1UeQk0P 9jX8/sL1bMiR69vWqtCin3/Bt/y6qxBRNzYPzTQvJxPRxIKgGM4pWcaQlmcKlBMRptMFyvWOIazs 4dOnqLkQl3RoGhfbVgqJ/dU1cOHWtzc/2odR5wD5cPmy7svJ9vkpK0hNmA/r3y23zFpF31al6Srn BUx335xZt8xSl9zNLd8Ke6tx/zSznplF34AXZh374fYK9DtZH7fEa6R2ufWS0ZRFlzk3yxusXkPB 0zgKrY+0TFKAidjVmlJRWGY+79en8zMMp+8sZReAO2YRQmXGYliR7AAESFvkUvLIx6K1XsxbRsLC Iqxp06N9K2TZf9mvXh1beSC+T8ZD8AbnAfBIbF1lHQaHQWHQCAwGQYJBNKmoaFJBUkFybjul0Pac 3b3Ze2/ynS9nxGaXbedf5zfzm47KsGkY7TBiMtJ1XVPBgLzVwaPtdoc1KhCpxvWBTx7FYGloFL4G TmZ9jpB1puX8fvh/KzBGCOkfpntcQHtVCepN8aXvp+sRttH0odKL8YfI2ntk+tAa8pGdTxXBGJN2 GLBZu4KX3ebK68/u7Z6yQXVeKS2/Yl3uzccnkdoVI7vojSzjGXe3hMocK1DZtGV+XH/ehAFZnsIv kOU+OgLwDFlHVSdmv6uBD+qUKsNwH9qgvaU3liwNSJ3eyBqCMkc/SLCiqjb/eJCkj6b2XY5tVZwq vF3M+n8Vg1qykP0uPrLSYL19jqw0R4dgQnA9hK/3ehLUm+1j9cmu1PR3kGUXFiAep922uGXl6A4A r/A6nvUG+MVxRi1mrJCQf1vO44jZfTT41KzJBJXgMdAWTeeIgYCHERBWU8fJ6GrivP4cWQpiLDp3 O1okw8OHD/NnM0uTVX/EiwHbBrIEnQQYdWbZIPhpWwEsg7TDOTkSvsvJED9/CsjRz63RtTbQaq4n ULTPM+K48Nbp3hiB2i8Gu5Sh/vwfpMuyQcPYmXuwxLVHm0YFzNwE25/A5zUq6snvA68owPxTR8PE YFhPUgwLY+tIsgSK2aMBMbI2U3154yf8EVn21fAY0InBTLG0mZnkCzEbQjqCVlglcsCK6oCkkH5l a59B04TvntFthu/5SPncYuM7HnY5Jv6wexrpfbfKcTtxvtZF+vFwhbYFWF/0gRbfoKmjRe6fLQ4T MUqKeuSCNgjmx0+RdYcQUtRQzuceiKvO1SJsJpO8WjkbgMLlLYVbqU04zP4PMmoPTGJIN0sp17FO 4OQVGuxrIVuGKZl4VFP0UAsNFVKwCZrW58hy4aNGh8/HyujPYFeCBvWRVwOjEwJSbUfbbDaxrJ00 H4cVVQc4UcGXKk8efHtF2czQ9mgYG0qfH+A2nCOOwFzXbzE/B2hkPrKgRNMh4unbgpLTTlKNx5MC i3DXd0rS88ytZ+rR6LY0l5qsEgcnLGi8WMSR3hWzj3hE2q0PufE8TIsSA4jxtGjzqbc43BxYdn4p THKUPUGWoYhVwAY1nC1e9C8eG1S9xTLowpVNA9H/WDtyZQQ1YteNq75amVqA5SG2UXIqMJkhXqlC AhMSPQiUetKy89xuAXJaa5eQqzj/3d/cNqjjNO7dtGel8wSycqxjfLCBJIa+yhldV/Vb0Pv/UpRk jGuR/7xt7IJp4TJGQeANZ4xSKr5wRhk1lMVLwu/IJrhx4FPlu9CJEIeDm5TqOxuSc8a/cvYL2Q1G rsa1SWN7A4u72rbtZOlSCCG3741IblKn4/uRO2B3E1qFTtH2/VkjkE+dgOj4bj2OlSst+3WGQ7yv Pqze8h+TXcwkN427oe/aestb/ppYKnjD3W9Oh7f8ofwSYAAVa0g/Cg0KZW5kc3RyZWFtDWVuZG9i ag02IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMjcvSW1hZ2VNYXNrIHRydWUvQml0c1Bl ckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdodCAxMy9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KVVUA AEVFAABVVQAAREQAAFVVAABFRQAAVVUKDQplbmRzdHJlYW0NZW5kb2JqDTcgMCBvYmo8PC9TdWJ0 eXBlL0ltYWdlL0xlbmd0aCA0MjY4L0ZpbHRlci9GbGF0ZURlY29kZS9CaXRzUGVyQ29tcG9uZW50 IDgvQ29sb3JTcGFjZSAyMDggMCBSL1dpZHRoIDI4Ni9IZWlnaHQgNDcvVHlwZS9YT2JqZWN0Pj5z dHJlYW0NCkiJ7Jd/TNNnHsf7jzH9ExL+8I8m0PiPJssGxDPeQmUepBUKpVQIzkVkiz858MpAPa8U nDGTg23dbjuKXuGsFqWdDMeuRylsVQr0m9VKih6FXa8gXjVM60+gRqj3hnpd9RyzT+m3cPm+8oT0 ++3zeb8/fXh+fJ6nTxkYGBgYGBgYGJ7h9XptNptarZbJZAUFBSkpKVwuNzY2duU8+IBHvMRX6IBu 6IyQaGfNwLBEcbvdDQ0NEokkLi4uPT29srISq8ZsNg8PD3s8nqmpqZl58AGPeImv0AHd0BkhCEQ4 RKL9OxgYlgSzs7MGgyEnJ4fD4cjlcpPJRHAAIQSBCIcIpCAI2Uhky8Cw9PH5fHq9PikpKSsrq6ur C+dR+JoQgRQEIQtxWISvycCwjHC5XGKxmM/nW63WSOhDViAQwAJGkdBnYFiCGI3G+Ph4lUoVaSNY wIiiqEgbMTBEHSwrNpttt9vpsevr62OxWDqdjh47BoaooNVqMc/dbjedpk6nE9eulpYWOk0ZGGjD 4XAkJCSMjo7Sbz02NgZrJEC/dSTwer02m02tVstksoKCgpSUFC6XGxsbu3IefMAjXuIrdEA3dEZI tLNmiBRCoTD0qmxSV8JjBVGts5FNEVgjAaLQpQLO+oaGBolEEhcXl56eXllZiVVjNpuHh4c9Hs/U 1NTMPPiAR7zEV+iAbuiMEAQinOaCgSHS4L7D4/FCj5s8k8tiFTXZhgax8eqbqrG4FJSHLAck0N/f TxYbRWZnZw0GQ05ODofDkcvlJpOJ4ABCCAIRDhFIQRCykciWgWakUqlGowk9bm5l5epcgUcli5Xb NESWQ3NzM9Igi40KPp9Pr9fjkpiVldXV1YXzKHxNiEAKgpCFOCzC12SIIsnJyS6XK/S4SV0Rzixl L0X19hrPKEpwZhknCCcYrniJiYlksfSD4RKLxXw+32q1RkIfsgKBABZE/xeGpUJMTMz09HTocfMr i8Xi5QKe/8alpAhvCkgAaZDF0ozRaIyPj1epVJE2ggWMKIqKtBFDhCBeWXPVYNPIfx+9vQosL+V9 ohyWy8rCsmKz2Xa7nR67vr4+7Fc6nY4eO4bFhbganFtZZwIr6+l4GwrCGrJDCwngckEUSh9arRbz 3O0mPJfJcDqdGJmWlhY6TRkWBalUqtFoQo+bW1mskibb0KBtcJDSK+fKwWoj2UWrubkZaRCF0oTD 4UhISMB9kH7rsbExWCMB+q0ZwqG/v5/H44UeN6kr8d+unnGoqZesFARIwGKxkEbTgVAoJK7KxvU1 GJ8zQ8TD8xTWSIA4nCFahDNtwmfpTxvcd4g2Hz8epX8Hqu4lO9D9IAHsgWEIMEQBf6mDqoN+a9RX S7/UIS2Y5/C6dCwWT6HAJbRoaJI8h6VfMDO8FK1Wm5SU5HQ66TR1u93Yy2FNpykBycnJLpeLLNam wJLSe70jRSxWTe8EcQ7YghITE4nDGaIIqjLMc1Q+9NjZ7XY2m93Z2UmPXTjExMRMT0+TRHpHcFbV UFhQM/pDWGI64lMLCSAN0miGKENRFGozlUoVaSNYcLlco9EYaaNFgXhleSgF6zlyKQ9hDszKWu6g 7BGLxQKBwGq1RkIfshCHBXF9RT+k1eCkDiVgdZvLPe5yjY+7KJxfJToCnTmQAMp1stjocvv27fb2 9tra2tLS0m3btuXl5RUWFlZUVCiVShRIU1NTi2U0Ozs7MDCgVqvLy8vFubmpaYKkX7+1LmXThtQ0 foawuLhYoVDA8fHjx4vlGCo+n0+v1+P/mJ2d3d3dPTMzE74mRCAFQchCHBbha9KGVCrVaDQhh3l6 cUo1jfxUANoUPBZLQXZqNTc3Iw2i0OiA/zgWVKYod31GQU7JkaKjJ0q/+KpcZTjw1673T/59n0L7 juwz/g7pGxs3F737HuYG1gWZEQIvXryIwUnipW16e2/Bwbpihe7gqe4XWumf2wqrlfwdZa+npO/a vRvl2eL+3pAS7ujoEIlEHA5HLpebTCav1xuqCEIQiHCIQAqCxAMYRfr7+3k8XqhRrjbcrBTuoDeT I7jJ8ozukIcRIAGLxUIQGBV6enpSN4vyyo9XNBr/d5K/0H6nbBfuOZwqyMKWG5ILZldjY2NKWkbG zoMlfzr/i0aBtr/+ayxqvlCEPCM0Aq+C2+1uaGiQSCRxcXFpaWmVlZU4cM1ms8PhuHPnDk5z7E5Y L/iAR7zEV+iAbuiMEAQiHCJR/AnhIxQKdTpdtNxhjQSi5R4SuA9Kyw9kF1fibHr1qY52oMkoLj2S v237jRs3ftEF8621tfVNfva2P3waqlGgYdVn7jq0e2/xxMQEDSOzANgirly5UldXV1BQsHXrVuyi q1evjo2NXbly5YoVK/ABj3iJr2QyGRYXOhMcc0sT7BgJCQljY2P0W4+OjsIaCdBvHSrj4+OZ+YXF n75YjNW1UTrK2TUyYfn3w+9vTlLuR9/9807blev1nQOHT38X3FPa8M1G8XbUNgu4YOlJ3t6OA/Gl 6+UDrflzw8CpnuGzFqfu8ug56l9q88gXhoFjur6X9i/5/KtN4ndwQaNtlH4O3JUMBkO0s4gCWq0W l0Sn00mnKc56XNZgTacpGSMjI/ytuyoaO4Pn7clvr/bfeDj88OnPtUHPk7aB8aO63uAoifSYsuHE S10uXLiQmruj7MTfgvsfUn+rNA5+c9V95UfvAl74Vn/tprJrEP1fWF+bi8pwK6R5xIIZGhpau3bt crwrLQqoyjDP+/r66LGz2+1sNruzs5Meu3C4du1a5rvS586pC1Tv9fsLzPPg9o97s1/axg6fNgXC 3z32lw9r64ItfD5f3Uef5Ff8Mdil6tylLy+PDvz4+BWN/A39cZzJz14Klso/UNtpNEZrAMvLy5VK ZbTclwIURaE2U6lUkTaCBZfLNUbvf/3qoEjO3lkRPEvPUc6h+76QZjsaCsWP2q0BkV216uN1H/st sJmXHfz9ex82Br49fMak/d519e5MqC7Bx6XG8kPw+bWl7JjFYnnh183MzOAidu/evcgN4N27d1et WoW/kbNYFrhcLrFYLBAIrFZrJPQhC3FYwCgS+q/IkydPHsyzcImC+ZC1oyQwOWWai90/3Cae7Ti8 mi45Amo7a9Sac3OV8OGqo8WKn65vH7dftt6cInYJbuax+8FXsC2lVf4Zjl99/vx58Zb8195MXyeQ JP5GlMxLKy7+bU9Pz6IPdX19fUVFxaLLLkdQmej1ely7cOvs7u7Gtha+JkQgBUHIQhwW4WuGBHZm +FZVVQmzRW9sSF2z/q3XUzNf25ixZn3qhtS0PXv2tLa2Tk9PB4dg+m3f935Fo9E/LY+09PhvVQ60 B+QNh1FgqhdW1+8tle6paw68OWtxOh6EfCAu0K56nnymtwX0d5dX4hTOEOfnlR8P/DR/21//taCo LCs3D9XvYg07/u9r1qwZHh5eLMH/AzCvOjo6RCIRh8ORy+Umk8nr9YYqghAEIhwikIIgzdfYW7du nTx5UigSr+NLsvfJdtacOtD03HQKTCrx/qO/2pR5+vTpwKo/VveJVNnu7/CB1my99ewceenKGnno cz3yjc+36498/2G/2mKaSKPwk/HdxER9Nj4Yn/ZhXzbBh+XBTTA2uBqQuAFx1Uh0XSxupbDCw6LR 6tbIQouoWNhdXRCttLTcLEKFqshlKXRosaU3FJReZkYE7Ax7ZqaUXqalN9lEOPkymflv55//nO8/ 55gwUo+S4cj1oN/iU32qvJF5gcxNrrUjGEFjMQLGYHEaCIVIIxloncQN5QCj5XTFo9SsPO6tltBD YHC2Wrn7+1xxVVVSzl+hUHA4nKQs9eXJ5OSkWCzev3//5s2bU1NTi4uLJRKJWq1GEGRmZmZ2dhbu JeALvMAnNEIXDIBhMBimwESYDous8raHhoaOHjv+9XcHsvjXC263hnOkIGQVCnNP5MGF0NOryS3z Fj4X/u7S2PEAd12mCWnGSRtGmFHCggUAWuzwxIFfLBSD2BSour11bApBiSUE0xbYav9A2HHCggao sGJUo43mcoRACeS68uh5lIcAOFxcXvhrSeKpBXOdJsWgX7CAvw0MDABrioqKMjMzU1JStm/fvmnT po0bN27YsAFe4BMaoSsjI0MgEMDgOMJc4gIsPnrsxLdZeT9VSqP3peX4VSE9cvLMwTMlzOd5iap7 ws3qruDMNsxjRleABcbgLG4v7tAyKs7VtHOFd4feYqHMAhVAz4mVVDCwoh6gmD4MxbrHp3+pWY7X 52tVN1UjitG3XSZnu/59fZ9JKHvlfw5HL929LLiWiCF0Ot3OnTtXOUv5sqWtrS0tLe1/Ud3Q0JDC OczKKX5d57Wmvqon2roew73nxvsvTLU9BvCuq019hXWd/iO51UrwduZdpp0M9dIxlLR9IEyoZwKL BkANCCtEkM9rnR6B1BtHuKJGaWevzk0sgeKUlZ4YM9yEFScQNwmL+ONR1ysfswRNfS/fzIb+FxSS FUt5IyC37FbHE1XctuByuSKRKLR9fn6etX1dVhS4pnbt2jUyMrKaShcWFgp45zN5V4MIdfmhpv6F sceCjbrC5ksjTqJtbPqGn1MxuNOFBPkngMrNwOfxqIGRDCwYafQjlwEln9uxwloVo6uoonbU+Qlx E3o3AemlCU0IZlgBdLkXGejRxVKJklH0u7wfksMIqWOLdhIiNTP4wOkLHz9+jMMcTqdz69at8Azt kkqlOTk5idp7rQrUVvn5+aumDsfxQznHTwr/8edFZcvAU6MjgguFQjHy1nex/9bQq3V4fM7J4DVG mmnXjYNZFNDlgshE12vSQZs3J6xuVg0ZjEvrJwW+LHTcTXhrxnvdg+/mVzyHp4Z3PMkTald32q6L a+KwSGVlZUFBAWtXdnb248ePEzP42hWXy7Vt2zaHw7EKujAMS//hx5/FMh+nLjb0qgzvYuIUA7lG e26JWWpzcHllpKjhddrYmIUug5pOO/xrmlk6N3m1yVvgCP5qThanfLDgpPkDpehiowZUKHVT0R7F v1ZmV0dKKz0eT0wWgfFQYSEIwmqsLVu2wDNJxl+LwuPxysvLP7eWubm5g7l5Z28qllM4lXbY8SkO Wo26CP5Nb4EG9VdQ77gfrShgnqjB5vN05BqnyaWxYTwJHbZuK8edn5LLLIiAY/T++6fmOgzvoz8N oLxQ1kftqqa9uaMrJqMoFAoOh8PatZ4KJi56vX7Hjh2xXncxCUmSedzC/Cq5j1ZNg+Y4OMXgoXoQ vAgWKbnfPTwTwE09SpqDCJIYs4CkBgwyw0XG7SVdCLP/lxZXcpllxVmqS8hpbThhxaiCzooT/tVf QE5odDC7OlEirK6uVqvVcI9FY5d9+/YplUrWrvVUMCmSnp4ul8s/3/oC4Y1T5Y2M9aEuaBt9syJ9 9HSlAzmSlQJBg4R6BBqv1Hd66TlsD5xFWkPZgS1ECxjs9oPP5zECVjZgVMHVPz3Hr+vk//nU6JxP ckIYwhr4dxYCYuz8Kqt/Bgdy+o+HhwqFe45wv9q9p6S0NHKSr9PpIBUkCCK0az0VjFJkMhmfz48w oLW1de/evZ9Je7OyJbfsli9atSORKggIEMAgC/iPO9DP/XDpQQ+sU/agF9JC/7kwMdyUBOEfULon XM8sKEX8pKowB8Ysc/h/gZOxhAS4e5rXvhNmcFxQ901aRriQBMLlckUiEWvXGkkF/xNgAD6IRrIK DQplbmRzdHJlYW0NZW5kb2JqDTggMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAyNy9JbWFn ZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTQvSGVpZ2h0IDEzL1R5cGUvWE9i amVjdD4+c3RyZWFtDQpVVwADRUcAA1VXAANERwADVVcAA0VHAANVVwoNCmVuZHN0cmVhbQ1lbmRv YmoNOSAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDEwNzUxL0ZpbHRlci9GbGF0ZURlY29k ZS9CaXRzUGVyQ29tcG9uZW50IDgvQ29sb3JTcGFjZSAyMDggMCBSL1dpZHRoIDI4Ni9IZWlnaHQg OTEvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCkiJ7Fd7TFNpFucfYzQxBskkQpBAshkDakbmDzdKZDY+ IuvwWDq7kwmbFdCJk50RXJRHRx7izIZRQYMjj7IKSLdVhg6PCpS3AlIeI5JRoC8spVSQx9rXRSzQ x55y8c6lpVd6+9jE7ckv0Paee77z+H7fOZ/B4HChUCj19fWOs5+TezMuryqlrA1ApT9o4b0UqA3E EKn1EkQ/PqeXGaFbhl46Z/wxm9WOmqodnFj9ll6G6CTq1UAW1wtQVuHw1gLYBMsjiEGCGAZmNKmM 9lRmx6hiwXQhG4HoTTIAsZurgTOjZpqALBYXEhKfXx11ITfkZOLHn4RkXrokl8sJisLn8wMCAnQ6 nfkjBEG2b98Ofx22I94TqaurS01NJVBobm4OCwtz0OqcxqZTWcUoFwCtgmkCQo0gRiqNw/5Rrd7n OFyu7AY7WZU9PKUO/y68aOkVGwGWsVUejSm542oj8e26hHRuFV+klmOBzIzPmZKrvFeMZRjFVzmM oNAvGhsbLdUlMTGRRqOt+YjNZsfGxjpoP7xPotFofHx8ZDKZJQU4uHbv3j08PGz3paempqJSsrFy Nw1PEHKKiFAYqh5LwFSLaBb/Opzk63kXD+HMfG1nfw7tTlzyhfDPPv/9/iAfPz93d/cNywIf4Cv8 CI9AIaeorOrRwLNZzW9ERuxKXkSHT4VpAzUjlwkT20ZemTALxZ/P/5D7Y555XRQKhaenJ/xds2ox MTH379+3+2Z4LyU7OzszM5NAoaio6Ny5c/ZdFAgbk5CKVbmqf9QCrYxT3/o34ZhaN/hqUag24GBs c+t8vVf0IiuX9mkExcPD49DhI6lpaXQ6vaurSygUwvg0Pz+vXRb4AF/hR3gECqB26PDRbR4f/DHi s+9uFD0STb6wK7MkK51RL0LWG8sIbix89mppZdgua4F5G0+uU1kluXkFJqUpLCxMSkpas2quUdAq mZ6e9vb2JkiXUqn08vIinsytFVpxWQKtFq3v7bZBvmqNC4LIGlKgeDGnEyIGPGSv303M54rFsipO SGiEl7d3Wnp6e3s7tHJrI4JX4MW09Awv7x0hYRFgEMzal1/r77yQB3wmv6Ub83z5bvPT/yyyf33x fUUXjlzF7No6LAo48fz9/QUCwZoxukZBa+XMmTMlJSUECikpKfn5+fZa7uXLl7GXaGhlr1T1DimW 1pwAraWVObOMsxPxXlVqS1l1e/YGHg8NbW1thX5ke3RgBEyBQTALxmEJ+/JrXVDroFljybzINLaq y+Vt6NdBufZOxzBGrr9Sr0mlUtR5uHxFRERYCs01ClorQ0NDcJmC88qSgkgk2rlzp102HsiZtMto Tb+lP3w8gZjT6jmiHyO8TViCVL3qrIbbGYFy56A4JOxPh48e7e/vt0tcJgJmjxw7BkvAQv8DcuEG wu/vPYRsX2V14JNT1S/ByBVzPlOv14PPQCsg15rhuEZBchIaGtrc3EygEBkZyeFwbF/oYUdnfH41 WtD6p7I1u5WUFK1WyDW3sqPEhA2LXtO4w8fn9u3btkdELLAELFT9oMfJzJIBs1QGFCizciofmaS6 oncELcS5f3F+qmTDEAijoKUD1jUKkpOGhgaCMQAEeBcWFmbjKnAwRlOvotXMre3nK3VY9VGIVHqp SjuqIA+xQitDjPySWLZDr27cuHHjs2fPbAxnndLd3e3m5pZ3p9yWuKwFJIGvMqC4xDQmPKe6m682 4MFT6QsaB9ByxGbcPH/+fGFhoaUogFZALudk7H0SOKl27do1PDxMrMDj8WxZhVVTl1TaAnWk0h88 mUCw0r+F8W7l6C13s/Qe7PPJyUlbArFWxGLx3sDAH0vuOo1Z42odT7mCNLox53n1j80SbhiY1qQz O+Dp2UL2Vnd3hUKxpv+uUdAWuXXr1tmzZwkUaDQaHGuk7cM1LSYtFz0hWb0jWN0xOIFWLb8M+fj6 jo2NkXBfJZfPzMzIVRpy4UulUlgaHHA+s6hlRmaVtgyMqPXm5Kp7KoOnR6P/sSfoCHrbwgTinZiY MLhGQdtErVZ7e3tDMi0pKJVKT09PS8faO+Xuz+zk5YZ18V7n0KtFE1pJEJ3Y8fvtcMinFRUV1nqu lQ9mUtwwoWSyZrRkMgBLgwNOYtbbaXBIoUNPs8o+sUSpheunCbOGFbosVtc2zx2nfiht7ezBOwwX BIh33759+/fvLy4uJhOzS5YlPT392rVrBArJyckFBQXkjH95KX+lxFweu6OX0z0A4x8KoYroWmQv sJofHQg6aLXfqsFYI5+oLXwZdK1BDm2ZXaVyUkkAB35u7nIys6j0h5D2dsE0/A7kem5Grn/SmL8L PAA6idm38N5GRUWhh8mWLVu2bt0KFHvy5AmpuP/fBcYkPz8/jcbiwCMUCv39/WGus9ZyWycXvWEl FNYk3WQmFbFTaNU8pV6gNgBkjp8DAae+PstgMKz1vC832M3tigwX8WsRCzbbFS6ZmxqTyQQ3nMks QANvuuaJRKxYQh+NqbRC1SpyHToe/jdqDlQn7mYlMjeHeXv69Gk3nGzevHnTpk0konYJSHR0NPG8 FBkZyeFwrLI5Pz9/Ov062rDw6B1XSucM43N6J+w0wEeBH0skEivz8ZoRDA2Kb/ojxS2YNmilKaPA 2bX7o71OZhbA5A4rwz2t7xf4fejP7BKiRamoa8G8TUhIwDMLTl3SdwGX9PT0BAUFESg0NTWFh4ev 32BHR8cfwj5HG5YJuqRqvtoAGEP0YsWiowHzzJs3b6xLh1aWCaMfw5RZLIo53dYl4AC44YRgzZll ojD6diY8GZ+Ucb2w98UcWhTqjX9j3sLtAKPVtm3bBAIBiZBdgsnBgwe7u7stPdXpdAEBAXz+u/fV 0tJSRuZ34V+nJd9pNeFUVmUvq38MX3qJcnFEvuBQkGEW2p5MSTRzxc0mZjk6UoB0NbPM0zumWoLf +8YVH2z3hL/wOYfdB6WJz6vEvM3OzkZp5e7ubu2g4hJzYbFYJ06cIFCg0WiJiYnERuRyOSUq+qsc Bp5QF8s7f+ob/WXyNU+pM4FUrXX0ZttDZhrU9l2Be1amBL1nzXDj4mjcFhpsthqJxdsogYADe/YG OoFZzxULIvVKVwKWrakjQXQZ1/JPxieiJSjvFaNl4o+sZCk/P3/Dhg3QrbKyskgE6xITWVhY8PX1 hRuBJQUYtr28vAhG7unp6dCoLxOK6jBOUcvabjQMDMm15pxyGrNO/j2ewWBYmw3tDBeo5RacyRXN yCUtK7MRhUGGVwYDk8kEN5zALIBYAZ1LO65esqQwqtD4fbiz/jEPLUHHqAItVlnNylWrpKQEulVk ZCQMKqTCdYmpXL9+PS0tjUAhOTm5oKBgzUdTU1MhX5xKKvntYnWnU/Dr7IIlTqGQKBdErzQORUVj 54GggySy8VrGpQZjF47guDgK/MvlTpIwBQ6wmjodHek6UcyqPXw8fFihQzEo116gP4B6ZdBYqLfQ qiBS60dol1iU2dlZ6Erwt7y83MPDY3LSdBcJhUJ/f3+tVmvyO4IgkbFnkkpXaJV+t6NBODOo0hHj OaJzzl46dOx4RUUFqZRoVTDgylWa5YglXM7ApNVdC5YGBxwd49Ckmt3ee7Wg+JtEahjlL/v2H/Dx 9YPWs2FZ4AN8/S/7VQPT9JmHSQwhJRACBCIESFmYZoARNDiRiCIYUMqnYM5k0yM45nlDZQMPBZHt orDhB86vKiAbVlAqio6Dw4IiQmlnqVIqhd66UqCgDVJAPmoG3j1QrlSoSP/QuihPnjR93//7e7+f 9/f7oRKfAsMiko5k0O9zuE+H+PJRMLOkHqf29dnrhLZoAW+HTCajUCimpqZWVlbGxsYlJSXT24SG hpaVlanXIGb4bNe+hEt3lLI6ep1Z1zkwg6Ce9I+KXoyK+/9o6VYIdU+MUsbiOZDJEolEXxs5CUTX tnZ2yWknWEKpLlZXwxd/d/zs5uAwC0vLDb5+ScnJeXl5NTU1eAPxIgwNDY2MA39QRCU+oQGa+fj6 wSQgOPzwSWpm8QMcHOKNkYXwTwdAKGg6DmX0gwQWnmt6s/Ly8uDgYPWatGOZe8/fUsoqo5jFfjbM 6x3VSGH/6O+9fzTLXrbokQLZyybZyxNZV5xdXEUikb62cwxw+tjJtFMX/7LjC+vFNqvXrt+fml7E YDU9HZ7jotBDdmGJf2DwmGwPHaqqqlIotHamMIFh0qFDNrZ2y1evi4z/XiZ/oYt9+JAhl8ttbGxI JJIqr4DPysrKmt4SHsrZ2VkgECiLVferY37IU8oqrajuoUyhUVOCvlHxi1G4j2aZokW/rHnSlvLD j67uK6N2x2FdTCZTP1vK4/GMjIxy6CXKaTQ9HSpi1EFZ0JeV9WJo7cdLV1nNUm2Xgw28WHDLdbn7 5kBKRUXF9MicANAJuvLz3+Tiuqy0tPTVq1dz73MBKnR3dy9duhSXQSUueDGNLalUanx8PP4MDAxE 7vtWKavUq9XszoEG+ch0ivpHmnC1xqk3ZTV29FNpNwLDIq1tbGP27r9x71eMfq28xt6BnJWdrevN xBDIay7R/6VxbqwW6enca9v+GgNH9qnXuv2H04oYTEjvrYuqrBf6B4b4+m3kcDi6mDa6DQgICAsL E4vFuuj/gwXyLCcnJ5W4kpKSNDZTOjj8Jh09vv+nCsgqMa+yprVnuqYa5SO/yV/yZQoVBePi0imL 77Jj9iRAUIFhW6m0m4/a+9QncIfTsjEwxG+jv+4uJzrH/a/ktLx1qk+6BosqWP8Yc2Q+llbWW7fv PJWdz2xq19gY7s/O3kEPz0JOTg6ZTGaz2boe6INCV1eXo6OjoaEhlLV79+43NUtISEB4/7cTBUqH dZMjbpCPTiEfiVXPa7LSqbJq+JLD41EfmJpxGsWJ2/v6BMb4bJiaPxZQBVKCKisr5yugQlfoEN1e yL8leDas7fwnHFlUDN4EOLKElKPXGUx+54BKVnjxEGHOfaqzAWJmXAA6na6f4T4QdHR02NvbL1q0 aNu2bW9q09zcbGZplZDLgKwyf+Hwe0emJFb8vlFh99gdnkLBfLOhrff85aLNocqoL+FmJXtKg+lz UJLXOUAtuO23KcjWzi45+VBVVZVCodB2r2ACQ5ijE3R1seA2tDDHFaGHsYzs8JgjQ0a2dXv0kUwq 7nlnZ+fcDlY7iESiFStWXLt2TZ+DvveQSCQkEsnDw+NNDR4wWR8t/zQyPj0x7269tG9KEMiTjwh7 NMjqrWzsGpw96RWs6Nh4CAqyOnu5qL5VrpW5incfi1IyTgcEhVpYWvps8D2YlJyXl1dTU4PX4/nz 50NDQ/BHo6Oj+IMiKvEJDdAMjWECw8PHztzjiQmsl/90aOa5PWjqSDxy3MbWrrW1VZ8XQAlcAwQw WLL+h36PMTw8zOfzNX7CQx3xZYLPtl0unj7rAoI8PL0cyI5m5uaG48AfB0dHj9VrAsMidn2dePR0 NiTAbeudL2VVNYqT0zNd3VaCyd+fQpGYoKazXiKnV7IwYUybEha5ytOL7PiRcl3w4PiDIirxaWJd lbNdF2FlgT4bNxUWFmp3eAphosFriEqkCnqIBL0ICCkUCgHDBcweiEYuXLiwZcsWCwuLNWvXJR44 qHzbW1paenp6lG87gD8oonLybff1U77tcA1wEASvfav8TN71TaERcFI79yRArfMlqD8zL/9yd43X Wq2PSiGIMjBIzGVwuWyglkGLhbrC6YOEzt3b27uuro6Q6QJmAgKh8vLy0NBQJF8pKSlzyUeSlPnI 5iBqwa3H0hfTLxJyn+mkM+qiY7+BoDaFRkJcHHGPxmbzQv1rZ+b5bI/5ikajaX1mCkG4gQFNOHlM 7cXQVmo7Ea/13/z8/Li4OCKWC3gDXr16VVpaijQ2KCiooqIC/mjufaITdLU5kOKyzO3s5RvQV4N0 QEX1S4XMJSk908Vtpct41Iei7gSlovpk5pGPOl686dPM83F1cxeLxVrv8rjPymR3KgYH+0CZMBfC iiLos5Diubu7EzJdgAbgQMPCwvz9/Tkcji76R7d+G/3hv8pY/IYxfU3wofj56Z/pASER1otto2Pj 4bDUv86exffrSSTjj5c6j/ETF3CJsyvo6LRksa0dsT4J032V594D35YweRq/1gm7uO19Gj+Zmpkh 4dV6cxWCWIOpoDb2ETspTMDc3JyY7QKmgMFgkMnknJwcXQ+UlZ1tZ+9AK7kH51XIYEZ/9Q0Ehajv dB4dEpvLZaYzWCamptPul4GREeks7YZGk8c6Yxm7ae/B7xwcndas9007k1PbIlXWY1BoysbOftmK VWyRbB6VNe6z2uGvgB6ZIDOcuM9aUNZ8AbIikUg8Hk8/wzGZTFz4z7+MdXFbcSD9JOPxf7jSvnkh 2WnJFFmZmplnXy/ldvS9E9a3yXOKyiJ27LSwso7YHp1VVPqwTX6BXmJhaWVsYorl320Uc6X96nRd TjAahJJyBZNKEtKiDLxziSkLE0BGQMh0AZMoLCzEDezs7NTnoCKRyNnFNf187nxpqqLht4PpJ23s HUxMJtyWoaGhtY1t0f2H70pWk5T2VbdIj57NXuPjBy+2YrWXypnCed2qfaS+kM9j/k6j0bTe0All TYZ/gtxwwsrKz8+Pi4sjZLqACTQ3Nzs6OiJj1f/QEonE3oF8/f5DTkcvYTJ/l5386VpAyBYr68U7 du87V1BsbGKCS2tsbPKxs+u/uUK04ba9Y6pPOP/OAwhK3auaWVjklVTWS3uVzL3N8PTy0no3FULk WTThpJJ6uFQDA+/SdgWBo/H29maxWAQMF6AChUKh0+laGg0WJ3qr342oVHo7occR7nKdX8DDdjkB 0sqqISUIyj9ky4ncq7WiZ8p6Tx8/IxIJv9XNUmUNt+0dU33aqSfPm5qbTwlZTUzNjmXRVG2wJ9gZ Ihs6H8B9wK14V6O/H0C+g9dJe7tBGiKPRBqby2Wz2bXFVJQMUmtHCM0B7/Ol4juzF1RZffP+f2Z8 sszN1d0jMe3EnUfCKQ1Q47nelyXuVtXUS94x1acHD4XUz9zCUkkUx2rGtXajmvurRA7S77LhzeHT Ce3onIDoBTEMIhn9D/0+AbH0lStXtLcbU1Y4TagqC6jeCOn7ZrB4MzCBz77Y/VZBPRB2ZmTRNgSG IHWK3pNQwKidvRj/VMq6Xcc7lk1TEYtSMu1c7s3/Kws8eu7Scjd3ZKOENpUg/sd+2cY0laVxnIQQ Q+KEAHEyQ8SMJvth1Mm4kuyMTuKMMkYceQm6X8x8WJ1sNplsTNbZ5WUF3XU2Lu6sMzruOoJQoSij Qxl5KZbSUmlvX+h7SwEphXLb0hYolFIK2HWosw+9zLViW/pGK3Cf/D709p7znHPPc/73/K/ZbAaB x/C4XDeRkZGBomjw/RaVdaBc7lxwzjmddotm8dA60xSKoXe/JHfufteXKMQGG5nK+vQPf0x9/fVj J05ev9PQNWwJ1je+Uspa/oB6n1z+rhr2OfiKkNY16FCpVImJiQwGIzrDre9ITk5+8uRJ8P3mKKeX fSgcp6EhfWj9/DNM4LWkJLF++mXAHf3q7V17frOv9N//ZXajXtusb6pbWGALK6uqQlvbwINEIu3Y sYPJZK72QBskQlbW4pl1jT9ln7K4Yy60Tyx3LClLZ3sZCktc3yH0emvj0Mzrzjyak3n4sFQqDX2V fQekzcrKys/PD8m9EOE9wnGDx6v7IzIHmMCud/aIdDYCXwhR29Uays539nySnc1isRYWwniR/RKQ BFLl5ubu3buXRqM9e/Ys/JxE4HH27Nm6urrg+7nPrAgpCybw6e8/h81D4B+BdvIamXLwyLG0tK0l pefZbLbTGfSnLXSBjhcuXEhPT8/Ly6PT6S6XKyJ1JMIzurq6Dhw4EHy/uaYzcafvRkZZ+/Z/UPmg vQu1EgQIVdhX/M9vPj6Wm5Ka+tHBQ+dKSmtra3k8nlqttlqt8/PzcB6BXuAHXMKfcAsalJSUZmZm pqamnjhxoqKiwmw2R6R8RPiK7OxsCoUSq9Hr6+sPZB6BtzFBCHD6TWQq+/yVG5+d+fPRvBMZ7+/f tn1HUnJyQkJCfHz85teS3tia/v6+/SdPniwtXVSfQqEoLCwsKiryUxEQ3fT0dNQ2wDoOeKdt375d r9dHf2idTpe+7a17DKFgaBKH74FgzcKPBcJhq2R8DqOmQ1ZEZgFTjnnPNZ+dnd29ezefz/dVFDKZ nJOTQ3x2RSTg4IDPWK1WG81BwY3ExcV9+S2JNzjpCdcD3pqFGwvkRrt4bB7j6gNkUVk1HS7Xco3A J8DOnTtBYl7rAprKzc2tqalZ/S2wIQIMIexzgUAQneFUKtWmTZuuVlN4mglPuIMTiAfL7q4hkMEY 0DPmEI09wfjyLhOUdfEuy+v6F7vDV3UMBsO2bdtiYmPWZYhEIrCFJBJptQeqrKwCE/jNbQp3wLIM RPMCLzdYKyx7kOjQa5kTji5RXM0AZZHoEq8lIDxhlANF0fz8/KysLKlUuhr5IW3mx4cPHjlW3yFF +i1eUFs4A8+BS+/NXnk8nyJqKC3zmKyYahP2kcVWob5qQXjCKAcsKY1Gg88uWFgWi7WwsBB+TkgC qT45lv327nf/VVHHeTyK9I95haMeY3uAqL03e/Vhq6MNVzOOH1jkDimmrCGz1U9dCE8Y/XC5XHQ6 PS8v740304rPlbDZbKfTGWwS6AIdS0pL30zb+uHho19V3mP1mdh+xUIoK2SUJrvQNItx+R7TrawO 51N/L0bCE8YwqIgs6/QXv/7gUEpK6keHMs+VlNbW1vJ4PLVabbVa5+fn4TwCGcIPuIQ/4RY0OFdS 8uHBxS6HjmZ/8fevKIjiUb/5OY/9EnjLgOnsH/VDpEbx+RRRoWd8SVZdJkfRbToo62qjYMX6Ep4w VoGO2TBfcbtdSGYIzl+r+OxPRUfzf5vx3r70t7YnJSUnJCTEx8fDD7jc+96+Izn5v/v8bHHZt7d+ ZLYr0VXZtGtCWdGF3W8WmR2gKaBR2IeVjNWNBlJiwhPGJOadT7Eyfd3AFhgdOGKdldlnWiv42ZOs x7GfXvjIjTa8NFd+wKwgyzQ5E0iJV/SEcGbByUV4wojHxbpOKFMpud1TWd0mO7PXuHYw+SXm0wsX +ehSXZDhySJSG9SrjMINvMQCgWDXrl2EJ4xyNPCW3AVVqsGVpRx1MHuMkUJhtKlGHTzNWARzvojB L6s0aJQQai0C4wzG7TY+ViymQhtUlQlPGP14bLBgxbryA4M/4sAQjDhYvUaGyhA+StM0llNsmn3U Z4pIzmW0d+t9E/nhoozCPMMfsQM8ve2vVVSsWFOO+aCqTHjC6Mf/floorl0sVhGJxhm04OKSj9jC 3xUSdOJyZV0TV4blVBinCWUFuYCTmKyA7zuEhTUdUKmaDmUIhSY8YfTjTqcKexPeaGDiypKZZ9t6 TF55qDK2dhtWRIhOUBA5bIaLtXQsJ5jMQDquiK+JhYnnEA9DHYX2Yp6QgTyMXpPYZOfqpwFEO1F8 qxkrk3Z0KrRCE54wyoGO2bCSFVY97Bww4+KS6G0PVSMv0wqstDFEuknByHQpqQXSFpNZS2eWeTYi u87rrMKnVWnAeRjqKIEsTkCoRhSmGa5+ifIHTKxGN2nSkAtNeMLox3WqCCtcWU0jooNSOgCh0dHe a2xV6oMFnCS8ZilsaZHbvVxqEKjG5iCh3GgPIVvUoL5IIF2E6KTS7Oganoj4ZCT6KawKAE3yuKCy FSsQOm4Lp9AresKcnBwymQy/29raMjIyXC5XOMMRoULHl46taubddgSvqdzkoCp0gcPoNcrdBgYZ Gi++1YTlrBNqEf1M99gs3A0qW5RpkaOerNgeZIWtEt/gYPaZIjgTd+YZxA1bM15c3rC0kuye8Gvt 3xOCG0xPTz9+/HhKSsrmzZvlcnn4I27wuNUux8pXUNHcKurj6hwYIK5WBbps170MVY5KdNYuwzRX Z0NQ29d3W7BsF+4h7OFpOAfFRseKSWJLk3QYp1m2cnuREWQ109qlYHZrpQZbpKYhHJ7g6mYQN5yh yX9U1WMr+bfvOTNzzvAL7d8T0un0LVu2JCYmxsXFgbLKy8vDH3GDh8U2W1z7aElc31HaZGoEncYQ jth5g+PNsmGMZTuB1q0HTQkNdrz9HRqnsJqBpbrDG0B+2SeCIUtE9h4+k8jSJNV64r8xs9cITypA bQXljZdqqSqzw+viBItsxIYvF0drvXybAi4CW0m5djRStfblCU+dOpWcnBznEfn5+ZEadCPHo24U K+KiLbxxnypQ4GIBxCN2mcHWpbVw1GZkYFQwaIFLmdHu2Qao7+AX3KLiecobH+G3pEZ7MxwHYdMk 0a4GjeIhT/w3ZvUZJcaZ++LFFSus6eBoxhHNKHYrtIdq79Z7LmbnwGgZ6T4uqwdd/ZGttVdPWFZW lpSU5Kks8ITw8RXZoTdguJ49q2YqcFH85WZDLZXJ1k4u044v2NqpmmZGQUULnmGRSmqnxoK34Q9O NIp06wCqRK80O1p6TNhj3mwVKs0zVJkhtGzCYStf/1xWTNVw6Y07uKzK6bKfFlyRrbUvTygUCtPS 0sAHYspKTU3VarWRHXpjhvPpwnWqCNdFQSX1wn+qqQIle9jGQf3BkGsuVdwtrKLhfa9SJdiPikYm 3gxMY6MIfSBcD0iNM/BERW7fCyrgaUySEXuzWBdUEq7GIjLY8fWBt1M9A/k/+9USlVTXhl2rwb8a tloNW6saNK/GOWvVoNaqrwZNGzVqUIrydfX7/v6/m1ppGV7RE4KKgQkicLiLXBTxAgocoCNeEA8I mZmoKP+LB0/mJUAF//Xps54BHPZ+3n02+9nv+9JK6iEPkrv3VmCcm19Mx3+9VU0YCoVu3LgB2Yp0 VmNjYzqi70PMhhdKBF0/y8JaWe77xr/f13LRDtSCK91BcBlFhd3bqu0pYnJySjnUYQCKB0bwyVBc obxVbh1RgzdX2D0c2nNT7Jyt3bgGj+0ArVJIvuYrllCJTRpHvkr7xhJO/2zEDe4ADKa2BSjtxZ5X 1tMqfiZ9yFZpshWJTWtCEgiCQM916NCh27dvp28B+w2QueoU/WuLOnANjdGS87our6j8v4y6ohr2 q8qPD95W3SuqhqIxrxZdO1g5OErW5ox2E/mkEOGr3CGScITQ/rFmvXvbBG/qh7924cGdiOyQnRgB LyK3efNqJKtbhD5nNssdk5qV26PN7Nk4S9gzrMOI7pGvMIbaEKDM4vnA4eeUsNbu5GeDY9eLwHWA hAVpC5LXpr86nc7Tp09D5krrGvYboG/VDo0+YKl+aZoS8a8GjW0sQIl4iNW0VSXia3qog2TwfOUZ 3Fydaxs0uPyUjsbm257IzgnugAU0d1p+vX/QAgZb2uuKXSDuUJfnK1isGw+aPCEYr8N/cRNQ6QqK TfZ3rObYlbXqUODfjR2DHiIzf/RWNSGJ+fl56Lwys5J9hdDMXEPHEB1J7Ck6ovikt0MluU6BpYqf PXpZg2xoHM4SSThy2zvSKgsu7nGoXEGgYTjUvBe2ajePkAso5irJtysTm6mtyH3XUMsXywbHqJdd R4VzStrn5ogUT0qrc0rZeSudGkWOxvpjwzamFVAQ0mg0s9kMFeDDhw9v3rx5/vz5U6dOQav1rxXA B/gKD+EnGADDYHA4HM7kIv+RCH0Pi3vxolbjpp4q5Bukve7Q97lN5059mwXTkfd5YR1XjgWoA2Zw +5s6nSkRTvW/a3j5ZU3yVZPqXSmLbEkdliS7h+MG+bM2ZooCjnr0+2KxoPtn8qqR5Lype4twPykN ErMTtY6h1pF2k71Zrqto/Hz/dWXOG4RWIVi3ky95eud4MJP/rNfrLS8vv379+tGjRy9cuPDo0SNw jVardTgcwWDwx48fkRXAB/gKD+EnGADDYPCxY8dgIkwHkUyu+R8JSEn4ZMj8xWfExs3uCfdEcGYu 8cWlHMBXa8I2drtq7e0N5VxDB5Y8WWp7fp0MpIrZAlKhAw9BYZmSyFbkdA4lQ4HZpXbHQjcaMPK9 GvWOwELUPbPwRmhaVxzSGLHu6V5Rzb1iZk5JPY3BW1v1UXzEVissw+nuqigsLS1JJJKrV68eP378 8ePHKpVqGwkIpsBEmA4iIAWCIJuO1R5gK8CGvxN2xSulMq5A3y9zBkjKnQG1zcvROJIkohwidWhV bQLDgHxFwYhPJa/wG7K1tmRoHA6ScZ9y4qWgi5hZXo6GFqP490iNyppSZwqdbGsXtrGKThOWl5dF ItHZs2evXLkik8kgH+1cE0RACgRBFsQhxM41D5AkJkMz95H4OaSVssRmTIb5ScoxfwfmY2vsSfIV 30DqPGQ0yBw+8pDLrWPJK2zFes1QQioHx8mIn8yeeDHM61xaPUo/lqLecFTumCho0CT01FOuVjaA Z7KlwnH82rVrFy9eNJlM6dAH2UuXLkEICJQO/QNsih6nd7VGktFLEUmvkzIX0IAH6jW2j6qhhKxE B1Z7GWmdQCZ1+oFqfKpJ60hm+k7I1WHKLwEy4tMGFbmMbpxY+5rgsunFqGcmIrKMFgu6NhrqJd/A M2JuXyjDdzuKoidOnKiurk53IAgBgYxGY7oDHYCCoAv7aa6SunYzhmIExQ53QGYZRZTWhCz+bIyn vw/NIgve7iSAnXggmbm/5eDvqcUDZCxE5yAX8IyrWVra3CCLS9HZpWhgLoIR3wbGpqxjweHAzNz8 LlRf2wDY6vDhwwMDA5kJp9PpsrKyuFxuZsIdABquarSXMld+CSLQ9a01F1CHB6DiYsE5l2/JarT/ T0QRL8ZYreRpB6odE7+ZlQSHfkOtOx5FYJu4j8jI6JbRqb3e1MRoamqCc+71ejMZ1O12Q9vV2NiY yaD7GfOLkQqJmSqNct81IAIZavet85cC8+vxgAbzCXvxjx22KoW1Wjm4lq8FprhDq9u56m7yzIud RFu/BwbvOlWYj/JvIa+DDM2QmDNb0G0Hdrv95MmTw8PDmQ/t8XggNCwg86H3J9aZi1Yp/OsDIuiy tmMERamdQNdQjhEap7/DFaPG5VeB++yT0LDEzcXgC/vdIowAoi6iudtVqbDuIpWOCVIcWK3sI4Pe /6iYmgnv9V4mxuXLl1OoyiIEymVxSbBYqC248nS6k/Xizq079II3nfh0StFBBhaQ2ooPsAOAuRBF P2UuqAxzy7jFddzPhoE2h0+0wVmbsrVvjI7EFZ5UcEW2cfLwy7/4mwxYhcyyK1Q7JylbNRgd+bUo GdHo8u31LiYG9DvZ2dnJjw9jLKgbs/9YQXZWQQsejc6K6LFnL5jMglvwIasFT+0+gQXo9frU1n2A HWBpeRntdVPmIv1FY7TQS5B3bB5HrGrRdLUZreJel3hgBB3ySm0+imLrmLgfb+/ByoWd1NxC5JPQ PtGGTQJlLgLMxUD7d8IapVXzhSAFgc3dGJ0pJcNxtLa93r+kcPfu3fr6+uTHT1sYWX+0RNY+mrXE 3OQln00zs7Oymam9O5vNhmWkNOUAO4fLG3zO7VzrL6pEzH3flPO67l5hxd0XZXeflea9ep9fWEYv YuS+YtwDFtXkvP1IY/Dya2Vxc9VIGVyRwEYI7X4gigV4XW6GtG97bDF9kTunSClgsxGj14jJQG8F XQuLS3u9c0nh3LlzOI4nPx5jxdISZCtIUgXMzljlF5m2GC3TpLHCGKSvOy0pCAKgxTtz5kxKUw6w KwgvRCRm131EudFfqTKvSlTFFwttfpIi8NfgeJnEnBKZSosaIygRIEdpzq9uJ0M8a9bNzC3s9Z4l iyNHjszNzSU9PIIWgKdutZgtxpY3MXe9MVO/ETbRSjF4x5JapxWFBcAyUptzgN3Dt9mwyOQs4Gi2 YagHLNWT1YmQ7MBcgqGf1tC4pqB4KxObE7JWaVE5JsWOADVXYPUxeGhejYQU/w9XG5xJ/qDuPVJ0 VjQSng2v1oKx/JXNjNkoPMq8EzPVrRctRGo9VgwHzvp/wGJkyT7q5+vthXxDQkPREflLvoFrwEZC c2NTM4/Z6lVztZWweAKrF/xFUjhEqJ0Ez+gsFZg2skLa1/Y/nXtw8PbrrddfwbUA0aaT12tnripb sBteW70dUtnqP6mtwT+vds9fcu4VNGs93pALzlkfVwPrKrvOy2RkKjAAOsDIyIg8vaOAFuDHz99P 33y6fP/l8RtP9ly8v/P8vZ3n7++9/PDozaeXH70GZqWfqJ2dh6/eAysvaLNw7o6WmUs2n72z+eor ZLTjxqsDt17vv/lq/82XB24B2a/23HqNpgaEzt2fsnxDCbATB8vFEzaf+vTt50AFBdmgsLBw6dKl RCt/NwPU3Fv97OuPd49PgqqpznM/Hm8D0hWrT966fvkcCJy8/pi05uCyZcuAziDV5dQCAAEGAE1G psIKDQplbmRzdHJlYW0NZW5kb2JqDTEwIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggNDUx Ny9GaWx0ZXIvRmxhdGVEZWNvZGUvQml0c1BlckNvbXBvbmVudCA4L0NvbG9yU3BhY2UgMjA4IDAg Ui9XaWR0aCAyODYvSGVpZ2h0IDkxL1R5cGUvWE9iamVjdD4+c3RyZWFtDQpIiezXz4/bZBoHcF9Q xRWJIwcQfwF/gE8cOFQgwolj/oAcSn+s0RYUod1DBFrcCgl3ta3LrDu7W6sQZpAppN2ORjWtUevZ rbvrqdmuW1zM1qUuBt7ylrpkH9tJxpkm7WSYJFP6/SjSJH5fP+/7Zvzked92G1bjt25/9c13jn/1 1PKVY//0P1n67ydL/nHnsnnhK+fLa1euf3/r9p1y/8vRjd9qC7957zi9du0/+rt92vzZ/8z/Kyq/ ji5HC961ExeiExeuLnj0PjrmXVvVJ3vZ/jt/ae5Q3i+i0Uue//y7m7em9VWs27Zt2w4dOrTm7rEi CEJNDxmPA6tG7xs2Dwz6K+mW5zp2xnKDZKQ5zM7O0jRGnTlsKhe/jnf3kutga+eemdmji3Pn/zcg d4a9zn7xR31+hzyzS2310uq9E86t2+m0F7cep06dEkVx7f0Tz6gKHaKkhbzNPF3oV1XdkeZAEzh9 +vSIE4dN58q15I2/LfaSYue+D994d+bI4tm581/fK6HOXdFPWG8dmH3lD+qu/R/3bpdm/r5w/vK0 1/SLbN26Vdf1Ue5IWUL4hoxOQ9MENiQUTN2NH37cO/95Lzt2HTy2490jr+45cOCI8f6iPXf2i7l/ XJ5b8j884x1ZtP/80bG3/jTzypvKjnf+Wq5T9Hrzg9NfRqPtfDah5eXlJ5988vLlKfw+XLp0iYam CUx+aBiT2+mdjz73ymmSpdiBTyjFtu89tP3t97a/fXD7nhnKpp375lYlFL1enTnxsX2Rgkx7HRvj 8OHDzzzzzMWLFyc5aBiGtHWkoSc5KEzGl9G3e+atVVlz39fs4vkb3/847blvMNqV0XP+2WefTWa4 c+fOPfroo59++ulkhoPJ+/nnn8/5V/euIb92awsfnL4QffvDtKc8LpZl0d5s//794x6Ihnjqqada rda4B4LN4Mq15OOzX8hzljTTl1C/108ePvlvx7/Kf0qnPcex833/xRdffO65586cOTOO+BSWgtMQ NNA44sNmdut2SoXpq2++u3rj+5v8p2lPZ9KoiBuGQceu559//vjx42m6Ab8nFIRCUUAKS8FpiF8e E+BBdOfOnaNHj77wwgtPPPHE66+/vrCwwDkfNQjdQjfS7RSEQlFACjuO2QI8cMIw3Ldv30svvfT4 448/++yzr7322szMzMmTJ5eXl69fv37z5k2qR5Qv9IY+0kVqog7UjTrTLXQj3U5Bpr0OgE2KCtDS 0hJlze7du19++WVRFJ9++unHHntsy5YtjzzyCL2hj3SRmqgDdaPO6yhzAAAAAAAAAAAAAABQknKe TnsOAJsR83ShrCK1vGQtN6axXaP+ohb6TUGounzcMwV4kDBPo/xQDMu2LMs0GlX6VPPXUIhSXxUE yYnTNHZU1YhQuwBK8syqer28CLISZgScB0ZNUltNVZLUgKe+1WxIUkOWVd1i7TYPWtW8xNVkM47s Rl0Lbzj1SkVuBRQjjSypUlGscIrrApiuPLNEK2J0ZGIstjWJdoS0tStqGSWd2rSW3qeLgtpyXCu7 WNW8NovMrCdtHaMk61lxWNtWKvTGjuMmZZ2oxNNeGsAUdTNoRV13027G2dmRK1YoYTS36O9qVUFU 6TLPdoMqna54nlkuVbJ2KIud05qJ3SE83IrMMvwojjJxwkvX83zhXm1V7lU1lnXIMov1ZVY7NutZ h4Y1zSUBbAKdDOJDrlO+pEE92/bRASqlOhT7dsv0+ODMChuoWQA51j0lDb+e5oWo4cacx269W5KY 25dZ3XNWzU0iNTtvqThnwcOMeTpVJO+umsX90nUeKNXeVlAN0+JGjU5frNtz+ZJBjbIZ5t0Nql2N rMwBwH2wJEnYXRkIAAAAAAAAALAWaaA2tCDtfuRhU67XalJD0b2Il/tZqtwK2LAoK61pbOqaXqLp rYjip5GhNiRJaqhGOChM5LbkukQjm36y1tbYEgXJTwctpJ36pk531GqNlhuv7bsA2BicxZZaE4SK 03nUI0UU6KOiKlX6K9S8IrdSHjpN+qy4A5751a3ck+iDmKtk4QSh6vJYzd6KsiJnkUUlSvtiME/L Bq7Lcr1Cb4yAr6U1aNaEWisdsJB2YNSpp6RoiiTeHRBgfLjfLJ777Mkvqk2QJYgZFc0uPcRq1sCa UqejOiCz7tma1RRB91gaGiuRmVNZnaS8Sfkm28UHWxaKfLlfK9NEoWHFdy+EVkLZ3bCK8VJLU82h 1RZgLHhWDiqdB7LN4zhJ2zwK/VZWAro1q91LtEE1a2hrRElQUd12p+hUvc62zafQVc0r3Z5d6d3u aVVBVJP7tiZWaeZ9CykSWabKSykn1nQnWtd3A7B+rC+zcnma5Oql89fImRUY0kpuMpfKTk01oyQy lSx8Nc+47iT6bmeeSp/Y/VqjliRUm73ULy+k2D3SIE3Tasq1bKdq46gFE9WXWSnpXg/tvsoycmbl BatUmBKv2UnYSvZXLj/qRe543cOeWe+rWYNbOYWrmyvF6O7ManZ+F5hWoYOdM9r3AvDLlB/IkB5a Qek+0qlefiBHzKw0KA5W3UTloWU5tNHMMjf1qp0TXE/UEATJCIoPjiwKFZ3du5U5oiDapemUF8KL A2Mnd3m2kHKJBBi/4oF0iuNJ/kDWmy7jzDNp0yU0ekWhf0vGg5YkqcHKVmx1ZvlNqnjKSllK7Dxa kKZJi1JDaIR5FFWSWkE2tqtSgIoVstjN59Cidm6pdbkVDGyNrTrlV2/8VQspKqYg6UGShI6e7Qad Ib8JAOPBfH3lNNTmtiYJXZJqrTy63KcGrbslyx/j6krZ6W+lz3TGqih2aZxy5GqRTW1eFK/imY+0 Wqe5Ipv5uEyvCpVOrVndatbFPPuGLSQrkrWBCwGYkpQlhPH0/l1HjxzHyfCHPKXmOGbrah1yS7aS jV8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAwK9a6jvWAKblhmyS80gCx7T9dGh76tvUHo8Skm6xTNNJVgel64bSyChqcx3L5EkURlEUJ6Pe +DBLk8DQVM1wGQst046H/6d/LRJFGEJ2JjkPR86GHP6w5vNsjDKl2BLzdahuOXeYUS8uC2Lnr1A3 /LvvdtVq37dR0Yooji6tXKwp/kR/fh5cTK/k31i1GXoq/bUfgu+NxVH+AxybMi2+Ygb0NruU8In+ rLDId9zwHjUrdB0vHKFM+P9nv4p1LcWR6P0yPoI/4AOcOyR1RuiMxJkTIhLHBCQkaIREQoCGwAEj VkIiQOqtKhsucKF7era183Y1Dl73BVwuV51TdSrzFAhEsT9cOo2ESEuX2HmoOPIraq6JnhUQK+Qy TSWuRGY1+DYYgQZ5WrdNLsk+N///1fcXrBWYFUgqjIut6/ZDSPyvrLUrsyTmURSxWCjTLH9iT4tg it6fLl3CuDZG8kjkXW8S+GcD4GwES0zvfnSljhmcxEWiant31NQpwcIgCMMo0aVXAmf7Q6liWbjN tjGCc8a41LmWcYoHLWUapwWe2BvJhC6NijmcGglV3tU/mwBlgBnYodh+Kces4iAqpxpKKG+vJiy0 0Li8iM+1iLGxbk9Xg9yK+wtIFltoSa6xOEnLdvQRS7hQeZYKhq94Vls0MRScJWVdSLoM4+mOOQhC jDELwijOKh/qhyzcG0f7YwuRRyNgOiu97XU08BSPi6UudmHWlxoQE0KSmDDtVXgvQxHzxBR5wlkY RbHMBorqUEiWZFWh4GlGLfwDDwu4hwUMbpKWk61EnPYLPoSD6smnARziGwC+7JpbRVolyQ3EIfxQ RPfLM2v/cGm8HgrCxHRtCkUn3XrGrAL41cD/GsWojMtMS2r4UX1pLEvLSE6leZGnVOdZNn/Ybzb7 Y0X6NIy1cgZhZ3M8kfwkFSdTl7FIt5e7OAYl1TQ3pCJLu/lCkQmYystuGB/bsvONCahOAL+tNK1N niaq2rI/a7yYODPLse8FODZZShd3xWrWzuuApco9Dwq7zo3yYpMnqaSdkV72IETClCahr2OqYw9Z uDf+bW62yOdpjLHkORixkmRwnGrlTPMc0d9nFPXUFBl9+8qHE8w9qPBqea5iZ3g6pAPYa/rlDg9L pVEPgXsyb0a0E9bzt6lJ3ekQtJxwkX15bd0bEUSpLzpri4QhTH5/3TIrFGbxbyGnaq+W8AsBv6Dx UG7jz1hgo8i6kzOkyvJN6HU5JkV3y4N9tPwKksF9bcvQO7+diF9i7rRvM9hcwo/bldSxqND3MXF5 71qVQ8W2QiaK7ioy1z53byPOIzeOxeaEs9VmIiRwXUa/OeMB1z4Ccy0diry8hHtRGGYCVVpPDq7R ZqRGMMbdOmEQQmm3sOLMFzgY32XhwbjTw8oHak4xlNnvhSAM+9v0lA6goaXnxqdpkIzlZ5w7V5ny oW6prIBxl460Imcf8YBqMFTtZid0MKuIfBGjMvZRHr/msk2hJFZch4u/xqzw0OwuOdWUU1/HojhJ hBDwB1P5DiwtQovctYXrJmkz3dtfsMxGag/ynAYbeN7MAj8Te/bkdBPfJSOdw9Kubp+U3TL1bW0y FfvwUIU/vh/KJJalL9oLTaCvrPc/W5O6bfu8dl5TbbQUIIhcy3Uhfft/iK1n1gZ+n4L6D6w5hyB8 6/ASaOc2C0/Ga+TSHihA97Isq+spIRcuY9TzXxL6ylZMAhBl2vQfg5Bz9R2osQzolOMQ8YyHt4dH ZiGFXZCYvla3L7nqNHIxAp2vlfjPmDVtb7Ho+JcrNoI3syBPfiVSwiA1HKwuGWRy34i4vDDrYB+Z 1RKzdm9vmXVbt99rLJPXx6LKuZRKwFx27D4jzlnQkY4+X9e7GnybHFFBadfDrXQZhMMnA3mnSQ/+ mFmHIFAK/rgEwTWIjVkfWXgwbi+R345gHxmTRY9fwVCWScFCHzFZ2uNGcjXaJ9b9CkfYPOPhiVl2 Z9ZXF4K4SEuQXMe1Xgvg0/oRs+BtvIk07PLA1nUwCMtiT4HVIta1/TDL2q3U2SLxauSWWYSWQJT+ a5oUfpJZbvyJ3+PPSmgPQB4vpOdZc6IW3kUUJ2YRkkW/34qUEuhPJ4EAiE8x9AHZeEoc93PWTzDr X6RgRbFnAseo91BzzcKT8WM38UZY9hs+DOstAutQxHEK3bg3CZc+7OtUQ5yCs/ZwrkJ3O1ztpbC4 vmHzjId7ZtUSW0AU7TPgF19unuVlNwxtGVO7h3EGrkLCm7cP1eH7zOqwAr64Koe+FmSTiuqU0rSR 1f1oW0XaYtfw3htqUgFXrR2HJnPDyfRhf+eL096xLvuu8gf9FLOIKZcu5pp43i8TdSjwxjS9Hfqm zJwcyoeTz4NBKjGZd4NtSyxUgLPRlSygaJZppZTW+DerTzunCk8XWW9Bj9NZEJx2/ClmwVxGEvol ssqOtlJUDmh6fcjCvfGly1zkOzuUNF0CemGgom2yGSAdOXVgAVTtybI0zTRNXaWDD6j7fvRiBZhr 8mjbuPvs7v+AB/QwODPLAQN4uO26avIvuMZa7SooSpSk8EG1oZLLmgdmdZpfmBUdRgCoR05jUrLE exqaGhHup70Sc1N52jx5fxEKj6Oz/RbKgZcucyG5/5bH4daz9nnq8OU3V0aOPOqxegTmzJSlR4wx crgzMngdVhDp6lMKvn1wPtfjCupLnHa6V+o8IMBQFu2mIfYUGzk5/9Ub/O7uDvx6CwLNU6xF362O 32GNkmJTgLdZuDfuLvs2IrKRkAtcPdyDVw7PSy+j91MoK+cC6ZkVRbtXzJCGJJ95u398jwf00AFm RmkNMLMJOsH3ZoebWHY+80uuZbLWjvPif0zzrygH6zSO4/TJzBUP20+73TmPA67xR26sXWlMtdNz lB8N6BesdYaG1feDHafv+LPOcK3B2u99c7tmF3vati7z/FdjP48WQgaWLn49ZOFhLe7zc24wAjfX n3xcztXCOUNzFjDIIeu7FPgxHv5Z//1VCqryeQ1iLaVuCyru73bqn+VVXP2nCf23r38LMAC1GRJH Cg0KZW5kc3RyZWFtDWVuZG9iag0xMSAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDU3NDAv RmlsdGVyL0ZsYXRlRGVjb2RlL0JpdHNQZXJDb21wb25lbnQgOC9Db2xvclNwYWNlIDIwOCAwIFIv V2lkdGggMjg2L0hlaWdodCA5MS9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KSInsl7FL4/4bxwOu/gGO uugiqLOQP+B+6EmmO86lBzecmslDIi51UKmLwVsqNxQ0WzioDkHscC4VckNAMgQymINohAyRgJHo Rft7PkmbtrZ6Z1pbve/zAqVNn+d5P2mfJ8/zKZWeB9+1bdvx/PIb1wvaEDRwHcdxvSbX7Rq1pp6e YxGcP6URGHKhoJiVt06Wopicljjjh7KxLdM0LdtxH8kn8OC2LNt+zKYpXvTdh26B73lJv3vPseEr g0j38nrgV3gAPzKv/23IN9Dk9t3y9+I2SUYXKCql++XKevinLv1NPSCdR85QQFZSLVPLseS1ZOIv 1H3CzmLUv25o5MXh6lmWocrQgmJ3OyGE4BsiRbEadtYrJwi3KL8dKyyCIAiCIAjy7+A37oi+Y9uO 4/rNzIM/r5Rg4v3d1hm4DhF61BhsAPcxE9+zIeEGzcA1inL1HNM088BzLNO0m98rgiRHzlAUnYvL r+SoHBVD52Sr3txkKSqrPlbnvpYDR7Uc0RMYqoEUfBo4arr6EVswvMZQnllIxalwotNMTstn4igZ Sa/9SCfafMWrMXOvmGWrGeRk7C6kHQSOZRRFPqx0oVLWFh81VEFR5TxLw2um3COBZ+mqEDZDTmve WZ5j64rEEa9UZVT4ci6TyfARWT6qZM7w7UgoK8lqUQzbJ23cr2wr7JmUKGtK2D50Rr4/XHUx7Iqs omtCmq7PzckSZ+OhzO0iiclk8oapCWHSgt6kuxHkaXhqdWLEneWppMRlO3oX6AKpxvA575FJVOaB zqodTymtWZFGxSyZfsmRoZQzFSE/FLo3CiPjfKXf1CzTENYjPUnzdsWDh6CsFDkEdoFoWUHzzAMz TVpcqrSqleW4vNZ0KiLIEyFV5ZJ2YCqdFbiaolrhgSXwnQIPhcsocTHCZZf040MzK0LNpZp2VmAX yXgRycIWVbugV6aUrxEfQau114S6OF7U5nXSYS9zUhxFgkWWyUUWZp6NV8EmmYeKaVEu5nPpdJrP SRbugkg7CR/7cWdVLlanTypfV3FhQT7eWbrQtLNccpnKlI9tdhHGSypb3u40kZztUjmtIU7arAyV Jp1V7sfq2UoX2egQR+RoaDLtnnHsHlgFOr7FVHS3jGzfWzYRJDFNO6tk62qxIHJhxfGVnY3ga3+c WU07K+qLdMGqXAhkPoxOV+oaxplwr7MYOPC59RFytRujd3/ShdLhcujItZtkY+blFZHhzdDE1ch5 jalvbQRpgbrO8m29WFTd+MntKWRVzKlV84SdFRQzMCI4o37jMhWJB7KiLIt0wzmrvA1WXMJeoOW6 k5AFJzE6q8TvFTho0eRerAJXnY/NMg9MKVxNjcrHbo7GzkLaSF1nuWoW6k2MNzBfbU9nBQbZ9jJy TRwjw6TimeIqPNE16rrRLmbIRb18USEzjlHrTHxylqpujGaadAscu8hN0bxSqrOtz9zXyX1nK7cW ZoidhbQPTwg7q1xwjkxOH3Ra1i3LULIseZdVa+bE/c7ySG1z+dp6b+ws38iTrVKpiRMYpCdSWcNx LTVP9kG2fKAz8lDjHOknTyM2FKeYtiaR1qP56FxWFXUU8ihgMpJlG2KaDtdFBxoVXgl6/T56P/Og kA53XUm1iS9J4b4LgiTHE1myFcUlZck5qgZe0uvMfXK0qe0sMvJSYm1Fhq3B1naWKUERM/WLXMlR haoMk4lD6mFCkbun5+nYhhUqAWpFA1XgYpN0nmQb7o3xIHsoc7hiCVw1PF8wnvC1IUgCfNeybMD1 /2zbshBIOcFjNg6YmJb9iI3nWKZpWk6SieM5NmTw7HeKIAiCIAiCIAiCIAiCIAiCIAiCIAiCIAiC IAiCIAiCIAiCIAiCIAiCIAiCIAiCIAiCIAiCIAiCIAiCIAiCIAiCIAiCIAiCPMz5+fn+/v7Gxsbs 7OybN29GRkb6+vp6e3t7enrgP7yGK3AdPgUbsAT7bqeMIC+UIAgODw8XFxeHh4eHhoZSqdTm5ube 3t7x8bFpmpeXl9fX12AG/+E1XIHr8CnYgCXYgxf4QgSI0+1bQZAXwenp6crKSn9//8TExPb29snJ SYIg4AW+EAHiQDSI2fY8EeS1AFvcwsLCwMDA6upquzY6iAPRICZExi0R+a9xe3u7s7MD82V9ff3q 6qrt8SEmRIb4oAJabY+PIC8QKPvp6enJycmzs7NnFYL4oAJaePhC/nl836coan5+/u7urgNyoEKF XFxcdEAOQbqC67rj4+NTU1Md1l1eXgZdUO+wLoJ0hpmZmaWlpa5Igy6od0X6OTg/P9/f39/Y2Jid nX3z5s3IyEhfX19vb29PTw/8h9dwBa7Dp2ADlmDf7ZSR5+Lo6GhsbOz6+vpJXrrIUTUwXM7wkqjf 3NyMjo5CDkmcXwZwWjw8PFxcXBweHh4aGkqlUpubm3t7e8fHx6ZpXl5eRt8t/IfXcAWuw6dgA5Zg D17gCxHw1PmPMTk5eXBw8FQvXUhRFFdUVVVR5QJ5Q7F5P1ECoA45JHLtMqenpysrK/39/RMTE9vb 2ycnJwmCgBf4QgSIA9EgZtvzRDoP/I6Dg4N3d3dPddQFhmLE+CFrwFsql+y8BOqQAzzME3l3B9ji FhYWBgYGVldX27XRQRyIBjEhMm6Jr53d3d25ubkEjtHMkmRZLhYlMcuQkWUkToNl2Xw+n9i9k9ze 3u7s7MB8WV9fv7q6ant8iAmRIT6ogFbb4yOdYWtra21tLYGjLrCwANI0A9B0eNTKFJLNLABygEyS encOKPvp6WnYXc/Ozp5VCOKDCmjh4euV0kJnMRQtxAcrRxOhuSQrYRm8is7yfR/ucX5+PsHynABQ oUIuLi46IIe0lxa2wbrOKnkqDK6c5iVL4+Vvg67rjo+PT01NdVh3eXkZdEG9w7pIi5yeng4ODiZ4 CEfnrKKqKgr8FdJkIWQN/8+OjYA65GCaZhLnTjEzM7O0tNQVadAF9a5II63w9u3bg4ODp3oZIkfV QLO8aifqq1KpUCjAmSKZb2c4OjoaGxu7vr5O4uzIDBxCeSWx+s3NzejoKOSQOALSFVoqm5Z5FWUD jZ/g4ROhi2z47OH0hA8eAqi/8IcP0hRcdR4h8cIcYmUoKsXzMLZ42Umcw6tYmJFGXNcdHx9fXl7u sO7U1BTognqHdZ/E7u7u3NxcMl9PF2AT1Hy/ALszm29hapVYls3n8y0EQLrDxcVFdGJK+nB+GqDy 5csXkPP9VsqtE2xtba2trSVyDYppaCgpIIctHg6jSguPEMgBMknuj3SPIAg+fPgA+/zZ2dmzCkF8 UAGtq6urZxVqC8k7y9OiI1YMJyVf57CzXjW3t7c7Ozv9/f2ZTOY5yh5irq+vQ3xQAa22x38OEm+D VgEmVqqom6ZhmJYpZWiKziWeWq90G/z9+/fPnz+/ffvGcdzHjx/fvXv3/v37z58/r66ufv/+/dev X23UgmPFjx8/vn79+unTp//9n/0qfWry+sLO8BX+AGaEkS8yU6ZT0XHKL4wgtY5KWBSREa2sriAK iiEUFBFBAwiIlrKULQIJpsiuSKoiYQmLNCJLCGKICYtoBfKGIErC75DAS0xizEZStWeeD8l97z3n Lue557mubhin7bYYp81bfrJ32u6+ew8Oh8vNzWUymXqMqKmNjY1FRERA/sPyR0dH9eIT/IA38AkL BP968WkY4/F469ev11wkTxd5rFlD6EL/S95ca+5ytVG/EB3mwOVqX/IMb4ODgyD4Nzlhd/iFHfg1 7UQKOSyrBlfw17m8+tO/VwUm5HqExtm5HHDYtis1NVWXlABCFRYWenrtt3VycT6M84nJCMusjih8 IAtcPjUotdQbn+KwN3Czw7bY2FgOh6PHxWpkoNni4+OtrKxcXV2JRCKbzdbCCYyCseAB/IC31daZ q2Tu7u719fWajXnbBsSisGdWWua5BHh1UVhaTIBKpYJ+1mKgUezNmzcnT4Vu3X8s5EaZXIYrhX9c tp2zFw4XMTExoVEgyC4oAZt/dvfGXwvPva9OLCmOJRdh3A75Bx7RLqv1YvD4amhoiIyMtLGxsba2 9vf3T09Pr6qqYjAYwHqBQPDu3eIlPDc3B7+hBdrhK/SBntAfRsFY8AB+jLUE3a2lpcXW1hbWaJTo 79+/37BhA8zBKNE1tdraWofdv4TcvKN+nksRnEbBYL0KCgrUkQdA3shfoxw8/IPSbmsaCEVoZrWD h19ScjLssAF2RoVBya6rq/OTGBaLhWQzNzc3MzMzMTExNTWF39AC7cHBwVDfoeeXpfpUW1BQUFRU lFFCQ1yIbpTQGplIJLp0OWFf+FW5BL5Q0pj3qOdezwiNPdkxNtM5JmziTNf1jd9qZl0pa5XrfOj8 zYN+hycnJ1UEqqystHfZfyKFpEgWPPEhoZye9aCH2MwqbWdTOtkl9KH8RmZq7ZMYUqNSfgVeydtz wE/Tcql3a21t3bJli3HnYBQDMW9vbw/63MBxd+/eDXEhuoHjampw7R8NCQOVJZu0V8taa3pG+qZE A8jCp0AbngIiyJWSHZ4+8LxVjAK66HjwqX3hBDl2xJbSbrWwHj3/p1dlLPoIcqfr5bXqTrnhZ7Lv btvrw2QyDb9vqAUEBJDJZCNOwIgGF+kaiakjV3Q3iBIeHg7hpHr732ygk32OhZz6rRzN1aiihrKu 4f5pVXkui1YeAmUFHY7Lp2J9T7JYH71JQQK5ePmG3CyXJQWMorIm1A+EUiy/sR8KnKwrrH+osZ5d IyMjlpaWs7OzRon+bzB4LR48eNDNzQ22YlUDgX+IArGEQuGqBtLdQAQeD8Wd/r0KTdHkqvbOcaFG qQ5g8sUVDC6e+Egm1cPQVB8aGtruFRCeex/9SqhoezD4RtMosgBpmkntliWXi1/I+Pi43ALhZgOt iCDI6u1hfHz8lStXVs//F2GQSLdu3Vq3bh2BQFiNtAefiYmJ4B+iQCy9+1fToGJCLk1NTYHMU90z 6uLlkJt30OQsaGSqln+q0fxyOvZ2E+ptz9Hwt2/fgjLE+p2SfUyVtr/o07BOfQq1PaNQYZdqZcFf PiF46bbDQWRlZf3s7Pq9w87NOz1/2Opi57QDj8d3d3frd6uhVFlYWKz2Xf2lGCiTiIgIyP+EhITR 0VG9+AQ/4A184nA48K8Xn+obPGFoNFpKSsp+b+8fHbZ99+PW7x12/eDo/N3/ttlitu713JeRkaG4 0pJSytFEIprzlE72cgHSHl2v3iWU0dFU9z5+1tU3GH5IWy6SaU2cab1wCkX76EwcpVnqPyyrJi0j m06nb3H28InJkHuRBV+nbPU66htwWOkzUDsjkUiBgYH68vZ1GNwzUMetrKxcXV2JRKJ2Kh1GwVjw AH7Am4HvLiBUWVmZj6/fBsddOwPCfS9mns25J5dOAJBhhy7ctMPuP4fDwXtTOhZu70PRN9A+VU95 MtJOEeIXiJgjEHMlgB9DiPhT5GK8nrtavkSus3/U4QqoqAJ8MiFkIiImhFAJFiIGDECIz/WUovPV bPwyufwv57gFRStuAorQzGpHD7/q6mq9HAEGgwEi68XVV2bw+GpoaIiMjLSxsbG2tvb3909PT6+q qmIwGBwOB1IXhDp0m5ubg9/QAu3wFfpAT+gPo2AseAA/hpw2UDgqOnrTT9i9YfFwUatIpI8u7TSK k7v3wMAAiCXP4Ei0/c+u4Y9yVYYmzxHxyIyIi4heKgAaeQLRc2UU65p4F0dpkQ2dQGnq/meOyRdJ IN8feAqEHRGIeIiIw5eJwl9sgXb4OvhpLgM6xoTRxY/V3AfAvnOJmVnZOp4CcMre3l4vB/p1G6i4 urq61NTU4OBgLBZra2trbm5uZmZmYmJiamoKv6EF2v0kBj0Nr/oWJHUq9lIcxu2X48kl6icSChBm zr6njp/Bn8tbKiXEZpbSXGXxxUCcYf48RyWgA3RTTPu2EUHUcqrj8upzKNXLtBLJhgDK8JDPhFgJ hMy/FEAg5RQjNzJkV3qB1AhLq2dONLInqQMTJPpQUgVdtsPBqPQSElmXswgICCCTlXholZgunr9Z c3R0bG5uNnzcjo4ORxfPY8lFipTBEx8mVtAzqc+ITSxS2wty24sS+lDe4/4bdX/HkGlynU9nVEp/ pN/r6ptSkqhskHzI/LCa4C8WGo5A3s9D1sSKIk3OevoK6Z8WSbDAnJaoSj4wV2NAIeMgYnAih5yK lQVmPeh5+ua94rqAZddrOlfIFZna29ur3VmAbLC0tJydnVX8BDdwf3+/bkf9jRqFQvH19TVw0Oyc HOwRnBxHYktpRc0Dj4be9kwqUVkoml/ygXGRxEeyYy/dbmK8fq+QopDzIjYiGhaoDUQsBW/mo4LC EYigaiyVrT9qKxpamdMiABuebIiIzdcJoEWh5DEXSbqIwSlRRF6dNFYhTXkVlgIWWNk1jG6C98lI kUikxXEkSEyxHai6adMmnU/7GzV4fMF9xeVyDRMOjh4fdcHvUqYsL5LK6ff7xnqnVBFKDu2jM+eL Vjw0DE2imbkMMVeS88NaMWuRXIh4YJlcbMFC76SIUL6kwaIyb0PBglKlI6dQQMl7IVGhg/wFGntS GiWl5onSKiyHu8940v5nsu9SKqo1PREoVRYWFlC2FD8lJiYmJSXp49i/USMQCHFxcQYIBLQKORtx IoWMMuJ8SWNNN0+d/JHDswlhRE41qpcUOizRSmNm8cWyACdScg0LFt3ShqeXylY+9UFnj75otTRP CbnYyELXxDuoyIC2kRk1d6OUPiidWOD5VE0PhUQiBQYGKv20cePGvr4+XU/9G7axsbG1a9cKhcLV DnQGH33yxp8ordKqO7rGhZpySorsyiU1GENu7Jmcl6MVT/Bx3iLz6kKZVAOHkPBS5wWNA0t3Qmap fpkFgGlLo7RwkSbOtPq7Afo5ntIMszqbc+9ZL1OjQ8FgMHQ6XbH9PymoFzty5EhxcfGqhrh2/beg tNsorQof9/ZpIv9kwXglgMeO1A+V9VruK1egkLQ6MAtNeGnZYryeiy5ukCjYVr0zawhRUrvhKQcT AIIvQiB+rqzPoibsGZVuyMmY5Pz8fCDLhw8fPnso0M3e3l7pp/+koF6svb3dzs5u9fz/X5s2b0lu mwfPVqtO3CaYfYDNMGDr6OGXf8DkBExaoNT15d+jL/8efPm38Qy08TNx2zk0XQ+x9H1+3//8i1j0 8S8KgveDvoDSM7C3defz/9VnHgCtXnDoxgNq56wbn9ByzT8spQQ4p9/GyF/Aaqt6Cagez564OrKi 1zW+wNjeA5g3Pn/+jCdekpKSVqxYgVVqtClIDAB2cPz9/e/evYtHjZ2d3bFjx2hh+5UrVyLKuuHZ as2pu/gzFCg3ff6LnsiR0OoTdyBGHXn4CVkvsDzHo4si9AmRmIG9wm1XX1x59weYzalryy3U/ALK VrgVP/iCnrnm7L8KD2QISulYYOcdeujQIazx8vTpUzk5ue/fv2NKjTYFiQczZ84sLCzEo2DVqlUJ CQlUtxcYcWG5NfC4Xn7sFq48dQtURINrHEIp8MyjD1WL9885cA2thH+INz9iRSdvPV2wdmtNe298 aqaTu6eWjq6omBgXFxcDAwOQBLKBIkBxoGx9Z+/sdTsO33pOu4z8GCmz3CfGcNScuPnSU7ScBUH+ OXXzFizAjJo2MMAaa0O9KQgQYADWHI2SCg0KZW5kc3RyZWFtDWVuZG9iag0xMiAwIG9iajw8L1N1 YnR5cGUvSW1hZ2UvTGVuZ3RoIDExNTU5L0ZpbHRlci9GbGF0ZURlY29kZS9CaXRzUGVyQ29tcG9u ZW50IDgvQ29sb3JTcGFjZSAyMDggMCBSL1dpZHRoIDI4Ni9IZWlnaHQgOTEvVHlwZS9YT2JqZWN0 Pj5zdHJlYW0NCkiJ7Fd7TFNpFm9iDAmJIWiGOAQIMYOTUQyOZuMigWQ3a9ZxQTLManRmUJ7GFyoy OBUZwBUQFB/M+CgjChSQlyLCgkhBEOS5Qw1QKJZCKaUFGWjpA6HQ3u6xn14LtIVe2v6hnJw0t989 9zy/33fOp1KZiZRKpbe3d29vrx4ZDw+PhoYGU1hnMBj7zlz+OaMK8YOW3m6JShe/kmBcGcaTKjli nVzQxEaqXnAlmt+ypZier5bEEmWPFENWusaxss5hhlAxIDOyOdZ7E4h5Mn3C/TJsTupSqzvxJCMO Skj3+Nee2tparXXh8/kODg6Tk5PzX3V2dm7dutUUm+Hjo5SUlNDQUD0C+fn5fn5+RrcLhdsbEonX OqeBpQtTLAnGg70qWXgH/jEwHpFZnVrTNVsDxtWLR63czOKnPyyNvHjlYPCRv//zmw3Omz6zsbG0 tCSRSPALz7AC6/A2OvHKncLyOtaQ6YDM0wALZzHKZyOxpJ0/B1mIvY9H3UtPn1+aeDVprdqlS5cu X75s9M3wUZJYLLa1tR0dHdUlMDU1BSfY4OCgce2SzyeEp9FQie9UdjDFc09axP2Lw9SH41003S3G Xr3tce+Yt+gO0iOU55RWHQsjf7Vho9P69QcO+iUnJxcXF7e1tfF4PJlMJpfLwXP4hWdYgXV4CzIH /Pyc1n/55Qbnw2FnqaU1TNGMcZGFd6JeKda/iGxwJUpo8XgOGwelKM8RVBqZOgtcB2Mod9MzNOsC Jx6UG9qW1qpt2bKlq6vLuDvhI6Zz585du3ZNj0BCQkJsbKwRLdKqnh25moOKm/S4mSGa0QYrTP/Y o4VhR0lVmty7uPbRyOSG/3LB3sFhl6dnRkZGX18fgaDgq4wM6i5PL9AD2kCnkfElUfYtWnhAo821 j82gVP/6sPrliPwBvT86p1YDXLcrq57hUeTk5AQGBmoNcHkUNJQ4HM66devQgayVBAKBnZ2d1sGb AIGeH35ORGWNul/7cmRS661q0PARrn8eshZUAlPf4ZM/OTg6xsXFDQ0NGSVA0APaQCdoBv1Gxtfi GNqWZj7JGZWQ7eRHtehv2+h0SmU7Dq594QnDw8PI+e3btzc1NWmNa3kUJEC+vr4FBQV6BIKDg7Oz s41iK/bqTbymNawRrbAaMBxWiNkaV4w+KabnkO8VzVz9nQr9JTEx8c2bN0YJTZNAJ2gG/WCl1wTz oUGpOEd9i6wbJY34CozfOY0svBDBZ86Dz4ApNzc3XREtj4IEqL6+3sPDQ49Ac3Ozq6vr0g31sNnB iRmomll13VphxSMKK2D49sMwqVtP17D0270/eHp56bpQGItAP1gBW3CJM3fbAmSJVYgj1Mi6Vdoy J9uZtUxUi1OUkpInFQEBAbm5uVoDAUwBskyaq4+V9IwBiNzd3RsbG5do5dgvl1EpL+S/YIzN4KV/ z2/h0CdSLIWh33Flb7ueLgHmsIxEIoWePo1h2BLDWQyBFZKaXnL+XGJoBuYBY4pViM9SaZBzSjmd Cd1Kgxnjymsl/0MV2XvqvL29va6Zf3kUJEx5eXl+fn76Bfz9/ZdioqWVDmcjqmMd+0+87jgvHVYL ctuA8C9/3e7t7b2UQAhQTEwM2AXrZkSWsmv8HaN7Vlo1Y37O/xC8icishrce3wXu9527ATo6Oqan p1XLo+ASaGpqytHRkcvl6hFwcHAYHBwkbCI4MgnB6ndaG150nDlSuPuYfL/5Bh0+GxFBxHvFhHAE SDihIBg+2AXrZkMW7z2y2semUdofNfewJNh8cBXR+8PuPFm12mb/T/GaDrPZbGi11tbWe/bscXJy QhBbJgKUlJQUFRWlRyAhISE2NpaY8vqmltCU/0J9ydRn9CHZHFixJErOuMk3W0FFncvmzXK53FDn ec1pHqQPdL2MRSADsDM3ubiAD2ZDFgJOi+ANQtbTDj5HrOiZBy6GSAmjoLP7zjNptLqmVtxhQJaN jQ0KGR4AYkePHiUQ+DLBiWxrayuVSnUJCAQCOzs7XaO4fjp+4QaqL/VZe2l96wNaLVOM4cyVmGOz 7djlVVFRYXBamq/D1vKJKWAJRoQCVlGiD/wNKSACLrAOPpgHWQPvkdX6egplvoUjgnWt4PrKZatv lLpASXdwb/l8/po1a0izqbm5mUDgy3TixInU1FQ9AkFBQffv3zdULYvdF6q+YYWlPjl7Ozec8ig8 5XHLgKhbogIekGJm2GkNnf1fODlhGGag77wYgBWFrrlEpwC4/FlThqZBBdbBh3oGxyzI+gCfx238 sjYe/oorVqgPtHdvcyubvt62PSr7ORToWHI+fnKOjo5aWVnhmFq9ejWFQjE45mVSU2dn58aNG5VK pS4BOLJcXV0N0jkzM3Py/FV0bJ5Jr0QPwGXtPK5MxZVhcIqaYaelZBceOXrM0IRMcQpgU9WPzF4V 02E4TINNaTgdPXackvXQDPFypbMaEwyHmm/xWRHY58eAK/dyM1+8encde1qDXIXpxdLSEsEKRsHg 4GAC8S4TTrt37y4vL9cj4O7u3tjYuEhtdDp9x+5/h915ggMK59LOIaZEBcyWYmzRdK+JOfbarfj4 eEOzoUbWvPY00QFNi0IIWeADeGLqYIE5s5EF87bmW0g4Wy3wvJv/uZ3Dy9eTL7gSVJezv2UhVxUK xYoVKwBWFhYW27Ztm5oyvEkvkwY9ffrUy8tLj0BeXp6/v/+CemDySf71t53+YeH3aHMw9Z/8emo9 iyFSata9Ryg3KV+4SgxZRbC1ygSKWYusLPUikZ0GPoAnpg4WmKvRlbrFWK9orkC/eAZehUbFAyOx hIeNUJ2TNwtxb1euXAmRrl27dnh4mECwy6RJMAo6OzszGAxdAnB22dvbw/VWjxKZTHYw+HBAbKom oM5l1QCgGniSrnHlHIZtYOqdRsl6QGAaVCl4ZBLJ43oz+scqiiFn0YoSYRhMHNH/oQ6CafB2ZoEZ kMUZn+5+f5ka0JHezpGJz+3sa5g8VIWsxh5UKWYvF3kLyFq1alVrayuhWD8hgj5SUVGxoNjdu3dD QkL0CFy8eDEuLk7X2/HxcZ8Dh07cKsIxRc6oSnjU1D42PR9TiPtNj6w6Rt8XTk6QAUOTxikCbJH8 rxfxhMKOAjK6d8TQBIbqUanzDz7UdvSaAVkIXFypgiuZ0SVwIy372x/98SpU9YyielGLq1TqIxQi LSkpIRDpJ0VMJtPNzQ1yBQ/6JeHqamtrOzKi81SGhgVta3Jycv4rkUjkuT9A82JFqWTQX0/qwtS7 niWZYY1NmZp37PJazMEyjxSssusknHz8/aFlkULoQsXCn84mGo32j288zRDpInnLNtc8WkOnSIm4 fWyGTH0GJYtOKTA8S58iAVLIZLKVlRVcSB0dHRfzSXR0dFJSEovFOnTo0KlTp+YLBAYG5uTkzFmE U25f8Imw1HKEqYjM6scd/A6xUj93S5Tm2Uh5T567bN4sl8uJJFExIRwRiicm1HAS1hfVCw1UMD09 vcnFBXwwdZgNXf13C0oi4pJ8gw7/bcfODc6bPrOxsbS0hOMAfuEZVmD9u+8P+Hx/IKOwtKabD3de xFdKWqBwp28+IJKiT4yKi4vhBgqwgsRaWFhERkYu+AkMLYWFhfCVtbU1TNrr1v2f/eoPSjpN4/zb TP1To5NNMuiIjZUT3U7WxkS55fRDTY/dmro8f6W1eXFuai5qW2ihUt6euuseTiWp3K0NW0fund1J tf24EEpJwsRwlfQLWOiFpBC6UPfg94ZFIZWvgP3wM884X1/e532f98fnfT5PoGMfkUi0fv36CV4H 0rNt2Sr/4p3bvfpJCNWmt/w8ZFGi2WrAG/Z4wBSXfDAnN9dtm+sKYN6Nm7devt4k1xrdvrT2Z4ba K4JDR7KXLV9BJAbHJySWlZXB0UulUgRBoOxF3xP4C9/QAu3wK/SBnkHBweB1MIN+4cfrZ2/I4OyO VjVaLC7L5g8HHR0dERERixYtsgkZX1/fKavRgYEBIpHo4+Nj8/Lz83PaE7Ql8Mv2bwX73OHyH1Ba MXlCoXr44aDFqUGS6tb/ougfeaz1nnVoR9q1I/e6+kkfhTEYDHdu9DQQExOzZu3Hf2LXrNuwycd3 8Z6E1PKqOlGHeubruiXtzsjNX+qP3xEZVV1d3d3djSE88ALf7VFRfkv9w3enpP354vMho9s34b3B 8uXL582bh7MD8MVisUzuVVlZiSoHG+bPn++0Z11dXXJyMvrd3NKSzDyH0qrg4h1Rn8Eppx7pLcoh i+I53HPTY+/ao6fGmvprexIPEIKI6Logybp5x50BZsnIzITpHiJ6NBLRY/U3nIt7Ew/4LvZbS96Y faLokqCp/anR1RX9p+1JKi0DTyCcYjL7+vrcEi2MU3DylN8S//0H09w15vuH/v7+sLAwUHToRYIi Kz09fTqOZ8+etXmhcMrHly9f4vF4tVoN5dXuP36F0urYX28JEb1UZ3a0zhfmjn5Tu9Zq3mTWtfsd mcdOEQKJGz7ZeoZdc185IOszRH+6NzIqGoJ386aPB4wPs+z8dG9rr84xMGDT5WuiLxksh0Q2xYrk z16e+Y7j748vZrGMRvcnFxizuLiYQCDU1tZO+RR/mBgcHCSRSAsWLAB2QN10+/btaTpWVFTYyAU5 a2hoyGm3wjEwv/72aJUAZdbNTq1TWnUNjrZpTTaTj5HLo9bcpS35y4UN4RHAqaxjpwT35fYByJ4a iyuqQEQVFRd76nKyWHD5T1dUAYOmjBYIBbTam5iKJrKjxwt/EAgf9Rkce7b26GI+89KzsHPnzri4 OLPZ7NGJ3jmADomPj8/Pz+dyucAO0Hijo6PTdy8pKVm4cCEwC/6+SRjA5vstWZLMPI/Sqk6okOos E0yms3TqxtHKo8yC21h7RQBXdJGP796kA9z6a+j9lI8PALWbsicptEx/PB4ElUajccu2wzgwGoyZ ejjjjuwJhvgvWRNZ8boN4bCE3fEpZef+JmxH0F+lvYNwIkcyMrwmZdHXVafTeWG6dwXl5eXw5qAP TlNTk0AgcHUEyEdAK6jOOjs739QnhLQm+lAe0OoMX9Sm+2VCYSUbtHQ+H2l79nKCyT1ggnvtGXkn x1RfRAm7uvln7YQOjmGgdqO1Kz2H4Y8n7IiMqq6uViqVGHYbvMAXRoBxjuQwbrV2zXxF1kTGqbNW ZH5LwtZTQAF+tPbjmJgYDOHNBPA4k8lkvV7v5XnfToDwCw4OHhgYmOE4x48fhyerubnZ6a8tktZd WawlxBXALFGPzkltpXNCqykN6qDpm0jxFHTd+k1b8IFBR/JOXhW1ueRusweqF1WX/nUg/WjwsuVB xODfJySWlZXV19e3trb29PQMDw9DOQlLHhkZgW9ogXb4FfpAT+gPXuDLufzvVvWQ25cMY/IEQsrm rfSc3BkeKDbk5eWlpaXNytRvFRAECQwMlEgkbhkNXmP0UjkiKbtgV1bxyg1bw6OomyK2h6wM9fH1 BdkJZIS/8B2yInTTlm379h/8suAM+/v6n2RKdzELLtuFvzfuTkixSqbE1At8AbRg45SjQZwQLcQM kYdHbF8RSvJdvBgUNbou+IYWaHd1XTNZcu2PN0JXkYDXLp2dQcHDjQOFwblrcP0OQB1BIpGEQqHr ru8PgAUbN26sra310PggL2/evJmTkxMSEoIPCNzzu7jS0lJ4vaVSKTAa3nP09NG3HVqg3f5tXxay At52yA6QI7Bde8hKX+QWQIYih0ewvuNAznIXod5m27wtsrGx0dXDMii4QCd2g1gitqKBw4B/aTwl hnOH2aG4wOD43gDqqe7ubk+MrFKpmEwmgUCIjo6uqanBNgt4QT2yPTJqqT8+nX5CIFE43qKHmmFH a1L02VTfF3kFDaI2p93cYt4nzuTxCFoUgUHEV69eubrbY8xKUphtDWYeFUdhyzEcHMwO9QU8lRh8 5/Am9PX1ZWdnBwQEFBYWwre7xjzFZPrjCclpR64/6JKqh21mf6kgtUHxsit+TPUlpIIChBbPcQo1 +2C8Y5PHU8a5+DmmMmeMWZS7Gr3JoAdo5A1JOBydr8R2ZDQajc/nY/OdwwRYLBYQlpCnTp8+bTQa 3T4+jFnMYkH+Kvzm7AOVXqoestk/m9rSc/LxAaD6tkC2Ej7W2P/6QdlXp8uZhYUYthdVg+NBtUth rqGoqKiyshKj8xzsANc+Li4O1LVarfboRDB+ZFR0FHVPS48OGFT07Xmr6gsIgnoK+OX9m9zqdfMk syh3Eb3BmrL0iIwH1CqVPMd2THPMcgtMJhOcQmZmJgZ5jwEwC/qk4gOJnyWknLt89X6vTqLWe8pU s21TRPjC3r6u+v7zQ5jVIFVusjXoORQchYOlzno9pwbdAXjfyGRybGysl+c9wWCs+s2a2x0qD3Lq 3WDWOLvaLA8MImJ44lBmyQy/NnCpOCpHgeFoYPbg4GAEQTD4zsGGtLS0vLy8WZmanpO7OyGlWTXo UWvpHZTMqrUgk4annmifbItsbGx0dTMNCpB/NMWvOcvAp1NwVLbG9VJLIBBAXeCy2xzsIBQKV69e PTIy4pLX2CHagUoXKPQYZh8dHV0Zuuo8v/E+ovOctYDUnFVrcTFg2JDQVSRXD8VdgEMhkUhwMWZl di/AoOCASjaMb1RwqBS2/LVJkYTDcRUG554OUHCTkrjOVQE8TZieRxAeOHaDWCIWi+82sCAaHE3p +tsIgNnDt+7wNLNaembTmnsnC+9ejxPbFb8fEjqWDZ0xQMCAjJmVqb0Dg5yDw3FM4xs1Eh5PrHlt 1vLZHInW5NzTAXKUjw5QqVQgp7FK+iSFjUqINYU1INONxx4wO5QV/xC3zTHL3n5q61kdtg5KUQxb OhPExsaSyWS9HosCeVdgzVk4Op/PZTEYdAZborFmKETAZguQ12YNl8G6q4GbbFaKGzil0IXF5vDk /+eaQcJn02k0aOMJrBWtjVkGZQONQmUDN8dw5cqVw4cPY4oNmEURaw1mk8lgeC7h0kERyrEQy4pD aX8oOcedY9YEu/ZQiWptDE8fBsAsWVlZMJ3JhPUg3xGgiguXVCqRyzg0HKoM5RwKji2DfEYFMSbX mxE+dGHwJAgit/ZJ4sGmyNgU6M2XKSR8Fm5MNAKzqFylSSOwlkRssS3VVFZWFhUVYY/NDgyeHJMY tIJZWJhTVHqvZ3DOJlhT9393/HbXjqhotVqNdXenBRgf6oJ9+/YZjUaPTvQ2AM0LsrFayqy0qi+5 4X/sl39QU9kVx/nHP8rg7FRHh+kAExmBwR/T+kenXZjSdhxmUVcFt+voukjZ7q6j1G7XlgCL01Eq KNoKTrsuYJdAYOt2I5XfIuFnICHhRwwEDETlkR8vwYAJLyFsoGHsebkhG34khPAIMJsznwmX9+47 97177veec+eyj4lUFgOURSi4XInRbDYZtYK8E6A+wnIEyxZoLD7M3Lwr5RICzlkgKXgEbtgPsUpl 1WIarYY0LbGqXc6irJzOEZ2XxfAx7dWcvIDAoOs3bqzFsgefN2/epNFoJSUls7OzlPvfgGapBvMI a7uULLcWKQvKO0ZqlDVtwN8TpUbrLaO9K2npxbnUUmuvgdVVg+6XfwsMqsFbBaWCEZ0XR9R2DSWc /wT0dS0zU6VSUTLt4CcrKws0RafT1Wo1JT43hVmUxTBa20srC2NBMkqVaMheGnaqT1Sp0WivLLOA kV0rJaSME5CttBgLtJVrTWekKZXK0NBQN8p49D5i4/I9lzUYPXh3SGVHPx/TeXFOFX/gQvLlgCDa ocNHiouLMQxzY8LhKSaTefTo0V27dmVmZq51nbkBDU5HC5QlXqQsS5l3BTOaCIx70XKIUpmN5eSh LFeqNSqEDPKchRmtT71+zSUPXheldrnm+PHj9fX1K343KYg0VUpFzmKz2b+KPtSBvfLiIu3PNJ/f r0xM+jQkLHx3SGj82YTcO3cqKytFIpFMJpucnDSZyMBMT09DG67Adbibm3vnbEICbKR79uxJS0tr aWkxm80UxG8TGqkmqO4sbROZbkhFgJROMCSvjXPnLI1grs6Lys0jZRMFdwlp9gnr1VSGwERWg4mJ pVKLUwn0v4jaFuPxeAcOHIAorMs3zszM7Nu/P5/1iPdi3IsbQBa7zfjmk/Rr7579MOrgW3v2/XiH v7+fnx+E/ge+vj/cvoMWEh79VkxSUlJOTk5dXV1PT09gYCDIzVFEmpubm5qaPLkGNpaZpZCr8iTo EGYiCMJk2X7MJpNtGzKCuZZTLly4kJ6evhavuaylpn32m/gPeM/HbXDnw9u0cNcDoWKi66URcbeK l1LcCJhm5uUmKCOhFHR0BIA0t2/fPi6X65H4bzAzSa9EkfmIraEmm4MwIyMjr169Sok31w0K0Z/8 9GePhVj7s3EbbfNp37S0rQd9akPn6BTi+tekrNKZ7AXTDpo6duxYUVGRo7hAGbN3716Q2BrHf+OZ WcMtL+dKNBS61Ol0qHp0tJVRazDKpUt/guGa+pXt0jF7OM++o23+rc2F/Yd4jH6NUTD6LSK9uB6U 9TdW6+L5l8vlQUFBTmrCVIut5RL4HhmcZ8+cOQO7GY7jazoQ+D985O2YY+80iORtQ5oFcKTzWNxh s7DgQzyDWDPFVxsBLm5IKWKDsh609y8ZBW9N6EmbnZ0tKSmh0WjZ2dlTU1OU+wefN25kBwQEXr75 eevAKEeiWUzrkB2DS3TYHAzO/xBP0T1qRMoq75GiQ1aXdOl90lsTet7UanVKSgroKysrS6VSUeIT /Fy7lhkQGHjmo6SHnD6OZNQRLYN2OO620Rmc/yEeQYC9QrICvqjiImWptAZHQfHWhOtiULNlZmb+ KCDwYHQMVA4YhrnhBJ6CZ2MOHwkIDPro01RW6xNYAM7XpFdZbiNWG/j4JOIKsw5k9RmzcdZBvYfM WxOul7X1Y6dT/x4VGx8cGrY7JDQ+4be5d+5UVlaKRCLY62DmTSYTdJuenoY2XIHrcBf6vH82IXh3 yO7QsPhzf7jNfMDuVzRJVFaeOkUyH+edXaNZonYCJUMs/yFrj+ilEcmKg72iM8hDVmG90Hl8vTXh etkz/BUqKooaeqqEz3NKH/7xSva7iR//8mB0+N79O3b6+/r5+fj4+Pr6Qhuu/OLX0e+8/0FS6tXs gq9YHNFaLdpNoSzPwn2m6cANCGZDF4qaYEi5bIi9NeG62KRpGsXoFquJpzTY6JHr2AM4ApRla29M Gp/iTtbkur8eJfSqCFt0MpiPUNR0k9+6EmVvTbgu9tf7LWTFXvSYq9DbYter0rP7lQhSWXPtjQru lHV/vdXS0K/swq2haRxU0hn1ELK7NZ0uhthbEzqxuLg4lUq1Fp7L+RJr2ir8z70qa+YSqg1ssRJB Kmuu7R6d2Hif2gC/q/TjGLlT1mhQzyGU63hKPeIfZY0oXvxBhetR9taEjiw/P59Go1VUVFDuWYqP o0gdT/x9UnomV2FAtErw+j45AMpCDffoxMZ4Fofwy3+uWY0rRzzuBWSOWIsRPQlsDt24nqsgAM7w WMq/asgag9k0ZZpZUaC9NaEjGxwcjIiIOH/+PEEQFLr9n3k2jUkqKzr+4rnkyzZlPcGJ1SuLK315 r6yWUV6HfIrUBq+yVsoTpQ7JCsgvtyasMt7TlQbaWxM6senp6YyMjPDw8I6ODgrd3uf0Q7BiEi8d OZ1oU1YXPlknxh+JcVDWI0vDRq0Yr+6VL0vLkLplUEH/si6lsI4jg13XIMANrjy4LDW98gWvRAk1 80dx2w8l34heoHlwtENBtMkmgGaJkn6vGilLo3Nn/XtrQucGsgoLCwOJmUwmShzKNRMQrEO/+3Nk bHzjgMImLqFyoqZPAcqCX3uqgeVWBUf6UoDrb39dh1ZCzcBLcNihpExZC16JGsC56Dvc9kOVssCV EDe0yfSIW6VVaDL/3Sp2O9bL1oSQtiB5ue1/s5ter4eyMDIyEkpEShx+Udt9+EN6ZGxCxpdlHAx2 SAiooUNhaHhK5qxqkWxF8LFxnnyC3TcM2QpWQiqzqVNOcGUGWCcrdeVJqubjyiO1vTIhPiFSGRoH cMrfR4gTKBAAq7mTXvgYTeYYYXQ70K7XhFqtNi4urre31+2xNq9VVFTQaLT8/PzZ2Vn4d3R0FFTQ 2trqhquncs2Rj1PfPBZPZ7ALqxptAe3BDeCz6smIi9RYVhqULhxMl1H4EO2x/6zvhWqwd3SS+1zj uivPUynE7HHlEUtOsU4UtS/TrdDBpCHY/SP0/HJr9u+SrnLZuFITnjx5cufOnb6+vjExMascbpOa SqWCjSU2NlatVkdERGzZssXf3x92GzdcnUu7/vOjZyB2yQVVle1P2kYMCPKc1SdbsOqWpOOFRqCY aBvRAczaVhApuccWNz6SaDgj+rYR/WOx3BU/60V5NzBsY9n+nCE1eX7EXj1s5rU+H2sYwKl6k265 DmYM0TykSs/7BsnqxgOuaca8+mUDOQsy15I1oU6ni4+Pf+ONN3wstnXrVrRvfw8NPrygoCA4OHjb tm0wFX5+fqdOnXLDzz0G8823T6MIJueVVfPFUBYC4JMvJ0A1FT3Dc8zf24UYf3isU0mg/gA8m3yv Grm6XcG3LRKhYoKitTds9zKUUd79wp5l+3fLtXyF/qumnuT8ChZHJJTp0PXVfBpMphDX22asZWj0 L3n36UUNaI96oXZnz1xsTmpCtIR85gwy18DAACWDbkYTi8Wwt9hmY/v27WVlZSt1wmKx3ks8h+RA iusu67+tAqQspBe+guhR6EBEnEE1bNdcqaZbpu1REu0jEzZNAbWd/SBMm5+M4irbLa5solb0f/ar LaapbA2bGEMw8cEHjfqkL/qgCfpsYuIjJhqjiQ8GjcbExMvEBBBBZhg95+CJWEcHBYpcW+4UaEuh hd67sWW3pcilFNjdZZdLi5SWjQMjt3Z6/rLLpkIHChQUznz50qysrvX/a629vvX/v5Xf0rdx8vSW sJOrwwO56niILG3DE6+qP8I2f2Y1gCJAF9C/7k3JTTZ9wAMlNfb/klVCyQqo6CDCeGf+LieEz00H LKrNZrPD6HcbYWpqKiIiYte3AHFBfrgmOyDG2NjYEmXnoriY3NyqOlpZobBagcZncmgLwIR8sagV owcYBse5WuvOIGpxaof+yKjX+rZZKJWabIYBcn2m+Pr+ln4y8CRFOuOTd8W0rMoRY9DkbSMImhPC dXr48CGV/1CIiYkJr9/tAhzHjxw5sn///sDTiIyMjI6OXtO34PF4jx49mnV7soQti7rIFYI1HqJX WsZUBLkCpUbrWzYH8iJ6brrQQDX+nc+lhyEEKWm31aDEDqC4wwYSqEDaqW3+wm6E3emtY2sywkUh l3Zq+sfpI1JgjgKuKD5j8YEqlLa5N6HYWSEnFIlE8DhTLzbcrrC73kaA4F5RUXHz5k1IjOFMIIhD tpyVlRW6BYFAAI8VNKZn3UyRgf6scLYQhlLe5Zc3KMVtFjnuUvaRNBXYSD3akVVaHfc7O6FAQs9i qbrIrzPJRQoqbPGaWlV9JEX9wPh3F0VYCDELhFCrafdHlkJpDlcMG4TIxdeuPl1oGNATY81Wkj4Z IBxmSgYbHjT6JCFabYas6GsTNCcEQM5z/vx56rm22WybtIDtBYhikBtfuXIFTib0WfX19ffu3aPa c25PBdJFK8ufHH6ojXvLfszITs0qZOSXMHKLUtLzYhk58RmVCQXiwAywQtPj9vjCZZ0Oo3qeMjnw FCstJEXUMlrVbFk3VaZhtH9cP/ClrsW6ETsbJDwRoAWWSB0Y4tl1ctighiBRfJSL9i2f1dg2CJL0 zV04DYqNrb2MvDLfYS5kgIlsuarTGvYkcAmC5oQUPB4Pg8GAC9DQ0LCpa9jZgNO7e/duYE+L2Z5S qqKVFQqfFinUPUO0hcnpmZQS5XwZIsmuaqBvEdJHwgXjaPB1UKAnmgi/Hf0AuT4jGycsg5IGo1wS eAKPc+vfl/Jl3cO+bRK+AK23knqChDJK1z9Or5ymHHMKNJ9e5hTHpZcEBv1X3OZ+x/gWfHfQ1MWL F1ks1t8N6Ozs3IJl7GBIJJI7d+4s6ZyYmgFlJbEVociKJe9w/fHnEguI0eq/ckyeSG9S4GMUUStZ g1rWcaU12AgfaVGYXUp8zMcu+3dRlpZwUgtILGiE3T0rQ/5V2eSPXAWSpPdsjlQjxxz0fpcQ/hK1 dBfUCBPf5ECyDS8PfYwQqoQGHNKGrfryXsgGjx492tLSAq/rmzdvHjx4cOHChaioqEOHDkFNsXv3 bviFNvRAP/wLY2AkpItbtsJtDZlMduvWreX9oCzQl9zY/3udPpEdRFCpnI+1WuwzORHULNyQl1X+ fCkpo0RmstG3S9dPVqrNa2WpWBPPrCmXNNMKXYeR4NRgIbIKxZqgxsTHqnW4vxpq7m37PJFcrFwM Xh8ET97m51XV1X5shfpU2mWTdPbXo8ZKMQKyS3j9wRek8kRLDjNDaBgeC36SmwG3261UKpOSkk6e PHn8+PHbt2+np6fX1ta2t7cPDg5OTk7OzMzAMPiFNvRAP/wLY2DkiRMnTp06BXPBAtjZsjVvO8D5 3LhxY3k/KItuT8+6rY7xT8SIFrMZcDtmc5ETU6taxu0u+jFnsDhys2tRXMRYeRO2Jr7iID5r2TxZ l1+kGsyxViNBWabuLlObQiHa5w9GjGqE2prRTg5Pew228ZRSJFApCfliCElQn8a+zo/9rTD+Xdnj bH5g1hfwQKkN+PBmV1U0hoaGUlNTIVRBKshms/v6+tZhBGbBXLAAdsAa2Az7OncAEAS5fv368v5A Za0bfLTH/5Ln1BfyxVKzkyZKuMqQ3tDJ4KGUqd+K+TKzE6iyuHhay5qMBGdTT+nH7lXJ1ZmVuAv8 1huHnxRKYSXPy1Rznr/cf3kdM16jYzKNi4ZemfqmVzSpjP1blv5BFpeQkHDs2LEXL16EK6MDO2AN bILlf7LEJVCr1deuXVveHxZlzcy506o1CwUXlyNTS7FRmiCu8qbeUqQnFGaJWul0S6Bpo8SltY6F OH0FliDdJYhpVWoJF+X0fb2WWgmkedQ2IeCMz3mJSXel1gzl0qqael2r1WH2LdOUx+MpKiqC+JKW lvb169ew2webYBnsgxfwFXb72xQoil69enV5f1iUBbC7Jn5eKEPiMyq5Kl2guDQExB28SGkKhf+t 8os0ObO0sXdYbB4FqnrsIU7fCJXddsodr9P2hOULWEls2cT0N1XGrMc7Nuvtdn2tQDHI8ZaoCRT3 tk7f2EZ8JifDcrAhAq59TEzMpUuXbDbbpjoC++AFfP1TfFHQ6XSXL19e3h8uZQGMVgd9weLfV1TL UQnmoCnHHGrzSLGyi60wrkxmwye6cCsUyERmB1CMj/L1+KpzV2TXyuTrLRLLKOUurbqJWoPAgAfd LMSvaY93wu21T0ybhsc7Bl0mG2kjJ2e3KkIFYnp6Gr5jXFzc1tRx4GXXPEiS3AJ3PyzkcjmLxUpJ SYmKimIymZmZmYGlaBiVBZC19S2KK5NTJJBKekYC9YXgTjU2UqXG2DLjCmQs1DIJTK7QaKVuO0I4 i5UrzVqNphVYjmBKwkk5Ymv8ZWNKiWJq9kd/mb98+XL27Nmgz+am4vnz5+AXvG+x3x8EDocDtLNv 3769e/dGRkZGRETs2bMnOjqaHhBeZQEaDGZaXI+za1+zKsTGwUBxUdQQTjXuaOwcqESxXLkxT9EV yGxJZ3KRgjKSWlAtxEaoO/+RcMLgsJOFmJAFWfFN9kSWhHKts4yE93A2A/fv309OTv4ursEveP8u rn8EQFa8KwAHDx7UaDT0v2FXltcnLpwWV0KB+Ek6myNTC3s/izAHTUnPN1Rhowg+2jRPlXkUUsci NUbnhHm1UiHmoIhYHDlyYxg5L6tRyng9NvKfcjnll9nYuiW51YYAn/LMmTMzMzOhDZ/uFnKKORSK OcLu6fleeysv8SdAYsFCT4iYnZ09ffp04HX6v0JjYyOoiVbW4cOHPZ7FWmAzlAVQdhK0uHzB64Pg 16xijgIVmoaoO7xEWUHJ4Plzwsc5ddXqT7S4lNjwB2lnWFjS1KMinLTlN1x/eZVSqiQn13TLvg/g 2RSLxSEPd7yF733uyjzOnUvk/en1jrUyoe/2Sybz5U/QuFLQuaYFgHdYw1qXvTMwNzd34MABSlaQ ED579izw301SFsA04Pi1VBWor4RcYXx68auCCrZAUqNABc3tolasoZ0Qd9nE3Z9pNnTZGjr6Ra3m GnXHU7Y/MUvIqhIYeiCmUFSZh5n/I7+MetKGojjuF/BBPwSvfgL9CJrwDfauDyoqmYnysjmdbi46 KFPDpsQR2RwVYpAyVCKJOCyg1Qpq69aCUhB0kw1j1Z2KdAwXpSia6T/ngdx7z72Hk/vruQfzX9PQ Rcq+yYl7aiwuMVQyFC9SWm5QLMvKZLKT/CtripSXyIN/NY5JHdyA3nOaSJ28pEonqXGC0yEGhmGk ON0ftbe3Q58FKSwvLw8EAtlTxSMLlPjxa8CGZ8N1jsmQVaH52PhK39AzWN+F1D/rU3T2tzxXK3uQ lh4ERhq6BxpfvlO8HmsemhK9lMiYxb9lWYumzbnOITZfgYb5ZoCmzFZgatTZ/NaePshBfCteTm5Q KIrW1tbmv54PY8LntapKqE11CBkHxnhmGafj6erMuzphVp+UGAa8I00mk0SneyKKosrKyiCfFRUV OVNFJev07Jvm3dx+apy7yFcB1qoZtfi2LGQ0bbMbu8NOQj2FSzIoVY71XXETC7HTbbCKWI3PB4ua kBuUVqvt6OjIf32SFAqUSu8icUwl4NUZzkzxcVonPAZLet3hy7b4lyAGiESq171RZWVlaWmpRqPJ GS82WWkd8cfuAPsi0zdJtW703BHuf6tab/bSIhdTwRi2ElJb8XwM9VCzG7E/TJHRCXyzbfCTeJBh blXC4+quJZUsACiZzDSPnFC/9CQUKH7ZqDqrZSo3I7VeCXrgZBmNRkheJBLJGb8dskSFYt/tPko9 6Xk8Mn0lUCqD843dv0BzB0cnw44lES5l3wg6v2Je5USzA19EaAhb6jN7Lpphbu3zahjWZLuYiZ1h y3ST1iQeN+Yi/yOsTqW/BsO4yejONET7OFQtLMwzkwJWOnfhjdJDfg2Cjo+PE4nExZtzy2Rlx8Pt HQTY2EIwNEN8tXnpKS+N+WknyS5Skc3I3t7Pw+z1UPUGs1o2Rf97g805QUTMK1y2OYLRmSA3HYiA CT+CUesal7MGvMadeJtGD+2euKHVS91JHq4jlmVlMln+XwPa+AgaLBcTTyXDJoEnJcPHEQCsTk8G STytZYaXEgOcDjEwTOFg3lfdFVkF6PCIH8iCq0mLdg2NwnMuB5zLjNj+MOt5ggwrkHFxH6ieXza2 7/rPFaiamhqbzZbv6hSjqxP6qzPVYfT+aYoWGi5xDCTX70sJAMOw6upq6YFfod8CDADmxG4RCg0K ZW5kc3RyZWFtDWVuZG9iag0xMyAwIG9iajw8L0Nyb3BCb3hbMCAwIDU5NS4yMiA4NDJdL1BhcmVu dCAyMDAgMCBSL0NvbnRlbnRzIDE1IDAgUi9Sb3RhdGUgOTAvTWVkaWFCb3hbMCAwIDU5NS4yMiA4 NDJdL1Jlc291cmNlcyAxNCAwIFIvVHlwZS9QYWdlPj4NZW5kb2JqDTE0IDAgb2JqPDwvWE9iamVj dDw8L0ltMTIgMTYgMCBSL0ltMTQgMTcgMCBSPj4vQ29sb3JTcGFjZTw8L0NzNiAyMDggMCBSPj4v Rm9udDw8L1RUNCAyMTUgMCBSL1RUNiAyMTYgMCBSL1RUNyAxNzQgMCBSPj4vUHJvY1NldFsvUERG L1RleHQvSW1hZ2VCXS9FeHRHU3RhdGU8PC9HUzEgMjA5IDAgUj4+Pj4NZW5kb2JqDTE1IDAgb2Jq PDwvTGVuZ3RoIDE3MDEvRmlsdGVyL0ZsYXRlRGVjb2RlPj5zdHJlYW0NCkiJvNdbbxs3EAXg9/0V fCrkoKJ5GQ6XQNGHNEGRFgVSZIE8BH1wFDlQGkuIrTTov++ZlWRrfUlyirQwbNlekdQMz36iPnTR rVzXxLfeafQhRjfX6ourKbjLZZeql+srF93LR27dnf50pW5x5eL4dbXAf35+Ed3bq+mzj6c5736/ ftLjoTsdBsHQ4bwLToIPyc13D8G16JO6GIPXFtQNF9fLBZ/23xpyS+PCc4wKQdywwEzDp272YvP+ 43a1WV+dDO+6p0P3YVdg1HT0yiYVTmrfV3hT2eTq7YoOk0f1UV2rPjZMnnxJTqX6as+LMXuVw8X9 /MH3qlpRSklNIh5r09CPK35AJdn3gh/RGmITlNhaqzZJqKFgwAJteXaB60824+t4cEgMwbeIMYUZ I74WjEnMmN6XhjFKjInYlEyug16nSq6Tgo+RXCdl3wq7DvbcepCJMTl6RQ9yY8YUL+hBYXKQm8/W g0qMEfyvkPWI+mY9IIYU3A6ZLKeI10qWUxBRawHz2uBGLlw5Cg3QgcKkrcIxuxN6ZgwuVLKcioRG UpA++lLIevris6WASXXffMqkVC3zIjYdRSxEqhMUHUUk6klQlBUxQVFWxARFTUQmo8nesawHzJBG g5iAqIGYiLs0AVEWxAREDcTM1ANEDcTMtBqIGoiJuE2TJBbEBEMNxMy0GogaiFQ5QNRATEyrgaiB mJhWA1ETMRF3aYKirIhJGy1igqKsiAmKmoiZiTUUNREzow4UNRGpIW0EMTHRaWkEMTHRAaIsiBmI siBmIMqCmIGogZiJ6GQgaiAyguRYRhEzEZ0MRVkRMxQ1ERMR62yfxMgjYoai7BExQ1H2iJhzz4qY gSgrYoairIiQjRYxQ1FWxAxFWREzFDURIxNrLaOIkek1FDURmZcGRFkQMxBlQcxAlAQxw1AWxNz3 NIgZiBqIkUkOEDUQI5EcAaIGYiS2R4AoC6IAURZEiZEGUYAoC6IAURZEAaIGIrGlAkPNw0hER2Co eRiJiEoW1kMBoayHAkNZDwWGsh4KDGU9FBjKeigwlPVQNNIeCgxlT4gCQ1kQBYiyIAoQJUEUGMqC KL3QIAoQZUEUIEqDCETZE2IBoiyIBYiyIJZQaRAhOw0iGjaCyBCCBxbEAkPZAyLqoEEsObAgFhhq IAZmd4AoCyJiNoJYiFTjAw8NIvAYQaS2B4iyIJZSRxCF6TUQJQ+IBYayHhYYah4GJjkwlPSwgFDz sDAvrQ+0hwWGmofCJAeGsh4WGAoPwTwzRkcPA5EchaGshxry6CEzotIaKgSFhtKIFCgEJTVUAAoN pSfeSBWCshpqUtNQKhEclE9zqCCU5VBBKDiUxgQHhLIcKggFh9KIUCsIZTnUko1D6Zn9AaEkhwpB WQ4VhLIcKgglOVQICg5xqmLGKM2hglBwiFMiM0ZoDhWEshwqCKU5BKE0h62RHFYAynJYQSjLYQWh JIcVgrIcVhDKclhTYg+HFYKyGlYIympYISirYYWgn9Ew631jIOhUQ9mNsVHRrVyHpnp0CIH0imdh Nxv+Ei/uctm9dOvu8dCdDkN10Q3nWAj7kNx8/Ik/FGfCtB8c1A0XXbAL43fvrhZrjBgW3Q8h9PLj 8K57OhytjHpQaMx1XBnvd4q/SvJVp2vrYe2MF9e7+e7hZvVxAuwYVp89v1z+tVxvV5v1ya3lUmo2 DJ6GGN0cYwu2O9hSUXEQur500b18hLXRC3xZCdPLxwPPj6rZPenQR3xiSv9TG/cL79sYk4XgP2jj 7QKKVTjfPQSXQvPBgqPXk6AYO8Li7NcLPtYiZkVxy9+t5vi1pd4HTLt7uJkW707xetpDZ3BGbGk3 nw/B+rbo5vZrxK+fulez12dXyzdus3bPf332vTsR32Zni617vTzfXC7d2XZ7tvjz6uSP4Rer8BCT Vo82exKTaYLuxGR6+XZMPrf/qcnNPfiZ/Q9W1r1tu7WlhwmPtvS+to3NQnsx9ezJcrtcHG34vh1Z 5aG7Ztqpu+2YXP5SO6ZpyrlYfL91mg7Tfk2aynWaUrS2zy4269V2c7lav3XfoYqzsVnfO2eJOjvf Li+vAzVpoOT0UJ6mvb3TwOllJk+Sok/6DfN0mPCr8jTeh7PfVtvV27O7gZL2IMPTVt3px/QyFyjZ I/mNA3WY9t8E6tXsfPUesbFAgaiLv93mE/JkcXrzcfzvyVy9zO5nquiDTE07fLeN7QtMoXl53P3d Q3AFh5Xa4wgWxo8Vuyp3yu4zNMunMez3+R8BBgDtURe/Cg0KZW5kc3RyZWFtDWVuZG9iag0xNiAw IG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDI3L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21w b25lbnQgMS9XaWR0aCAxNi9IZWlnaHQgMTMvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCqqqAACKigAA qqoAAIiIAACqqgAAiooAAKqqCg0KZW5kc3RyZWFtDWVuZG9iag0xNyAwIG9iajw8L1N1YnR5cGUv SW1hZ2UvTGVuZ3RoIDI3L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCAx NC9IZWlnaHQgMTMvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCqqrAAOKiwADqqsAA4iLAAOqqwADiosA A6qrCg0KZW5kc3RyZWFtDWVuZG9iag0xOCAwIG9iajw8L0Nyb3BCb3hbMCAwIDU5NS4yMiA4NDJd L1BhcmVudCAyMDAgMCBSL0NvbnRlbnRzIDIwIDAgUi9Sb3RhdGUgOTAvTWVkaWFCb3hbMCAwIDU5 NS4yMiA4NDJdL1Jlc291cmNlcyAxOSAwIFIvVHlwZS9QYWdlPj4NZW5kb2JqDTE5IDAgb2JqPDwv WE9iamVjdDw8L0ltMTMgMjEgMCBSL0ltMTYgMjIgMCBSPj4vQ29sb3JTcGFjZTw8L0NzNiAyMDgg MCBSPj4vRm9udDw8L1RUNCAyMTUgMCBSL1RUNiAyMTYgMCBSL1RUNyAxNzQgMCBSPj4vUHJvY1Nl dFsvUERGL1RleHQvSW1hZ2VCXS9FeHRHU3RhdGU8PC9HUzEgMjA5IDAgUj4+Pj4NZW5kb2JqDTIw IDAgb2JqPDwvTGVuZ3RoIDM3MDkvRmlsdGVyL0ZsYXRlRGVjb2RlPj5zdHJlYW0NCkiJvJfbbhtH Eobv+RR9OQzCdp8PwGIBezdY7AJZJDABX8R7QVOkxFgiFXEEI2+/f3WTHA4pjVQ2HRjykJyu7r+r qr+u+mOkxUqMspM5iaCl0lpMQpReRKPEw2JkonSHN3ejDz+I9ejNP7ZBzLdCl3/bOX7513strrf9 0cfTLEe/Hga9m47eTKcOptPlSAmnpDJiUh9KZC1NEForGbIKYnp3WE5Js/sLymZTFp7ASikrpvP6 UUcx/TJqpg+zq1W72qxnt+JnfBhPfx/9NB39UXfrPS1Vl9DCZpkDVDhpEkn9gB1C4jPCbIaxVZ6E KVpWlQWvdyv8OmDqdJbO1z1VqxlJ7GvTwRy5sBeKXpB2oehC0Ht76vr95DpIHUSOUmPjEyO9EcFF GWmc1lYGt3+5m1/JFEKI8Lk32Wk8Yw4qlRX/wC6sTA7/adolTeB1zjnSJCoqD4M54vfvO23FPzdF x7MmWimZNWw8x8bJ6GFjODZJ+gybwLDRCIplrgNfm8hcxyipNXMdY2X23HUQc/KBZdhYLQN8YDPH xksHH3hOHuA8WvJBZNg4/OaZ+3FBZvIBw8TjOFjmdryTITK345Gi5AKONnDDet52AmgAD3hOtkVV 8AdEMWzwIjK3E5GhmkmQpKX3zP0kLy1lASerU5bGMkmVLZ+IORQiekZWG1C0EJGxHwOKcoloQFEu EQ0oSkTk5KihG4t8wDHJbCAaQJSAaBin1ACiXCAaQJSAaDn7AUQJiJbjakCUgGgYx9Q4wwWiAUMJ iJbjakCUgMjaDiBKQDQcVwOiBETDcTUgSkQ0jFNqQFEuEU3IbCIaUJRLRAOKEhEtJ61BUSKi5VAH FCUiskxyAaLhpE42BYiGkzqAKBeIFhDlAtEColwgWkCUgGgZqWMBUQIihyBW+0JEy0gdC4pyiWhB USKiYaS1pZaRWSJaUJRbIlpQlFsiWpu4RLSAKJeIFhTlEhFkYxPRgqJcIlpQlEtEC4oSETUnrYMv RNQcX4OiRESONECUC0QLiHKBaAFRJhAtGMoFok2JDUQLiBIQNSdzAFEComZkjgNECYiaER4HiHKB 6ABRLhCd1mwgOkCUC0QHiHKB6ABRAiIjpA4MJR5qRuo4MJR4qBkp6qzj8tABoVweOjCUy0MHhnJ5 6MBQLg8dGMrloQNDuTx0QbN56MBQboXowFAuEB0gygWiA0SZQHRgKBeILjk2EB0gygWiA0TZQARE uRWiB0S5QPSAKBeIXkU2EEF2NhDhsAJEDkLw4ALRg6HcAhH7YAPRW8UFogdDCYiKEx1AlAtEpFkB omdkNRoeNhABjwJEVngAUS4QvY8FiI7ja0CUWSB6MJTLQw+GEg8VJ3PAUCYPPRBKPPQcaUmxeejB UOKh42QOGMrloQdDwUNgnmMTCg8VI3MCGMrlYVC28JBjEdk0DCAoaOgyIwsCCMqkYQBAQUOXGBdp AEG5NAwmEA1dZCQOts/GYQBCuTgMQChw6DIncYBQLg4DEAocusxI6gCEcnEYvCUcusSJDxDKxGEA Qbk4DEAoF4cBCGXiMICgwCGqKo5NYOMwAKHAIapEjo1j4zAAoVwcBiCUjUMglI3DnJk4jAAoF4cR COXiMAKhTBxGEJSLwwiEcnEYjeEWhxEE5dIwgqBcGkYQlEvDCIIO0NCGp2xA0D4NQ7UhKy1WYpTR ryWYYA8YhMLDCYf+xSTxsBh9EOvRuymmdwCkEZP6UCJriabQZl+wKaZ3GDKdj5rr8fT30U9TzA6r N9NpFFpMl3gJXZOqzWsJR9X1VCimEi/KXxLb+bpO9Telkvs7ZsMs4TBLJq2T+ujmspHm8v25UEBk U+abQLSipeYj+mTE9Muomd4sxOpqMdsJ3jlDA9A4yhow1OjEcNGX0j/3naFJQxEAAro6uls/2rIS rfJb8/ZmbCL6gGY1nhiTpGna8YQqiES/RFAqNbfjCRjfXGEEvpcRaBrw4RNeBE0/LceTRA0vvdO6 mLc03FQ7/BTLSxNp9A0moBDSEppK8GLnKFyJXsLRzVuMRc407zHEeYUB/5v+p4Zu5wtjipthrrQW k4AVcDwUeUIHFI6HV3ejDz/ANVrQP3J4//Wx4fI8M7CImNB/B3fiAu/CGagKRvmYHOKhcBUGUOOQ JcXLh1Q5imNVsI8jfBjDeSR7qTUY07Ocgv/6mf7sREkPTyTGX6H8iWXqnVKXQbr7ch5vVscyz6wM Fea+WjXbiwgxKndTtsOrY05tzzRvHi4jxHZ7q3B6wRcgso7H4+encPhKISgU9xmAsz6oAfgxuyhe KDEMzPZOBioGVweoDqG70N5BqL1TX8qGFLt4ddkwu4wbrDIn2fBpUI3VnfCixlU128WF9FCX0rs6 l8N6cNXtzzdOyIVEUMD1sYjhENmI23GfyQ+PlwGGUzwRTnUi6vjFZXTgCj14ePigOBMPwavFhSYh 5SMuPCovxP1lDpDzXd7W+c3h3mvam2GZIfZzvlptL5M8ji62PViG0eqSP99EUbK9TOy8Tsc7/fJS DnljSXs4nG7bxc/X+D3ei81aLGbziwgMSFq9L3e7UAzHL+hyG5waXSZ8wZiDCyadD5q374c1VW6F odR/2DxeRmJ8Mn+HQxuSOTmbrjNdPMjiveP6M5aWIu46imypwdGY5LyjeLE7CaVHqo/DXFRjvdyd pH13gv6sNA7/3bSiBWPbxZVAx9Bs1out+LK6vRXj3Hwqvcu6XS1XeD3DOXrc3q/mq83jVpY6/pkC myou8w0F9pN17m7SFwrmsktzyBVj6zbf3W7mn4/ki7GXsfnY3G22rbhdfV7c/ik+ba4ftx/HQGp7 sxVL3H5ivnhoZ6u1aFd3C/GxWfx4/aPQV7M/P47lvo85dDHYbNpFVAu0PCL0W4CnM8FYK9MrMuGs A+n6J7Spdhd+JL0iGQbXuAv9pO9nzW7d46w5zpBdV9m2s/nnLTrAiOPYUFrgMyJgkRr0K8LdzG8X szV9weFrHu/3P6/We7P2ZkVTJCtDQ4487wBzPOrjeh1gvzk86wD7r087wH6DuQ+Nl978ZbGpS++D A86Gr4tNR85KmH1k+oh6ehr0BeYcbyd4/zal6CdCj9axQL4kzGskImPS/o6/qLDkTiqCVIvyxWtk WaVlfqZN+iZZcJV0+vjU5doJlqP0GmXOHRx+WWUu4yidOwzn+jWyQpAxfg+HRS1NPCtPCTKvkUXo yd/DWyn1q5SdrEK8VwhzGlf398h7ajK8PfdXwe9rhLko4z7z5Wkpo8mgjCa+A5BaHfx7Csin7/Sy tUl9dNPYOFjBdGVg826xXixX7UlnaBJuprSrO7RAbOA2m55B/XG9khOzXnma9mhV0q7+pKvYS4TM Ggn9T5afu2WPKprfmp9X7ep61pbbVeFCbccat+1N+Y4ytVnd3c/mLX3zeLsZT2jQcv99Vr/vLofT e9YGd3Rb9u/Z3hV8fs/2Xj93z9ZBe/cbSqS/1v87ATv/O+m5/u+qxy4QT3cB1ZZm792tZ6f4qyQZ nAStz5oLcOUFOaFrSi6kJHRKihBfuVuzcEiLNepw9V5GizX+sLsjLZvlsA6nLuwT6/xJdGrGzM5r smfy3YJ86bX5PtwV7aZ6TVeku67I1/r+l4fN7WZ9Tc2Qo+SqfQ51Ppv7xcOs3TxsRbsRV4vbRYuX GFB6pNohnTWAh2uhcGb4Wnip6etfEPsJX7gg6k1Xj8r/aa+W3TaBKLrvV8wSV4GaeQHZpfWiy0qN 1EUXFbaJjWKDZYgj/33PZXgM2FZoQxQpxp4Hd+aee+45i7SfaoHLxoWaLUBrIXUchY+gn+rrL1a6 bacW8op4PYDe9dVQCUGPJE5TxgZMtporHhMPnwMyzYpswlA4Sj6yVVrdrct4M+St6+sVAuupdeN4 8KRCg1jm37MZsO4smu42ReBizlsdZgLXnVF6GRW74NLjwkryVZf1vih5lzcL6WU+Kj68Wd2g4/dF pXjrGJxhS7ixAvqhLmNnO2UoOmz5wRmXNRjPILIRp1qSBA1XGUynLBEJOd+80ILJqGClD3lpCRUT q9ngNCXdSa49oSy6q4EWL0eFqWTXpquFuyljU6Gngn/JsURv1FbZBIa82dOUUYVgvh7Fj2JiGaF2 1IddVaQ9eYEXpxh1awoOUvsfwBeKC4KHHnCtc8iLUXEp1WLTmRL0SnVUMI7HlEYoFrDqbpdO2d0V CCq8clvJ3agIgQDl2/iaMpPa6po2vkb1I00waPK4nzIqEXV6aBTUtZp3emhwQRJuoDO+LtxQ63yr 1e3Q/tOvzwgM0eKPxGh/2F741DnWelJzUkiI/9ekFfp+V6LUVWgzITjIVSDjyAgwl5Mgl6RnXB76 nibl4PKA0xPN1JiJMeCFpuEp4IJGfE84oH6Xc99T9LvSAlPj5peCNgwUtqEaxo/C7BiQX8N8dDzn jqbgkE5B+0kHbw6FXw3XOu5GikJJybeVv6UsG9SRMtwlmxT2JYZRqewJm2nnNd3t2MzVeM8yYcVL cUhWZbKmoThbs+UuXz3j6zY/sOWZPjx26WrIsrjV/znat0aKBsat8h/Gi4hIz8cZnMa/1TuO8W+8 lSbSN2d+JMuWl/GOHY75Id7EZZpnZNfiM1vFGcOhT8nxzMjk3bHXbbrasrSoJudHmouV8HfVmecM W0dgl8XQLYrqhit/uEuyTbll+RN7+Pnnx8Pjd29QLlFkgb5XLv1KuiiX/vCwXACNq05TkuKb0GjW +73hM4fZ4CYbixS1d4ozqjagDjrF4ffsK4EMaHQVYE93eEqTV3z1qXRwkfs8S8v8WEBn1pPWSQmY UiaLc1Em+8J7A5QRggunRWW95RuwNJJZm+N/A+BmALOT5SUzZ2BUZUWJ8qKDHxPALS7LePVMh0Wx Jt7AxSkk/gbd9qF1iZ/e8BX84HTC5FqYXCshvSBkgU8XZHUxy/rJL/68BvhfAQYAK/ro/goNCmVu ZHN0cmVhbQ1lbmRvYmoNMjEgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAyNy9JbWFnZU1h c2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDEzL1R5cGUvWE9iamVj dD4+c3RyZWFtDQpVVQAAFRUAAFVVAAAREQAAVVUAABUVAABVVQoNCmVuZHN0cmVhbQ1lbmRvYmoN MjIgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAyNy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVy Q29tcG9uZW50IDEvV2lkdGggMTQvSGVpZ2h0IDEzL1R5cGUvWE9iamVjdD4+c3RyZWFtDQpVVwAD FRcAA1VXAAMREwADVVcAAxUXAANVVwoNCmVuZHN0cmVhbQ1lbmRvYmoNMjMgMCBvYmo8PC9Dcm9w Qm94WzAgMCA1OTUuMjIgODQyXS9QYXJlbnQgMjAwIDAgUi9Db250ZW50cyAyNSAwIFIvUm90YXRl IDkwL01lZGlhQm94WzAgMCA1OTUuMjIgODQyXS9SZXNvdXJjZXMgMjQgMCBSL1R5cGUvUGFnZT4+ DWVuZG9iag0yNCAwIG9iajw8L1hPYmplY3Q8PC9JbTE1IDE4OSAwIFIvSW0xNyAyNyAwIFIvSW0x OCAxODIgMCBSL0ltMTkgMjkgMCBSL0ltMjAgMzEgMCBSL0ltMjEgMzIgMCBSL0ltMjIgMzQgMCBS L0ltMjMgMzYgMCBSL0ltMjQgMzcgMCBSL0ltMjUgMzggMCBSL0ltMjYgMzkgMCBSL0ltMjcgNDAg MCBSL0ltMjggNDIgMCBSL0ltMjkgNDQgMCBSPj4vQ29sb3JTcGFjZTw8L0NzNiAyMDggMCBSL0Nz OCAxODggMCBSL0NzOSAxODYgMCBSL0NzMTAgMTg1IDAgUi9DczExIDE4NyAwIFIvQ3MxMiAxNzcg MCBSL0NzMTMgMTgzIDAgUi9DczE0IDE4NCAwIFI+Pi9Gb250PDwvVFQ0IDIxNSAwIFIvVFQ2IDIx NiAwIFIvVFQ3IDE3NCAwIFIvVFQ5IDE3OCAwIFIvVFQxMSAxODAgMCBSPj4vUHJvY1NldFsvUERG L1RleHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldL0V4dEdTdGF0ZTw8L0dTMSAyMDkgMCBSPj4+Pg1l bmRvYmoNMjUgMCBvYmo8PC9MZW5ndGggMzEwNC9GaWx0ZXIvRmxhdGVEZWNvZGU+PnN0cmVhbQ0K SImsl1tv20YWx9/1KeaRKlaTuQ8HWCyQ1EXaxXaRIgLykC4KWqZtFbKkSHKMfo39xPs/w4tFylZ8 vIEhiyJnzv385vDLRIulmCQnUymClkprMQtRehGNErt6YqJ0/ZO7yacfxHry5sd9EIu90Plvv8Cd 9x+1uNkPVx+LuZ781i96N5+8mc8dts6vJ0rYIGb4KJGM1EForWRIKoj5Xa9ISdN+grLJZJVKKqUg YjGZ0aW2Yv4wKS7evf8weyv+XT+IX5eH5XT+5+Sn+eRL46VP0pfCmCBD1MJ66YSzpYQuWPgJjsGy E3ucKmXwypM9itSprOimFf3b05ssTI3tJjLU9oYiPrS/Oiw3a/FxcVvf1UMrdTBHQRwkY5CmNhmP SRg8HQe/E64D2Zei1AnCjfRGBBdlpHVaWxlc97CVr2QZQoiIvTfJaXzHFFSZNX4hz2Xp8E8jO4IE eJ1SiiREIQDYsEAef7nTXlxssh3PbtFKyaSxx3P2OBmRHWc4e0rpE/YExh6NpFimHsTaRKYeo6TW TD3GyuS5epBzioFl7LFaBsTAJs4edBli4Dl1YJO0FIPI2ONwzzP9cUEmigFji0c7WKY73mUWsNzx KFEKAcc2cMN6njsBNEAEPKfaIihGnVBy9uBBZLoTUaGaSZBSS++Z/pReWqoCTlWXSRrLJFWyfCKm kInoGVVtQNFMRIY/BhTlEtGAolwiGlCUiMipUUMnFsWAsyWxgWgAUQKiYXSpAUS5QDSAKAHRcvwB RAmIlhNqQJSAaBhtapzhAtGAoQREywm1b4YjljuAKAHRcEINiBIQDSfUgCgR0TC61ICiXCKakNhE NKAol4gGFCUiWk5Zg6JERMuhDihKRGRtSRmIhlM6GK8JiIZTOoAoF4gWEOUC0QKiXCBaQJSAaBml YwFRAiKHIFb7TETLKB0LinKJaEFRIqJhlLWll0bmiGhBUe6IaEFR7oho8XrIJKIFRLlEtC6wiQiy sYloQVEuES0oyiWiBUWJiJpT1sFnImpOrEFRIiLHNECUC0QLiHKBaAFRJhAtGMoFoi1LNhAtIEpA 1JzKAUQJiJpROQ4QJSBqRnocIMoFogNEuUB0WrOB6ABRLhAdIMoFogNECYiMlDowlHioGaXjwFDi oWaUqLOOy0MHhHJ56MBQLg8dGMrloQNDuTx0YCiXhw4M5fLQBc3moQNDuROiA0O5QHSAKBeIDhBl AtGBoVwgutKxgegAUS4QHSDKBiIgyp0QPSDKBaIHRLlA9CqygQiys4GIgGUgchCCLy4QPRjKHRDh BxuI3iouED0YSkBUnOwAolwgoswyED2jqvHCwwYi4JGByEoPIMoFovcxA9FxYg2IMgdED4ZyeejB UOKh4lQOGMrkoQdCiYeeY1qp2Dz0YCjx0HEqBwzl8tCDoeAhMM/ZEzIPFaNyAhjK5WFQNvOQsyOy aRhAUNDQJUYVBBCUScMAgIKGrmQcpAEE5dIwmEA0dJFROHCfjcMAhHJxGIBQ4NAlTuEAoVwcBiAU OHSJUdQBCOXiMHhLOHQlJz9AKBOHAQTl4jAAoVwcBiCUicMAggKHmKo4ewIbhwEIBQ4xJXL2ODYO AxDKxWEAQtk4BELZOEyJicMIgHJxGIFQLg4jEMrEYQRBuTiMQCgXh9EY7nAYQVAuDSMIyqVhBEG5 NIwg6Bka2vDUHhB0SMOy2UO7tFiKScL7WikM/A5RC4zGwkGPCmJXTz6J9eTdnKQHMcNHCZS7DsIp jMMUo/kdHs4X9O9hUtxM539Ofpo/ytZGy2REgjy812glfQCfES3TSSfT6U6EtejvGa3xuE7khsV4 Qg9CI+EokXHkRF5avlqRA8gswlWeKEpjRbTUvVoRzgy6jiceGTVWhKWh01NKSDqvJrWpDwYnDG6d atAjDcYkyjzOF6W1mIUoPcpfkQKS4vpHd5NPP0Aj3MXffrEePT7eeH3kQBikREvzLRewxmcfcK5E CpM/8cGMo0RLw5ESCHihktID3LjnTpTYsRJaWr5KCUjf3hsrcWMlWPoqHQa9aKnZzYkOP844LTWv UgL6lvapVjRhrISWHneIdowOwQgiSQ8m2LGicc+bFI+qcFC/w9I+qd/h42fqt13Ud6A/V74wbgYk kuVl9qLMLpWnORnjNy/tKzgSLs9HqyQAQwXG3GcavWcW0P1mPk/wen49oZJHrLN5oSQ9BtDE2dVS /GYywxCsADfiOa5wugDqn4v5bS0228Nys65W4rCr1vvlYfm1FtOZl6HYVodbUR0Ou+Xl/aG7efH2 4x8fpvR2WbydalSdK+ZThf8/T/8z/ycdEa33NrjnGDRMb5vDNz/uMTPsxVEuB8vGuWwiEPsI4FUn 1xtFwWpHbY1JTIaE8w5R6MQradpPmZU8nnF/V6p0/8AxB7HhJLCdSBtJZBPYXhTeaBH0LI7ibElm DjnInAN9US8299vVcn0jphqpaWK73W221U1F8RfTUFTrK9HE/KpJCt1crsW79x/E78UFvn6f5iAf +43zw1DllNTL1lqJmkD9PNoYvEP3SV06FCG1Y0BdvcTzIBUkN1+9aLxK6DPuN3UWuzpDqTfub9b/ PYgpuq6436OSgjTFAbW3v99vl4vl5n6PsCDZOSx7cb3ZiavqkH2F/uAxFMDQi1Z86sXHRnxFOx6q 3RXi+zeBYhX7w3K1Ij0eAcTDO7Gulze3l5sdNJHYWScXIpNH83XScdR20tvcVZcbSIS5d/i329zf 3DYiEE38kddoORfDkYmomH5yyg3zdv4zDVBPhcxLnzPzuNl15aNV26cPt8vFrVjCdsJ2Eztc+mJd P6z+wiV6o7iqr7NdCck36Vhg55HJ6UBE6qun276Z8boG9qiaNuP4djSoYNikr+P5cVwnaHukfVAo j8HY9mPkub2xpJfPtsiArS4RIxyhE4vFZn2oskNolFxS1V0t7scs+n9ccWh5ZV/ninNeJt3sbYo3 dMmwuXgL1Hkt7ur9vvqO0ffmG0P8ub1w19sjk7XtTHauSUQtHpbIxZSq7u1HnAseL30FFbkcBd5Z 89xBPjwfTg7y4eNnDvJ2URclS+82rypRPNLB9pH6XGy3U5weCjlA1FqfzoYtKC/VacH/MW2w+gyv S0sXLwT2izDdSnwJp1tK0VV3TLWsAmqmM4zfBbBMvLlvf6LNqu5JtRbdYaR1Yw3WjtHjHkPRgLhq sDMduIEmSRhpjxjfm2bLxrTrZb26kuKXQ9v4Dxnw2bp1/bXeiUu0/R4G0uGxqwE2dFbVwR47SkxR Y9gr82jeVb0CA3d/yWEfOmMlJvrm3Nci0Q+017C+uiHB2UQT33BI6Aavz8W/6huAFiGopzMTqbby eUc/DI7GRbWmS7wsFJfTGT2uu99f84hVrZaEi6tu97Jfv6121WpVr5onZXF1v8NZ2K27niIx2L3v 5W03DfL3j7Xd+ZuefXUcNvNJxw4fc8a1LmxH49qTY1rfACeA6dIDCcmM8vPkOPdkpp4Z5/L5eZy8 I4qeE24MjfbPCy9GB+4LfHlKiX9EfV/SbWENcT/eGVLv+/cxJYKE+siUDNRc1mcNscr2LnwXQ6yi F7YjQ3w25LL+hh10asbvaYe1w9xkDhRf+z4+a47DiRK/pznuf6yXTW6DMBCFr5JlFoWCf+EevUAb ESmKUqTAprfvG/+AbcBqI68iEUxehpk336P5CspiUZdcJK+DibJlEayPy6JdyzoPy6vp9DJUZdQg y0ZqDKF5B81qkQJRrmTjSqHjCbLWczXWnZfSybIzJHvTLCrp3XVxZOUoBetr7elznTJQbP4dipg3 /33wWX7SPeDPVl6FoeIDmeExft9miobjF4UJkyMQND4vd8AGZdUAXZYM6FnpjW5/DrhhOKX0CxjT bC08HgWXlNj1ar/2EsDZiC0/sIBM8Wu0xeEsQJZ5uJAof2H6mebhMdktL88TqAFhEaREVww1jc97 vdn5Esv6gNJjHNju/OjrA0p3N/ky8Lr/bxGqtQMtrFER9hvQn1aMGjDF8XQyXlOG/xmtFzul69vI KmOiWZSV0cMQMlWY2Jwg3w1ZOZygnZeUw9HnkYnZ7TuZPsxrEezYxF7TIvQeCdgxiLVwenxlP3Ce i1p3J7yomgeT2NrlIN/bxh3/FWAAH4hrzwoNCmVuZHN0cmVhbQ1lbmRvYmoNMjYgMCBvYmo8PC9M ZW5ndGggND4+c3RyZWFtDQr///8KDQplbmRzdHJlYW0NZW5kb2JqDTI3IDAgb2JqPDwvU3VidHlw ZS9JbWFnZS9MZW5ndGggNTYvRmlsdGVyL0ZsYXRlRGVjb2RlL0JpdHNQZXJDb21wb25lbnQgOC9D b2xvclNwYWNlIDE4OCAwIFIvV2lkdGggMTMzNS9IZWlnaHQgMjIvVHlwZS9YT2JqZWN0Pj5zdHJl YW0NCkiJ7MEBDQAAAMKg909tDwcUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8mgAADAHK6 AAEKDQplbmRzdHJlYW0NZW5kb2JqDTI4IDAgb2JqPDwvTGVuZ3RoIDE3MC9GaWx0ZXIvRmxhdGVE ZWNvZGU+PnN0cmVhbQ0KSIksjaENwzAQRW+AbmF1D+9QhVUnswSEZ4gDWcPEitQRrtQLmBgEGASE pJJBol7tJo+9ry89kcI3x/fkXhw/kiNPbuKY674n1wIodLMkhwCALokcwfZ4YnobDjkng5fkYAfE wYYsK5Mpt2ej7wA3pR9oRl6P3ZOCiiK/187fL9k8aQBNfhNZmDpsNCjd1FxHvAC0LpXf7FCV8Mqj wc4QryI/AQYA4Kl89QoNCmVuZHN0cmVhbQ1lbmRvYmoNMjkgMCBvYmo8PC9TdWJ0eXBlL0ltYWdl L0xlbmd0aCAzNDUvRmlsdGVyL0ZsYXRlRGVjb2RlL0JpdHNQZXJDb21wb25lbnQgOC9Db2xvclNw YWNlIDE4NiAwIFIvV2lkdGggMTMzNS9IZWlnaHQgMjIvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCkiJ 7NdpT8JAFIXhuiJoCyruCygu4L4vuOv//09S41SdluZGTOdOfJ8vJCeEOWknJyEIAAAAAAAAAAAA AAAAAODvDQ2PjLruAIyNlyZcdwCEypXJKdcdgDCq1lx3AISYTWjAbMIjzCY0YDbhEWYTGjCb8Ig1 m9Mzs5/qc/NWlCQLi+ZLS8t2kkQrqyZZW++XyI7LK5DRQFIgo0Ehx+U9gnQB2RNPFxj4uEJeeT35 8RizCT80mr3Lu7HZ2oov8fbOR7bb7hh7+4EVmeTg0CRHx3aSRCenJjk775fIjssrkNFAUiCrQRHH 5T6CdAHRE08XGPi4Ql/5xWV8/67a1ze9j9tuAGgWRp0vd/eu6+B/enj8dg1//PUBlCpXuKlwL4yq NdcdACFmExowm/AIswkNmE14hNmEBswmPMJsQgNmEx55en7puu4ANJqvb647AACAX3sXYACw2nV8 Cg0KZW5kc3RyZWFtDWVuZG9iag0zMCAwIG9iajw8L0xlbmd0aCA2NzcvRmlsdGVyL0ZsYXRlRGVj b2RlPj5zdHJlYW0NCkiJNFLfS1pRHP/+AefFRx8C4SLch2CE9JDEuD1MCiFHIVLIwQ1CA2PtYcog 22C2hy4s9MUeuox8ui9STGEtukUO8kXIWC4ua44VuWnYlLsou3q+O47tvJ3v+Zzv9/Pji8iPWc0E ASS5aGA1QwEEuWjyckdXwwFKQ3K+juxn4e2K/Cant9llIS3LqaxuoFmUBeBwmjlDPMvQ3oV/a2gL ItjGU0c3iKz2/qlIiEfR7xiiUZQlgIlU+TfiRTYoApnL1juI9bwcopT63Q7CO9SzQQIkmK3jvwl4 V1Y8NhAXtAYH39ZLm8mIj0OJwxdJbpbqt4jXujJNwBnVaqyn6EZXo7yfV7IDEMExIIDFmThsIwIE M1UTaKaKSBxuP6WCNOlRynecqnGysTgBguTlVLwS2GeU4yZr7ERFgtgsyqMAo/JeLt5PoP914Zoh q6hTvPGTbI27VdMiQ2B/lNBODf5ifMuvhQe5GDG6VTNLCXe88AuvD8CZLLUNAEdEu+zqiguIGNtv 9Vg5CVi6X9MPCVgjGmK3lX8pgqWNrF1KOgEsoSwX9j8YZtYPM/LsiMAtGA6lj0zsGPr2aiwgCYQ4 phZWt3WjY1T21uM8VvtIcGl991QuaMhalV1ec4HgCsbXdystXfHSwEr+qsNq2ZAFwJOuMDQqH9VE xOuwBuNKrlRLRqlEY6u5UvVgmTs+Prek5PLvXt1H9iXt6QPrc63VRfZja34AuyeKywrksfq9Temk 5PXTsKp3sLq/4rMTudjEq7wcoMLyh5Iy0wtmcC593OxtGTecBv5iubhmWX0mEeDZAPSNLG5XTcY3 I0wnAawO9zSlUfXzoX9tIx0aZsYndf4BkLHFnXM0Lw5SswD3fPIemufa0qRNsO2/GAMYiuUbfwQY ALRbnXsKDQplbmRzdHJlYW0NZW5kb2JqDTMxIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGgg OTIyL0ZpbHRlci9GbGF0ZURlY29kZS9CaXRzUGVyQ29tcG9uZW50IDgvQ29sb3JTcGFjZSAxODUg MCBSL1dpZHRoIDEzMzUvSGVpZ2h0IDIyL1R5cGUvWE9iamVjdD4+c3RyZWFtDQpIiezWZVQUURgG 4EUEBVtB4WKLLeMajAEKqLQBtsKa2Imi2IrdnWthdzd2g53YWGB3/nVimU3YOS7s7pzzPn+4852Z e7+798zLyGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLLJYZvT0j0A2Nnnym3pHgBEQmyC NUBsgoQgNsEaIDZBQswcmw6OefKacblsly9/gYKW7iFjNoUKF7F0DyIhNkFCzBybTs5Fi6mGLq6E EIm/K27FS5QsZekmMlG6TNlylu5BHMQmSIix2HQvTzgVKqprlSpXqap9F1vRKRmmEZvVPKjqcjHv So2atWqLmVuLJ000CatmrTp169VPH3t5N2hIiI+vn6mTitqv/hkY0qhxE/8AU/sxC8QmSIix2AwM oqjgkNCmzZq3EGourmHh2nexFZ2SYRqxKWOzTcy7YmffspWYubV40q3bcJ23pdg/2RObzMdmu/aq cYeONImIVNCkU2cTg0rUfvXPwKAuXSXyuYnYBAkxFpusbt2jevTs1Vu4NiE2tWVrbLJT2+Tg8lL1 J8v16duvv2o4YCAZNDhaJhsyNGbYcNNmzcrYdI+1HWFaN2aC2AQJERObI3uOGh07ZqxwjdhUGTd+ Qpxq6OI60Z/7ymzUeJLGh/n/yMrYlE2eMjXO+F2Wh9gECRERm9Omz2g+c9bsOXP5SydnIpg3X7ei KrmXZ8fMm71g4aLFZMlS5juMeTPYmmaAMdm2bPnyFUpCVq5anf4UlxnslPydnrR6buHNcluzdjFz Hb9ufXQGTevFJr863x0/qe0GbpGNmzYzVz6+fumP8oUtW7cFGPlhArerP+WqeezYyY927d6zN8NH 3PbtP8AsveXgISEkvLwPMz9A/JGjx7iWNferu2Fhv/pnIPSdcPz4iZPqMz11+sxZI9uwCohNkBAR sXnufIWKsgsXL13mLx0cE5XxSRTnylV1RasUGERRicqwcK9r10PbKuioG0zt5i2KCg7Rjs3bd+7e JRGRCprcux/APqWgudh0cEy/M/mBgo6I5KZ++Ogx/9yTp89IQkpKopI8f/HScNN6sXnz1quG8Ul8 d7Lk18rUtDdv2UXevZeT1m2qy0mnznxMfvjIFpiOPn028iIbjiQnZyHI9Hz5GkNS0yhmtW/fVY3/ +EkzewkOIaG/5GzLGvvV3bB6v/pnwBzTbznzSzL3sP8RhDMN3P7nb+a7sA6ITbA2/wQYALejAwIK DQplbmRzdHJlYW0NZW5kb2JqDTMyIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggNDI2NC9G aWx0ZXIvRmxhdGVEZWNvZGUvQml0c1BlckNvbXBvbmVudCA4L0NvbG9yU3BhY2UgMjA4IDAgUi9X aWR0aCAxMzM1L0hlaWdodCAxOS9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KSInsl99rG9kVx88fcF/0 qAeBQQj0YAgm5MHCD/KDjUPAClmCcRJMFCi2H4K9LLF2Sxw/xAmks5DKkKglq4eKfVCXHQIVAbX1 ZLFSrG0zkDG2SOXE2pW70lZylViMhWX9GPVK40S/ZkYzI7vbOPfDEIjmnnPvPfO91+dbqRw5xSQ9 CWCnWP7oczcgpAJTBoBhb7Qs/nAQ919D0HPet1mWDdqmJ8wAk3SyqGWqepTGwJbw/2z4rp9ByDJG BbeyQvVVKcPctIJx2PtSZs1iMc0T9LbyHEWWwnMgs7kH/2v/FD9fPX3NC4dvBf4183D6DAKwTPu3 ck2RSXoCACbopNbZlQLlyG35py21FTYur0Y+zX1za9QKYBqivs8KchnUIuxwT+jHT7h0QybJ7Qj7 sWeP6T+FYnvvftllqREAm4tJya1CyCy7rAj6v2RzjUPE/CLGM5MPmVh9H9VP4HbivYNl0hdtPhqF Tb+zD2/cPvPoaUNIpZji/rgwakaAHNTzTNclkScTnMFHacy/rXuOLDNnBHD4Yke1SuHnlYWzqFqu S3foF+liQ14hG3v6aMZuwhUbvPPsjSAd2K4xgf8x/O3dMUs1q5liW0+yHj1X5CXdUc867iLxukCW iaVGaeHf+fjf8RPwzNqrm1O+e4V8+E4PGAY86yXVExM+eGrylpA9gUAgEAiEjwXRqig3it1zEPdf Q832VkjQTuw1bEvcgZxV0NEYN0VpDGwMP3djfsICp8ao75JF9U5G0ldKjWMpc80coqH7z7Ml/LQN 2Y/TM9hNGJx0onF+JW+iOLt2UyN+IDT4m9U30v5A4Nml0R5Al7zRnOqs6lFbTCHuH0eAHN5oQfJL 5aLeSwisTjre/FrMX/0I1tlAov0rC2+5pYuo9RMUEvS0QdJvVinx3INRpcUcASXO3ddVA5977cMf 1jzujx3REkU3iqVyezmZlxwhZL+nhkz4tLuYlNAeOPqA4yU1JlpUqc1q13Olk6QV9azjLtph5k4D XPbFpGtSqfAsZe9899Z2iiYDadUTEz54ah+9izNOIBAIBALhQ0e0Kp0axS4pb/rO4+73mj9+UP9R +Ckw1QswQrG7MmE6GuOmKI2BjeG4LR6a9a/z2myMWl9ZZKnaHAp7x3Yw4nVgg3LRG92v/6jkTRRn 12xqeM59DmD4TjgjXwPRZKHexdV2V9M1aotZEVKMy9ZmAN+9FH2ZwxsttLwU8wMYpulEQTpzbnWx FzX5rIMXbpsB+u+Fs5Km8v1i7Ivhtx2WrZNSOnAdgcnhe6VNm4cU0yt3BhFW9xKX05WgHfF0K4u5 IuTYL/vxqRr3x4XmQDTm2ZC9fMSTIuFWNOu5okLSCnrWcRclApNWgAueyJ7MgD3OPYLr5ubkBoij QvMmgD43J6M4wgmkJm8J2RMIBAKBQPhYEK2KnWJl++SuEQqR3w219OdVylnmCyMg6/xKVjpQR2Pc FKUxsDHc7gpuaw9W6ytF6wHD3mhZYVQ+5rvcmk3JmyjOrtXUlNY9AwY4RbF5RSsnOogBT+ToHYTa YlYFFvU6sPF0eKOFltXushT2QTYXk2rbhpgfDDPBjGzmTGgeO8v++dDhkFLEMwDoFPU8L7+YvdCC CQwDnvXjMVXqy9JOPrn6YMKC0ODt5aT8DrSSDkwiAIcvpqiUSvmldxgf9+uB9GFhhCR9tVOgsMM9 oR8/4dKtQ7TquaJO0rJ61nEX5bd8V/D+kH3WE/hbdEdvwcXLghi2j4qavMk3JxAIBALhI0bs+e0U yx/bFDznPoc7jnF/WzOeW13sRWC8EcxIGhodjXFTlMbAbiYVUWugxL4bTQbSKoY1tWpK3kRxdq2m JhOcMYBajF8w2bLKxKrR4kaFFOOyAYxQ7G7TzwnaaQDD+NevC+2+TMyP+tycpPik1lDKBD9TWRXj HJPVuGF1lNKB60hlWRoRsluBhUEEaPD2clKvYZRCtYncDS8O4G/k5vY0BkqhVc8VLZKW0LOua2H/ n9/ODqGW5Oj0uSsT+Jm4OnPr4TehWLZdmk2IZVKUKeGkUZO3zqNBIBAIBALhJCDaEDvF8sc1Q+4f VD9ujo2nz12aaOUTuxn3sFYnHZfqVHU1xg1RGgO7mVREra8U+240GUirGNbUqil5E8XZtZoacbzZ frHtm0lw9X7ozZFbCLXFrCEUol4HAoOTTtSVtMtSI9gVUuyufH6k6H7EMdbJQKIxxGz/pHNJqNAb bftVS00VxmHvy3Lnse9jflqhLlsAWcburyTzx7AeNYaCZyl741VT4tx9AD2LYT0L0qrnihZJS+hZ 97WQT3NPvL+9NXP1ykW7BdpBZxdWfpa6/d6RZeaMGndK+NCpaVXFmSIQCAQCgXBSEX1HvXM+aoRc +G6vRG/a3KiO++MSfaq+xrgepb2j1j2piFpfKfoaGPZGlYxWPua73OAQayh5E8XZtZqavdC8CcDh iyn5h2NFbTEPEVKMywYwQrG7+D/4Kbz+etwABiedkN6CmB8MU4GU7B4zofl+XAVPJCfOsRdaMIHJ 4Xv1i1UFL2LbPwZgnGOyKsfza76pAQQm+6w/wpc6B2glHZhEHcWM1/HK5zABuh5Il7QFSqJVz5Uu Ja39WhD47TWWXdvmJaar6rO4s/Hnrz614wrYlrgD2TWVo95hgJ7FcF7HqgkfKDV5mylWxx8hAoFA IBAIJwLRqtgplj+e/DvM3GmcfzH8Vvq9EKedVoALnshe2zvtjXFzlMbAbiYVUesriyyF58CGwc3J O61CxOvoAXTNHz+o/yh6kzH/dntTL7xhqVHZ2bWaGiHmHzeDYZpOFFRGHDVqi/kOoRD1OhAYnHSi nMIP47IBGvNsyAlbzA8KexQyyy4rgt674dxhuYW4f1ycQo/ROyLyz6lTCAY8kVLHoSU+SrsGsTXt m1h6liwez6LLm77zPQAjFLsrP0jY3/j9KAJ03rdVfv9bTWMdAvGHyr7da9uqVj1XupS09mtBPOTK Rkv4wT/Wo5i2lAl+ZgDLVTr+CyqO8L+mJm9l7RAIBAKBQDjRiFbFTrFyXqYrhFRgygBgW+IO5HpM 3IXeMILB5n5x0Prq38GZU3hti+G3krmL6bXv1tJteetRGgNFtHfjddT6SrF/rxrEsUfrfAk/bWvc 3fD+ygLI6lrONC40y8wZAYw3gpmWkHwyePNMNaXM7JngDP4QDX6zJTzNra7tNG65kKCnDWA48/lf 5Sr1bjOpNfbHfcUhulBbzDpCinHZAM7e+wOFHwdqq55EfgyyTNHxdgNb/NfyrbMIehzeSN3UCXHa acXq+pxJylcFCyzC/rCndtma2WHmTgNc9sXyisPySebeqBkBOjsf2OQbl1vi3H0I+txcm+50Ucow N3FR0ODt5aTkkoRi8i+3Bk34InAxKUFDYEXgX9Ku8xd8m+WWFx30XNEvaWk9a7+LxENu+jWzK1/l wrpnyAimhdCe3IIyofl+gIve6DGcMML/LUl6At99FKvjjxCBQCAQCIQTgWhV7NR/2a/flzbOOADg zx9wb3yZF0LhOPBFYZTgC8teXF5EOgJaKEF08hALw8gU96rZwNpC7aB9BluEurJ5rJayxrGjMFfW DqM0AwvblTpm2DJqWEJ7w0id4RC7XHruyV1+5xITjd6s3w/3Ru/53vO9J997eL6ScgAPN07FNufn v6VqjNpamjjJmJ23/40FzjOZTnbyUayoyaAtUPBr4u1kzY8xhagGAw1xEdP7g6K8h/NRvX2lcX43 OkS26xK9ZpfXcvPRA/9T8Wofl2leri9tlJ7wtedz3pP06O+4OLeqZG9pyrOgf4DLPrDK7Fo00Evn 5Hr8izEl/0xNXQ8H7xKvgzOpgdSfgYFTdC5+9MuFaLKii3i1Hl4I+C+47TbUMjq31vTjZL2LWURL hW86UQ7TJ0S2dnt+diiHJ4OFd0wr0cXpUadeRV/9sV386lpqNTDA0c7XOTq9GFVKf51MgdEl6bEz qMU7t1ajE9yX18ngRzbE9gaiVWdQXyxN6iXBvSesbJYPM+qviT2A9vejS+/Q5WLazxPxaUItmlBd W57zD7bbMkU7/qOsalUCh6YerKwX3aVVvTAz7uYyN9mBb+Nl71ClnvdR0rXrufG9KPeR0zW5fven 0lJJZ2os9viu7wyDWp3+J1XL1NgbO4XI62ojwJtIFnFTP1AAAAAAHDVGq1Jxmt2v7UjAh3Gfi554 kc3u6sPUcCCSrhxDneNZJjusdIym/Cp4TmWbWf4cxv1unss3Vqxj6JP5v1IVcxdF1RmYzySfDMe7 +3Gx8uQNiRDxFg0yZjFmzPMUhWbH97toG4fYK7M/jOsdipEXy7tztzJZOq7My68qX247csfDGUP0 JN283gq0OnyB+emBwuzlCaeVlVslgdk3NXAOr38+tl25kre9b2cHMXZXP3YZq5Kd1Ei7+4JQ0a7u 2UaIeKotpi8QKc+wYnli4kAb7aXo1XF1KVm1id3JVT7bP30vXy36K+ZLheHwjSWTn4Cu5B1vpuvM h+DyAnP5hIVnSq3Z9ycZvGBDzNnbq+a9WzoxN8IUir9Ctv6a2gOozx+Rd3NLkPvkC3XyVg9ZlFWz FTELzH8FiDnt+ezhqkl1mdfzHkq6znpueC9SJVJ4aPFsxXkynOfWStVv53UydLkN2TqF381/Z/Cm kkXc7A8UAAAAAEeK0arwRFKa+lhFIjwqU37mqGcMPRs/WxDG3HZbboTN3vX++NRsMJyocYAxouoO NMtkt8R0cRGzuwSWhJaMz/xfS0YXZug1MdiZv8HYe8dqtb2aKi8JY725NsZmd4/pLaHxU9ZIOK1E F4sCMzN1jVyeCiyE1ytb0fxsmQwnRs4WovRIlu8dHb8RCK02uRXVT6dV1FGlWnxuyI5ahuglvkjV HGosF4vF+I62GXn4xZi7ncm/nWOIiE8Tpk2lMQ8tsJmPR7qKV4Xje0bGp74JRZPNXRIzmxI5g9AZ Im2a3S2thDrqskkyBTYzMdxV+OhoiZ0dmRC+X16rOdWrxPL9mxc9udZVr+qu4Qnh/nKiemWa1fNe S7quem5sL1IlwmYW+Zd/VkMBvw87inYKLlMt+MPJe7VqbEeLiQNtdVQyeOPo22DzP1AAAAAAHBnG eb6O9geA/7t08vG1DtTq9D+h19Yug43KZ7EYP5TcmktLRYRuBtk+ePCyepMHjjItFb7pREybbx5+ 4mNHFjHdm4ikWp0IAAAAACxitCo8kRSrMwFgf1JhofsEahsLvkzTa7fRRuWzWIwfRm5Np60FfacR 0ydEtqxOBRwA+H2PM1nEdG8ikmp1IgAAAACwiNGq8ERSrM4EgP1Q1x742tCJbiGc2tlJ1TFer3wW i/GDz+1AaPJ3QxzT4pmNqZrVuYDmSicfX+tArU7/ky2rUwEWkEVM9yYiqVYnAgAAAACLGK0KTyTF 6kwA2Ietn0lHC2q/EtpI1xdgVD6LxfjBJgYAAA2RRUz3JiKpVicCAAAAAIsYrQpPJMXqTABoVCJE vFjX77IzCDF2Vz/9w/MpvUIbafOgdCQw7KERbp6jESx/DufViAIAgMMhixghlkiq1YkAAAAAwCKq LA4ixBNJsToTABoVFzGLTNCSHhTlKidcVSKmQXpg1SgAADgcsogRYokEmxEAAABwXKmySDsankiK 1ZkAAAAAx54sYoRYIqlWJwIAAACAevwnwADQXM4bCg0KZW5kc3RyZWFtDWVuZG9iag0zMyAwIG9i ajw8L0xlbmd0aCAxODAvRmlsdGVyL0ZsYXRlRGVjb2RlPj5zdHJlYW0NCkiJLI6hDcMwEEVvgG5h dQ/vUIVVJ7MEhGcIg65hYkXqCC41qYpcEGBgkEghrmRgK1dHyUP/f/3TP6JKDroF4NJGChoBmLR5 z7e8fK39+FgoL87at48bUZpeo36a6VeVGfVopkRUj1B7QB2IilM9HoheuUJHJPA0yakBcVAu0Wqk qLV7w68AF8ZvKB5mLdlKBjt0qPOhaCUnmo3ssOHAeLNPdNLMAK0OteE1sr8AAwCr4YTxCg0KZW5k c3RyZWFtDWVuZG9iag0zNCAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDM1MS9GaWx0ZXIv RmxhdGVEZWNvZGUvQml0c1BlckNvbXBvbmVudCA4L0NvbG9yU3BhY2UgMTg3IDAgUi9XaWR0aCAx MzM1L0hlaWdodCAyNC9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KSIns12lPwkAUheG20AJuuC+g4r7v 4L6L/v+/JDVO1Zm2mYRklvg+X0hOCfdkOrkJQVAojCrV4qeAGXFSq9vuAGhqjIyO2e4AjE80J213 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqTE3P2O4AzM7NL9juAGgKo8Ul2x2AOGm1bXcANLE24QLW JjzC2oQLWJvwCGsTLmBtwiPS2lxeWf3WWVuXoizZ2BRf2tqWkyza2RXJ3n5RojeurEBOA50COQ2M jCs7ArWA3omrBYYeZ+SVd7IfT7E24YeDw8HlPTo+OU0v8dn5V3bR7Qm1eiBFIrm8Esn1jZxk0e2d SCrVokRvXFmBnAY6BfIamBhXegRqAa0TVwsMPc7oK79/SO/fY/fpefDx8hoALouT3o+3vu06+J/e P35dwz9/fQD3sDbhANYmvBNG3FTYFyettu0OgCbWJlzA2oRrPgUYAIi6lfcKDQplbmRzdHJlYW0N ZW5kb2JqDTM1IDAgb2JqPDwvTGVuZ3RoIDYyNS9GaWx0ZXIvRmxhdGVEZWNvZGU+PnN0cmVhbQ0K SIksUUFrE0EUfj9gLjnm0NMSyKEXCT0YRJJLKATaUghFkSEKZVdoEC8JgikFEw8OWBLQVjCHhIC5 hJRuQCluCntoQKNdoVIW24hBA9lqTNiGNm4yz1nxnYZvvve973sPUZTTrcoAEq12sFulAECrXRef 9PXNOFWYbmFfZ3EaZ3ofESDEWrbEWo5LMStrcUoVq1lm7Jlqnp81S4xtqaaNTotJgNipUklI8l9v U35CFl4cXXDee31fvBcL5h+OaLdYCGB56/M54g9V9gNJqNYE0dKZQim9FQ0QALRUmQCRVQtRYLGQ D3FkFm4SCKa0nqvS+ajtlp+vJ1bcr0vL2MknV0QnCawk8zuGdYl4YVZSAEQKXJHAE8wdjt0scrXr /HMKYpJgR2/RjradTixx+7i2vgxSKCZMxELgWy0cDRAHLTYPMM/265lZArOPmyMO/3cx/la5IyBF /R5dTWa3yrXc6oxwjj0teRV8t3Paic2R21/1l2tzIpI/9abnGLlopvkbRwcQzBtjGyCQ1M5welyI eMG/oQ+nP80PRkfgQQKe6WlpiYA3qQ3d60yH+oYfPGPkYyMfBPAoqrsI5I51WGV3w5IIf00pfXJw Ypt72+l4SCIkcOPh9p5pT+z2fjEjju4Ly9li44TbJ41iVg77pLCcKe637Qm3T/VX7N5CIKw8Vc0B Oj2jlk/G5khgKZEpNtpD7rSc7ruKS/Gmy+8th0/NQgTIbOZghKhXckKpUDcso8aUCJlLlI4GNL6p 9ye8pyoegMVSm2M+RUM0vV03ugdPkA/bDWEqspDIFur67qPryL+UFmfA+0AbTv8KMACimIdfCg0K ZW5kc3RyZWFtDWVuZG9iag0zNiAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDg1MS9GaWx0 ZXIvRmxhdGVEZWNvZGUvQml0c1BlckNvbXBvbmVudCA4L0NvbG9yU3BhY2UgMTc3IDAgUi9XaWR0 aCAxMzM1L0hlaWdodCAyNC9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KSIns1/Vfk0EcB/BnwAYoqYLN 4MDEholBCMYQUVFUJnaLhR2Iio3diaJizxa7FbE7sPMv8VnXs+3GWDwvP++f9hx393zv2H1eN4Yx S+Dh6WX+rwDOIRR5+7i6BgBKiE1wB4hN4BHEJrgDxCbwiG+16n6urgHAPyAwyNU1AAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAADAf0LgEVzD1TUACEU1a7m6BgBKiE1wB4hN4BHEJrgDxCbwiJNjMyS0 tp8TX+ceBHXq1nN1Da4hqN+gIV1PxCbwiJNjM0zs6aX+GB5BCOHlWQkTE6JdBoXIqEaNHVeNW2vS tFlzqo6ITeARa7EZ3YIotWyla2vdpm07w16KFqMmbnqxGRMraR9Hc1Y6dOzUmWZuA0KRqm7i7WPz WGPG6w0JjU+gj83ExKQuySmaJ9+u3br3cExCSFN7phHSKz29t70z0ey46ZeAi8HaLUFsAo9Yi80+ fSWS+ISMfv0zB2jbwiMGDjLspWgxauKmF5usLBnNWRGKKhF9/gGSwWnZQySSwCCbxxozXa/Agz42 IyOjNDcu6dBhacRRd+zhI2Rk5KjRMkLGjKVKKvNodtx0UzjpFm/tlYhN4A1rsakwbvyEiTmTJmuf 7YhNQw6MTUYR0VOmVmacCbtic1pu7vQZ6hhjr+7ZM2fNnuOIhJg7j8xfkMcwC/PzFy1eYt9cVRib 0QXBS+leidgE3qCJzWU5y1cUrFylfUZs2hCbqwsL16zVDFu3PoV21bYKj9iQrEznxMSkjXo/DSqj CmOT2bR5y1aqVyI2gTcoYnPb9h2ZO3ft3rNX9RgmJlqqXNJvUTex9yoWe7CK9u0vJgcOstcg9mQo 2vTzhg2QQyUlh48QcvTYcc0o5YlVTKnqmSXTza09Wb4nThazz/JTp/PM180Rm2fOnmOHZZy/cFG1 dmW9pZcuxxH5lavqK+G16zfiCLl56/YdsbIYjtUpY7Po7r37bOEPyizv3sPy8kePDVqsxmbpE0UF cvnTZ2XqhRDVvkifv5CRl69SuAbFxL5+o/749t37D9Ym18zNkqZ+ZP8D8oqKT5+VlVnYce2Gc20K w3z5+o0dm/39x0/dl+rX7z9/La5WBbEJ7uafAAMAIk/BAAoNCmVuZHN0cmVhbQ1lbmRvYmoNMzcg MCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCA1MDIwL0ZpbHRlci9GbGF0ZURlY29kZS9CaXRz UGVyQ29tcG9uZW50IDgvQ29sb3JTcGFjZSAyMDggMCBSL1dpZHRoIDEzMzUvSGVpZ2h0IDI0L1R5 cGUvWE9iamVjdD4+c3RyZWFtDQpIieyX30tbaRrH3z/gvcllLoRACHhRKCK9sHhxcqG0CDq0BLGG EIUlFjroXFQpjPaiTS/mDLgKM5llGljOzZ4d5jAXoWAX05LsorNtWCI1dDPU7MapmWlcHUMMRhOP ++a8+XlyfuekjPB+OBSa8z7v857nfZ/X7/fiwnRKGc4HAEXH8ubP3Qz/y9pcHwC3Aonjyn/P3waH rQBOs+lTicHlJHvP6/HcpuwQAAflcnvauccmyypRWgMvTpLsQu01DvdxmdLFRTETWR53oP9CO3Xb 46LsAHGDjh01Qg+jtLc+tdtFOQCwe7hd5WKUYjSayv7F83jwDyjAAQTslAvNUc0C4LVPme0jXrRC /NbDZSQ+XDp75WU9EKcQ45UoSXXXjhLsfQriBfWPuD0j7nqJED3Opb9lSrxkqEGqpaFjJe0x5XyC naN6hCVZ+0fuoFLUqiEs3PloPVNsHn8YXa5smnukH32HfYmL/Ml3zSqMFQ4b/r3yv7vsTqE1F1/K vKTHr4JGSTyN8aDP86Xf11N94aWjh9WEGs6z9Mm8qHWo3fOXH18H712D9bz1D3SMB7dPdBdaI8UU MwlAP3rmw/vaw4xso55VZTbqW9ayC7WNgI7x5UjLptd3wSPuo9L7CD3pqO7+ZLWqA1/GCqYe7HbM r5FsWWRrUl3Jz2H/bXtrWL190E82uw22rtTcW0XlSumofSp/eiIPb8LmO7aRDqP85+8kGXShA7EY PdCwBSaR4TxdbB8CgUAgEAi/f7AFUFYpJsB/CM1YABgOJs/xD6dpdhoC2yfMT+eyQbucB2lAH5fR JVUaUToDReH/22Y+vQaRsqXXdnKCaiwfhD/vBdbh4FuZNdf8FLernAPLc2i329C/1GfoefriXb6m TPn8u/DXdyt2rN0kCuKtai50ZVcKlKOww951CCtsXp5AMRv/bmm0F4nqIfrHnIluRrdz4c922CkH BHBo9unLVL5ZpvOl7L/+unSrUuqh5de5NgWPc2GvgL7x+fZ+zR3w+eQP8xQAlsHAm5YZD//ud/ag r6Zmv32RavpuPpd68e0s1VOdTnr9xs4z3lZslKzXvDQX/1CLL2bWHznRObE+COfk26gjfl2bvQrA FHrY3TPtYeYb0Ka5sxF/5avB1XE/F882u060V+V86uXT2SH0Hjq/2DiUtomNdshvMTODEE2Fuhwf Hv5DeOE6AK5g8sT8tTeTC89bARhjUua0j1JZlGpS87Dtbc7n/4ueze+fjDug9KE281ZRvVKMtQ++ tKHDsxpublhUk/Q/Q4E5qvJlyn/++OKm39Z2FXQXobDdaR8CgUAgEAiXAmwBlFVK55ym2WnYam/5 PW7KAsD11fipnEg1psoaUToDm8NH7i96HBXp/jJT0q6hcTHtHm5XZVzNHWLzKOEfL07S3CySspYp bq85v5IqVsyuX07jDVJwOnw+tjpqA/BOMFnQPKsaet0dn+amkAYf8W/sS+8T/1t81QWBbSyYEJvM 6jb0OBdDVYPWxHkyOCyu2FGMvgGAbXQ1lpdIxpf2QnO9FdEvs35j5xlvKzorgzPMljgv+nwvOiZj gYR5W9BMOb7SB9Hn6DUMerdRO/zB+gIqMry5tP6z7OT8wWt6DA3qXVg/kDwWuB1uzi16+4Bjko68 /7huCG1W4R2D2ss+waa03y8KqJdFuibYwwI4+lW8rQXqkYJLldpNs28VxSvFWPvsh+f7AZhkUkWp t/kYTan/+RM+E/pCWT2JO0LI2I32IRAIBAKBcEnAFkBNpXTI+U/MJ0h6TbPp08aP/PvQzBUAbtCx I5kwY6qsEaUzsDkcabKhOfaNlBdTABfT7uF2VcZhd6j07RcXZ4ngGJLGrmDypPGjkipWzK5bTufj KyMADPs3pV2OAFb48MrjDdMsoj53x5/GV68Dy4B/Iye/yqp/ufJks9A6COey+TeLUsFtFeM/hGYs AAx8GSvIJTvb4+6iITLrN3ae8bb2jAbfSoVpcxmGyYZ8EIAxBj26zKS+bdRBcYdxQ7Tj9CuVI1d4 RQ9YxHdOHby5qMup+2ziSF+Xd0opG/GjxwnRHbMalz1LutBWlvaaVG/m8cC20vmR3U3zbxWFK8VY ++yFfL0A3AokjqXeHsdXbqB7eCUu+bY+KrrYA0DfSrysJ3MnCIXtQvsQCAQCgUC4LGAL0DWRX4E/ S3wzhPTwBJtuUWbnufADK4C9i5GcdKAxVdaI0hnYHE4trO3qD8bFtHu4XZVxgugFw8HkucKoYoqZ FM+mpIoVs+uV0+U3gUELuErHJA1sHSxfBwMJs+SrPndXSATGABiiYzInqMpBdHEAWc1AolX4K+cS V4w/jj7sAZbBwBuFb+VTDFqQzJzGzrPyocrHaKqL/Vsrgh4jVkHfNuoAe65JJlVUG3mSDLoA6PWF 9iRe4u+69vlaRnUecylmNr7yOCB6oPPRumnZNZZFXBM+w3kh6gwmpdjl/H78GffDs3hWPKobt4rs lWKsfYo7jBt9IqTmAqF/JPcNFbxrp1kWobAfMyGBQCAQCITfGdgCdE3kV8jHV0aQ4phg25RgYePx FQis99cOJH2PMVXWiNIZ2ElSjLKfahoniD7oC2U1DGuRakqqWDG7Xjl9sDZrAVqxPgjnzjVOrIKK HhZ50l/XZq9qXmX/fHhfRy5xxbRtLq6b9JzGjpZyXlFBzCYb8sFKEXScHIFu2Rod8/LFTb8NwL6V uMTlorcdTIHP7YQeOiGAzkfoWc8YMoySaC2LuCadblP3bhWJK8XozXzy7+/nhqBoftg/4vZ4vLNL X38XTeXEf5hE4DJJn6TuIBTW/PYhEAgEAoFwacAWoGsiH1F4RQ8gZWbtH7njEXObsiP11DvFpaVk kjFV1ojSLeeMJ8Vo83E10Qd9oayGYS1STUkVK2bXK6fxeDvlatszCbzL0UOT9KuKbRB5UrxZDsrl 1rDKGTraWm/lXOKKnefCD6zAOhx8ey41HMOnmDEgN6exo6V8qEQFMRtcouEgepIKny0TZ77L0DOv 0li97dA5pfcRetIBoGN8OZIposfUybWWRTSwHF/pA8D2eNPgarp3q0hcKZ3czMVs/Fnwj0uzXreL cgAR8ObDyC9Sf4Bq5MLz1o97WoRCmd8+BAKBQCAQLg3YAnRN5F/whc0nV8SqqE0lTbBpCZFkTJU1 ogzJuU6koLKfahonSGU141NMMZMA9PpCe43flFSxYna9cvo4utgDwBiTUhKvXUDFbog86UF0cQCA SSZlyGQo52qrGJ9mJyAAztX4iVxRCsngHQjk5jR2tJQPlaggZsP/hx23AesD9IRzSodVhGbXqJe9 kK8XAFcweaI2Uqp96uhth87g81vMzCAEPdQcm8iX1QN0o7EsbTXJhnxQ9SKS56PeKobah8/vbsVi W7t5iYx8aX/7+dPPKFSB66vxU9k1nSeDwwDYHm8aumUMIRS2C+1DIBAIBALhsoAtQNdE/sV+eL4f zf948zfp93yam0Ly8lYgcdz2zpipaUTpDOwkKUbZTzWNEywMUqsr8ZzsoLNEcMwG4DSbPm38iFXx OLvbrij5wxg9Kptdr5zmU+yEHVjucntnGiPMQcXdiTzpaZqdhqB3iksbUf3Kudorxn8IL1wHwDH+ TVxK85fz23/2OmBlY6XnNHa0lA+VqCCmk4vRQ+igoieQKGgPU9lG4xR3GDcElgH6lcpqTrYCo6h9 3MyOlLXS2w7GKeeT3ILz/+zX70sbeR4H8O8fME/yMA8EIQR8UFgk+KDSB+MDS4tgyxURuzLEhSWR q3jHUbN3qF1YW9idhW6E6+7RDayybCPcsLDush5nLKagx90sjVRZ0qvu6rZzZyStMhVTJ87uZCa/ MzOJMXG0fb+YR5kf3898vp/v5PtRWtNmZvyBIFVTpxWoLC2lOdGWObnA8ttlRpB2XrxMFv94rF+V qpZP2UKUfwp2N5o+Nhmf+ZONON3VfWSqoya2DssHAAAATgutBajXJl/enPbaCGkdj7wy2uAoW6Dr dmJr9T98VXzq/zODbymxjS2+0H22FFu6vxQreW7urkPeqKmuk9KY91N516k7R4Wt++4jMakcJTFu LwfedRKqyTcbzw90JzRkJ8R+fSZedEtCmBluUftD/dHjM4PKRJy5tbir+96JWGRhaSv/lfefcf02 Ymt5759Gmcq8zOYS//Oe6SWHUGZTXdyTys+4PuW9WkZDMfP5SsSWIj/tFb6J+Vg6DYgsrXNeJ0VI Az14d25tJ/c4aTMydaPTQRGN/jPN6/lXg8o0L6rihNTawU7oz3bSoByXJv9beZNStjeqmhyf9TVR hLo4OvuL4cOlX2ZHL1KlyyfrsN1llRJC6MNUVVAXR6Yfi0WRJCP+Zoo0+yMlq78K5dOin5NkPDTc RAjV9sGskDB8uPgj57v8u8nHB0Un6vRV0f+kVLV8tEJs+Eto2yDL+48+bVeq+0b4pVFA8fDIWUK6 AtGafeTKU+uzHssHAAAATgmtBajTJl/bktnbP320b3LV7sLYGUpvp/dqPfgOlepkx+fX83a4Umwl 9BXrPW/QBeTuOuSNmg2OUc57OKGK/ZF5P5V3nbpzVFGOzhvKMRXZzIynbDUfcjevOlM7548Wnhfu LeWn094zyqazbWR6VUyfksUnIX+fM9Mf6o8urwV7lDGd3f7762L2mbK0tRK6x3rbnDo1sP842Nes 05CmJbZW5oL+oS6XndgGpzdrtJ0s092V9qS7q8H+VK7oP34+96S4D9JeMBVli1Jh3umnOht4o7H0 +7ikuBL8A92QnjxXRy/DMF10ejapc97A+PVGo2ca1POv5pVpXlSlCam1ndCQnSgH1RNcN2msCpWZ xiORYvM325Q8Uq1u9utILL+1TKiN4bTfc44ybzz1J7e2YT5bGFdXpfPdwPK2TuZqnCOztJjlRP7f /I2LqVMt/XdmlrekXKTKh0U55iZGu5yp846+v28UvUaNvyrmnxSzvwPD5ZP51FIt73x078GamP85 TYrri/d8FyjS0O7/Ydcor9rf0/lA9MDoijpQ67M+ywcAAABOBa0FqPkmfy8a9DHM1Q5lu0Xsro6r SivDXAtGk6XXKK7QDip9WeE1srgUcDenm1n6CsP0dtGZZlT5pa3/49mf90vGzrurwhuzkWSDcdJd vUy+4uA1sTDrzbtIG0UbMcudd2v6+t4OlzKG44Op70fV7bEWl4Puypwihi2GvBf90u3ULlGDTHeI DW2+4OznfbnRiwNOistfFNyYflONs83rn13fK83kpPccldeRdmhZybalqbAvDQXuF+5+D+95mHVr KVTfXx1Lj1ZRheUqby9PDrSko8wUW24qNU0dQ4FMU5B8Hr7tLh7Ly4Zj6uMyxaC9ozopDOMLRnPJ UTuXWwOdruzTKdflgbGJ1PNNO6/SejarzGQ0eM1dXFTZaU1nrGCJudnw8yNNg66t0JBLOQjVO7lq 0PMWrCDDaaxdeAlh/na3M78w09OdmXHK2X17vmj5pPPJlEyu7lI9omRseoDKTbSe9Feghp2YYVoM c6KRns6zb2eqMF1L6RlMP6vV/ck/VnXWeG2+KhV+Ukz/Dgz+EbT1mH9RaVrcXywbfr4OdsLvNxH7 +cCPBxVPQw0IHFPb0gAAAIBTRhI4T3HXUwMiz9KkSPGeo5Jr1IYoMNyV6kQye8jO34/emQqtxEw2 MNpdFd+oF0m5wFQbHOMoc2PBrQXXp36Xd9bmJpRjzHM+e4Jy9Qybtb2yJCwEhntc2ba0azgw90SU tak0CTgprt3PuzE1UufA+3eCcytbRs2XMloqwrGBy7m71DsddM/g6F+D4VVRNp6Gyqmb0oqVlmvq 1SbGrnXmpltLAt09qLzgg8JkFiYqcynDbahndYuh4gWiNQXG2+uSeiaGlVnSXxRMq27GGE6oLN+H Ie/yHyvHWWI7y/57V/+aClZQrcNLZXLi1kBnXmFSLrWkbwa+jcSkkrrUzadBdo9Mt8bqO6RGNy2G OclJxCLffTbizrSuRC3La8oxFvguEjP+PtTsq1LRJ8Xo78DwHyGzHv/zYjUc9PuYtrwScNLMe+Nf PzRLi7zO9TURWz/3bN84A3Wgru5alwYAAACcItpmsuIeBABMZJqC12p7vb+iHIFLjcR+fSaetDoa gOMh76981k6oJt9sXD7ekQWOee2+IgAAAHAYksB5CKFZXrQ6EoDT72V4pIGQZn/ktepllZdJxkPD TaTxUmBl3+poAI6DvBnytRLqaiC6e9xDCxxDiIPlpeMeGAAAAE4ISeA8hNAsL1odCcBpl9xZ/PAs IbbBmbjVodSevDHd7yI2T3B9z+pQAOpNW8sN7f4fdo9/cIFjCHGwvHT8QwMAAMCJIAmchxCa5UWr IwE4+V5EpgJffv8gsiHKRWfknbW5u4N0AyEXWH7bkuAA4HUgcAwhDpaXrA4EAAAALCIJnIcQmuVF qyMBOPESi2ONJINy0FcYVW+Hi0r/2OwOLImy1XECwOklcAwhDpaXrA4EAAAALCIJnIcQmuVFqyMB OPGkrei/Qt9M3rk55O3tcFEkj6ONGfnbt5FN7KsB4EgEjlG+KCyPjwkAAMCbShI4DyE0y4tWRwIA APDGEziGEAfLS1YHAgAAABaRpa3HPP9oQ0xaHQkAAMAbT9qK8vzShihbHQgAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAJxSvwkwALWESh4KDQplbmRzdHJlYW0NZW5kb2JqDTM4IDAgb2JqPDwvU3Vi dHlwZS9JbWFnZS9MZW5ndGggNDAwL0ZpbHRlci9GbGF0ZURlY29kZS9CaXRzUGVyQ29tcG9uZW50 IDgvQ29sb3JTcGFjZSAxODYgMCBSL1dpZHRoIDEzMzUvSGVpZ2h0IDI0L1R5cGUvWE9iamVjdD4+ c3RyZWFtDQpIiezUeU/CQBCH4XrLUUDFAzzAG7zvA2/9/t9JatzVtKXZKd1txPf5h2RC5jfdScbz AAAAAAAAAAAAAAAAAAAAAAD4S8bGJybzngEAMjQ1PTNrs3+hWCrb7A8AjvmVas1mf84mgBHD2QQA Ec4mAIg4Pptz8wvf6otLoZKuLK+oPzWa4Youra6pyvrGoIpZXNIAMROYDBAzgZO4pCeIDmD24tEB ho5zsvJ6yrhGM9UO9ADClaveVuOiFeHKdZxs5bK4mEcRrlzHSVcuiQtYPJutdj9sc2t7Jwjd3fuq 7Xe6ysGhFyqpytGxqpychiu6dHauKheXgypmcUkDxExgMkDcBC7iEp8gOoDRi0cHGDou95Unf2+q HegBhCtXva3GRSvCles44cpFcTGPIly5jpOu3Dzu6jo4Zzed27v+z33Py5xf6f54eMw+AACcenr+ ddVKZUsphaK11gCQB79Srdnsz9kEMGI4mwAgwtkEABHOJgCI2D6bL69vPZv9AcCxVvv9I+8ZAOC/ +RRgAFT41JMKDQplbmRzdHJlYW0NZW5kb2JqDTM5IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5n dGggMzM3Mi9GaWx0ZXIvRmxhdGVEZWNvZGUvQml0c1BlckNvbXBvbmVudCA4L0NvbG9yU3BhY2Ug MjA4IDAgUi9XaWR0aCAxMzM1L0hlaWdodCAyNC9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KSIns199r G9kVB/D7B8yLH/0QMAiBHgwhCD/EhDJ+sEkRJCHBmDpmkEPDKJDg7MPaDcRpIE4edhZSm+4m3Ua0 MVmqLQwtKG2d4B9EBXtZTxstjUknjV2sJrNree2NmAj/GHnc0Yx+jTT6aVly5O8Hw7LRXN0z9557 dc7uLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCiKxLOE0Jwg1zsSAAAAAAAAaHQSzxBi4wSl3oEcVIrE s4TQnCDXOxIAAAAAAABodBLPEGLjBKXegRxUisSzhNCcINc7EgAAAAAAAGh0Es8QYuMEpd6BHFSK xLOE0Jwg1zuSD19M9F12M4yHC4TrHQpAPkp47hHHfeYX39c7kqrYEH1DDMO4ucD67u56vaOBQ05d nfNy3Jhf3Kh3JAAAAAeaxDOE2DhBqXcgB5Ui8SwhNCfI9Y7kw6cInI1o6cbwoTxPhHgm/oQBaVlX RuZna/hNUdcmhxwUdeo3LzbUesdSFbLA0fGdY3hJu++r+c3mDCk7M0yHPemg3bSH9BTkl0wng55U 5VHfTnx0nFC9XjG6H/EBAAA0CIlnDnXJUZRRpO1f6WiuedLO3lt4X2zsWz/rINQVfzhWzozpUWUO 3DNF4OJVuY3hQ3meCAc4D8MwfS4nVeO0DPtZilCsP1yzGUtl2SaY11A/xdXuI2LrgbtuJq0Om1IH UdHbS5H2oakVtd6hVEnyhtH7qbJbqkKSGVJhZiQOe1Kvy9m8nzdtZQ7DKYiF/Vco4mD9b0t4eEP0 DcUXopu2JZOqTOq26D1NUY6hybVGOWMAAADVp5f3jVVyVJfRIu1f6ZisefQCsJu2E0LZnMdspKl9 9PlWkbEhntEKJZaXytq99KgyB+6ZInC2nAYz/4M1TUujz62k5txviTbB6A6Ije6Op4qHC4TTj6wH OHe6g6Ccrj7GfdknxqoaRx02pebUtckhB0Wd9orbDdM/yAJHk2Ru70t6VyczjDj376atjkY8BcZv XPFr2WQvF6a6MjXUTqherxitYDQAAMChoP/UNlbJUV1GAVOb0vGdwJ0k5CQ383iklSKtd+aihTuF EM9oBSPLS2XtXnpUmQNrpw6V8F5qztqITA02k4JZsSF6uwlx9PPL+9FhNmJ7kmVr2XdBO3ge/5v9 WMCGVZ3MkAWOrtVNW7lGPAXGb5yN4UNlDNrThaluBcfaCdU6MhutZDgAAMAhoP/UNlbJUV1GAVOT 0jE6O9JKkfax4JYcHHUR4hycWi04IMQzWsHI8lJZu5ceVebA2qlDJbynmrM2fggMn9BScWTuR+vP d156u5pJ04B/ZV+WrRHbEzNjAR03A5GdeofyQalOZsgCR9fopt2DRjwFxm+cjeFDZQza44W582r8 TAtpvjaFswYAAGBJ/6ltrJKjuowCpgal404kcNNBmtpHn2/tqlvBsXZCmjz+FdUyKL1SLCx3U0sZ ZTkwUT9nYnnJeEhVws957lKHjYr/M3XCM/6tnBmzUcuZJyhaDWZUwjFZfKr93R9208YU2iTOn12/ /1SUY3kjzCodTS+ePXtla5khJi/NPBxhO5Lh6ewd7O2H069ly+2rkBqdu9NKqNaR2ajVxzuit8s6 Z2Ly8jd/e/SroYunnJkxkmZn9+DY45clBlmsPal8C0yh1mgxLegLaL28lkmSsRRK8qLIkjomu3l2 odAW5EyasW7KSpD/1NNhN76kzfPohek4hHgmJ159R4q3VKq8/PVfH41eu+jKCJNq6x789WPxnfUO ZGSGKotP7g8ztD098PoXT/INNDHyp4ybVpVfTz+8zXbYU1HaOtiRhzNLpqWosmKnIDfKyNK0ltFd GenfpUU5vRTJXhPTVamvgzY28Adu4ExyJ7QXvMT58x3YzXDwz2ODPelto5ynrtzRD46s/WUcz1Ra 5l7sufLsiBGtccwVad7HDaTyWtv04S+F8GbBddlcGj9PiHNwarXEhQQAADhc9J/aMkqOQ8eovcso HSukfjdx9RghZ+8tvI//785Lb1czoS74lrcsHo6Jvstuhjmn9612uruPyXXZJ8aKjCp14O6G6BtK fmwMN8q8TenZ3R47Fa8e6XNMN60Xoic54V166HqAc6e+uq87Xr0X6NESEpXwJ0+C3ovagEQVbqO7 te9IzKJVglfGX6SK/2SExqdZHWLixa1nj3+YGmhMkc1tsSSJXXu34PuYphIlsauPcfWllkhzpOPG U0mpXm8ZnR1ppYjjZiCyk/OZHBx1EdLq8b8xz7e5ON6X7rYSL3jOFOTtv6+XEGOx9qTyLUjIWczs OKu7mNkKdQ2JJGF6Xc7mRLabskL7b2w9cDf+hnpvmwjffTewbjxivQuFtyA5adbBURVphus5mvwe 40uajnPfRNNDwwHOk87fjB2Rsicx23k1fqYl3fPGXzN94gjluj27arEBicy4Mxn8vdtuvJFxKSVf kDrhGf82T2uZYjSMJd60MXnBd5U+os/V7HT1JpdIn63j1qRUuEOsXLFTYKLK//Jd7TRldHoxf3pj 8n+mL0lclUaO/eQW/5d77AkqvRHGv2uO9ftebWeH9eYZdz75/sZMqecpOzOi/X3CHkusVTotjTNr LF1yu7MN+cQNi3fTKwfCfBmc93ramtPzJl+wqed3/94otOU7ordLS/3hwPsSVhIAAODQ0X9qSyw5 DiVF4tmSS8fKqSt+TxMhXV4x0X5tLfsuUKTlzPir3H4sKcQzWkHE8lJZu5ceVebArOE/vBi/0kZR 9h5uYjGiV2OxtanrDtLc5X2ZJ2ZjMfP0aJnP6ZUwZbNpDQNFf6T9PZh+nSryVfn11OeX2rT61X7J txg1jUyUjrxVM1Jw9kID84ku+i7Z9Qgzw9NthoN/vHHKoRWhndzXkap1lu8E7qR1I7n1fLS9iTQN +Fey9nQnMnXtSJv71sMJIZTVJ22G57/Qu6qz9xaKV8qlticVbkHtFzPL9xMDRwnp94WyG6AMalT4 9DihHMPPItYPyMFRl9ZGXZ34zhxmvl0ocQtS6/Zf+cWjeE9kP89N/Mf4InVtcshBZVwdOTJ2pFh6 r04NtrcxWpj/CMmxjPm/n7//83gP2Hl/YTtnAxLHtcXWQhGqc+DBzFJqrBpZmvqcjTdxVq2liSxw dGk3rbq96Ou358y1qyrhf35142w8ls6785FYoe+oVKmnQLP9ytd/TEtaeuC300sZaausBL/65Smb Fv9pbn4tZzWNddDFX/Dpwupm4hM1svinX7Rp/37i3kLmy6mrs7ddlMXZiclLMw8GOuMfJb7RcnlL vZZNjKRqscXfo+0Cxz8PK8bEqiI9vdFxxPqayrQ5N9KS8y4AAABg0H9qSyo5DimjgCmldNyLrWXf Bcrc3qpv+f4mQtrHglv52pIQz2gFI8tLZe1eelSZAzOHuz4eZuzkaA83Iyn/Z7/8XdMIwzj+/AG3 3HiDIBQhg0spHU4cmkFpCWgphNBMtUvNUOKSuLR00UKbQFEITreEDi433ZKhDm3BgyL0wEqw0BZL LSTBqOiR+OvSl3tj9Lz3vFdbCMX7cNPd+9z7vs/zPs/7fOlVE203iDthGDbbpH77rCJuItXARsTq +PxzKsTphmRwgJjl1/lTcpeptQrpkBuYdaGsUv/VZs6OkvYBcNu5JtV7/Vu70bCMUbuUeYBa7bXs D9so0sqTuUJwHc400ldSNxn77XWLmQAH7KZ0RBqn5hNeBvjdgjrpTuso0IQA+811byv+yMN61t68 /31uOdbMWETsjne/XW+SHYA3DpHsz65pdVfpSlSdWq8iRj0MsBti1WQ7AotTikqrVcTIEjAryfwJ wWNaXUmvMuAOC6Upk80NbRZcdKviBguu5eTHU8Iq+y1lL4TkbVgodyc+Yz+gXHghfWtOmg4OhSBn rPmaWtjl0fjQntIi5U6vIsV49OgRIrqXtiwbwIcKuNvRt18m50U/jKJ4+zNFcjJfol8lzFPpeOoo BwcHBweHxUS/ailajoUFNzAUrePfMPi6fx8JkMfZSmf0UvslRb0Ad3cKDQszvckxNGw0jKxmNBw3 R01hIJYttmylnQHabnDY9U/ZO+qCS0LYDbAqlM9GL+dSiHaGRFpKagUgmJTNquSKfi33DMkJbyL/ z4Rl53PKx5pEIl7Mre3cyYy/087lpJuuAtDKk3lCcE3OHOdYesIAhPe/2xxpLL5uPMyaB/ZrB1sc cIFMcRZ5SBMC7DeE604sWyJqsSmMRYT6eJtpyAk/uRJepivL73yyCI1aFtYZ4ILC4cDy/1ic2lZa raOkfWiuZN6kYIcjau/iSwx4X8rqbOWJBtoswHnKv5KbFsHSjnJxH9pvQq4bP2A/+BMysfSZar79 NXGhVUX0RFiwcC9tWTaAD1VIKPcITqbzUu3Dcx6tPKW0Z5jXwcHBwcFhQdCvWpoW/b/gjwADAJl4 P+kKDQplbmRzdHJlYW0NZW5kb2JqDTQwIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMzg5 Ny9GaWx0ZXIvRmxhdGVEZWNvZGUvQml0c1BlckNvbXBvbmVudCA4L0NvbG9yU3BhY2UgMjA4IDAg Ui9XaWR0aCAxMzM1L0hlaWdodCAyMi9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KSInsl99rGukax98/ YG7mci6EggheBEqRXCSERS8SWoRaWiQkDaKFJQZa0qU02R6aZKG2FzvlFHtxUtgKu7KcnR6O9GIu KpyYUg8k0Mo2IZFi29i1p8k2Bm3ESIyayb46o47OOzOvk3aznMyHuUjG9+fza77PwcFnp7wRGgXA Ssfyn39tAa4Uf9APADHEpDjx+/1c5AYFCPPUsxx64vuQywjAaGij3Ml2zVkdThRPt06G33c+mTem 0RV6rzIuRsM9wEAgsa8wqpgMXmxfbSPkghNdoY1Od1eaiKKyMttHgpN0rMgpDduJThkA6JuNVzDX VWUnPnsegC4v+6G58d5Lfy8JqBuRnJK9kPCmNtIxVW/ijtTggiMzpgjsAOAy4asUAL33l/ZaT8ul Qh4zIMdC66WOdsYwLG83snvyyUZZ0URIRFfDDW8E+RhtRVdCIV2dgcSu3GQuGXSomFd+/RYK8Vm4 Uj8dkymKVTLRqR4AHLPxguJSWsDMgkp8tg8QJ+kXRdkh3E50xgDIvtmV1nBWtoOk5uMkBfcGPkGH QWZZ3LLcgmK+4FkJ0+M6Ojo6OjrHktqnFkeiH1d4AfNFhUR+yW+HThhiku36u7Dg6yIAdT2cQSow iWDDojmrw4mH2ZQHVw3yGo8YZdMYw1qiV0OHqD4RRSY8TgJcqBuR3D7mwqrsJwIDsGHzsptCuHCF 2F3Yk1ATEZm+pZJPPv3Jd/mshWo7F2GxX7RbCLwKgNmeaHHB0RmzSZodJTADYDtGn4Y1wbf4Sfx2 fy14Dibr1XCmPY150F7Ac4GmNqqByCPqt+NyyfmffFfOVc8kMrrF7rRXT46qhEK6XmHT8o2ievRg tmwfw+Mn8QLFMhHZUr1up+BlQSUTvoYZ0ZK0VbaDpPxiFa6Pdbshl9UUXYr74lmJv+lp/9JOB/vq 6Ojo6OgcE2qfWhyJflzhBYyqdDwEhed0D1mTwcOudi5YjVArmz2hFEr4SwQbFs1ZHU48zKY8uGpQ UP2jbBpjWEv0augQ1Sei4McbrU6JzxC470Wz8v1Lp+y/CgxQgBwLrZdq/39a9FmlPaMAt70a+Nok NAQmq3OkeSqn1VjvFHAqAJ7w1uSCIzRm82i16w0EEvuqQ7lSIuAgAHU1nBHSchs+Mfp0x17AdYGm NqqByCPK4c3llwPuU/UDNdwx4rTWz46shEK6XmHT8n5Rjx7l5rQBX39aIxmNl44q1w8t4GUB7y/C aL2gHs50NNsyV9kOkvKbi0xQanHLvYFP0GGQWVZTdCkWTDwrbUUmLFo/JTo6Ojo6Ov/v1D61OBL9 uMILGFXpqBmusHinC6hADDEpTjpXItiwaM7SpI60bcqDqwZ5jafWMRWTwYsAmEfZ9eY7DR2i+kQU O9EpqHkdwSTCL1+avRRziQDGIaa2eWHB10WArjuLBelRypvhSTMgTIM0u5pGOgxPTncyUoMLjtKY dbh3zOAJQN2I5JRirj44FfKYATkWWi9V/809g8+UmQD9D+Kljr2AYVhNbVQDkUeUwptbD3/TA8DJ 6jG3ipKf5ZtHIV2dgcSu7NrJoAPWsVE2Lbu9cnPaIBOdgoe8GExKT/hngJcF3E50xgAMjuCbziNa 2Q6S8sslmSH4xuFfyskdppQIwMdBAJllNUWXYsHEstL+q8AABU7cXiweYdrr6Ojo6Oj8Val9anEk +nGFFzCq0lEzW5EJC1zft/gJ/TvfDoDzs/EdyW8SwYZFc1aHEw+zKQ+uGhRUv5LyPDgoxQOOE4C4 xKT2mi956TjIvJfqPi4bo8/K7q6oORHw2rjRpv25cClmiADEEJPiuMLinS5AdPkWCloOWfzIXjPg VQC89kSTC47UmHVyMbofhtxsHGFICZVM5KYZnDgXfL1/UN5kx+FDAuMQk0T0Gyq3w3GBpjaqgSi2 FcKbDyrSE1pH9kzl9+xVC7oSCulK2fy/7qLXLiQCw4ScfQSUm9MGeynmEgHMnlDqSFo7zCxQMaYS ynaQll8+FAE5+MNKvoI4SX454D4Fn2pBRS+rKboUCyaWlTJhmDOEO7RxJI7U0dHR0dH5i1P71OJI 9OMKL2BUpaNGuE3WSwLQe39pT06pVDLh6xQge/0v99p/+hgePwnP5lv8hFy7nF5+upyWrNuc1eFE HqlKxAdXDQqqv648EeKT214NfG0ChHlyLiM+aC4yQcF24Xo40zaluBG+2V1dUmb3mmIEXXcWC8h7 F9NLC8tb4iuX1kNjJCC7v/2PnKXql9lcjv0m07xohe/7iJHg2u+LPqtsDFSW/KcIYJiJ7qCOyOXW 2BkbUTMKRgXAbE80ueBIjSmwn4vcoIDBEXyD1TQUntM9ZDVzi2vQF1V3IK5cQ8ELuC7Q1EY1EPVT yJaqeUwADFPRHclPXP41O3WGkOvymuk68mBlW3LJSn71R7eJAOabEaR9BJSbU9Fh1kMemKrd05G0 QiQW08tL73Y/f/uHmwVcKuQxw+t8G1HoQWGljcfetdlb2Q6o8ltOhrwWaH7C+s3D+bf55n6wav1r +qwZNEEuCz8x10hAdPkWCshjljeXnq5stV1DFFSIGepW4naiMwZADQRe7cuO0dHR0dHROcbUPrU4 Ev24wstjdemoCb43ofpnV0oKowoLvi4C1T/upZhLRLWTvf8sJZJmUPlF/kl7B2RkUnNWhxN5UCoR F9xeo6H6ofA0np2Bz6Olzfp+UNm+DN0eNsHfbN8vZFtlP/eB9XbBVsM2xa7lhZ+4/NuI32MSFpTZ nW97gWnQ/zSVb6zJlbfikV9or82EiIHSa8ZTbWus4z/MJ3MSKV7cis8z/gmnhQLkOLv5eTOsvMmO w8gZ+Pv972Bs9NyNtccGz3aMPt1mjZp0fwwf2t0LG6fT9j4SrwJgtyeaXHCUxqyTi0xQgBhiUli9 XSERGCbAV3/zT/cDol+hx5H3ArYLcBMHjaifQrZU9Qs9p3tgr3Zmin3dLAqwQQvR7m4KGG126wl0 JRSlKzCen370a7rMiabfGTQRgLDfXmjv81pRbk5bDrrGjJkQPemBkLDVQOmGFdPLfsDyZCfgZsEB V1pjPNWL948/fJrMt5apaqWFpxy0EID0spstp1S2A7r8cvkV5mo/IZRMi33E5XJdsBr5F1S39z58 /nG9R25ZLsUMVT8JF/3P3onsWU26X+gxG1xHemFRUEnBsNKnRR+8pjOQ2JUdoqOjo6Ojc5ypfWpx JPpxhZfHONKxI3YTzKTLNWyHTQegLPZhKKpcl5lERTqmIbdqw1rHcPnlgPuU0MxaL7hcI05rvROC b2xjd+d+K0n2Fs3CnNg4SeMwJqtzxCWm/fA86SjtFQ3id+F3bOAWTRXGj9ihegXGW4+eTJ+Bfwji 02h11n+qntJ2a26jKL3cbuJnt4kfUjuk01prIAy2SWbuoae5e/uBK/nVH1smNlVu9Y3N659LtetJ aMmgt0+sje28VYRN+WM7JgISlX5ouE3WS/IbkL3+l3tyw7L/vW0zNC/VMB/fTz1+lX1RldOCrnff i2Yb5xQ73dVwijBSye8aXSA1psCXN2adrciEBRAjwTVpXCHg1kMewQXn4TMb35EdKecFRRdUEsxl pcSBTDKIHqeSjd5zi0fxBqylj1PJd5Xswvc2QpprhPHsd48TH15Um0ehWLnpaLaxkZCu0/9+ckuY 3nZN4sz03P/aPzHV64mP2VoM0fWhYdDt1eCVbmGvxhRxwprtE4H5ZI47OCR4WYBOBFhSfvZ2U60R 3Vpp7ZOB+bd5/pTZ6B/s189LHGccx/HnD9jLHr0FFsFDb0sOW3qYHpSAYLxIEMKQHsokNOKhtIWy Sg9JLpOLhRoPXaiQgyk8l2ogENZQCykNz2FLKsXSCko7UEWoTKTFZzPtzG53nd3sbMZEeQbzfvGA sO7sfOb5zvPLvdLdD41+bvXW0TM2J6jOngn2N1cXb0yNHw3wXHFs6tZi9Pt+2FRUvoSFLOzPyvuD sWm2c9CNXL39cOsw6OiQ2EsVew87JvBes0rL/rczQzkxUtl4/roVAgDgbPKkHa60rureQeF/2pNO 4t7m1TW3TJ26y5DmO+HR5tfVSnmiOND6xkBx7IPZ+XvV9Z0+NW1elfrCXkleFqxhW9qFl1zYcWnH 96PPGzvPaPPpjLT/kStOlvud1ALtPa6UJ4vtPfxEubETbpayT+C6v/kodmFzl/vZ/NLq+m7yqe3F vXHjyoI1OT37xdLab/5rnxMS7vv78tW3Gvcanav1ezkD/+dld3qs2D4sTJYX7oetthM9lFZurEKO 9NqdkqLoiXV/1RKY6szW7Q/U7ZLIl9wnB6m+/mf1k7ejfJNLYdvqm61nFfqXoPPznnrOS52dfLza 1f2NFXd6PFa4TxdWajs66H4fbOn9+2I1oxEUjtV3C6365c5Hld/c79E3KR4vMWYzanSv62NHM1h0 Zrw0HQ7Y75Inh+NKNwqSU0Yz7eKtqbH4Gz1oXZqanf96ratbGmtxt6ifE3sr9cLttx4keSGLhl64 HpyPTX7jU+Ggq67v6njMnh3S/tmeE358Vmk6/ENey4uh92T/QQMAwBussTFIvda/gZob0eS9DYAz 43C9cvGcGPjowd5JnfIA48LFy1eulZWF7PDpneEBMVSuMsoAAEjiSVuIgqu06SBZpT3pZGVvA+B0 1feq5SFx7mJl/dB0FOCE7IVtbaYkxIW52jPTYRhiAACk4ElbiIKrtOkgWaU96Qhhuco3nQTAaeME gbNnL2xrMyUhLszVnpkOwxADACAFT9pCFFylTQfJKu1JRwjLVb7pJABOX7C9fK0o8s7S1t+mowAn INh/HLabpbzIf/hgr248TJgkN/x57SAwmwQAgEzzpC1EwVXadJCs0p50hLBc5ZtOAgBAl+d+TS7c vb9W2/a7D751f/PRl9PDYcuJfMl9cmAkIAAAOC5P2kIUXKVNB8kq7UlHCMtVvukkAAB0+ev7G++I toI1YTdcHi3mmh+Ff3KDV776ya+bjgoAANLxpB2u6q7SpoNklfakI4TlKt90EgAAuvyzu/FD9Zu7 d25+7FweLeZEzKBlzyys1MK2owPTOQEAQGqetIUouEqbDpJV2pOOEJarfNNJAAAAAABnnSdtIQqu 0qaDZFWgd39R6um2XzedBAAAAABw1undDaV+3PYD00EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhV /wkwACzTibAKDQplbmRzdHJlYW0NZW5kb2JqDTQxIDAgb2JqPDwvTGVuZ3RoIDE2MS9GaWx0ZXIv RmxhdGVEZWNvZGU+PnN0cmVhbQ0KSIksjaENwzAQRW+AbmF1D+9QhVUnswSEZ4gDXcPkFKkjXKkX MDEIMAgIaSWDRL3GTR57X0/6qjvfkl4jPyV9tCQZeZRU6r5mbgEM8qSZEQCQs+oWfY8Hrvdx02Ny eEqJfkAcfCy6CLk9uzf2CnAx9obuIcu2BjJQMRTW+vP3U96BLICl8FadhTpsLBjb1LuOZAZoOe/d xGh+AgwA2Lxx/QoNCmVuZHN0cmVhbQ1lbmRvYmoNNDIgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xl bmd0aCAzNjQvRmlsdGVyL0ZsYXRlRGVjb2RlL0JpdHNQZXJDb21wb25lbnQgOC9Db2xvclNwYWNl IDE4MyAwIFIvV2lkdGggMTMzNS9IZWlnaHQgMTgvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCkiJ7NR3 T8MwEIfhsOlIWqCMlr1b9t7w/T8WDcIGxW7kS2NHqt7nn0qn6n4Xn3RRBAAAAAAAAAAAAAAAAAAA gIpNTc/MVj0DAJRobn5h0Wf/Wr3R9NkfAAKLk1bbZ3/OJoAJw9kEABHOJgCIBD6bS8srvzqra5mS rqxvqD91e9mKLm1uqcr2zqiKW1zeAJYJXAawTBAkLu8JzAHcXtwcYOy4ICvvFIzr9grtQA8gXLnq 7TXOrAhXruNkK5fFWR5FuHIdJ125JC7l8Wzu7g3D9g8Oj9LQ45Of2ml/oJydR5mSqlxcqsrVdbai Sze3qnJ3P6riFpc3gGUClwFsE4SIy30CcwCnFzcHGDuu8pXnf2+hHegBhCtXvb3GmRXhynWccOWi OMujCFeu46Qrd497eEzP2VP/+WX48/oWlS5OBn/eP8oPAICgPr/+XbVG01NKre6tNQBUIU5abZ/9 OZsAJkwpZ/NbgAEACHrRqQoNCmVuZHN0cmVhbQ1lbmRvYmoNNDMgMCBvYmo8PC9MZW5ndGggNTI+ PnN0cmVhbQ0K///////75q1nAAAjXq3i/+atXgAAAF6t5v/////87sKPYF5oi8Lq/+7Ci2BeYIvC 7v//Cg0KZW5kc3RyZWFtDWVuZG9iag00NCAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDky L0ZpbHRlci9GbGF0ZURlY29kZS9CaXRzUGVyQ29tcG9uZW50IDgvQ29sb3JTcGFjZSAxODQgMCBS L1dpZHRoIDEzMzUvSGVpZ2h0IDE3L1R5cGUvWE9iamVjdD4+c3RyZWFtDQpIiezUOQ6AMAxFwbDv hPufloI6BYVBoJnW0perl1JRVTdt+QrwOV0/jJH7sgn8jGwC3BKdzWle1sh9gIdtez7e/gEAAAAA AAAAAAAAAAAAAAAAuJwCDABqugDRCg0KZW5kc3RyZWFtDWVuZG9iag00NSAwIG9iajw8L0Nyb3BC b3hbMCAwIDU5NS4yMiA4NDJdL1BhcmVudCAyMDAgMCBSL0NvbnRlbnRzIDQ3IDAgUi9Sb3RhdGUg OTAvTWVkaWFCb3hbMCAwIDU5NS4yMiA4NDJdL1Jlc291cmNlcyA0NiAwIFIvVHlwZS9QYWdlPj4N ZW5kb2JqDTQ2IDAgb2JqPDwvWE9iamVjdDw8L0ltMzAgNDggMCBSL0ltMzEgNDkgMCBSL0ltMzIg NTAgMCBSL0ltMzMgNTEgMCBSL0ltMzQgNTIgMCBSL0ltMzUgNTMgMCBSL0ltMzYgNTQgMCBSL0lt MzcgNTUgMCBSL0ltMzggNTYgMCBSL0ltMzkgNTcgMCBSL0ltNDAgNTggMCBSL0ltNDEgNTkgMCBS L0ltNDIgNjAgMCBSL0ltNDMgNjEgMCBSL0ltNDQgNjIgMCBSL0ltNDUgNjMgMCBSL0ltNDYgNjQg MCBSL0ltNDcgNjUgMCBSL0ltNDggNjYgMCBSL0ltNDkgNjcgMCBSL0ltNTAgNjggMCBSL0ltNTEg NjkgMCBSL0ltNTIgNzAgMCBSL0ltNTMgNzEgMCBSL0ltNTQgNzIgMCBSL0ltNTUgNzMgMCBSL0lt NTYgNzQgMCBSL0ltNTcgNzUgMCBSL0ltNTggNzYgMCBSL0ltNTkgNzcgMCBSL0ltNjAgNzggMCBS L0ltNjEgNzkgMCBSPj4vQ29sb3JTcGFjZTw8L0NzNiAyMDggMCBSPj4vRm9udDw8L1RUNCAyMTUg MCBSL1RUNiAyMTYgMCBSL1RUNyAxNzQgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VCXS9F eHRHU3RhdGU8PC9HUzEgMjA5IDAgUj4+Pj4NZW5kb2JqDTQ3IDAgb2JqPDwvTGVuZ3RoIDgxOTMv RmlsdGVyL0ZsYXRlRGVjb2RlPj5zdHJlYW0NCkiJ7JfLbh03Eob3/RS9lA2oTdaFl+U4CYLsxsgB nEU2gWDlMpIztgLM689fRfa5SJoJyvBSMOzjYrOKrOLPj+SnJa+/r0uXrbe15C3lvF6XuulaKa2f PyxUNzl+uV/ev14/Lm++eSjrzcOa/c/DDVq+/zGvvz5c9j4Pc7u8O3Z6e1jeHA4C18PtklZJW6L1 evykteeNyppz2kpPZT3cH4dLG82/JXEnHxhOKcl6uEGgw3+Wq7ff//PV4Y/lu8PyaWSWC51N6SK1 i6RnaqeULr4+TmUPnsuWy9rrljuC06a0FqlbtX4581Zk/zjjp62VUipyUOqS8Vt7Sc1H/IQceGuC f7JVwgJo7r1XC5JqUjjcoB4/3HNav/3T5/E/XXJKW8/w0YiPbFXhQxGftmmHTwn4ZCwKB8dBrakG x6G05Rwch3jrGh0Ha2414IAP562gBtwjProJaqARHXDf2GpQAz6CNg3mI2XrVoOAi2I7cDAdla3U YDoKiVoJInMDN1hj6RTQABXQiNoqCGY7oUV88KEG06lQaA4SpOVNNZhP041NBRFVt74RB0nVOU7E XpyIGlA1gaJOxEA+BIpGiUigaJSIBIoaESMaJTuxrAYRlx4GIgGiBkQK7FICRKNAJEDUgMiRfABR AyJHSg2IGhApsE1JKApEAkMNiBwpNSBqQAylA4gaEClSakDUgEiRUgOiRkQK7FICRaNEpNLDRCRQ NEpEAkWNiByRNShqROQIdUBRI2LIpTsQKSKdTg5EikgHEI0CkQHRKBAZEI0CkQFRAyIHpMOAqAEx QhDO6kTkgHQYFI0SkUFRIyIFZM32BAteERkUjV4RGRSNXhGZW5SIDIhGicigaJSIIFuYiAyKRonI oGiUiAyKGhFzRNZFnYg5UmtQ1IgYmRogGgUiA6JRIDIgGgQig6FRIHJrYSAyIGpAzBHlAKIGxBxQ jgCiBsQcWB4BRKNAFEA0CkTJOQxEAUSjQBRANApEAUQNiIElFTDUeJgD0hEw1HiYAxIVligPBQiN 8lDA0CgPBQyN8lDA0CgPBQyN8lDA0CgPpeQwDwUMjd4QBQyNAlEA0SgQBRANAlHA0CgQpUkYiAKI RoEogGgYiIBo9IaogGgUiAqIRoGoqYaBCLKHgYiCORAjCMFPFIgKhkYviMgjDETlFAWigqEGxBRZ HUA0CkTIzIGoAVXjwRMGIuDhQAwtDyAaBaJqdSBKpNaAaPCCqGBolIcKhhoPU0Q5YGiQhwqEGg81 MrWWwjxUMNR4KBHlgKFRHioYCh4C8xGf4jxMAeUUMDTKw5LYeRjxqGEaFhAUNJQeUEEBQYM0LAAo aCgtcJAWEDRKw0LFaCg1IBykH8ZhAUKjOCxAKHAoPSIcIDSKwwKEAofSA6IuQGgUh0XZcCgtsj5A aBCHBQSN4rAAoVEcFiA0iMMCggKHuFVFfEoYhwUIBQ5xS4z4SBiHBQiN4rAAoWEcAqFhHPYexGEF QKM4rEBoFIcVCA3isIKgURxWIDSKw0oUvRxWEDRKwwqCRmlYQdAoDSsI+n9oyOU5HxD0koY0fN4t bw/Lm8OhrHk93CJALlui9Xr8wBQgfmWlrVkxDvfo8utyDU4mYOVws1z98tdfv9z868Pn9dXhj+W7 A2aR19/XJWveaOVqNcmYykZtpWyz+/xheb9+tHGfjgZi1d1rDHf1jx9n4HfH0AX3lYbTdEs5r9el booFSxa449V5/HK/vH+Ngd588wCBPSC8/Xm4+bhkVJBkFbzPUrd+1tBLWwWKJEg4M1QG9QueIpJQ G7vDr4JeGcncLFaVCk8R9CekJx0jor/dwQn9ca+2cPip7A6qVgBrsJndLeZRQVnBL2MlMyLVgjEQ ucPiTQoGtKv2GBCB25iQYuo2wV7xlM32iBkTxriekQ/425ijDYml82LYHCr64Mf63PkSYe/ZkHpq cJuQnFljQpa0r+foTDMl3GhHA6t9TyZXM8s059fWR3exaPavjrF0QwHt9OyjIGoaEM1e2bsx/9nA 2YUozc2ep0meHeV9Sbh4g+j4jg1vZp3mWTFulltI6SiHhqKWsRRDDgXMlGPDHrq0rdaTCeRrPxta oWKx78MbXPdMZvTdvFnISHn6jtPWlmX3nuYp+t4wR5/ex7ldzh2JvV7SRWZ5dC7sme3dm1fxzlPF 59FCLrxW1UfD32G3i1yPDW2sCv6P83+UhaZVL3vqXFBb6+6ZmvRtaG6w2Z4SeiqUmT4WGnCgWqHm ZM8a6t6QxV2yjmJwO0Z4EtBqV1S9haEtCHljiM5mVKqbnsF56W0bjgTv3C4jRWx2sxqdrHzK3SLl kXvXfB7Yl/DpOJgHedENsj5NZl+TBtU+WrRRGG7HBjNpfp9pz0W3osw6kjfsZZmm6EX3sqMDN6B0 inB/vkOaF96mSGUAL3H3WmQdKTQwxWxqj1JMQ9Z5RPB6nay0iyXp3AQXlsWevce68Cgg8flYkp8b 2aYmvsiGNZ86rtGmIsIZdrY/B9dG8maXXWN9iE5G77Z3fuIKRffhSrn5jmjYRDZyrm72R9gYNuu6 027muNPOzCPemlzsJniXwYWO+Y2xx7J2rOfZknXeVTCh1ufc++jepoZ6Gyroexmy2+qfd4t5WFMf NGl6PJyJ+tkRfHE4X57bj07n7H8cWhfdzgPcPrkD7PcL7N/yta4XX57By4HycqC8HCgvB8rLgfI1 DhQnOFYZUa7HDwjeMQlEbfYK2N+j9gr96fL1+aUMP5GOWrEIXNWfN/cImfy1pFgvf8Hg4eebV5vL Hg1WkOIu3Rt+g6z7eIaoZ40oGXlbkYcSLQooZw+Z7u+qu1Pq1PzwGj+Wuljqap4z9at/z6yfeeKO Pak0II/HmHagEib2uR+lyQ8sTzWR71+moefqJ2s3pMyex6hntRWsiS20TRB8xyax3pSy62x+vLca oL96dJvJvdtnw90dG2qe79DpAXvWaE7wokHPHYZ9injKqNZR1HEfgJSy6cgW08SKLKVPHSGB8bcA QOT5Xv189dPPr47SIsTDccG2Zf30I262BXBQzgOFSP1ZmnnTySHvITResWjAE9S4lQCR2dB8oyZx 7Y8eUFGTKQgXaFTQpzX7ZHlbsmz73VI3RWOH26KBK0ifcMTcL29+uMd43/7pN6E0uj/ng7Mh2zJM F/57l2zrlpTrMz5k2+E5H+AJU0PX6aMnH0/Hby3mgzMF0raD80k68mhuz/k8Sqf8vcuTdMqjdJ7z eZxOGz7m9eVrOz1NkJJ3QeLgZ6P6UX8mWShUj7wRF2jLewfbzUR7g8lvCFTGZtLBOTTsEh4AQLnb 7MF24nNjvzM6+BClNldxH/hElDYaZI7TXPTc95jJGnifJ/obTHvf9/zIxHYSz9S6HSGw50aCejCk ZDpuxuIeyLX33cNjZn803PmGFvH65WMDyofjaMxivDio17NVuFigy7WbC3R6y1x+vnzLvLwXXt4L L++Fl/fCy3vha7wXOFdLne3+Oe5m2Asd+8JaGLudqvhVg1wHZkGyLDrzO2swZZhpB6mM67+bzU2p e3d1W2fvMnprH6ZdC6d5ETyPo8kasMO42BUB08FkG8BgJ0/DUu3ZwBzMZoEU8T9vafjFkVJw0bEA ZEO7fZYPl2TH+GnIRz1mQ69eEbvwY4Rqp7jdnTM6Zj+R/8t6texIdtvQfX9FLRMDLl+9pa2TLLIM MIA/oOGJEXQ7sOf/gZxDUo97q8dW2cFgpoa8OhJFHj7UHcq0FJWXFVHSkhg8g6BB3UFAeGgC4bhl o/5sxMkqTgEU63QULXKr36iI5+95BuWDO5siCqUGOsowNHZXUY2p63ezraOHqTIeyvLE8QGEz43B x0yVk0wPhcHqMStSZBF1vNhitPdCJi1gaAuyQQLXKft64qAp1AKKh9qXw8KqaHVSlvsTq2R+1ogi UDTAo38wYBxXR4743qslbdhh8EA9JG1sTUyxD2KkJidyaixzHOcB/lpqsPi3ylo4uE5ZxgnNHIo5 jUyhWNa8M7hlRkSLxEAa4Aw5nsMNvN2YMWqfiBp0vQEVajAVqNZUMHcoljwAj3jJrKoaSyRkvpxf OsfG7YwVw9zzd5ULOy+vwerDXZP6Mx7tdnGvms8mbgqx9iRxTIaYS1+ddHW/m0QvjrstwdSUrfIg fYxvkroKi+m4UlRTguYwz2CF4wh/uvHJAyx9lkQ9oJZkM76WhOt385eir+41uUiPGGA4Jc29RRr5 Szm3aWeHfmA2DEjIjYJ5k9eOFV04Hug7ZfLikEfNa/ccaeGT0KrejYcHl1cOWH35A5qpF5ptj5TU XPV2fO65v2SNyUXeKlIqRKqaMzXPe1veLymDtM+akUyxpr2FAc1I3EvE9WZ+KhaKsLdeGLMUicwy snCI8hFGjUC9F02uWhPgrOxZIkOvERmV6pT1VNQ2um2OmXMuJUSdkgvnxWV2z1vOfM1ZhYBjcsWo cIw6TDG0kTRVFL70ClHGAsvAVTzDWSD4epP9jbNcwfOlHwhn5+WMetPeywpTYNykf3LKWiXQGTKa baujSnQHjyrRFXaBw2YCux9El5YqQQUvvIQvtJOYTkXiMb5BWp/ViGAa3/s8XOJpwci9D1wgAbVE peRHGps0KsTyNfuJfPDtUMTZ4rNNbWNrFUeJmN+HndG5j81OsUhosZe2+MrQI/eRgoMb1WYiKQoi 994jZUEWNEkldMy+/AEtRSIqPqD3SGKjWfJ4X1ovEmvaDEXqVWJex+aFbOORLjeFb31A8P6USVhL jQQy3tQiC3T0twsTRu3oioU59SSl01TuYr1M5dQsU7nLdZnK3Xh1LIplDKe4jN1uPrXOeK0UJRd5 lMUcdKhFG/Z8VrDZxcKHnPdRJlrcr4B3GD8cmwqvlPC6wQrHd2aKfSruF1qmYmfPWaRPyveGzYmp nP9oVcOW8qALgGK8RjOQoOBIvkiQ3D5WmSMZk4IXmbw6c+wsWJ1iCoe613sFpdxGsxBxnRJXn+iU SJ+vUyIvsEyJFPuU6Gvm4ywUZRbC6A9pSQllSadEVjL2lCpOgKLK2EVIE8VPLx6OSrPvYBdmC1+Q 3uoM48DOlpqk6xuOPm7udty+vP4M6qA43hyYx1xLLHklMNy//ijrDlvHeNADpCiO+dYjOW8MQeVK 7hLm13cLIFl1xDEj1eWkty6DGlXLtwGg0IZipi2y7wsU0RVjy36ZaB3088u/Xn6BtvAphiomludC y/0hdvvGENin95cfvrn9fHKOZyp4QNhQhQOgod755B1EjqTCwji8gzAiqcU7ngW0fxXvAIAg+dxT mLdfjnrriuD5MBCFQoIPQsm3bt2qCLqiQ0wxNx0X0mP/uIf6xe0zNpOY6MUxnXnB8pU7P/LeXI8F wctr7l1kZAsVVkxNUZwUo7eOgGxsZn/2F0VaASrPHQ1gZ+qdlxtUGQIcbujVpBwkU32SQvAmCpQC n+Xp9dbzlgjl4We6ENsf9irVmhyqPCybPol4kSQjoANbdR9dETm8quWJgx7ch0CbAisAOfjs6SsQ 4BotkyUaz0bvF9w+sIHLP8eNi1xrDV7gzq4cCWPj6/vLd/98R+X6+3+FI7+BQZdxR0Ix3sewyiZg 0jMYVPoGjHsGw+oLntR9TEQ5CfABMvYJDHLdSTPfhjgS+GBveAKDEgQX4B3yESbLX0VEXB0PsIgi W+CAAWhfOSSgcgOCcXmfAytmlwMLZpsDK2aXAytmlwMTs8+BFbPJgQWyzYEV85sc+ArmwoKvQtBa S+PbY58EE7LNgQHZp8CEbDNgQrYJ0CFPxH9CdsM/EPvRn5Dt4E/IZuzRtQvqTM1PBH/F7EZ/wWyH f8Xsxn/F7BJgYvYZsGI2KbBAtjmwYnZJsGJ2WRAxSz85C6yYbRZMzD4LFsw2CxbMNgsG5gkWLJhd FkzIPgsWzDYLFswuC+qdnQNj8BMsWDDbLJiYfRYsmG0WLJhtFgzMEyxYMLssmJB9FiyYbRYsmE0W 4LHhw3PTwALZ5cCEbFNggewyYIHsEmBA9uO/QDbDPxHb0V8gu8FfIL8b+yBPiJTvR5EnxEPw47GB uUR/B3MN/xbmEv8tzIUAG5gHBmxhzhTYgVw5sIW5kOCMyR9CziSIThHE+Fbusd4yDHHu9m0u93Qr /rj9+uMLn5VtfHp/+eGb289dGSpgovUBhYbd1t9Tcbc3URxVwpuSKHy8swrhQq4vwBbR+64AXTPH qeMemyrcPUdRlKAKOTUeCXdXRbg7dh7cVhQ/yS6lCn1bEsuwS1VFtHO4RTQE9zyqhNrsxPqi0+OR lptE70AGVbS7E9mpWT7xyOj8vekJPgsCd22tI4pOvtm28PcYxX9uKHSQUis+W1jcvd1geSlyFdhU uvhmoqO/xI7g0j08yGN58HBWXuRDo3z3YqPG9UkePJQcZjNchzgWLEcexJHXfhIUbqgfQBDGgjyI o+SESx7AaYJA+oPT2T8eEi+HPCAezkh/IgsqAhBvNQlhR3xS528Dw/0aL5HdAeIkDZDw5EExQ6QR 7BsGEM3nRdYIgpdByU8FrERMqxhE+fBd5gaeTsEGwa2U6DwNqCrIjqt8pRSumdNk4BAD1/l1uSrG fsbnKfp7WMxZSe9jQV+YXu1yP9RnJKybNj3IY71dclGI23xIZuX/m/k+hks9z79LfR/zpZ5fW/QD kx+Pqb9H/sdT2p9mP0fMHNZAqTz4vkZOFTlazTG+PypmrCyYfU9LgUVhwUR1L6ckYHxbWbKgK0Ya cJN4pYgLC/EfFQ+sQ7dpKyu7bNRfAKYYW06ed1myYVql6RDgnPaVsJwiZmFxN/758nql9Ar8DIbw D1cFB3eBxihC0cKI/HRBNAHTgi+Rzgnod0cWCQEIMd0ddn19WRQeeIocBCCGZGIVkfHR5UnkZKuz rk5NRVCqi6fNnbZWKkDfkNGDG8yBsTUl6ZzVYcyz20AsskOI/n7gf6Kp+IU7si+ygefRIi/3Cfng GDKPvKwwRSvikci7IeacQg6c5LDQyUTRHfpKSlLlZUWUmkaMx/gaMHYcB7A4NLEwYMtG/dmIk1Wc YijW6Sha5Fa/URHP3/MMygd3NkWUWWygowxzY3cV1Zi6fjfbOnqYKmOwLE8cfzKStjH4mAlzkumn MFg9ZkXaHqLekM1Rx8uaSQsY2oJskJjakH09cdAUagHFQ+3LYWGVirbcn1hFxzSNKEsFDECtlICx vo4c8TI1vkpqfv+JpdkxOb/VH4geC4FjOcKoffv0jjX/fvnL93/99J+Xf3z6A+n83d++5Nvrl9s5 YWFbTLikJKxZF1PsIyyToibVWM46BCDy15ISWRVRjn2YWUaZSWo5SzGnkaMUy5rxBrecxByVUFYD wiDH4/WREOfGXFX7RFS66Q2oSFbl4QYvCmYtxZIH4BEvOV1VYymMmiPnl87ucTvj4zD3/F3lgmch veNZ97hrUn/Go90u7lXzqx8KsfYk8YEBMZe+OunqfjeJXhx3W4KpxaKyUXwQ39RbCR1XimpK0OrB M1hb+fg53fjkARZdS98eUEvvGV9L//W7+UvRV/eaDCPDqB0US5p7izQqB+Xcpp0d+oHZMCAhKwsm FV474iGb4nHng3bw4pDx9rV7jrTwSWiFR6ny6ODyend1LH9AM+nD/1ivlt02jiW611fMkgTCcb+m pxsIAthxcJGsElwuDDhZyBIVKaFsX0mGk89wvvie6vfMkGFRMAzTrp4+1Y9TfarKJ/cQg6gSKi1v s+o0rybZYyhng0gFy8U342w9d1Kc5slAcGx8kfTEfMxqRKjFw50xHk+m6kATIlT6zyLmpDwZZ/Gy ozytvv/60mRJNpvIJVvookzIb2GESrCQzoFQlBJ0ViYLZZ5oDQ04X6oLizpWRAuxRpbU08ljrRY6 i1Q/2qRLoMOicB1EyTtkal+eqgsDasy6NJYJ6d235hROskSVVvCfXgrNoPVD/gsvpR4uBXzd72xG GnAu3I8dbNQmZEIriNGiTfmCizblgXQAkWqgdD6Ycmi0iQbowA192k/MYSJNS351SPVJmXQaUbmu wZUo2kF58QeuIBCa5IEsVcQjWUWXmq9WVeTibsuAqSWNTVVqcR3NIkz1e9lnLrcW2x7QohG18BVL GkfUQ3Hw8EtsuFQDBikKds54QYzCBB8eMPJ0nr5AB2kyEa+pgyI5QYqm5dXoszS1z6YMDFmb6nFS fWRTORinp4HYhyW9al8S5tJIINJ0cUeJaKO6WSQUxcoDTeS4iTUw9MqinJKpnFq9/sp6hV1L42a9 D400vY+0rul9JBq1Se9DA02zQ2bT3ATTz6bXbma0aBs1ekOrY+sgqCn0MbGjOcRrUsqEvgG3OiLa UWpJSqB0kYND6sQJBoFrNrn3yAdqeg8Jl6n3GGzv4Zwwjqps2pWHS+QeimQEJiIMPKuoatT3ORX6 UqrWKRJGPYQ9D9bk2GsvJQ1IqG3Oi2RZXxJjMNtavL2TWIvTnbe1OB2gqcXJZNXi0slSi69epuA5 FAqOIkZprE7RFGoAKFaUEYRU0so84T5cLa4B1+ZlFMPY9Pmo3EqWb3vsMfmnNnTuH71J9Z8nZP8G 58xloCspPvrP3xr/VOtAKIp7cC0b7+lzdj54m4Xc5dcYXacv5DncrXIURJv4T7xbvO5RDuVhhj7n 47/crw96DDYokUvyo0gsaXc3z3jNopPJdfosITUkrohX342aXlpwPd0DBR9pEq2B9bGGoWgNq0iq FvPX+/R26EELUzmA87zSPtt4lS6yngAYiBUEOfUTW+UJEZEHisuESEvua3iDoo0MgS3xcDuJX+uh SnT3qHLiX+gt8gMdFiEghNDd9ir913fbzxdvV7/iESAqxlX3qnvz63r92/an58npggAFSCjSFLSJ Ik+5BQMKWzRhpikMDCGWwjKKsnL+GhgAAAKsbFboFEd5rX0e0Ip63Bi+AaKVDooTrzjMqAM6zsiQ NFCdJkhe9jALlPJjLvXxCYR7luXGIZK4cVx4vOjnpq3m9kyINhuFFXcxjkFple1NPDrCCslBDWHC /iKJOSGUzMdYvEkfy8HwJCkybH6SMRQdctQYkyPq2GzukymFSFcEQUGJM7fLdLp+3HG1RTx4qjjC Uc+9mv+R6lPdpiiqoFJQLTd6D0Ulx1Am5Mqr+4sXP94Ponv9Aaf/Nwhy6wiIPAPiIfDnreI0WkJA 1BkQ3ANCDEmQDfEx6Z2zCpKVGo+sgjhQhyAeSbtdRc5WCT8EQe6WnjqWBS/qNGTOCwMy5+U0ZMEL AzLn5TRkwQsDMudFzXg5AJnzog+vopF1UGt5N7B5aSFMXloIk5cGwuWlhTB5aSBcXloIk5cWwuZl 7MGkR9nN56VC2LxUCJuXAuHzUiFsXgqEz0uFsHmpEC4vyPkosPzo+Lw0EC4vDYTLS4WweWkgXF4q hM1LA+Hy0kDYvJijef/oxszRvM+AsHkxR/M+A8LmxRzN+wwImxdzNO8f5cX1I94YCj4+LxXC5qVC 2LwUCJ+XCmHzUiB8XiqEzUuFnOJFUpOIxkeh2fTejktazEnEnJXTiDkpJxELTk4j5pScRCwYOY2Y E2JmhCwRcz6GiPjlGW2gcmi3oAlDb3zTjUWTujFHW2i6s2BLIUNzR+0YiHPLgdqQxX4tO9ToIpVt 7NivyV6H7u42DPiQCF3YENlCZZscoGFw5EDLtgHUvY/foSeDW9jzBhLHtEPtN4upaZ5qp8eB4i91 r9VUvW62cxNYiJOUGXs31FvNdl5UWY3Suu5pYZf56ZDNQLg2pYe0y6/d55JnjahUPseYPdnpKe17 Jds3zMAY3Qu8ST2eg8F/8Sq1PgMziH7EuzwLgsAZzzzO4HqDK1DqAOZIt6ssxJJkqVz1eLJ5W9Lj GJg5PQzMgh4OZk4PAzOnhwOZ08PBzOlxh5Nfi1nQ40/2cGx6JhgmPS2GS88Ew6SnxTDpmUCY9Eww THpaDJ+e0pedQU+DYdNTMXx6Ggybnoph09NA2PQ0GDY9FcOmp7ZnfHpaDJeeBsOmp8Vw6WkwXHpa CJeeFsOlp8Hw6THHS4OjezPHSwMGhk+POV4aMDBseszx0oCDYdNjjpcGR+kpzdoZ9DQYNj0Vw6en wbDpqRg2PQ2ETU+DYdNTMSfpWbRuC3asOA2ZkcOAzLnhQGbUMCAzZjiIGTEcyIyXFhJ4WULmtFgZ IQQ6t0dSDp0aCYvrrW5buWhTK+dCXd/0dnEAC6nUgdpeuAMDtZtL7V72qdXQK9sOpHbP9GYk+zaM +JgrKRTvw4BQZYCcoNdwwYmZN5EyeoXSDO7AwKIvVf3o274121qI3qgWkAaKS5y49xNb9brd1U2g xWjV3P2EliljiRbZ0Z/Hq3nT2wLJ86vtxYvtdsTc7Q0FjOhdtwm/CBmve2u70YYo7rb3F4JCKfx1 wbfotlf08/niWyGc+W77B3mzxRv5ajxJlKVLVxa5VkV3vRBCk88N/Rf3Ac9vVz++71795+e11Ji7 +mYt+2HVrTeu16un21337sPvnx67j5dPt93dY/fpcXfdXd897K6e9n+vRyy76rv1b9ufLuTYW4Xo x3Zfx5VUWUm5uFK3Bp9qtYXb68uny+7z3X7fvdvhsqJL+H760NGql09Pl1d/7h6i7012Dm/e0gKb 2VnAOVZYvfxv96Zf45p+2D6DVNHRn0AqwsN3Ep9dDO5x7HEIqWx6ABqsDbCHMGEfAFIFhJJNWCFe j7z26eYWYTX9fE5YGYicNF8jrJInVliZGlY2kv3l5XoEfvXPN92XV/TzPf28/mdNCrHqLt9fd1/e FOthF2ML/K83Q29W17v3H55yZBmLvCAK8ZHtt6tdiJX1oOEC1K83Fuu9/3T/bvfw2H2+vdvvui8f wxJuRdFLsz8+7G7u/uqD5xAlgx2PRcmUviVHk88HOMJdapqxif+IboCCouwdQZX2+UaFgCpmRlb2 hRQpgv8vwAAdvenJCg0KZW5kc3RyZWFtDWVuZG9iag00OCAwIG9iajw8L1N1YnR5cGUvSW1hZ2Uv TGVuZ3RoIDI3L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCAxNi9IZWln aHQgMTMvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NClVVAABUVAAAVVUAAEREAABVVQAAVFQAAFVVCg0K ZW5kc3RyZWFtDWVuZG9iag00OSAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDE3L0ltYWdl TWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCA4L0hlaWdodCAxNi9UeXBlL1hPYmpl Y3Q+PnN0cmVhbQ0KVe5V/1XuVf9V7lX/Vf5V/woNCmVuZHN0cmVhbQ1lbmRvYmoNNTAgMCBvYmo8 PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAyNy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50 IDEvV2lkdGggMTQvSGVpZ2h0IDEzL1R5cGUvWE9iamVjdD4+c3RyZWFtDQpVVwADVFcAA1VXAANE RwADVVcAA1RXAANVVwoNCmVuZHN0cmVhbQ1lbmRvYmoNNTEgMCBvYmo8PC9TdWJ0eXBlL0ltYWdl L0xlbmd0aCAzMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVp Z2h0IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQpVVe7uVVX//1VV7u5VVf//VVXu7lVV//9VVe7+ VVX//woNCmVuZHN0cmVhbQ1lbmRvYmoNNTIgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCA3 L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCA4L0hlaWdodCA2L1R5cGUv WE9iamVjdD4+c3RyZWFtDQpV/1X+Vf8KDQplbmRzdHJlYW0NZW5kb2JqDTUzIDAgb2JqPDwvU3Vi dHlwZS9JbWFnZS9MZW5ndGggMzMvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dp ZHRoIDkvSGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQpVf+7/VX///1V/7v9Vf///VX/u /1V///9Vf+7/VX///woNCmVuZHN0cmVhbQ1lbmRvYmoNNTQgMCBvYmo8PC9TdWJ0eXBlL0ltYWdl L0xlbmd0aCAxMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVp Z2h0IDYvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NClVV//9VVe7+VVX//woNCmVuZHN0cmVhbQ1lbmRv YmoNNTUgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAzMy9JbWFnZU1hc2sgdHJ1ZS9CaXRz UGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQqq qt3dqqr//6qq3d2qqv//qqrd3aqq//+qqt39qqr//woNCmVuZHN0cmVhbQ1lbmRvYmoNNTYgMCBv Ymo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAxMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9u ZW50IDEvV2lkdGggOS9IZWlnaHQgNi9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KVX///1V/7v9Vf/// Cg0KZW5kc3RyZWFtDWVuZG9iag01NyAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDMxL0lt YWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCAxNS9IZWlnaHQgMTUvVHlwZS9Y T2JqZWN0Pj5zdHJlYW0NCqqr3d2qq///qqvd3aqr//+qq93dqqv//6qr3f2qqwoNCmVuZHN0cmVh bQ1lbmRvYmoNNTggMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAyOS9JbWFnZU1hc2sgdHJ1 ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDE0L1R5cGUvWE9iamVjdD4+c3Ry ZWFtDQqqqv//qqrd3aqq//+qqt3dqqr//6qq3f2qqv//Cg0KZW5kc3RyZWFtDWVuZG9iag01OSAw IG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDI5L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21w b25lbnQgMS9XaWR0aCAxNS9IZWlnaHQgMTQvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCqqr//+qq93d qqv//6qr3d2qq///qqvd/aqr//8KDQplbmRzdHJlYW0NZW5kb2JqDTYwIDAgb2JqPDwvU3VidHlw ZS9JbWFnZS9MZW5ndGggMzMvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRo IDE2L0hlaWdodCAxNi9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KVVW7u1VV//9VVbu7VVX//1VVu7tV Vf//VVW7+1VV//8KDQplbmRzdHJlYW0NZW5kb2JqDTYxIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9M ZW5ndGggMTcvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDcvSGVpZ2h0 IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQpVu1X/VbtV/1W7Vf9Vu1X/Cg0KZW5kc3RyZWFtDWVu ZG9iag02MiAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDIxL0ltYWdlTWFzayB0cnVlL0Jp dHNQZXJDb21wb25lbnQgMS9XaWR0aCAxNi9IZWlnaHQgMTAvVHlwZS9YT2JqZWN0Pj5zdHJlYW0N ClVV//9VVbu7VVX//1VVu/tVVf//Cg0KZW5kc3RyZWFtDWVuZG9iag02MyAwIG9iajw8L1N1YnR5 cGUvSW1hZ2UvTGVuZ3RoIDExL0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0 aCA3L0hlaWdodCAxMC9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KVf9Vu1X/VbtV/woNCmVuZHN0cmVh bQ1lbmRvYmoNNjQgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAzMy9JbWFnZU1hc2sgdHJ1 ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3Ry ZWFtDQqqqnd3qqr//6qqd3eqqv//qqp3d6qq//+qqnf3qqr//woNCmVuZHN0cmVhbQ1lbmRvYmoN NjUgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAxNy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVy Q29tcG9uZW50IDEvV2lkdGggNy9IZWlnaHQgMTYvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCqt3q/+r d6v/q3er/6t3q/8KDQplbmRzdHJlYW0NZW5kb2JqDTY2IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9M ZW5ndGggMjEvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdo dCAxMC9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0Kqqr//6qqd3eqqv//qqp396qq//8KDQplbmRzdHJl YW0NZW5kb2JqDTY3IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMTEvSW1hZ2VNYXNrIHRy dWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDcvSGVpZ2h0IDEwL1R5cGUvWE9iamVjdD4+c3Ry ZWFtDQqr/6t3q/+rd6v/Cg0KZW5kc3RyZWFtDWVuZG9iag02OCAwIG9iajw8L1N1YnR5cGUvSW1h Z2UvTGVuZ3RoIDIzL0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCAxNi9I ZWlnaHQgMTEvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NClVV7u5VVf//VVXu7lVV//9VVe7uVVUKDQpl bmRzdHJlYW0NZW5kb2JqDTY5IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMTIvSW1hZ2VN YXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDgvSGVpZ2h0IDExL1R5cGUvWE9iamVj dD4+c3RyZWFtDQpV7lX/Ve5V/1XuVQoNCmVuZHN0cmVhbQ1lbmRvYmoNNzAgMCBvYmo8PC9TdWJ0 eXBlL0ltYWdlL0xlbmd0aCAzMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lk dGggMTYvSGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQpVVe7uVVX//1VV7u5VVf//VVXu 7lVV//9VVe/uVVX//woNCmVuZHN0cmVhbQ1lbmRvYmoNNzEgMCBvYmo8PC9TdWJ0eXBlL0ltYWdl L0xlbmd0aCAxNy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggOC9IZWln aHQgMTYvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NClXuVf9V7lX/Ve5V/1XvVf8KDQplbmRzdHJlYW0N ZW5kb2JqDTcyIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMTEvSW1hZ2VNYXNrIHRydWUv Qml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdodCA1L1R5cGUvWE9iamVjdD4+c3RyZWFt DQr//1VV7+5VVf//Cg0KZW5kc3RyZWFtDWVuZG9iag03MyAwIG9iajw8L1N1YnR5cGUvSW1hZ2Uv TGVuZ3RoIDYvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDgvSGVpZ2h0 IDUvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCv9V71X/Cg0KZW5kc3RyZWFtDWVuZG9iag03NCAwIG9i ajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDIzL0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25l bnQgMS9XaWR0aCAxNi9IZWlnaHQgMTEvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCqqq3d2qqv//qqrd 3aqq//+qqt3dqqoKDQplbmRzdHJlYW0NZW5kb2JqDTc1IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9M ZW5ndGggMTIvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDgvSGVpZ2h0 IDExL1R5cGUvWE9iamVjdD4+c3RyZWFtDQqq3ar/qt2q/6rdqgoNCmVuZHN0cmVhbQ1lbmRvYmoN NzYgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAzMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVy Q29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQqqqt3d qqr//6qq3d2qqv//qqrd3aqq//+qqt/dqqr//woNCmVuZHN0cmVhbQ1lbmRvYmoNNzcgMCBvYmo8 PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAxNy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50 IDEvV2lkdGggOC9IZWlnaHQgMTYvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCqrdqv+q3ar/qt2q/6rf qv8KDQplbmRzdHJlYW0NZW5kb2JqDTc4IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMTEv SW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdodCA1L1R5cGUv WE9iamVjdD4+c3RyZWFtDQr//6qq392qqv//Cg0KZW5kc3RyZWFtDWVuZG9iag03OSAwIG9iajw8 L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDYvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAx L1dpZHRoIDgvSGVpZ2h0IDUvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCv+q36r/Cg0KZW5kc3RyZWFt DWVuZG9iag04MCAwIG9iajw8L0Nyb3BCb3hbMCAwIDU5NS4yMiA4NDJdL1BhcmVudCAyMDAgMCBS L0NvbnRlbnRzIDgyIDAgUi9Sb3RhdGUgOTAvTWVkaWFCb3hbMCAwIDU5NS4yMiA4NDJdL1Jlc291 cmNlcyA4MSAwIFIvVHlwZS9QYWdlPj4NZW5kb2JqDTgxIDAgb2JqPDwvWE9iamVjdDw8L0ltNjIg ODMgMCBSL0ltNjMgODQgMCBSL0ltNjQgODUgMCBSL0ltNjUgODYgMCBSL0ltNjYgODcgMCBSL0lt NjcgODggMCBSL0ltNjggODkgMCBSL0ltNjkgOTAgMCBSL0ltNzAgOTEgMCBSL0ltNzEgOTIgMCBS L0ltNzIgOTMgMCBSL0ltNzMgOTQgMCBSL0ltNzQgOTUgMCBSL0ltNzUgOTYgMCBSL0ltMTUgMTg5 IDAgUi9JbTc2IDk3IDAgUi9JbTc3IDk4IDAgUi9JbTc4IDk5IDAgUi9JbTE4IDE4MiAwIFIvSW03 OSAxMDAgMCBSL0ltODAgMTAxIDAgUi9JbTgxIDEwMiAwIFIvSW04MiAxMDMgMCBSL0ltODMgMTA0 IDAgUi9JbTg0IDEwNSAwIFI+Pi9Db2xvclNwYWNlPDwvQ3M2IDIwOCAwIFI+Pi9Gb250PDwvVFQ0 IDIxNSAwIFIvVFQ2IDIxNiAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUJdL0V4dEdTdGF0 ZTw8L0dTMSAyMDkgMCBSPj4+Pg1lbmRvYmoNODIgMCBvYmo8PC9MZW5ndGggODQ0MC9GaWx0ZXIv RmxhdGVEZWNvZGU+PnN0cmVhbQ0KSInsl8tuHTcShvf9FL1UDKhN1oWX5eSCQRazMHIAZ5GNocSO M5I9tgLM689fRfa5SEqCyngpGPYx2SySVfXzY/HTktf369Jl620teUs5r9elbrpWSuvnXxaqmxy/ 3C2vX6wflpff3Jf15n7N/uf+Bj3//CGv7+4vR59P83Z5dRz09WF5eTgITA9vl7RK2hKt1+MnrT1v VNac01Z6Kuvh7rhc2mj+LYk7+cLXsEqJ18PN+G+u6+G/y9Xh85uf3//+/uOHN7frv/Cfrw6/Ld8d lk/DW1VbaiyRV+5bL9iFbNRsq6/hIbb4BxvjDmNOahtLtmzyBd/NFV79iankvokOn4bVG9vi5d5y obMQXqTiIkkzFacUXHx9GPp98ly2XNZetwzHr2lTWovUrdq4nHkrsn+c86etlVIqYq7UJeO39pKa r/gJXvDWBP9k89Im0Nx7rzZJqklhcIP8fX+Xdf32o+/jD01ySlvPsNGIjWxVYUMRm7Zph00J2GQk hYPrINZUg+tQ2nIOrkO8dY2ug5xbDDhgw3kriAH3iI1ughhoRAc4j2wxqAEbQZ8G/ZGydYtBwERx HDjojspWatAdhUQtBJG9gRusMXcKaIAIaERtNTn+gKiADT7UoDsVCs1BgrS8qQb9abqxqSCi6tY3 4iCpOseJ2IsTUQOqJlDUiRjwh0DRKBEJFI0SkUBRI2JEo2Q3lsUgYtLDQCRA1IBIgVNKgGgUiASI GhA54g8gakDkSKgBUQMiBY4pCUWBSGCoAZEjoQZEDYghdwBRAyJFQg2IGhApEmpA1IhIgVNKoGiU iFR6mIgEikaJSKCoEZEjsgZFjYgcoQ4oakQMmXQHIkWk08mBSBHpAKJRIDIgGgUiA6JRIDIgakDk gHQYEDUgRgjCWZ2IHJAOg6JRIjIoakSkgKzZnozBEpFB0WiJyKBotERkblEiMiAaJSKDolEigmxh IjIoGiUig6JRIjIoakTMEVkXdSLmSKxBUSNiZGuAaBSIDIhGgciAaBCIDIZGgcithYHIgKgBMUeU A4gaEHNAOQKIGhBzID0CiEaBKIBoFIiScxiIAohGgSiAaBSIAogaEAMpFTDUeJgD0hEw1HiYAxIV ligPBQiN8lDA0CgPBQyN8lDA0CgPBQyN8lDA0CgPpeQwDwUMjVaIAoZGgSiAaBSIAogGgShgaBSI 0iQMRAFEo0AUQDQMREA0WiEqIBoFogKiUSBqqmEgguxhICJgDsQIQvATBaKCodECEX6EgaicokBU MNSAmCLZAUSjQITMHIgaUDUePGEgAh4OxFB6ANEoEFWrA1EisQZEgwWigqFRHioYajxMEeWAoUEe KhBqPNTI1loK81DBUOOhRJQDhkZ5qGAoeAjMR2yK8zAFlFPA0CgPS2LnYcSihmlYQFDQUHpABQUE DdKwAKCgobTARVpA0CgNCxWjodSAcOB+GIcFCI3isAChwKH0iHCA0CgOCxAKHEoPiLoAoVEcFmXD obRIfoDQIA4LCBrFYQFCozgsQGgQhwUEBQ5RVUVsShiHBQgFDlElRmwkjMMChEZxWIDQMA6B0DAO ew/isAKgURxWIDSKwwqEBnFYQdAoDisQGsVhJYoWhxUEjdKwgqBRGlYQNErDCoL+CQ25PGUDgl7S sA2bV8vXh+Xl4VDWvB7eYoJctkTr9fhBU4D4lZW2ZsE43GHIu+Xqze+/v7n59y+f168Ovy3fHbB0 Xt+vS9a80crVApGx/kZtpWxb+vzL8nr9YIs9XgKYqrvVWOPqHz/MiV8dpy4oUhqu0C3lvF6Xuimy lGzijqfm8cvd8voFFnr5zT1UdY/p7c/9zYclI2wkq+BRlrqNs45e2iqQIUG3mSEtSF7w/pCEgFjh vgpGZThzs1goKixFMJ7gnnSsiPFWeBPGo5i26fBT2Q1ULQDWYTu7XcyiAq2CX0b6MmaqBWtg5o4W b1KwoNXXY0FM3MaGFFu3DfaK92u2l8vYMNZ1j3zBX8cebUnky4Nhe6gYgx8bc+spwoGzJfXU4W2C c9YaGzKnPZ9jME2XUMaODlb7nkyj1iyzOb+2PoaLzWb/6lhLNwTQrsw+AqKmAdHskb0d+58dnF19 0rzZ82ySe0d5TwkX7xAd33HKrVln8ywYN8tbSOkoh4aglpGKIYcCUMqxY5+6tK3WUxOc1362tELF Yt+HNWDunszZ9+bNQobH03dcsZaW3Xo2T7PvHXP1aX3c2+Xe4diLJV14lsfgwu7ZPrx5FG/dVXwe PeTCa1V9Nfwd7Xbh67Gjjazg/7j0R1hoturlSJ0JtVx399Skb0tzQ5vt/aCnQFnT10IHblEL1Nzs WUfdO7K4SdYRDG7HGR5NaLErqt7D0BaEvDFEZzsq1ZvuwXno7RgOB2+9XYaLOOzWanRq5ZPvNlMe vnfN5xN7Ch+vg32QB93I6ttk9pw0qPZB0kZguB07rEnz+3R7Jt2CMuNI3rGHZTZFL4aXHR0oe9Jp hrvzE9I88LZFKgN4ibvHIutwoYEp1qb2wMU0ZJ3HDB6vUyvtYkk6D8FFy+aeo0deeASQ+HwtyU+t bFsTT7JhzbeO2tlURKiHz87n4Npw3tpl11gfopMxuu2DH5lC0X2YUm5+IhoOka2cqzf7A2yMNuu6 0276uNPOmke8Nbk4TbAugwsd+xtrj7R25PMsZZ13FUyo9bn3Poa3qaHehgr6HobsbfXPe4t5tKY+ aNL0eDmPGxjFrM8jviRuJaTkdO+jyJC9yMDFZhXA+Elr91uGu/rrywqA4/WNcmL8LVAcOd/SerhZ rt49LBCI+lkZcFEgXNYODyqE7H8cnBfDzid4+6gO2WscMKR8qRLn73vwfKk9X2rPl9rzpfZ8qX2J S80JjixjluvxA4J3bAKzNnuJDIKPe+jHSfH/k+En0lErNgNX9SfWHaZM/mJT5MtfUXh8+uHV5rJH hwWkuEn3jl8h6z6eQupeY5YMvy3IQ4k2Cyhnj6nub7vbk+vU/PIaP+a6mOtqltP1q/9Mrx9vf55J pQF5PAi1A5VochtXafILy11N5OeXyqBJ9Zu1G1LmyOOsZ7G14SZ/26BaKUF+91LKLrT59c6CAAOM wLw8YoD22Xq3x45SPCe3uwWua/WY7Du86NBzg9E+zbi7NNa0qI6CAFrKJiTLpqmVIfJZCjxV5Fz9 dPXjT18dtUVMdl+wnVm//oibnQHclPNGIcKpxryZN50g8hECsdSxdSUHVwJFZkfzk2qVWt5HQEZN piJcoVFFn5L2yfw2Z9kOvLluksYRt6wBLD0p4Y5Btff9XaH1249eCqUx/CkbXA7ZxDtN+K9NQMiE i4jrEzZk5+EpG/AJW8O1NW30ZOPueNliNrhUoG27OR+5Iw/29pTNA3fKX5s8cqc8cOcpm4futGFj Vn8/t9PSBCl5FyRufjasH/VnkoVC9QgccYG2vA/w40x7h8lvCFT66BigQ8cu4UEAhLvNEWxXPjf2 otHJh1lqcxX3wU/M0kaHzHWai577PmeyDt73ifFG0953Ug5P7CTxdK3bHYL2PEhQD5aUTMfDWNwC vva+W/ic2V8Nt36gRTx++diB8OE+GrsYTw7q9SwLFwm6zN1M0Okxc/n58jHz/GB4fjA8PxieHwzP D4Yv8WDgXM11tvpz1GY4Cx3nwnr4f6xXy44ltw3d91fcpWNgrktvaWsniywDDOAPaNgxjO4J7Pl/ IOeQ1KPqtm3dINOY6SFLR6LIw4eQ7b5EGTW88IASKBtisvstCjKDIhtp1PlfxCpiLH15EjnZ6qyr 6RyKHAtNPG3utDVRgQwLmSMCzIGxFYWBnaciVP02ELVmhwgq4n+iqfiNlpIx6HADz6NFXu4T8sE2 Po+8rDBFK+IRTvw4obCLc3Z2WOikI3eHMi1F5WVFlLQkBu8gaFB3EBAemkA4btmoPxtxsopTAMU6 HUWL3Oo3KuL5e55B+eDOpohCqYGOMgyN3VVUY+r63Wzr6GGqjIeyPHF8AOFzY/AxU+Uk00NhsHrM ihRZRB1PthjtvZBJCxjagmyQwHXKvp44aAq1gOKh9uWwsCpanZTl/sQqmZ81oggUDfDoHwwYx9WR I773akkbdhi8UA9JG1sTU+yDGKnJiZwayxzHeYC/LTVY/FtlLRxcpyzjhGYOxZxGplAsa94Z3DIj okViIA1whhzP4QbebswYtU9EDbregAo1mApUayqYOxRLHoBHvGRWVY0lEjJfzi+dY+N2xoph7vm7 yoWdl9dg9eGuSf0Zj3a7uFfNZxM3hVh7kjgmQ8ylr066ut9NohfH3ZZgaspWeZA+xjdJXYXFdFwp qilBc5hnsMJxhD/d+OQBlj5Loh5QS7IZX0vC9bv5S9FX95pcpEcMMJyS5t4ijfylnNu0s0M/MBsG JORGwbzJa8eKLhwP9J0yeXHIo+a1e4608EloVe/Gw4PLKwesvvwBzdQLzbZHSmquejs+99xfssbk Im8VKRUiVc2Zmue9Le+XlEHaZ81IpljT3sKAZiTuJeJ6Mz8VC0XYWy+MWYpEZhlZOET5CKNGoN6L JletCXBW9iyRodeIjEp1ynoqahvdNsfMOZcSok7JhfPiMrvnLWe+5qxCwDG5YlQ4Rh2mGNpImioK X3qFKGOBZeAqnuEsEHy9yf7GWa7g+dIPhLPzcka9ae9lhSkwbtI/OWWtEugMGc221VEluoNHlegK u8BhM4HdD6JLS5WgghdewhfaSUynIvEY3yCtz2pEMI3vfR4u8bRg5N4HLpCAWqJS8iONTRoVYvma /UQ++HYo4mzx2aa2sbWKo0TM78PO6NzHZqdYJLTYS1t8ZeiR+0jBwY1qM5EUBZF775GyIAuapBI6 Zl/+gJYiERUf0HsksdEsebwvrReJNW2GIvUqMa9j80K28UiXm8K3PiB4f8okrKVGAhlvapEFOvrb hQmjdnTFwpx6ktJpKnexXqZyapap3OW6TOVuvDoWxTKGU1zGbjefWme8VoqSizzKYg461KINez4r 2Oxi4UPO+ygTLe5XwDuMH45NhVdKeN1gheM7M8U+FfcLLVOxs+cs0ifle8PmxFTOf7SqYUt50AVA MV6jGUhQcCRfJEhuH6vMkYxJwYtMXp05dhasTjGFQ93rvYJSbqNZiLhOiatPdEqkz9cpkRdYpkSK fUr0NfNxFooyC2H0h7SkhLKkUyIrGXtKFSdAUWXsIqSJ4pcXD0el2XewC7OFL0hvdYZxYGdLTdL1 jUf7Ju9Cn8VdnzxS7YamijD//tOLP+Tt0r++8xQAsMIjsHqIl/BwSSl6iCpylrL+1hFZ33KQWVf9 RZFWgMpzRwPYmTT7Xy/HjT9fX7+IKxBfh+LEcgyTchAP+yQBfBMFQogNo8rqbyKqbfjbiw9eHmTc TXMpVHkQNB1leZEkrdsFedC89RWRQ4feJLFBw38HWqsqsAKQg+NqX4Gw1WgR+PHbG26AbICbYQ4d 8CmjvdyKPyQCGh/79K7rf8Ptg7yt+M9x4yLXWoMXuLMrR0K7f31/+e6f78jOv/8H/vpTDKqDOxKS aB/D7EjApGcwyNAGjHsGw6wBfes+JqJ6BvgAreoJTEGEpAhvQxyCAhcgp5/AoHzABZgfP8Jk+auI iKtjcI5I4gIHDED7g0MCWgYgGHP2ObBidjmwYLY5sGJ2ObBidjkwMfscWDGbHFgg2xxYMX/KgT/A XFjwh5CMmtc4M+6TYEK2OTAg+xSYkG0GTMg2ATrkifhPyG74B2I/+hOyHfwJ2Yw92nZBnan5ieCv mN3oL5jt8K+Y3fivmF0CTMw+A1bMJgUWyDYHVswuCVbMLgsiHktPzgIrZpsFE7PPggWzzYIFs82C gXmCBQtmlwUTss+CBbPNggWzywI+efEnPsOCBbPNgonZZ8GC2WbBgtlmwcA8wYIFs8uCCdlnwYLZ ZsGC2WQBHhs+PDcNLJBdDkzINgUWyC4DFsguAQZkP/4LZDP8E7Ed/QWyG/wF8pexD/KESPl+FHlC PAS/HBuYS/R3MNfwb2Eu8d/CXAiwgXlgwBbmTIEdyJUDW5gLCc6Y/CHkTILiFEGMb+Ue6y3DEOdu n3K5p1vxx+33n174rGzj0/vLj9/evnRlqICJ1gcUGnZbf0/Y+E0UR5XwpiQKH++sQriQ6wuwRfS+ K0DXzHHquMemCnfPURQlqEJOjUfC3VUR7o6dB7cVxS+yS6lC35bEMuxSVRHtHG4RDcE9jyqhNjux vuj0eKTlJtE7kEEV7e5EdmqWTzwyOn9veoLPgsBdW+uIopNvti38PUbxnxsKHaTUip8lLCHHxffn sJwiZmFxN/58ff1y+bwCfwZB+MNVwZU7u+Ph7jGIsxpMdkE0AUzxBVUAhuOuRxbJQ4rp7rDr68ui 8MBTJAkghmRiFTGWvjyJnGx11tWpqVjiEE+bO3UrFSB8yPB/gzkwtqYkXqsOKW63gVhkhxD9/cD/ RFPxG+7IvsgGnkeLvNwn5IMUnEdeVpiiFfFI5N3ANjLwwEkOC52wqTv0FYQUlZcVUQhJjEfpCqDc cQCLQ1OusmWj/mzEySoymGKdjqJFbvUbFfH8Pc+gfHBnU0TJw4GOkshjdxXVmLp+N9s6epgqJVCW J1I/V/iNwUc9yEmYXxisHjOIypGGPI1aWmomLWBoC7JBQi5Q9vXEQVOoBRQPtS+HhVUq2nJ/YhUd 0zSiCBQN8DFLwFiSR454qRivkprff2aZdUzOT/oLosdC4AIugDJ7+/yONf9++eb7v33+9eUfn/+H dP7uh6/59vr1dk5Y2BYTLikJa9bFFHv5YlLUpBrLWYcARP62pERWxVaRSzPLKDNJLWcp5jRylGJZ M97glpMx3RLKeEAY5Hh0noQ4N+aq2iei0k1vQIUaTEXyomDWUix5AB7xktNVNZbCqDlyfunsHrcz Pg5zz99VLhgJ6B3Pusddk/ozHu12ca+azyeVKcTak8TmAjGXvjrp6n43iV4cd1uCqcUCYfAfxRfJ rAWIjitFNSVo9eAZrK1sfKcbnzzAomvp2wNq6T3ja+m/fjd/KfrqXpNhZBi1g2JJc2+RRuWgnNu0 s0M/MBsGYMZD/jYJTMQQk+Jxl3Gu8+KQUeC1e460wCj5JrLx8ODyend1LH9AM+lDs+1RDLRKeDs+ 96qzZI3JRTq8FCmRquZMzfPeVnGWlEHByZqRTLGmXY0BzUjcS8T1Zn4qFoqEcBKVRH9RnmLNyGwt T9/88P8vTZllc2Eu5SOMyoT+JppctRIhRNmzJYRemTIq86nWUFHbmC5yxHClErhGyYXz4jKnhVvO nLysLiEcueIZcIy+QzG0kapVFL70ulTGAsv7VTzDWZY4acn+lilcwfOl/0mmzMsZ4ae9lxWmwORK /+SUtTahE+aDER21qTt41KausAscNgPZ/SC6tNQmKnjhJXyhncR0Kk2P8Q02J0tlCqbxfa6BSzwt GBn/gQskoFYeKPlRPEwadWn5mv1EPvh2KOIcabJNqWNrFUdhmt+HnX3cejA7xSKhxV460lSGHhUH iT+4UW0GlFIkcu94UoxkQZMERp/uyx/QUpqi4vG80lKEFs3jfWm9NK1pMxSp16Z5HZuPso2DutwU vvWByPtTJv2X/bLpkeM2wvB9fkUfdw0s3fwmj1KUg3xTsIAC2D4Yay1kZ3alWA6M/Pu8RTbJmu6Z nWo7yMEIBEnT7H7YzXrIIgvPUksR6ab6RYtoZ6bVTOgZqzWwmZNOrrwgXwUcp/RynLp581/OV/hq 7dKq9qEWVvvokFjto1HgntQ+1MCKHbpkxU25zKvHRzUTQ5yMRb0bbC0dcOQwLteN3UVEeTLGlboB UY2Y7ThqadpAKZA+YevECPyMMLtWe7QBsdpDo8ul9vBBZXROTKJTNn1VRpfYe2gmY2JihsGzqVmN 6j6kFONSOa3TTIjWl2/2wbW5x4OyNGhk27Yv0lXIfWMsl/wszmNSz+IUc34WpwGwszhdis7iOul+ Fr95tUyec1Mh0YwxFm+n2VTOAMhYNY1gSi25sj3wVEKLMCBsWddkWIu+XDO30f3eEd+49E9l6Lp/ 1Caj//ZA699hnO0YmPoWX/tv91j/dNZBoujdw7VmvS+3W+c+h5bIU1uNtevlDvVcYmsSTaK7+l+N LVZ31L4vzFLnfH4hvrnkY9igjVxTP4aSJX3d40GPB2dH9yymVyzTp4Qt0+vKk6zLapqepKlKH4d4 zbTEaMTIPG7cLUMGgI0D/9YI0y/2qmNviHPJG8dGhFwW9LF/3EmD50C9Hj220dR39ngi3ne6zlJT ahiLyRqXSOLMUv8ie+IejfXmu5u/f3e7RBd4D5Ytq5WmRUlA2JUmWlFng4Udz1CZoluwkE1asIwK 424NVtnzqGtf5x8a2LuOraFF+NgQazKSfB19+bzTBnpiILWBdTpG5O2lgCHFmYCEkS8HDEJmPHb/ cLijnzhj3v92+BZhfD39ZXqDUH5//83v20ZYTJESKVHVRIcIxVgynwnKVfsIMJK18eWB42FJrkSY ZTa8O2zWSK7HszIVsX5jaC5X1vWcEYJmHZQxF6zrOeH42Kxjj6vzY7He7jLr1HWIzHp7V7dukOmc ZtbNPJcqbig8aShPdKQ2sE7HiEJ8wbrWARXPFeuuW9fd+qtbD5U309Z+fXOeyw5OmXCm9bhcH9u1 nkNb4bCLQ/SmYRC2nAJYD9g40xTjEo3VJPon7Vx09iz/4Hc5MeWMYwGQhJyAY9bD0+Hrt0/RTG8+ Yca8gCC9Rg1E70Cw0lAM4lQhR2jv3fcWmnR231uw+Oa47y2a5py+8BpdEu0ZBocwCoBpjL30noC9 C4zdYaYjcjMDEZsZiNhMR+RmBiI205EdZhgjNYNFGi2dd8RiOiH2MgiplkFIrXRCLGUQUiedkCth iNgIThIx57Qjiw1E7mQgYikDEVvpiFzLQMReOrJDDGPEZlAoaDA7sthA5GYGIjYzELGZjsjNDERs piM7zDBGagZnHIM9Ke5IYwMRm2GI1AxDpGYGIjbDEKmZgcjNcEZsBoc95D8cxeVmOiI3MxCxmYGI zXREbmYgYjMd2WGGMWIzGcdqMGaHmY7IzQxEbGYgYjMdkZsZiNhMR3aYYcw1M5pqsslaqyK2ppC2 Ytw1YuPlOrHWcp1YW7lKbKRcJ9ZOrhJbJW6l5AyyNuIr8o5VmZb6xfLVSlte5tbrWuauqt5a9MZc a9yo7OZ6PI6V6xPrzeLa8d6TipgIQeVI1x/RkvGCiE0y1s9J6G+5JN6qTN3n2r11yhZjoXZnvNpc 0sfNmn0NoqhMbqOhyLEGTDBOlOvRIYpDbU6vw/icR8hYHsF8UDmzgLaG/lLjggo8SNuGgdRx8j5K 3Az+8+VD3381PZ+psnotS086zAXbZ1y4VJkNhjZErAQT9zABavGevIdBEsFqsH4Hg4mQ4M2aPUxE gDGetINxWjnKBmeQ0+KUIV5ZCkFoTLz0ml7Q7tAzGLkexoj1MEasZzByPYwR6xmMWA9DpHp6cSu3 MxCxHIZI3TBEqmYgYjMMkYoZiNQLI8Raemm7w8tg5GIYIzbDGLGawcjdMEYsZzBiOwwR6+n17Q49 g5HrYYxYD2PEegYj18MYsZ7BiPUwRKpnFLlyPYwR6+GMVA9npHoYI9bDGakexkj1cESsp1e6O/QM Rq6HMWI9jBHrGYxcD2PEegYj1sMQsZ5e7u7QMxi5HsaI9TBGrGcwcj2MEesZjFgPQ67p0SgZ8RND iNiuQjpjJ11FNnIEyNqNAFmruY5szAiQtZjryNpLWnk5Q6y15Iq8O9gZhSotX42H9fTUa96l4Vga zElBW65dVM6WaxOV3V6P5xF6n3iHFg3u5A1JRZoJUXlPDR/RlOkl+Ffr+lWJOl2uqQ+rcunC15dY p2wqbzW1T+PVmWsXEG3+VYhMtm1Y2Zw04Ps4Ua9Hj6gjtVk1BPZNjzBivVE+FBc0w596Axxa26KR t9c+tPAtwKYhOBVrA37lhC4QnNLw/qvpebuw0W/CKg31axxmdpulab6QCzgCqZjZOuxgMCaNqa3t HgZjYXNbhCT8ZJNbwiCGIbKFKmIwYxACk3cwYVaWVrc/w9AyPYc4aATS8mEyF17jZowB26KVC+WI VChjxEI5IxTKEalQxoiFckYqlDFSoRwRC0UNR0VC3iGUIWKhg5ELZYxUKEPEQgcjF8oYsdDBiIUy RCwUmxbKiuR3CGWIWOhg5EIZIxXKELHQwciFMkYsdDBioQyRCsUYMAcy7ouFckQqlDFioZwRCuWI VChjxEI5IxXKGKlQjoiForKk0iXtEMoQsdDByIUyRiqUIWKhg5ELZYxY6GDEQhkiFppVwr4b3Q6h DBELHYxcKGOkQhkiFjoYuVDGiIUORiyUIdeElkoWvwOqWCxrVFgboVqArIUKmI1QCbMSKkHWQgXM RqiEWQsVMBuh+lToOWQt1FWEoKVCDVrNWk93ISo/RTNPv3w4mByV67eeau1qvVYlv2plI7W2BqhB I9W8iIQP9ZitSwMqKG3ONPiIT+QIa6idIkA584aABl8agleZ1l7G2KjhYxmKq02hfHBvSKzbXOs4 uzRYZWoOi5k34MWmf2s+uY4qGP5lS8MYfyUctryTd2wasGa85Z9lXYn08fBY1DhrWPxP1JxaW9To if58eXhe3ebgI2YJ/aGnPD4guMkkrQKGcqchCN+lET9jyluyVVgD7YEnxJgYTU2Y7Z6aMOFp+NSg I3370uDsrJytDQVxBhmmRgzd5pNr6EiMWBpGn5VoL63xeX2PoRhP47yr/821Tzc5hNphwk/3TwcM aap/AzYsUwY+q3mmuw+HO/qJqXj/2+Hbm9fHTw//mH79+GG6vYPCmy//+nL7/f03h7/ek4w5KKzt 2rWeTChhsF4hYyJU7xH/F77IYymZ9kX04pleefP59v5n6v7F0WAuq+jbaPDlZnTw08NPn/CVtZf9 M2bMBVojedK4neqqjrHMBYzTVQURuQrXvjxwLAACR4Rhc7at5GVuP41ssF4eq2u20pdcsG4Ya7QO ZSz9MpbfP/aROWviRNKgo825o7cdifMPxPr/KfR/lkJzvrS7nfrbpNDT23/OFNoncc9qKqU/kNSu 5TM6h4RVdp7p0FjS7+cffv04PX76Zfr0/GH68Yd/30aDJKxGCvYhXlpxp563Mk9u/2ll1lGalMtK NKksqkhp4QWZ3lg1N2qzQ7160ejC2jkqbStbdtRZjx5+/Pnub29ff7l7+0xdIdPa0kX9D11gxSIr RY1jLZsUCBBNqPi1npcv+I8AAwAMCWp6Cg0KZW5kc3RyZWFtDWVuZG9iag04MyAwIG9iajw8L1N1 YnR5cGUvSW1hZ2UvTGVuZ3RoIDE3L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9X aWR0aCA4L0hlaWdodCAxNi9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0Kqneq/6p3qv+qd6r/qneq/woN CmVuZHN0cmVhbQ1lbmRvYmoNODQgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAzMy9JbWFn ZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDE2L1R5cGUvWE9i amVjdD4+c3RyZWFtDQqqqnd3qqr//6qqd3eqqv//qqp3d6qq//+qqn93qqr//woNCmVuZHN0cmVh bQ1lbmRvYmoNODUgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCA3L0ltYWdlTWFzayB0cnVl L0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCA4L0hlaWdodCA2L1R5cGUvWE9iamVjdD4+c3RyZWFt DQqq/6p3qv8KDQplbmRzdHJlYW0NZW5kb2JqDTg2IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5n dGggMzMvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDkvSGVpZ2h0IDE2 L1R5cGUvWE9iamVjdD4+c3RyZWFtDQqq/3d/qv///6r/d3+q////qv93f6r///+q/39/qv///woN CmVuZHN0cmVhbQ1lbmRvYmoNODcgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAxMy9JbWFn ZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDYvVHlwZS9YT2Jq ZWN0Pj5zdHJlYW0NCqqq//+qqn93qqr//woNCmVuZHN0cmVhbQ1lbmRvYmoNODggMCBvYmo8PC9T dWJ0eXBlL0ltYWdlL0xlbmd0aCAzMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEv V2lkdGggMTYvSGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQpVVe7uVVX//1VV7u5VVf// VVXu7lVV//9VVf7uVVX//woNCmVuZHN0cmVhbQ1lbmRvYmoNODkgMCBvYmo8PC9TdWJ0eXBlL0lt YWdlL0xlbmd0aCAxMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggOS9I ZWlnaHQgNi9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0Kqv///6r/f3+q////Cg0KZW5kc3RyZWFtDWVu ZG9iag05MCAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDMxL0ltYWdlTWFzayB0cnVlL0Jp dHNQZXJDb21wb25lbnQgMS9XaWR0aCAxNS9IZWlnaHQgMTUvVHlwZS9YT2JqZWN0Pj5zdHJlYW0N ClVV7u9VVf//VVXu71VV//9VVe7vVVX//1VV/u9VVQoNCmVuZHN0cmVhbQ1lbmRvYmoNOTEgMCBv Ymo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAyOS9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9u ZW50IDEvV2lkdGggMTYvSGVpZ2h0IDE0L1R5cGUvWE9iamVjdD4+c3RyZWFtDQpVVf//VVXu7lVV //9VVe7uVVX//1VV/u5VVf//Cg0KZW5kc3RyZWFtDWVuZG9iag05MiAwIG9iajw8L1N1YnR5cGUv SW1hZ2UvTGVuZ3RoIDI5L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCAx NS9IZWlnaHQgMTQvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NClVV//9VVe7vVVX//1VV7u9VVf//VVX+ 71VV//8KDQplbmRzdHJlYW0NZW5kb2JqDTkzIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGgg MzMvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdodCAxNi9U eXBlL1hPYmplY3Q+PnN0cmVhbQ0Kqqrd3aqq//+qqt3dqqr//6qq3d2qqv//qqr93aqq//8KDQpl bmRzdHJlYW0NZW5kb2JqDTk0IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMTcvSW1hZ2VN YXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDgvSGVpZ2h0IDE2L1R5cGUvWE9iamVj dD4+c3RyZWFtDQqq3ar/qt2q/6rdqv+q/ar/Cg0KZW5kc3RyZWFtDWVuZG9iag05NSAwIG9iajw8 L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDExL0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQg MS9XaWR0aCAxNi9IZWlnaHQgNS9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0K//+qqv3dqqr//woNCmVu ZHN0cmVhbQ1lbmRvYmoNOTYgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCA2L0ltYWdlTWFz ayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCA4L0hlaWdodCA1L1R5cGUvWE9iamVjdD4+ c3RyZWFtDQr/qv2q/woNCmVuZHN0cmVhbQ1lbmRvYmoNOTcgMCBvYmo8PC9TdWJ0eXBlL0ltYWdl L0xlbmd0aCAzMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVp Z2h0IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQq7u1VV//9VVbu7VVX//1VVu7tVVf//VVX7u1VV //9VVQoNCmVuZHN0cmVhbQ1lbmRvYmoNOTggMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAx Ny9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggOC9IZWlnaHQgMTYvVHlw ZS9YT2JqZWN0Pj5zdHJlYW0NCrtV/1W7Vf9Vu1X/VftV/1UKDQplbmRzdHJlYW0NZW5kb2JqDTk5 IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMTEvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNv bXBvbmVudCAxL1dpZHRoIDE2L0hlaWdodCA1L1R5cGUvWE9iamVjdD4+c3RyZWFtDQpVVfu7VVX/ /1VVCg0KZW5kc3RyZWFtDWVuZG9iag0xMDAgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCA2 L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCA4L0hlaWdodCA1L1R5cGUv WE9iamVjdD4+c3RyZWFtDQpV+1X/VQoNCmVuZHN0cmVhbQ1lbmRvYmoNMTAxIDAgb2JqPDwvU3Vi dHlwZS9JbWFnZS9MZW5ndGggMzMvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dp ZHRoIDE2L0hlaWdodCAxNi9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0Kd3eqqv//qqp3d6qq//+qqnd3 qqr//6qq93eqqv//qqoKDQplbmRzdHJlYW0NZW5kb2JqDTEwMiAwIG9iajw8L1N1YnR5cGUvSW1h Z2UvTGVuZ3RoIDE3L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCAxNi9I ZWlnaHQgOC9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0Kd3eqqv//qqr3d6qq//+qqgoNCmVuZHN0cmVh bQ1lbmRvYmoNMTAzIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMTcvSW1hZ2VNYXNrIHRy dWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDUvSGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3Ry ZWFtDQp3r/+vd6//r3ev/6/3r/+vCg0KZW5kc3RyZWFtDWVuZG9iag0xMDQgMCBvYmo8PC9TdWJ0 eXBlL0ltYWdlL0xlbmd0aCA2L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0 aCA1L0hlaWdodCA1L1R5cGUvWE9iamVjdD4+c3RyZWFtDQrvV/9X7woNCmVuZHN0cmVhbQ1lbmRv YmoNMTA1IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggOS9JbWFnZU1hc2sgdHJ1ZS9CaXRz UGVyQ29tcG9uZW50IDEvV2lkdGggNS9IZWlnaHQgOC9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0Kd6// r/ev/68KDQplbmRzdHJlYW0NZW5kb2JqDTEwNiAwIG9iajw8L0Nyb3BCb3hbMCAwIDU5NS4yMiA4 NDJdL1BhcmVudCAyMDAgMCBSL0NvbnRlbnRzIDEwOCAwIFIvUm90YXRlIDkwL01lZGlhQm94WzAg MCA1OTUuMjIgODQyXS9SZXNvdXJjZXMgMTA3IDAgUi9UeXBlL1BhZ2U+Pg1lbmRvYmoNMTA3IDAg b2JqPDwvWE9iamVjdDw8L0ltMTA5IDEwOSAwIFIvSW05MCAxMTAgMCBSL0ltOTEgMTExIDAgUi9J bTkyIDExMiAwIFIvSW05MyAxMTMgMCBSL0ltOTQgMTE0IDAgUi9JbTExMCAxMTUgMCBSL0ltOTUg MTE2IDAgUi9JbTExMSAxMTcgMCBSL0ltOTYgMTE4IDAgUi9JbTExMiAxMTkgMCBSL0ltOTcgMTIw IDAgUi9JbTExMyAxMjEgMCBSL0ltOTggMTIyIDAgUi9JbTExNCAxMjMgMCBSL0ltOTkgMTI0IDAg Ui9JbTExNSAxMjUgMCBSL0ltMTE2IDEyNiAwIFIvSW0xMTcgMTI3IDAgUi9JbTExOCAxMjggMCBS L0ltMTE5IDEyOSAwIFIvSW0xMjAgMTMwIDAgUi9JbTEyMSAxMzEgMCBSL0ltMTIzIDEzMiAwIFIv SW0xMDAgMTMzIDAgUi9JbTg1IDEzNCAwIFIvSW0xMDEgMTM1IDAgUi9JbTg2IDEzNiAwIFIvSW0x MDIgMTM3IDAgUi9JbTg3IDEzOCAwIFIvSW0xMDMgMTM5IDAgUi9JbTg4IDE0MCAwIFIvSW0xMDQg MTQxIDAgUi9JbTg5IDE0MiAwIFIvSW0xMDUgMTQzIDAgUi9JbTEwNiAxNDQgMCBSL0ltMTA3IDE0 NSAwIFIvSW0xMDggMTQ2IDAgUj4+L0NvbG9yU3BhY2U8PC9DczYgMjA4IDAgUj4+L0ZvbnQ8PC9U VDQgMjE1IDAgUi9UVDYgMjE2IDAgUi9UVDcgMTc0IDAgUi9UVDkgMTc4IDAgUi9UVDExIDE4MCAw IFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUJdL0V4dEdTdGF0ZTw8L0dTMSAyMDkgMCBSPj4+ Pg1lbmRvYmoNMTA4IDAgb2JqPDwvTGVuZ3RoIDExOTg2L0ZpbHRlci9GbGF0ZURlY29kZT4+c3Ry ZWFtDQpIieyXUW8cNw7H3+dT6NEOsGOJoijpMYmLXg+4Q4sMkALXQxEs7CStN7nEAfL1709qdrwb pwWI68M9BIFjcyRSFEn9KH2YUngbps5zb0HSHFMKO6lzCZVi+HgzUZ15GzlML5+Ed9PV83sJ+/uQ 7N/9Hl++f5HC6/vz2admbqeftknPlulqWRiqy+0UQ5aww08MneYkIaU4S48SlsO2UJxp/ZGYO9mS cY4xwsR+2umfhD8/TxfXz77/cbe8uQn/vPkc/vH209vL5bfpu2X6MPZZ+lxaIJJZagq5zBy4ypzU xZfYGVx75BCzbA5FXS/aSq9Xyz99XUnaXFMspqSe5s1TBEj1X316+/5deLF/c3O4OXcyCZ1E8Swb Z3las/GQhbPRL6N/NJ5E/et1Th3GaS4UhOtcdV5KeRY+Dq7249xEpCL4hTon/K5dYrMVP+jO58b4 LyE9QQ2U1HuvaiTWWKCwRyJ/OLQSrt+bH3+okmKcO4LGxaPDcy3QIY9Om0uHjjh0EpKSnesg1lSd 61CcU3KuQ3nuxbsOcq4xyA6dnGZBDHL36OCQIQbFUwe5z1ljUB06jG/FuR+c7K4xcKgUHIfs3E5h 4Ma5nYIS1RB4fAM3cvFtR0ADRKB4qq2CYnoSmkcHA9W5nVoNoS6CtDSX4txPK3PWKvBUdeszZSep evYTsYsRsTiqmkBRI6JjPwSKeolIoKiXiASKKhE9NUrasTQGHpXuBiIBogpEcpxSAkS9QCRAVIGY PfsBRBWI2RNqQFSBSI5jSkxeIBIYqkDMnlADogpE13YAUQUieUINiCoQyRNqQFSJSI5TSqCol4gk 3U1EAkW9RCRQVImYPWUNiioRs4c6oKgS0aXSDYjkKR1crxWI5CkdQNQLxAyIeoGYAVEvEDMgqkDM jtLJgKgC0UOQnIoRMTtKJ4OiXiJmUFSJSI6yzvpqdF4RMyjqvSJmUNR7Rcy5eYmYAVEvEbO+MZ1E BNncRMygqJeIGRT1EjGDokrE5ClrKUbE5Ik1KKpE9LgGiHqBmAFRLxAzIOoEYgZDvUDMrbmBmAFR BWLyVA4gqkBMjsphQFSBmBzpYUDUC0QGRL1A5JTcQGRA1AtEBkS9QGRAVIHoSCmDocrD5CgdBkOV h8lRopzZy0MGQr08ZDDUy0MGQ708ZDDUy0MGQ708ZDDUy0OW5OYhg6HeGyKDoV4gMiDqBSIDok4g MhjqBSI3dgORAVEvEBkQdQMREPXeEAsg6gViAUS9QCyxuoEIsruBiIAZED0IwS8vEAsY6r0gYh9u IJYcvUAsYKgCMXqyA4h6gYgyMyAWR1XjweMGIuBhQHSlBxD1ArGUakBkT6wBUecFsYChXh4WMFR5 GD2VA4Y6eViAUOVh8bjWopuHBQxVHrKncsBQLw8LGAoeAvMeHTEeRkflCBjq5aHEbDz0aFQ3DQUE BQ25O6pAQFAnDQUABQ25ORqpgKBeGgqJ0pCro3CwfTcOBQj14lCAUOCQu6dwgFAvDgUIBQ65O4pa gFAvDqVkxSE3T36AUCcOBQT14lCAUC8OBQh14lBAUOAQtyqPjrhxKEAocIhbokeH3TgUINSLQwFC 3TgEQt047N2JwwqAenFYgVAvDisQ6sRhBUG9OKxAqBeHlch7OawgqJeGFQT10rCCoF4aVhD0T2iY 5Ws6IOg5DevQUa0U3oap473WAmHfUlPA1RgvRdRn+HgzvQzvpmeLGpeww08MqPYkgYFY6VHCcsDg stf/Pk8Xry+X36bvFpiG0tWySEhhucVgkjlS2I1fECnpkhnE0VAPK6+nHRgcgazN3qtPn17tf7/5 GNRuwpEhhhFUDqKzXE8XT1+sC149v0cl3cO0/rvfvxs7S/rUocCkr9gUDviA2zVjgxltBSupXCAy I3gVIhyCWMpMCfGaEuqHsSgLAdsExxEYUVnmGlNIyDhX3HCrzYZVQXCqvkhSuIM6rovNZlODMu6b CY9QAL0LFqeoaWbcxPtYLeHwwaq6U6gHlfEa5Jwwbzira+tubP4b80/TgUDWbhvMqADMqWRz1AVQ nW3Nsn1IzT4QvE7UbMsQUxmi8DaqEUDJjQ85j3GQW0VZxXW0rSFIZg4x0YfsncVEA46Y6Iw7c9lU sG4+fkgmV/MHBsTEXlbR9pf6cAfBZvugFW2FRGP/5s5ZOPbTrda4mAcyoraTOhcc8qjlPSp/HTlM L58ELZythATDI9dIgQaXkx6v44ejL62gOW1iiR2heXC1ICOsw0MZj7Sxz2H8KGI6ek97GKfYNJFH 7aN4NL7K29pDefPs3HPE4ckUH++rzG0UDaO9ruoRh1o9Rw8w6xm4UJnEFteHzzTkbs5VLWTVlwbf sxbHtrU82+IqlzEKdt+ZXMfkYpNt2zb5kWpD4mMfk3O2MMiISoVJE+nBMdLutTl6dypLNvl0/iqX bhvVy4UuF6laaPrq3EmkxlYsUOPD2InNLkMq47THum18hDWtm2MZNChnIm9xOlntTs/3QyK7lWjC ID18UJHHClLPxC9Mjul3VmWlt/WLBI1QEQuAIus8YGcBRR2oBGChawHFDzW5iqMo+Xx8jbYpb9JW wY9yMWQFzdEWxNjP6j/2tHrWTsc3R4f2aSGM2fhD60Z7h0UBXuhh00I/OYy05hmVbzKPsEFObcwv I844J8f5j9Vx1hl9zebjkqdcojwOTLJOQNoQTlABGUnQW6GBIvdqKdLDd55CZZp1bi7KLlwf1koE 1fTYynnbtj67G7/Qdytsyar00Hetg1/8vDVvtW59sdRmZYE22vW/c+Ngvzb18UuNa1tbdb40/p8T 44QO1L8O5HNWb0TWf4Ncp8OnirffuP2N29+4/Y3b//fcHgjbuN31hP514PaylYTt2djJ4o9CxRJa qFhwvZ53PVv4UKw2kXCNKZtKP5Z7F7uG49XBg0y9jFs/dIdSxIPB3pVkiTkLxkmbwSn4i/qMHdNQ 0CYbWgM0Il5W+lxpo1/A0JGrzZ4BzBlvWsxBzHR7GoZ15pHABA7qNH0pqT8lgKBk3qqRsg0eEBRK ZBTBYy7Z4xM7P13nbvvQEMkRpVUFH/J4QK6unXwoxxlD5fhhM7rtZiyrobYo4hjsktYSxWyFWfAi y2v8UMXjRyLyansd8fzl4udfLjWmV8uCK0BYbi3Yu2TPvF3Enpdr6McYqyr86+Lpi19/vOx5LhdP L5Oe44vlEo/Bi7+Fy38vf9fc+Kv06vm9hP19OM2EPVsJqsnm4ZjONaLTQJNxRokV3kgmfEN8qHR9 VpJmaTBPokKfWranImKvVx5Rk2hd6CFqsOEeoBNz6kFXFBXFMrzXDCOEGbZbsuwczChCq6usCS0o ODjBtpsho6yo5nFZUA/wd9GyKxU9SSUx8yqjzdjUNIZ1W6spFTObSOv0rrcWXZrqOKZxZtufDBnO ijobj+dYvW/2IZtFRGqI3FdxTK/WkoiRM5N7PRlOttwXkTjCjnCWcbEAUudidCGQTvuwAnQEJDbr Yzkd3V5nIPqrm9lww6layDRRmBEY80Zr1Al6nQNhRtAH2P7nEvugGNZeZf/F0dl6763YWq3GAr/2 h+nqhwNK6/q9bflPdOBmioX/S3u19OaRG8G7fsUc7YO0fAxfx/U6h+QWQEACZHMSEBiBhCSX5O+n qpvk9MxnOfzWDgxLag6Lj+5idbe/B4P3k1yK5Q6MRw0GXUTVdQcG5IIW3AOB/x1cAPW7A4N3AReA EndgKkpGuLrdgYmQUbjAp3swrL2ciMO3MZ6pEhh/Bw0sZpUGFrNKA4NZpoHFLNLAQJZpYDGrNLCY VRoYzDINLGaZBsgDBdyJ99DAYJZpYDDLNDgw6zQwmFUaHJB1GhjMMg0MZpkGB2adBgazSoOAPIgS ubY7aGAxqzSwmFUaGMwyDSxmkQYGskwDi1mlgcWs0sBglmlgMcs0wB/pztrAYpZpYDDLNDgw6zQw mFUaHJB1GhjMMg0MZpkGB2adBgbzv2gQ2IwQU9CFARO+QoO2gLnSYAVzpcEC5oYGK5gLDRYgNzRY wVxpsIK50mABc0ODEyZ/FXJlQVXIH39QRxvRdwoHekcL96EB3L0zrVHQiHttWV3hymyekrZCIcga O3q4NHojTEDr2hFxfyo60LurXXcN2oRyRmafSfo6mfFFF8FBXJDW9E0GXJAB70dL5tiThSenq+xB jsoTp7ExU0pGpOxd0Oa5Mo4e0MXF+lTj6AwbZ7jZKuLe2irmOCCaDqMugW4z8eg7Xt4YiOwMcz9F 70pbMQE5xeocxkusvPyTWJ2m2QX+9mAi2nDnvEXfZHv4reE8AQPwvl6piBdkIGyY9JSd32IswCW1 oUdZvfryYAbICJoli8lo0wQlaaZymd6jggEo2hYrHIKNZHuvxWgNZevnExnSFfQGHMgaNsxgoPsM muFkneC8eSw6UvGCokS7yv4+JtrmdhGhd3rcKPHlgNf7kd409TPDT6tfTm/LgXF9md3mUtd9cAqO cD+6G6cEiSQKsU4vjCi9yKUh42NAnCJWimpV/Vj88BnviIHa9LuYIG+fbjjxwueF5XOdCxqaDGLz L5d1JJUgBKm73iDuYTOeO1zZOABGpOFKcQ4YUYzzwId0eNbLS3s5HD9mF7J9rDZNuxuGK64R1TE1 JnmGBYeYrICfpjuzPtMWB6lSnjNo7vvJPOPB2lKKbiDPgBRIegAAaed8ejZ9wCO19Pl63RLVjMdl +/TTqwlPhe6ll3Bw2T9oDJFJNxMuaqpeME17hhfR7Nc56KCTazZ00c/KJksNuUoXsJLlyHjOQkhP CcdPjEGC/gTJ+vT88NPzc4ZcPVORIJmI2KP+gulEFxXv0vb8hjnPLw8fPn18/vvD756/SyWt/qlY FOhTM8Te4cAUp/7h6ckIKCCK5TfMhk5MAUSShkwZReNAjN5+j63roVjpMjn4KX9YPkU+Pg1kyEAk PK8wmZaShmI+/DGgTD0miJVP5gkuIa+Kb5RdCk9uur8842bu1h/xuFuXP71O6U9dLFIdFi7Qra59 Qezc5rp78jd78KZNHOxd6dKX1f8hbZcAvRwh9FPsNFrFT+mjOfyl1QUC7s3sIDJ2YcNQvtR3PxMk iC5R+VgEtD6SVXuUICm3zfhsXlAsfbldBlGDd+Gqwo99aiDKK5oldh+GMOy5Mq5wSOA5Wh5ik6ik RVWvZCUDk8okA3BxakI3lUhEWzvWYZ/B/5Zn0j/uXb9Sk61Lt7mzeSVzwKf+Xb0Sp/qNi+nsMeCH 3uXTswkSbnF6lz/hDHFtu8Ts5YiqDtAs+4kGB0Wm/pEDzc72UwANQy4CmFyUWqALICrZu/RP4Vb/ fvnB+ie5PuORNW/ozQE8PpW/mLkQeOp2ETA+s8zIsh5TBcssedqhaLRbnPVfzrj4LP/EsuUfZ0Mk XruN+ai+mtNAelwDwURkRhxpaRoTccAC8j2r6DQEQfBe5asvru8hBdk9TPWS3XVA3l6ep+v1SD/6 LFjkZm2uXMt1E1ZuQfyTWN/ICbtD63x0Yhr97rbKUZbMO7QrS1Y+pIu2cHpaJW4mjvVcs8lizUQ2 uN41iXC1PpKaCghCnHkFFoCqL7f+C/3VdTkaA2b+ftRgJ7hPGtteqvKNFhA9pXTENo2Sls8NiVcm QHhEBMAJwROgEjLXN3aaGkJL865UULm3JaOCMsRjAVX07sq7jA/imiNvDt8NrRy2cXWb9VOPzJQP 2kNs6ojqOUgX7UA/I83rb9QOhVvt+Pz/0A6f87l39Dmde0cZOHpHX3fbO6K4OveOHDC9I03TO9I8 9Y4Df/SOIcZT78jgmt5RYm17R+GC7R3HDK2lrHWCj95R1je9I/cfveNxu/48OHDqHeVCs3ekZXrH 47Zdjo7ZbS513Ud7R49ew/aOjILpHUeUpgSNAdUgWqZ3pHnqHTlgekeSwPSOgxNGh8aChib50jty xPaOvIHpHc+uZNvm6rl35IDpHWkevaN8tL3jMVuEaqw2zXbqHUMMp95R2Hn0jsJO2zty4NQ7jhm9 rrLmGd97R9nA9I5ygKN3tM+mD1TbO9I0veO47FA++2q0d6S3be/IaJjeUUyjfcOe4c2mdxx0mOJ3 0EU/J9s7CjVuSyck/u/qHRVv9e/nH947VlWPgNM/OjDfOeb2J5CZ68hLGt/f5C0E1tDRB/HG2yiq hVS9fat2xitcMspP3Oq6D8rQuc/4bvbZEQbnzT6saZ03+4wZZh+2B3T73CdlTTy6zfhstsk+yjub 24xUN7cZM2SbvDOSkVjRA8YpsJ6G0siD8Y0tIAaSMAyrZFEoQpo45QvmoMILs1XjKonx3Evr5Q0y wBPL8tyrlcEtZFoUlHhMTK3we9zYkr7DrFB5kkf9RWbtfMqKtsz65w9mFioReIX64bCWdGviSKzB exwQPyBZ3kdoDnU4Ux81AA4Mu2LM4rVxJc5k68W74XzwkvggZCdK2r9KlGsljdFasSx+E9ts9ToG UIAPxRME7agT9HDngWYBYpsVx210TwbvEhjE8NHzsYfqRD/h9DoaJSRt/Z+RCIPcGoWaQ2ZHrB75 JxZ//s/DXz78+uHT9sv2+dePH//6/AcG0HpUeOpBXalGxKNgYKg3HtVn4PFmSxsebbH7PqCBqMdX fTe8Lleu/XV6u9XrGAhSG4+BJnZ/vnq480CzALHNisdtqp8ePfkxisyjpN1Zl3/Lj/v0o59+/Plj Au0/bBd/3v8cjF+9ZnVAvPoJpU1xSElA7IhD2LM0SoUNDHNoE0FGfZk0lYLMqcrVivIKgMQcl6EC gTkVCIgoJ6IK2bgjCwemr1G+JOVX9cLdN1mUeZ9VrJI3UUQC5KuHIomehRJ7/q7yd5I2pDwVsXLS XAzfZJ3q9TOv1ZeiGXcxQ5/eKPncekTVsbLB/bLaOGwO8ia6cvL0VR+JrOikvuX31k2dXjRb740s gt2K+ex7PX7yhGZrE63MYtmXOrqB3Quh9iBlCZ1PLcNAlHr+4CQgpee6++lCrfSO7dOhlchYRR+p N7IHzmwRh6LE+Ew/IPq3+hhZVWeZeegjjt71Eb6px1e+5uiEpqhUu0By4Njqddj0ahw2AQxKF1Df Jxx2nzAEVQfmkuM2YeqjZB4QoXFalUzKpLvpBXtqM+89OuzWp35DNvnSHd84nvif8axNmkPaRHPH sqPX9SjRKgea1NnMwJXZEkwcdO0z4PdOzyiJffdFnsqrkAZJHPM6ZzABjN/dKKZHzO/iyL9YI7KN Caz7oXWBjVtrTRauxSUc4uXt4affvzW3ff6H3O99CItXl3Z/B4T1kEuxrEMQvNgAiXdAoB6I5R0I +Nnh9qD2LURmfwUC2cPtEfkOCZdd5AcgiHqKgMSvONkvYK5eXsFc3byAufHzCubi6AXIjaf9xdNf w1xdvb+3T3qXzu8eLb1L5wXIsp/Tu3RegKx6Ob1L53ednN6l862PfRAIcgUaE2nErk5OC5irl1cw VzcvYG78vIK5OHoBcuPpdOPpW8zV1Vkxv6VnCl42oFt7aYgT7byLM7kmaDbymjKdbMFslDS3hCBr sCxJI9lgAmrAjoj7U9GBnq523TVoNccZmQUbGaFN5xddhMELUuO9yQC7Wacdp+Y4xyQXnlyvSoMc lSdOY2M+AJQxyd4FznRlHB2JfY+a6DXVNs5wM/c2hoG3zXFA9OlGXQLpO/HoO8g8BiJTbe6nGDWF lJQoOcvs/vZpvw7bu1FyRqyI690MTAQKURYzxwpNnFhwpfb9KX488f/SXjU9ctw49N6/oo/2wZWS VJJKx3iTw+ZmoIENEOc0gHexmNlkEWDz9/eR1Aeru2eG8sQwxjNk6UklvkcWideOsZSUeWPIe4tN d+GZQqIgieU9stUAKazumVNoLEF+b34Cgjggvbdkh2By3MLcKQWdXX7mFEc6uwOB3Jw+JT93Cnp+ VN4UJngZEDMvA2LmpUPsvAyImZcOsfMyIGZeBsTMC+Y2wkzQ0hFmVjrCTEpD2DnpCDMlDWFnpCPM hHSElY+CrwNalH2ifimIlREFsVIyIGZOFMRKyoCYWVEQKy0K8hovbRLC3oUamjv1a38dcs2LAXLN y+uQG14MkGteXofc8GKAXPOyX/FyB3LNS3lD05h36hH3uGxFtzJiUyuTl6w7GzIdejsXWx+z39ij raltTtstONib2r22OW4JrVWEh9N7l9cp1H5WU9okhgenu6awFHm8otO/Nm+aLoQvRdWmKRuNuVov dt+udX3Dxq3HyxxaQ1C6hKgC2hz9VL8n5qG/1q2jQ+o91R4SNx/zUsK36A9p58M8h6i82iJ5bE8D nZvCRB7o1jwFKseJzgTK4TDS2TD5ONOZQPjzMNQdQM/0itSeUIFypYPcq73PDEsDZGdJYewsKZCd pQGys6QwdpYGaIIlBbKz1LqbGZI6xs7RgNgpGhg7Qx1jJ2hA7Px0zAQ9A2NmZzQ5E/QokJkfjTET pEFmhhTITJHGmDlSIDtJGvQqS7ctzx2W/OugG5YsmBuWLKAblgygG5YsmBuWDKBblvwVS/dANyyF N3eZHo2eC4euSBytsdRdEtvoiXIZjeWNPVqk1jO1DWurqU5oPVNaStbNpo/7EsPoNpvd2k06pBz6 MNCdwugwb+zb1g5Nfjk0f8NBPeZAVLvv2PpJ5aCuc7yTtJ0hbSrqR0IOXFVC3Jn+/fFw3TRq4Beo g/7JKuyfzsHh7WILVUB6O9xHXhyB9tWB941uScjrENChpig2SkhCGcC9H07KASQ/z4nNLYqJQJMZ 89XyVeIGBzqnc0Dk/OqYZ+/CeVtBoc/n+n5kZtlBbkCO2u1jBbhpK8j0B+sAp5uHLJ59xz1DQSbu fL4LkWx1uxB2Eh85ZLAhh5P7RUdhQZTYIlLJqpeT25KjXZ9Xl77V9Tl4C/LQeRRuvOW2FmYh7D0K jaUHvjRqaHNwUNgiwZO1y8PsWszojnDQ/NXNwil1pYkHTihEd+8bKplQ9CSF8MZJPDF7Fsi+yQ3C 5s8qciOUhRxQRGyh5OBAEVkFD3qII7J46BqcA99WZ8qTtls39WlwIz1TkMDsIHdDGme8RFcF4tTD mXZ2lNBEFVNfQea2HcwjHqrNOcsBnAYkgSgvACDZKR3SpjpQtl1dL9fNQcwwLluXH7LGL5nCS1FK Ui6zFw43ZI+iawvtgrHbnd7CM6+UyyYHWbwnJRd5LGrS0uCrfNFfEhRxFiSKNsj0jq6BEvQPlKqP F/q0OeLpg/yCiSwMW0Wt8Xx5wpp/4ufyQP/9eXr38f3l36cfL19VHFtlyChGRal4Q7Tkw8DVBnnG HvDN5cmdsRpFoVe76FBSnCpf5AjB6eeh1OLHVrxa7F2vddg+Bso0Yc1jZsTouKy+yypGiXvP8uYQ WY4FbKWDeYAzv7vgqa/mKpOKnM85W9Tdasa2u9VaJ9fJNa/ZIl3DwgWqVQudZzuVvu8W3c0ZdNPC AXZozaTOJYm/j+crgh4Gha5XNmEru17nyGzx4sJGhDu12nPNulJDK3Oxnn4UiOciRGUOofOlepIU GhFITOWsYtYvyJakaa156HZrldpZH1sveOilyMyhxtD7ZvedN+5yaoE7suVQWSKVzSwlLicRA31B uhiAC70AVFOERGhth73ZR/D/OE3qw60Wq1j46FxtOlllSXe4WJ9LVEIvde1isro5XCtu6ZA2nunm oNdax5ohXDlfcfYwWBUHmXk7yGBIpBc70kDRq12vdkohV9Uuok2kD3+tdgHp8nqxE9DdYve3NxU7 /oonZFRxSsvkQKZJrQuJYBAlddRRcioRjdRpSblK1MyUUb7ILqF3dinhlr2xY0s3drQaFeGx2liP vqq0hh73AXOgoZFGlnyguBJgA36epMIURJzxTmpV3VzEHz2f7nup4tPFwYmW+tvVTqO+em9F+Gal 77zn60OoJ/Mcn0idC79hDejeM4xNVayrLbUn8Te1FarE39tRp8hmAXcrh7PicT92Y7xZUcz6lTOq VqlSPbFItQDFia5ArZ0Uk9v4+ZpitfY0h1q/je7qAHdRuK1NKCUk5lkkXBzcxtasUm7hK8sLwi4l AJpgPAGkXvT9lR17wSBLPrLcG6U6cLTeSAmPWqMsdxfdJTzg0IyPZItdK4zNVqEuvTOqzPRaQXar LHtj9UjSVaHApALpTRYKAd0tFD+8vVC4lI4joEvxOAKyY4yAbt/0CIi26TgCkkONgGSqEZDMwwjY 8GME9CEcRkBiUo2ATKweAZl4PQK2FdIlaesAbyMg769GQDq/jYDjdjUXyHEYAflCfQQkS42A47a1 9ozVpW91fY6MgA4jgx4BiQU1AjaWer1pDik4ZKkRkMzDCEgONQKSCNQI2DShik7bUMkkXY2A5NEj IN1AjYDHUNL0te7HEZAcagQkc4yA/FCPgGM1V6W2WzfLYQT0wR9GQFbnGAFZnXoEJMdhBGwrasek zSO+joB8gBoB+QXGCKjTpjp2PQKSqUbAdtlW5nTWyAhI0dYjILGhRkA2VaFrdqc3qRGwyaFXuiEX eRz1CMjSuG2K8JX/ihFQUHeL3fdvHAF3KRUer/phhczXlb7aC5TLKEqb9vyJhe+pFQ7O89WfWm/M CqpT2K5XPOL+rYvEZa7PQTfZz2nP1TkbYr46dQ61pqtT57QV6hzq8inG/ZyY5JMix7TH6pjkAidV P6Z9xPoxbcXjkc4M/fKnK2ByO9OAd2DT7+T+IL+IzY2SRkB32fz9TWyKEy9MOboiYXjW4fcHSF6c 6hJxXlY0stiW2hNUIy4PWBRWR3WzPa5b/5eUSSWT/6OL0Mml7IVXRvQuSK6Hp9N3f39ySLsffuOz XgBtrGd8R2dAaMPiGqmBMIPCCr0UgOIUKCKEK32SZkDogxAIfGonQBBOQiDC1Os5EI1AhKnXQ60B VxEtwwwIX1EEwm+vg/BJRZ+yxxcU8QrMrgkFsmuig2Y0oUB2TSiQXRMDNKEJBbJrYoBe0MRfVCfU WXYp4ateAPKTUlIwu5QUyC6lDpqRkgLZpaRAdikN0ISUFMgupQH69lJSZ5mlhCYkhlJofpmRkoaZ paRBZikN0ISUNMgsJQ0yS0mB7FLSILOUFOibS0mfZZcSTXYAbTMtjwbZhaRAdiF10IyQFMguJAWy C2mAJoSkQHYhDZC95dGg5xTx6RT8ugj9LpL4Co0voYjyVp5X6zOaLbpWoclMLnKEvavzsTmClzH2 sUHI4WSFCProSF5DxKE2bTkgx9LAglnku8uFxpTz5Quu7lYeS+TXyozQDnnZQ51KYMtPWkPx5z8e /nPCNIVxwtOswn8i7zCx/PLu87uP558/v3//6+UnmlyQo97TJRztmnuObiBQArXR67WnNUXXM/2j Y+61ELUbJYyDCLbQqYnP9zgdlJYCEWx5BgSiKRbbNgXawMn0SfsS3exJGCADBWIKkyChNUY/A9rA NMVhnwLBl2evBH1kioObAUW3xDh7pxiXQIIo90BugdzvgcriKRCjaOXnTsqt5X1er59eFLzawK7d AZrQrgLZtatAdu0OkF27CmPX7gBNaFeB7NpVILt2B2hCuwr0vHa/puzeKl4dZVa8c60zf0nxL8LM Olcgu841yKxzDTLrXIHMOtcYs84VyK5zDTLrXIPMOlcgu8416BvrXB9l13lsY8OczhXMrvMBmtC5 Atl1rkB2nQ+QXecKY9f5AE3oXIHsOlcgu84HaELnCvStda6Osuu8tGFoouPWILvKB2hC5QpkV7kC 2VU+QHaVK4xd5QM0oXIFsqtcgewqH6AJlSuQuePWoOf0+gmpERbSmV9yocwoCwDbvoQkqRGWlPrj p9O/dC7tjlzkCHtPn8fuSBh5u4MgcLjCjppxB0fyGlIdY9ORpHTs4+nL6eOFrgyOPd6bf9Gt0yL9 zJbXdL48nVbY8pPWgPDQnPABq1cXz5cH+TOV8+XP0y/vPr/7/vzx/PPn9+9/vfx0+vGiRgsodsnn zSMfI9/6/6xX224cuRF911cwb6Ngp81L8wYEAexsgN08xckADpANFrPSyBpjNDY0o13473OK7Et1 90jNtgXDksjmKRbrVBUPawsgmgiyWYMp43EUI+oat6HFUFLcagNGcMAbhMCBDeBtVYNwg2rTGKKn ODyJmojVMoCntBzH8AYfgq6iMjiWqUCoMNZVAaE0MlaWdlWVtgkAKNnFhMnxAmUGmW+sp4dXal/e YEUwFEejVVXrtGPts4OItArJJaLawFPr0oE1HDc6YuN0WpsPhIokbVvX4FbDPuKhIq0wwMFDmzfQ PjF6Q5lDp8UXEyuV+iw5DaMULN2lAWUwCtebdgILEFSJcfdZpaRARlc6D032CRO1SxNW5e/edd9p GPJy2SyPFUUIMaub7UPlclSdykGss4M4fPYHR5AuOShpBwxNM/R5mM8X8gYUywz3zWoqagzrZsjC cYOMpizRqByPuOQss3WqPzSl2iYHrCGPFEU9TxBPCaFtLgtcdw5xCsKp5OTaeazwWlJB6+jpzM2n 5qprJhXiQeUokVooD4Fc84S5u1JdGTRLKYgOS6H9cKBIFZAWsnqBMZODj0Yn1nRTIN0qnfqKDpI6 Qvs19ZUmGXCyPjvqbqdDOwYymnZMAEyYtEAH1Szox82CjGgnOpMNotmSgkd9tDtjSKw7YiAf8AOC ha7zZrMBJ2JD50XJQE6k9x72bUDoyc90Hkk9R1K3QbOhRrP5RH3m/TewBo6o5+lQp/OuqQPRVRQp hah3O02nbb+nGMeU8TrYlIEPNJEWNBHFiOq36cl5MZW8y6nmDFE6nBgg0pjZy4B2uy6+IAS9Hct8 IlqHQK2iGR/ascL56q4LyDCd6BD0BglsrGOqI6+bvpLitTS+3S2cwigFGQ35QiXDw/s0jG7uCxiH HjGQCAWYiO6/cB/0d0/qSi/BIBYkKtwCTETpmIX7RDRs/9w+SbxcwKApqcE+7rJK0ljpLTDxAj9x HjPhpwAz4WceM+WnADPhZx4z5acAM+EnXhaXHDPmR8lnVCy0JCARV3IxPxxTyg/HlPLDMMX8cEwp PwxTzA/HlPLDMeX8oAnSA1cv4afHlPPTY8r56TAL+Okx5fx0mAX89JhyfnrMLD+qyi8bUr0xujCl B5fWHGTMTgFkTM48ZMJNAWRMzTxkwkwBZEwMhyRippAJLzpDvkWraehzbE5CKHLJY5uXh0YYPFdA NFQyq+P2GTQe9/KnkUOtNXq2yJpZb+QQ3kFJPt2nGU95FLI7iE9oh1lOJbhRXF2Z9Jal7SDrxsOJ OEP8skpszsrGUKhsfR535lp12I9x6t6ZgYQEp5WxLKDtRLerDi7x0Lk1neggzTmZjRw3bX0jaF9b R5LlgLyEbm+TzMyKKA3zHpmpFmHwSkRlSr8IhCccatOYJSBvUnNahvGpO2m3BETPOoRB60ugZ8Qk vU2oQ6nYgepZVXSBJTsPmrBUgpmwVAKasFQAmrBUgpmwVACasmQvX4kD0ISlZzQ/0znlLHFQKUsD TClLA1ApSxxUytIAU8oSBxWzNACVs9SpnSUs9aBylhimnCUGKmepB5WzxDDlLPWgBSwx0CxLE+lz gSQ/i5lwVACZUFSAmTA0j5kQVACZ8DOPmdLjR/RcwEzYCd+tMjWEnjIDVZQnWmHJVVIaQxP52AvL ybiXSK1mag02UpPt0GomV0XPxaa2obKmV5vtuJWbtEkc6DBQ7UyvMCfjqbSDyo8D8ddPkMbsEc24 s9jqSTZBqrP3KctOYyxOYuqsBx/ascXP5iSRCJtOdNK7QUzGeGzkgNehwkPDONMEZygh2/oms8ig kHwZlepzz9QeY8elWgDJpWr8EsykVOcxblyqBZBJqc5j/KRUCzCTUo28vPUlSEiPW7TpBqLHL9UW o/GHQsP2SxhloGJKOaaYUw4qJpWBilnlmGJaGaicVw4qJZZjypn1ePcCZBYx24PKmWWYcmYZqJzZ HlTOLMOUM9uDFjDLQMXMMkwxswbXFqSwi0uYZaBiZjmmmFkOKmaWgYqZ5ZhiZhmonFkOKmWWY8qZ tbieAXKLmO1B5cwyTDmzDFTObA8qZ5ZhypntQQuYZaBiZhmmnFkILdzNcVE3ZqByZhmmnFkGKme2 B5UzyzDlzPagBcwyUDGzDFPMbG2g7aG6FnVjBipmlmOKmeWgYmYZqJhZjilmloHKmeWgUmY5ZpZZ VUWdQK4KuJyDvcCslvOgMbNFmDGzRaAxsyWgMbNFmDGzJaAJs0WgMbMcRMxewkyYNRnzHs/dmtab Gq9er8RDN4F4+/TepbZOzwxM2zTGa0q7CxNeV0oxBBtnk17hfuATAf7GNFHHSubHpk0r7q8osyzW uBoJmhxrJ5Cxtt1GpcP5ZhtX1bQNmlUcTMjKqdbT5rHZTGhZecc9ayb60zcQC1OWG51MwL1omF91 qOq0yd2VEvTvdHO8IvXjsDjKdAitK4/6dboKQTzusPTd5urNZhOxfHNHhAaxxn+ZzKH7Ro+zSSs2 D/j4Ef83N1cwJWus/+Pqv6sf3/77139eR9hbvb1WMuD35lri508/CIzxx/549/nxYXvefz5uD+Jx e77fPYrz/faI/THxdNqJ6/9t/nH19w0yqja6qoNwKnGwRpZb4ZFwcJWIid2nh6sPfxbHqzd/O6EC ToIdeLCMG7hD9uXT+u60cBDnpZ9S1ApxFUFXRuUDt8Ylkjz/D2kLSUf/i5Sh/uvmE9lzk+hlW0rG zlhvxEmDXEyGEEipKKRr+tPYHNNfVu/Ef365FtdrW7nV/iROT6cvu5vz7lZsj7fiy+PnL9uPWxo+ nfbHjwjmTiQe3m5+Etvz+XH/29N5V4m3PLDKV8Y1HiFWyBgtLGKFScTmA2KZY0Mfx4cxpnJhdBp4 blIydHkAd61bkRPXa42uoVd/7A+H9u/Px8NX+tusnq5xWr067W7TuLKrbTNDY8RttadxXPWJ0y7M 2ZOX+RUlUf7iVpRL9Df4Xt1uz9sWcbs77H/fPX79UxuK99+QZVLQP2Kslji5FjogcCj5tUF5gGd0 Ex0yPFVW+/2B+kqMtJkONpXnA02kBU3xYkQBbjpIXkwOulzs6D6gaDgxQKQxs5cB7XaHNu2l0JZO ts6/UOAhUnvTqF2653KFt4Su3t5+Wv/r53en9c/HayR5zqEYWWwGYRtGtAlbX5TDz+Oi7Ahps9NW sv7e5LR0lpSW2f338yZwgRmTTax+7U9d4tsFa+jXxkpH1tbMo1QfzKUpUsu6Q67E9/qhsV77bI3c QNmTG6k0X3bDvKobZuiG9MmN1BVedgO3Olh5LTfQILRlaVInN56oGb3ohkFDb/Pr+90wWpHkc6Ns 3Z5mnKhl5/0rOAEJNnAi9XN+X7/sTU0J8mrM1JQgnJmcp03Hf9mR4CDrXs2RqIaZmi7ofNm86AbE +CumCGTppRRJ99zLbjgSua/mhnNdNNYsHOmOfdEPJ9UrhsNJlx5Jo3D01/uwyz+j8CAbcDsziTeW djOqLuMXyjrVyLqf70Sr7KDptjfnp+3h8FVsxWH3cX/eo+SghEn+fEHO/5BUXSv1UIv50/4o7oAU u+P2twO+bx9hY3fIQk8Kkk2g6kcWonyd/7497G+TnapjwuIefkYFDW/66XU++DyjsfEk0GKdfkph lak8IqgCi6CzdUQAVaihYCTUiAuuFdo3PSVcgyh0wkBXOdo5dKyV9JobSIWePUeKbZ1/9R4kA89z iNfMMKPm7FlV1fF5ezkTVPt8kk1OiBu8g07n7eMZal+hcFfnz/gLxLSU7cT+XDVTH+53R/Guy4pE OiIpra7hCWjPFRq6R1rIu5ANAcNvxfbEs40STXw+7sTt9mtOIeQ5HrekbJFJFrneGu08b959B+Af 8cRbO3r5iXsY3h7QnG6/irv9cX+6x+vk/wKlYFjCg7gV2AcxN7DAcCvEBnOIycCkDkzlkL5PYkpZ Yl5yKrjbAxEBhVdicnJqQQnIT5q6wJyokZJZBOwd5VTqQXMBMEZADV0IBYwhYD0FjCFzYCFgbIko QQzNENnDQt/QABrfAAEGAOwWMs8KDQplbmRzdHJlYW0NZW5kb2JqDTEwOSAwIG9iajw8L1N1YnR5 cGUvSW1hZ2UvTGVuZ3RoIDMzL0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0 aCAxNi9IZWlnaHQgMTYvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCu7uVVX//1VV7u5VVf//VVXu7lVV //9VVe/uVVX//1VVCg0KZW5kc3RyZWFtDWVuZG9iag0xMTAgMCBvYmo8PC9TdWJ0eXBlL0ltYWdl L0xlbmd0aCAxOS9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVp Z2h0IDkvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCnd3qqr//6qqd3eqqv//qqp3dwoNCmVuZHN0cmVh bQ1lbmRvYmoNMTExIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMzMvSW1hZ2VNYXNrIHRy dWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdodCAxNi9UeXBlL1hPYmplY3Q+PnN0 cmVhbQ0Kd3eqqv//qqp3d6qq//+qqnd3qqr//6qqd3+qqv//qqoKDQplbmRzdHJlYW0NZW5kb2Jq DTExMiAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDE5L0ltYWdlTWFzayB0cnVlL0JpdHNQ ZXJDb21wb25lbnQgMS9XaWR0aCA5L0hlaWdodCA5L1R5cGUvWE9iamVjdD4+c3RyZWFtDQp3f6r/ //+q/3d/qv///6r/d38KDQplbmRzdHJlYW0NZW5kb2JqDTExMyAwIG9iajw8L1N1YnR5cGUvSW1h Z2UvTGVuZ3RoIDMzL0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCAxNi9I ZWlnaHQgMTYvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCu7uVVX//1VV7u5VVf//VVXu7lVV//9VVe7+ VVX//1VVCg0KZW5kc3RyZWFtDWVuZG9iag0xMTQgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0 aCAzMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggOS9IZWlnaHQgMTYv VHlwZS9YT2JqZWN0Pj5zdHJlYW0NCnd/qv///6r/d3+q////qv93f6r///+q/3d/qv///6r/Cg0K ZW5kc3RyZWFtDWVuZG9iag0xMTUgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAxNy9JbWFn ZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggOC9IZWlnaHQgMTYvVHlwZS9YT2Jq ZWN0Pj5zdHJlYW0NCu5V/1XuVf9V7lX/Ve9V/1UKDQplbmRzdHJlYW0NZW5kb2JqDTExNiAwIG9i ajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDI3L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25l bnQgMS9XaWR0aCAxNi9IZWlnaHQgMTMvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCqqqd3eqqv//qqp3 d6qq//+qqnd/qqr//6qqCg0KZW5kc3RyZWFtDWVuZG9iag0xMTcgMCBvYmo8PC9TdWJ0eXBlL0lt YWdlL0xlbmd0aCAxMS9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYv SGVpZ2h0IDUvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NClVV7+5VVf//VVUKDQplbmRzdHJlYW0NZW5k b2JqDTExOCAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDI3L0ltYWdlTWFzayB0cnVlL0Jp dHNQZXJDb21wb25lbnQgMS9XaWR0aCA5L0hlaWdodCAxMy9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0K qv93f6r///+q/3d/qv///6r/d3+q////qv8KDQplbmRzdHJlYW0NZW5kb2JqDTExOSAwIG9iajw8 L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDYvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAx L1dpZHRoIDgvSGVpZ2h0IDUvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NClXvVf9VCg0KZW5kc3RyZWFt DWVuZG9iag0xMjAgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAxNy9JbWFnZU1hc2sgdHJ1 ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggOC9IZWlnaHQgMTYvVHlwZS9YT2JqZWN0Pj5zdHJl YW0NCu5V/1XuVf9V7lX/Ve5V/1UKDQplbmRzdHJlYW0NZW5kb2JqDTEyMSAwIG9iajw8L1N1YnR5 cGUvSW1hZ2UvTGVuZ3RoIDI1L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0 aCAxNi9IZWlnaHQgMTIvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCt3dqqr//6qq3d2qqv//qqrd3aqq //+qqgoNCmVuZHN0cmVhbQ1lbmRvYmoNMTIyIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGgg MTkvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdodCA5L1R5 cGUvWE9iamVjdD4+c3RyZWFtDQpVVe7uVVX//1VV7v5VVf//VVUKDQplbmRzdHJlYW0NZW5kb2Jq DTEyMyAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDEzL0ltYWdlTWFzayB0cnVlL0JpdHNQ ZXJDb21wb25lbnQgMS9XaWR0aCA4L0hlaWdodCAxMi9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0K3ar/ qt2q/6rdqv+qCg0KZW5kc3RyZWFtDWVuZG9iag0xMjQgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xl bmd0aCAxMC9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggOC9IZWlnaHQg OS9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KVe5V/1XuVf9VCg0KZW5kc3RyZWFtDWVuZG9iag0xMjUg MCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAzMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29t cG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQrd3aqq//+q qt3dqqr//6qq3d2qqv//qqrf3aqq//+qqgoNCmVuZHN0cmVhbQ1lbmRvYmoNMTI2IDAgb2JqPDwv U3VidHlwZS9JbWFnZS9MZW5ndGggMTcvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAx L1dpZHRoIDgvSGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQrdqv+q3ar/qt2q/6rfqv+q Cg0KZW5kc3RyZWFtDWVuZG9iag0xMjcgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAxMS9J bWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDUvVHlwZS9Y T2JqZWN0Pj5zdHJlYW0NCqqq392qqv//qqoKDQplbmRzdHJlYW0NZW5kb2JqDTEyOCAwIG9iajw8 L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDYvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAx L1dpZHRoIDgvSGVpZ2h0IDUvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCqrfqv+qCg0KZW5kc3RyZWFt DWVuZG9iag0xMjkgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAzMy9JbWFnZU1hc2sgdHJ1 ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3Ry ZWFtDQq7u1VV//9VVbu7VVX//1VVu7tVVf//VVW/u1VV//9VVQoNCmVuZHN0cmVhbQ1lbmRvYmoN MTMwIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMTcvSW1hZ2VNYXNrIHRydWUvQml0c1Bl ckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdodCA4L1R5cGUvWE9iamVjdD4+c3RyZWFtDQq7u1VV //9VVb+7VVX//1VVCg0KZW5kc3RyZWFtDWVuZG9iag0xMzEgMCBvYmo8PC9TdWJ0eXBlL0ltYWdl L0xlbmd0aCAxNy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggNS9IZWln aHQgMTYvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCr9X/1e/V/9Xv1f/V79X/1cKDQplbmRzdHJlYW0N ZW5kb2JqDTEzMiAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDkvSW1hZ2VNYXNrIHRydWUv Qml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDUvSGVpZ2h0IDgvVHlwZS9YT2JqZWN0Pj5zdHJlYW0N Cr9X/1e/V/9XCg0KZW5kc3RyZWFtDWVuZG9iag0xMzMgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xl bmd0aCAzMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0 IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQrd3aqq//+qqt3dqqr//6qq3d2qqv//qqrd/aqq//+q qgoNCmVuZHN0cmVhbQ1lbmRvYmoNMTM0IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMjcv SW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdodCAxMy9UeXBl L1hPYmplY3Q+PnN0cmVhbQ0KAAAVFQAAVVUAABERAABVVQAAFRUAAFVVAAAKDQplbmRzdHJlYW0N ZW5kb2JqDTEzNSAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDE3L0ltYWdlTWFzayB0cnVl L0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCA4L0hlaWdodCAxNi9UeXBlL1hPYmplY3Q+PnN0cmVh bQ0K3ar/qt2q/6rdqv+q3ar/qgoNCmVuZHN0cmVhbQ1lbmRvYmoNMTM2IDAgb2JqPDwvU3VidHlw ZS9JbWFnZS9MZW5ndGggMzMvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRo IDE2L0hlaWdodCAxNi9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0Ku7tVVf//VVW7u1VV//9VVbu7VVX/ /1VVu79VVf//VVUKDQplbmRzdHJlYW0NZW5kb2JqDTEzNyAwIG9iajw8L1N1YnR5cGUvSW1hZ2Uv TGVuZ3RoIDE5L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCAxNi9IZWln aHQgOS9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0Kqqrd3aqq//+qqt39qqr//6qqCg0KZW5kc3RyZWFt DWVuZG9iag0xMzggMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAyNy9JbWFnZU1hc2sgdHJ1 ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTQvSGVpZ2h0IDEzL1R5cGUvWE9iamVjdD4+c3Ry ZWFtDQoAAxUXAANVVwADERMAA1VXAAMVFwADVVcAAwoNCmVuZHN0cmVhbQ1lbmRvYmoNMTM5IDAg b2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMTAvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBv bmVudCAxL1dpZHRoIDgvSGVpZ2h0IDkvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCqrdqv+q3ar/qgoN CmVuZHN0cmVhbQ1lbmRvYmoNMTQwIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMjUvSW1h Z2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDE1L0hlaWdodCAxMi9UeXBlL1hP YmplY3Q+PnN0cmVhbQ0Ku7tVVf//VVW7u1VV//9VVbu/VVX//1VVCg0KZW5kc3RyZWFtDWVuZG9i ag0xNDEgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0aCAzMy9JbWFnZU1hc2sgdHJ1ZS9CaXRz UGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQr/ /93d//93df//3d3//1dX///d3f//dXf//93d//9XVwoNCmVuZHN0cmVhbQ1lbmRvYmoNMTQyIDAg b2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMjUvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBv bmVudCAxL1dpZHRoIDE2L0hlaWdodCAxMi9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0Ku7tVVf//VVW7 u1VV//9VVbu/VVX//1VVCg0KZW5kc3RyZWFtDWVuZG9iag0xNDMgMCBvYmo8PC9TdWJ0eXBlL0lt YWdlL0xlbmd0aCAzMy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYv SGVpZ2h0IDE2L1R5cGUvWE9iamVjdD4+c3RyZWFtDQr//7u7//+qqv//u7v//6qq//+7u///qqr/ /7u7//+qqgoNCmVuZHN0cmVhbQ1lbmRvYmoNMTQ0IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5n dGggMTMvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDgvSGVpZ2h0IDEy L1R5cGUvWE9iamVjdD4+c3RyZWFtDQruVf9V7lX/Ve5V/1UKDQplbmRzdHJlYW0NZW5kb2JqDTE0 NSAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDE3L0ltYWdlTWFzayB0cnVlL0JpdHNQZXJD b21wb25lbnQgMS9XaWR0aCA4L0hlaWdodCAxNi9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0K/7v/qv+7 /6r/u/+q/7v/qgoNCmVuZHN0cmVhbQ1lbmRvYmoNMTQ2IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9M ZW5ndGggMjUvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdo dCAxMi9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0K7u5VVf//VVXu7lVV//9VVe7uVVX//1VVCg0KZW5k c3RyZWFtDWVuZG9iag0xNDcgMCBvYmo8PC9Dcm9wQm94WzAgMCA1OTUuMjIgODQyXS9QYXJlbnQg MjAwIDAgUi9Db250ZW50cyAxNDkgMCBSL1JvdGF0ZSA5MC9NZWRpYUJveFswIDAgNTk1LjIyIDg0 Ml0vUmVzb3VyY2VzIDE0OCAwIFIvVHlwZS9QYWdlPj4NZW5kb2JqDTE0OCAwIG9iajw8L1hPYmpl Y3Q8PC9JbTEyMiAxNTAgMCBSL0ltMTI0IDE1MiAwIFIvSW0xMjUgMTUzIDAgUi9JbTEyNiAxNTUg MCBSL0ltMTI3IDE1NyAwIFIvSW0xMjggMTU5IDAgUi9JbTEyOSAxNjEgMCBSL0ltMTMwIDE2MyAw IFIvSW0xMzEgMTY1IDAgUi9JbTEzMiAxNjcgMCBSPj4vQ29sb3JTcGFjZTw8L0NzNiAyMDggMCBS L0NzMjAgMTk3IDAgUi9DczIxIDE5MiAwIFIvQ3MyMiAxOTMgMCBSL0NzMTUgMTkwIDAgUi9DczE2 IDE5MSAwIFIvQ3MxNyAxOTUgMCBSL0NzMTggMTk0IDAgUi9DczE5IDE5NiAwIFI+Pi9Gb250PDwv VFQ0IDIxNSAwIFIvVFQ2IDIxNiAwIFIvVFQ3IDE3NCAwIFIvVFQ5IDE3OCAwIFI+Pi9Qcm9jU2V0 Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdlSV0vRXh0R1N0YXRlPDwvR1MxIDIwOSAwIFI+ Pj4+DWVuZG9iag0xNDkgMCBvYmo8PC9MZW5ndGggMjIwMS9GaWx0ZXIvRmxhdGVEZWNvZGU+PnN0 cmVhbQ0KSIms111v20YWBuB7/oq5lApoPN/DARYtmibbpheLLUIgF0UvVJly1MhSYtE2/DvaH7zv oShbtC2nb7YwbMkS5+OcOfNw+LmyaqWqEnSpVbLaWKtmKeuosjPqqq1c1uH+m8vq/TdqU539sEtq sVO2/9kt8MmP76y62I2vPu5mWf1yf9GrpjprmoCmzbIyyic1w6/pm9XKWqNTMUk1l/cDGe2G32R8 cf2QRhtjnGoW6KK5rSZvbubr63m32m5m0+aP6k1Tfd7Hlq3OQ69WOa9draIL2iaZ13uEg/kczcKa IJccT6MfKspQv05+2t5OZy7HSTs1k+WyXXSrm1Y+wSiT+cV8tdl18i/Gmcy7br74uPtu+lvzs0zo l8OUbHJHeRrle7QSQ74f8jz69nF+D53bJMGVrC0CnjkdnUohIwm4zlqvUzh8OfRvdJ1SykhvdCVY vOaSsBQy4mfJja4D/lgn6UEH0ZZSsnRisolosMBSvb20zqnX234iJ9tYY3SxaBSpRkHniEaOalTr WNAoMY0sFsazIyHhLrMjOaOtZUdC+ZZIj4S1l0R4ppG3OiERvlCNog5IRKQqwhftJRGZaRTwWWRj CkkXSQTTJmJzeDakGHTKbEgR9Sp5oKYHSHwkQ0rwAWmIVOVlICgbo6Ya4YvMhpRRrpZlpbY6Rjam Omov9UDVeF208yxgxX8FlSX1VEamxh187alkYnLwlabSwVeaSgdfhUqqYJ3c0CQRVJvCS+nAq0jp mH3rwCstpQOvIqWnYgKvIqWnMg5eRUrHbFwXHC2lg64ipacyDl5FSi4k8CpSOirj4FWkdFTGwatQ 6Zh96+ArTaVLhadSTpk0lQ6+CpWeKnL4KlR6yiL4KlRybUovpaOqqLheSkdVEXilpfTglZbSg1da Sg9eRUrPVJEHryIlxYq3safSM1Xk4StNpYevQqVjitzLMyV7qPTwlT5UevhKHyq9r2kqPXilqfTw laYS4vFUevhKU+nhK02lh69CpaWKPMWeSkulHL4KldTswCstpQevtJQevLJSeuhKS+nrmpfSg1eR 0lJFBF5FSssUUQCvIqVllimAV1rKAF5pKYO1vJQBvNJSBvBKSxnAq0jJrG2ArgKlZaooQFeB0jL1 GnygoQzAlYYyQFcaygBdaSgDdKWhDNCVhjJAVxrKkCwPZYCu9JkyQFdaygBeaSkDeGWlDNCVljLU gZcygFdaygBeeSnBK32mjOCVljKCV1rKaDIvJdjnpUTaeikpV/BCSxmhK32kRCy8lNEbWsoIXUVK Q60SeKWlRMn1UkamxvHAxEsJUXopuWUCr7SUMeZeykClHLyyR8oIXWkoI3QVKA1VRNCVhTICV4Ey UrOrDQ9lhK4CZaCKCLrSUEboCihxD6AapR5KwxRRgq40lMn4HkqqSeaZTLAVTIbC1EOCrSyTCbSC yVAzN9sEW2kmk0vCZMhMDSEHvJMJuNJOJuAKJ0Ohagi40k4m4AonQ2FKPAFX2skUvTgZamqdgCvr ZIKttJMJuNJOJuDKOplgK5zEGYxqlHgnE3CFkzhXUo0C72QCrrSTCbjyTgJX3slSWCczaKWdzMCV djIDV9bJDFtpJzNwpZ3MztHHyQxbaSYzbKWZzLCVZjLD1peY9Om5RrD1EZNx30iaWbVSVcEzX402 iANXWWxYhyM8nn+Sumqr92pTvWpkgKRm+EXveDZyhwYmqeaymvy0vZ02f1RvGnT7/NV16j2Uq41q FtVEDQ3+z1lgX6VDv9oYE/rO2+WyXXSrm/blWXlkByu+j+GfmZCPTiaU7ieU+gnNL+arza57eToh 17J5/8npAFHZ2g/TifvpdN188XH33f18hlFswsGxxnlGG2vVLGUdsS2MDLGfwPDNZfX+Gwwphefk XpJLSbWa2Rpeoe6KTCDJoyPeO2Wd0Xi+i+Gh3MND5Tr0nA8dFHTfF+7QQZbOAmJ5JEB6VMTOlaPp jSY+jmmYOVKIn91i8+jr44bLr+/+ODEeceGtlbgi4nJyGsM/OT+XmPx8YvobNjqoDx3g8xyey0z9 ODMln1rScVRPMjP++lRmyO5fzEyp+5J5PjPlb2RGOjiVGW8eZcancGpRx1E9zczo6xOZYbt/vJl8 1MUPm8l7qIJ/cGN4mhlvD4GBgLOmKZhls0Rvtt+S0jyg26ScPNrEA8IX1exBzMO722ryag0a1Ift erW5GBv0VRENSyVr7Y/W2iO8DCvyc9vbu6OIjuMAriGoKM6U+5sJ5vx207VXi/ZTt9puxnMO/qRo 43CGOZ/9sMPhZKceFnt82ePF3qc836ccWxOTlb+Ybo0HG6CNs4gZpnvo3mg3/Nb9IP098V/G1OFb TB89pqeLOPSGtTz09tBLMh7QSk/9ojovafl18vrVj/+d2jxRq51aXX5at5ctMnWuplHHyWqj3r37 93/abob56elvzc+jUGpdOzXr/xqsERiP9dHIKQZUprZ1QP2hJGPCqW4I5fZEKEmjm9n+ZegTZ/34 pWhw0kZ2+re4t/WBvd0s1tfnqFD152Y7u5mv1+3dX2q+QWgzrNDkz8X1rttetlez5epq1/2Fj7EK YXK1ve6k1XSG46ubfEKVL+6+ELrDlUTwCyID+67/Tg5QesM2tWWfgu83aoqiDJPv383W7U27VtMy 6bYIaXtxp7ZLxJgmzmcUz2Z73u767JQQYAu29sddH/XRRiknb3HjPfREw/HXzAYJuMWX8QZ5dmO8 kNDD7jh09YXd0ZeTuy+n4Pa5bD60arm6uL6SNK13W7XanK8W865V3Yd5J5lEsQybCe/UYr5Rv7e4 anHVbynU3506bz+tt3eyuySzRmGEgnJ9PVRuD9V8cbXd7dBrqzZtd7u9+qjHXsV08n46XqGny1Be ul3vIe1zNNu/GBXxGJJrPGAZ7cvDGdqm+5xPypk1wwT/J8AAOsoywQoNCmVuZHN0cmVhbQ1lbmRv YmoNMTUwIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMjcvSW1hZ2VNYXNrIHRydWUvQml0 c1BlckNvbXBvbmVudCAxL1dpZHRoIDE2L0hlaWdodCAxMy9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0K AABUVAAAVVUAAEREAABVVQAAVFQAAFVVAAAKDQplbmRzdHJlYW0NZW5kb2JqDTE1MSAwIG9iajw8 L0xlbmd0aCAxMjEvRmlsdGVyL0ZsYXRlRGVjb2RlPj5zdHJlYW0NCkiJYmBg+P///9JlSy0tLKsr q9+/fj9l1pQ5s+ZkZ2b39PVY2lh+//5977699+7fu3b92tZNW4MCg6prq3u6ep4/fn7s8LGg0KDn r59///x97+G9xZXFW7dtnTJtyvvP78+dPxcVGnXv8T2GUTAKBjEACDAA2dA9SQoNCmVuZHN0cmVh bQ1lbmRvYmoNMTUyIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMjE3L0ZpbHRlci9GbGF0 ZURlY29kZS9CaXRzUGVyQ29tcG9uZW50IDgvQ29sb3JTcGFjZSAxOTAgMCBSL1dpZHRoIDMyNS9I ZWlnaHQgMjMvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCkiJ7JbLDsIgEEXvQFu0akufan39/18KWpMu ujGmUHDOomHRkJMTmEDEMAzDMAzDMAwTCRghEhJJ6lsnTDKlVKawIYWtyOXOt0+47HFIoYgKCN8q wZLmpelYmJWuPKuES63NRIS9yYn07RIqDVozG2GXCr5lQqXu6JNvGhH/w+8Ne5Rkr/PR9swnEb/b ZtHf1+Qyi4B9HZ7QmG93dmUSWURtb7M5j8JOx8GVSVwR+/FteIEYdHd1ZRJXxBa390LcZdU7M4kr 4jyn19aPZjGTdUd8CjAARgQfxQoNCmVuZHN0cmVhbQ1lbmRvYmoNMTUzIDAgb2JqPDwvU3VidHlw ZS9JbWFnZS9MZW5ndGggMjcvSW1hZ2VNYXNrIHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRo IDE0L0hlaWdodCAxMy9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KAANUVwADVVcAA0RHAANVVwADVFcA A1VXAAMKDQplbmRzdHJlYW0NZW5kb2JqDTE1NCAwIG9iajw8L0xlbmd0aCAxMTUvRmlsdGVyL0Zs YXRlRGVjb2RlPj5zdHJlYW0NCkiJYmBg+P////vX74sriy0tLJcuWzpl1pQ5s+ZkZ2Z///7d0say p69n77699+7fu3b92tZNW6trq4MCg3q6ep4/fn7s8LGg0KDnr59XV1Z///x97+G9W7dtff/5/ZRp U86dP8cwCkbBoAcAAQYAQRs5oQoNCmVuZHN0cmVhbQ1lbmRvYmoNMTU1IDAgb2JqPDwvU3VidHlw ZS9JbWFnZS9MZW5ndGggMjA5L0ZpbHRlci9GbGF0ZURlY29kZS9CaXRzUGVyQ29tcG9uZW50IDgv Q29sb3JTcGFjZSAxOTEgMCBSL1dpZHRoIDM0Mi9IZWlnaHQgMjIvVHlwZS9YT2JqZWN0Pj5zdHJl YW0NCkiJ7NbJEoIwEATQHkyIILIvivr/v2kQDnATSowV+x2GHKhKMwUTRIiIiIiIiOjbMBEJDlDa dRxPhMaY0OAokYr1CcZ1Ho8kOItGKmIQuM7ijSDORPLCrlIkjrP4oyxsUaUtEThZP6RCbes4UhE6 DuONshnq1NXZcYW/sUNTW2TDJe5sucwnwLrNVkbb9fZ9s7xFj+d+N7yxFa5bN2NXF4rXAJAe1dDh dutm7OpcO330N1X0GvfNm7GrczUe46LNVbP4r/qlJ3Gc5SnAAGUrH8QKDQplbmRzdHJlYW0NZW5k b2JqDTE1NiAwIG9iajw8L0xlbmd0aCAzMDYvRmlsdGVyL0ZsYXRlRGVjb2RlPj5zdHJlYW0NCkiJ 7M4hawJRHADwi0bjBYttBws7MOyBSVg5MHhg2APDeBjkMD0uyMMih0EeC3IsyMMwcGHwDMItCLci PINwtjMM3oLhguEFw8X/9jnGfp/gZ1kWAKidyo7Z6m2FuxjdIzZmxaVId6k+6+JcxPOYhpTPOWog 8kTKsiR9kh0ysRDxS5x8JPkpl2vp3DrmYtiIJZsk/Uz1tw4GAZ9xczXRJPK7vt/x6Yiqg0JNZIzh z1yftHyX5bVUO/A78HsJ+lCcQe1VNIvkRuYnQA0or8BCpvYg14B7wKcglkBDQE3wu0AGxBjw2pAd IV7EbsONppFYCv2l3TvXa3vpNqVD6tw4tm17D16lUqlWq7iH7ZpNhqReq/MpT7ZJfszpmAb9AD9i 8SpazRabMOvfn/YjwAAVqqPLCg0KZW5kc3RyZWFtDWVuZG9iag0xNTcgMCBvYmo8PC9TdWJ0eXBl L0ltYWdlL0xlbmd0aCAyNzE0L0ZpbHRlci9GbGF0ZURlY29kZS9CaXRzUGVyQ29tcG9uZW50IDgv Q29sb3JTcGFjZSAxOTUgMCBSL1dpZHRoIDMyNS9IZWlnaHQgODMvVHlwZS9YT2JqZWN0Pj5zdHJl YW0NCkiJ5FcNe5vWGT0X4StZyE0uQuACEjCwkSxt2RJva7p1nbfJSdpsXdtt7T7//8/Ye0G2cSwu CJlEUo4fS3y893A5ej8Z2wwaOvmBfsS7vcINbMbTqvku7aU+jjPqvtHaTj4CEQ0MiLrPT1rbyUcg IgX5J+g/eSpaot8ttCUiqQhuirbY79BFt/2HVKBKxN5Qt0a204D5FJ+KBss2hAvgPTxGDbWIHQ85 uNVTGj5En4PyYuvw4WHc/mPUUIk4CRCOjYh+bsc2oW/ES/kQP8EnW+2tDmIu4NF3wLOzhEUWx1mf jr1znQ/Z0AQPIzqdeIjP4dPLhJyHm7qEGioRU1/cnUy6/ga0LuVDjLTWfdGARVlxKj2SUo4Dm84s PeV0BSmfTS4Q+BYC2lDK5xbovuCpZfF0UUH80589+/kv6u5CJWJ0/1TU5ZS2nwiGE6Y932BNE+ik 3TjzLxkpOnoOhvSD4wW9GVy6EpNRSC9pyTMfl2QzkWpXxNUvnxF+9euau6hTnY2hqMl2n/qzJqs2 Q5rQDyY9jQV0dOQxPZWXA9IOs8xCOFpCL5nIGi7IE4+CbJ13x/Hy84f4jRTx2W/X3Hm5Zhc1RNSp rvTLbzse+EhIO0pGbpF6g067IZxV3aPtXcJxcEwel4MePyKDXkCb5zdnjHx2dT++I/nidw/xZSbi 79fc+WLNNqpFnEJj3avS22Mk81DmdgszSkaiQM3rKbEFQui2b4cyOKeY61gwKx5r9Nehx1tM1psO XaOX5DeeiCt5XxuqiV9mIv6h5jaU1Tn7HCP/LwFPBGMjTFy56Xu5Bq018jeIeCK/ROZXXsJDxo5l 7ouCFyvfA11iAaTcq5zo8YgyaFLVa3z+7Nkf/1R3H8rqHFKRyz0xKLNx0JE2ljGW5TFPPTfUrYvY Ic+SmMln+8AFHR9xSz+CsfLELrfHFNFj1kuT+TIle4On+pynj9rjqF60Z0GPGLNVOdGngujbE5k5 BZ16hRBuf5Q4Q67FufQ6N89zUbjqEzNPpLNYdzjP+sTAkXW873Huvb8+keqyl/rq6kxNmMzTfpZ4 GFsW+IAm02JLGM+Z7Co7rZBXhZwTJJrq/gimwVwPTi6idU/E20r54WFTUqJtRo9KWu8NL4ZT1kkC hUdZMv3clEbK32nxETvkiYuufNlxO+TKnBhDDkpszM9UOTGjoRFP2sSFJhbXbc8rG6E/dqKWqFUi Bt6UwkB6ml3a8hmQyUZDJ5u7jFW5zKk/O320be42VCJKRSKcy0NRakSN9mXWbI+o8U3iqLD8pCUR Laz83cvnkHeQ9TbvFSoRLWqyusUZZC3mCc0sMh/qMe/eG/va8sQlIBtY1sNavbp+O48th7Kw6Bye qzJQUw9eNV6rhCVbKpY1sOs88RHw/LX8FK+MeuYqEcX908WGO8HpyYYraoLCOZuggq70xN6MI7Fl Wpbzk5+F87DrBAhcO0EwXcW3bL66Y4unSxGmvCLiNQzo9c3yGeM+VCJyO7o76Xt2qWEJ9bw1ETW4 Mpp96Ykx1/UAxyzgIopNlmlmI/Z1GrRsHeZqdhlBNl1nxx7gjT1UvMwxBuLpk5oaKkU0rhBqE0Hb vfCDrApvBJyamy6phyUW0uNsTEkvI5GNFJY09i2tLFfSsS9b1BkuZN0reCIS8i85HS7I5haG8+bh n46vvhqvue6si3B1s33urVpyPto8N6LT0qxCenikhOnlPkYq2FInH7l/ZZ7Ict/Ltbv1RKlmdlas SCfYBOuiq+o9p8P50vIbjR54056IGowezR9SC6rVuJIHAtnQJC/6N/rlIt564pLdKFmRFCkfnsq8 WA8tDrZw2hMxoqYUQnrVGHo/F2W06njo03roiWGpJ65Blg+Pa6vYpohG3s49Opa0ae8o6N7pNSEf o8o8l6lQ+tutE2a2mFEWTFF0wmJOXINBVpc1aPU21KaIDI3SQCWkOkNQNEuvOqfiR/1sMJGVOU7E Gk8MoI8DvpEn5nW57vbbFfFNK8RSGPIskWvhH/GuM4cFQ/aJenZxeS8nLrr8SO8sN8mJm2FrEd28 aLGH801rnrhz2FpEB561tCz5m8/0lIsi9ddvt2XfD1SJeG4zN1GNqBry/OHKCMnCaYU+2Ak16O1E 9G6hQkQfHvPSsKDNQ4usOaNWQ8Zu0r29kUCcnFJ2b6dC7xQqRKSSF+GShXGpRQjj0p5QRoSgM4/f 3ujj6Z/nAzxnh69ihYg0SHXIxexys3ww9POCmFfEm7V/+eavpKFxffCZscoTR+Ri1HLxUgvP7DP3 DI71UMQbLB5lpzuI2zdUm+kI01B+qs2mmOuZVmFaeMQI337XuTbFtnvdeVSIKF7AdHsoFyJyooxm dCybXRafFajxvPMtvj9YP7xDrT6xV35rKgdTypudnqzgBuXQG4xkPvwUfzv8ulIpYqSfxee6QkUL nk//UjTdTuLo9sZrUE0x//6P78UjbHO3USFiL0UKLUkVKmpXSOYyZnUaYot2IA3Fczw9/KRYIWLI HYaxy70m1K/NBXWZb81Oo53tESpE5DTLQWPz8haninrwQ4Ole4YqEUdkMmZ6cxE7EA3W7heqwjmd kCcu0kbhnH/xHxus3S9UiOhymDA5N5pTD8wGa/cLVS2O0I8Ar4mGN9T/xMF3irWa7W2ozeMn1IAb J6K9B31wVIso9K4umlMP8K9/U9c9asKwL1CK6JhUUEwAiWhOPQCc60GD9fsDlYgGUp8NETIH+hbU A3xz0H6oFjHkEWMWXMbOAiWJnbHoHGfuGmrjOxxvtcedh0rElMYVlsT0MVdGvQF528JMT7l4QG1c /wAaeg4ZKnVAZTWCDEVfKWIiRXRBkt+L+3yNQfkw+c9h+6JKnTiUU5t0om6iMNNxRSxjOHScdN+l /pp+hNNkAHf94oOASsQRJsxDT8arVW41gW9BSinoxOPvUstOewqjv/1WdxcqEaecupuQLWZIe+VW 8RWTIloZ07LAVzg0P94Wh7kjj/psF96k3EanQL0T0SqKeAMq308eZ7c7hsIbbgVDVp9lFs4LOg3T wiPuDqfobPmcnUY9EZ3SnOivfgtPg0x7sbee+rDjuYaIk3lS7rAXvu3bAfyOK7ubzC/XUf/IH6w8 IFSJ2LNNWV2GSqMsE46g20kcrac+7HhWirjQPBmqs0UFSV6T9Zh31419GV4dcjyrRPSyXBfBfwRq 7UnUjGUfoBz70JU+WMxzjakFnjdj2QeoRDwD+MhhuHwM6levmrHsA5Q5sWdTXT7C/DGoNYhmNHuA quo80Wn2iy/dCrNq6kOO5xp9ojPjjQabd9YccDzXUkece9VGVdQdRA1I9gJNXKwh9fXBxvN7FHFw 0t6zPizeo4gdNClP+4DtRdRjxNlMQ3XcKx37JK7fbv2w3YRKRNu/+ys1WsKzr+RkaGGmp1yUUhva yKSv/xrbbHc3oR777lBmE+GMPpOYubCoG4JeSn2M1+ixATrbbXgXURHOY/iCCR9hmcEFbCa9kCwd Oki65dQa/vd2AK3xVv+vwQsIBKKyMZgSxdnGUxQHyQgpM7IwCAIZ0mx4jOZk8GPgJN2Jgx8QCEQG bTCljU+ZuLY0gzCwbASxRZAUYuoRYogn2YFDAWD6FCDAAP7pFqMKDQplbmRzdHJlYW0NZW5kb2Jq DTE1OCAwIG9iajw8L0xlbmd0aCAyNDAvRmlsdGVyL0ZsYXRlRGVjb2RlPj5zdHJlYW0NCkiJ7M0h a8NAGIDh/JwFZgIRPZidOajoQU3dOCJK5FFRwlyoKMdEOSZKqGvF4CoKmctM4SYKmbuIwjcRcaLi RMXJb/0J+wF9eP0bRREiuovb7rb+6smAsBGrP2v1rszRtD9t8VqwMSvmhb94fdD5NG9PLfwCn3L5 Jqt1RZ5IfahDCOWyhB54xuVSmpMRcxGuoflqbGcn44n+0N5716OY4e2ZpKj36HrXHBs6RPN9y9gO 1QrZCElK+AvnGZIBhoDxQww9VhssF6VaK73XciWhA3u2cIYkTfIsjx9j+kzlQoqZoEMa3d39w58A AwBI84R8Cg0KZW5kc3RyZWFtDWVuZG9iag0xNTkgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0 aCAyMjYzL0ZpbHRlci9GbGF0ZURlY29kZS9CaXRzUGVyQ29tcG9uZW50IDgvQ29sb3JTcGFjZSAx OTQgMCBSL1dpZHRoIDM0Mi9IZWlnaHQgODAvVHlwZS9YT2JqZWN0Pj5zdHJlYW0NCkiJ7FcJe6PI Ea2maZDMYXQ0MBKWhHHGWZx1skk2x2iy68mx+///0VY1yMZrQOrOoLFnef4kczRd3U+PV1WMacIC rv7bwnE5TBp3QGsevdHDDh92LadgChfVgeUJn5sHG1kdItjI6hDBRlZfYbAvia+P1QCCc4Tphe5G w8vAARFNZucIZgILAOwzxOmF3kbnHsBiKWUQQ5ykAwczgwseTM8QpxdaG53Au1mtgzDxndWgwQzh CFtZwFqoMx/VmwnxLmTsKrD8DZ2B4+KtlAshOS7JlgI22nvphdZG5bZ5drEbNJgZ5iDRWUPSbM5Y DgnbxkLKWKR4JY5cdi0KHpGaA8gKB3BJHkgei5sjE//u/e3vvzl1FWfLVlaqgh1b/P8LjmROwa07 PI78ciiJXs4SuGSsdO5wFHZ8RDgLkdUcZvRjvDsy8R9uEd+euAoTVucRCkIXzjrFYPcwMK0CX/kt LPBocY1BPfxE6rqHWq0yQZm7uP5CnXnAeEwXI/9pjj9+8xJ/IlJvv2u50yZgA1ZtEUwF77kv0cdo yWEAT+NWf/5LCvdwrx9PBzlUmCsLyAFNqr7isEu11wker1Grk/qMyXrA0yTfvn+JvypWv2+5875l GQasXuCv7Iru++hTkhJGKmK+fFJ1KdYwNKlsCUXiJvhNbzdXeoRoN8W/C6QPB+yAoyE0tSr9+n4v /vY9sXqqsWqxSpkUcynWg0k3qzNKBRzVQhaHWwkPN1Z/B+38polUqBfZRmViOvJFRv8wUTHL55U6 FbXzpq/e0Qrt6Jiv/uO729t/nroOLVZReVtaureLux0gI5+6kSXzaGv5E5P3+Orp17hamBFVtAb6 QV2gbzaPMetTjleEziCb8hiiOdYAsnBivHaNBdY1pbTPBz0HyNfAU7ZCX+qmx9+EiYu+xpRSUjjw fw8fAL3VeKWnIKjfjBkZj6UUi7QGQmxCVjtp4osg57iqdCKE+w7fOTv7svUqrfdauEdm9Mn7kUvY q9PaWDFRfQT01oHVejJKSdVItBhkcv1sdSf8q94ZwbVTegUrPg+s/uueLODX6fbLwYIsRU89IhFd GO0QHcmz0iRe/NAzMdWHKWbhmBrHLTw5cP4q6DxgR7v3tscHGkBro1zwu7VPFSlVTh3wN2reCdtQ Pl5RRVDjx1fFKrNmV+HxUUbQ2mickAqpsrvJOgdxsKimnWIOLque8YDXpdUhobVRSlQW9LoqFV6C S7IBWzguR80+4mEoViewrg7cVkeTZ/81tQIWothFzrFRJTaqVNey0BPXzbp2MK1K1aIiFq2sJt5A cTuhma0EBOZeNJivTqDKidZg9cXqg0pr98Vpw7VWIZ9lzAvd/nNArao+Dg3AU/1TBDGWTVPKANSY 7vFiMJWxkPj2ROHBErCennl5BJHlOrC46Y1Qfvp3qmru0xaktdEJZHl9GF76jm6TN6Cv7lRz6gTU P+WwdpXTRiK1/XVFIkCwCwAylxy/6rKwknbBv+QAAv1/3R+i/LTenkyqpgPMPYDFUsoghjjR7pJK GKiSkZBSszGHHRFYkG4zPAhhL+GmZtWn2hk7qSU8alWyhH6MJX1lDSLCh/zl3/1//gtFy/WHvGVB uvIJk8ABEU1mJruHB5OnjgO1lwmq4tJKhXa+8+kgAdU7KVapFiHqaUStVY5aZfVZs074CFpo2+gw +2yHek0HAFIygxlzPEXODVYCsaCNpQCUCchXiVD1JZ+0miDtrD7bHyPiHhLlrSfhvKz+OMy8pDaR 5VhJ09FaXKUVVVgbEJntWk1Rx7JVq20gTyVvPW1BX4tW8bMUFZlAfV+k0lZSUEj5qNX9YSyKbldX BxWhR1h9UImq/PS/0xZ0XlaH81WkkNiko41IpmuAqcr/vpO+1OoONndYeutotXrLytVpC/pqtMqc gyzTLHaKHKtTKIls/tJXWeKDN5d5Q6ZHfVULn5/V8DEzhhsQzY51MF99dfj8rOYQyL1EVaQi5kul kcdg+WeP9jqhzerOZaGjXKoDU6jNh1evZKPypxbyNwFdVhMI2CLOgPeMqMsPj3qcHHaNYB+11/c2 ocuqv2EWXLLM7xyRQXnpzhlVkIyqwgb/I6td4112gbnV7X4uUMkqqdOuqhEfHx5ZbUe0TjcCa8Ju rQbrFWX//MBqI10BPNYHXykMdzgjHaaCtNiHGyhYHODBdnSAU5DLhNlRN6l2bqt5JywgPZdw1wg2 smqIG1ji9wUWUS71NhysRrCR1Q5YmQNX2bx7gIQgwQ+qVjguf1bZjqx2YB5DBNMIemidLsApqGa1 POE/71hHVtsRiBWDXeoERsE+mDz1BqFdrxb4mbLCyI/hJ5On3iB02RHok9iEToRRsJHVduxhhloN 48wo2MhqO9INCHDASY2Cjax2IS+k3BkGG1kdItjIahu2U2xVywVEpVmwkdUW2D72TKmAjRBGtI6s tqGAC8Z2WFhtDWuAn02eeoPQYlV1VBmVqhO/d6Crpg0DEM871rO6+BeE1j4BXZUJjx1o60Kp6EtF zJcgm8+PrLaAlGcpanlvb+Uo+jjkjEkIG8FGVlvgYfEvgRJVFPUM47AANRq/cmjUtiOrbchBRIB8 2hzc7lFzSCRNKyijpdBw1pHVVuQ+eCGaAHg9g/wFU6zCXgVoGOvIag/SyaznLkcnrVhVfD5ntYJB zDeCoXZYkjnsadqY6rDt6ACnI5ddd5L61wrYhmraFUwbwcA2C/fWYMLqvHC6VfdD4iZuBMkF1rRl 5QdPweDBINwbhDarlrtGJWaz3kHKV23huBwmzWBUwf4WoMfqdhrQ273cHhm3rzpWT1z/qmMdtfoS RGkwtVV3ZRRs1GrbYPBIpX0twJHnR62+xAZATHIGl6bBRq22wXIx+19DYRps1GoH5lwA+Jfh8ZEt wUatdiNfCrMuadRqL9KrwCjY2tQ73hgMO1bDYD99PGe4L4czszpqdYBgo1aNwX3wVfcVbkA871hH rbYNbqBz0B4Cd0FNbSpivgTZfH7U6gG/CDAA9mLnSgoNCmVuZHN0cmVhbQ1lbmRvYmoNMTYwIDAg b2JqPDwvTGVuZ3RoIDQ5Ny9GaWx0ZXIvRmxhdGVEZWNvZGU+PnN0cmVhbQ0KSInkTyGL40AY/cSJ FScqV5xZONFAxQUqOnBmCxUbqOjAii2sWIaKElWGihLOLKGihBNlqChhRSEVhVmxkIrC1BRSsZCK g1QU5kRFREVExcjv8j/uiSce7z3eAwBEpI/Un/hiJoprkR0z1mPRMjLGeCOPNIjaKatqyZVMP1Mx F+E89F694lK4fTeYBGIqSIsku0T/1eQn8X555mqKosgveX7O+YiHb2G0iO6qd+khDX4HtEPjdZx8 Jt3HLm1Tf+yrrcpOmT5pb+iFi9Cu2/JdRm9R876Z7JNmqymXkve52iin7eiztms2H/D4I+ZD7rSc 7lM33sT0iVa+VvxXn70wUieVSuXmy41Vs6zvFuuzYBrID1kUmJ/RaWN5GiAFsI1Bu47yHbMj8iF6 Q2Q9VDv0xxgtMVpgdsjMFd0eBuNAn5HU8fbbbXEpFVefMNkh7WB6wGgVsWdGGhivUcxQbZDcEzFF t4/sBe0fyAdI22UJWjXC+tobmGaLqW0CIJN9nh5MdkIxL1dpucJwjlaVABjSYGpTehSAoB0GkAMw 54El+3IYdp8x3pSRmA8iq6b5SGR/TLzOwpkMptLteeyF84EE8AG6AJGYarXVpFEet0jDACT0oWSX 1PPiisFEABRW1c5zk5+NPmr4D/BPgAEA4YApAQoNCmVuZHN0cmVhbQ1lbmRvYmoNMTYxIDAgb2Jq PDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMjc0NC9GaWx0ZXIvRmxhdGVEZWNvZGUvQml0c1BlckNv bXBvbmVudCA4L0NvbG9yU3BhY2UgMTk2IDAgUi9XaWR0aCAzMjUvSGVpZ2h0IDgzL1R5cGUvWE9i amVjdD4+c3RyZWFtDQpIiexXi3/bRh3/yrX1usyxcGwUObbT4MhNkya1IIUkpd66kYxBt9Y0ddKu bHQta9oCbSmv8dijFChQCOXNYIPxHG/oP8id7CSKE+lkWU7kkK8/OTnyV9+7++ru9/udIDgQO2Bf 4kgI2yMhsl+kmCBDoV9UsvETWrl9eAx9Ljo9jS0zbfk5aV+SXjQxqaJfSNkUzUHc+oyE97Q9wF4A x0SVpGmbJgMenAwgKU37Npm4hrUbWbwXeieDjRq2zHB7DBrIpXIwBj1ZoqHS7TxEv2UMRxctrCz0 PPaWi01wTBQGMwQkU3D9XZZZmwENeEX6JTbsKn2QxcOR96EUcKQRBs9EHkaRp+2AKRRA7Syi7Cpd ZO4pZFTpsMcIgmdiQh6OHZLdV+IgTFkeoImFZnC5bMYcWXxb6TLctXoWHBMLBgzopuE+czFHoNpb VB4jOSdve+nD422PMfLgmJghooCJNFFDkz6CyQBa0QbHRKJRii4kiTetHekpKYBWtMEzMU4pE4Ic oomFvVfl8LYzrRChDxnhbWdBOEr2WoLmmJgmkCARUgxRWqlYAdSiDF6Jo8hjgBrEQ3fp99u1ZTGQ aCTBW4mNS0ILUfoIPkDLnGJl79Q6HBNNO3xNGEEONq7PTANisSLtncjIy85mWihKMPtDlZ7GsYo0 FEAyouBtZ4NogBy29Adh7J11yE8siRhU79OuqIIcYLFTJhhO+5IuVipI+h5i9MENdkMx03PRiDCT Gmjpp2FUNpwloKs0i4cfwkw7w4w2vEyEA64kFXT1HcJEGhpz1LHz3Z4psniYmMV0gOFGE14mailN W/tzF8jZrTYBkV7NHF+6OM6W69zxD7c51OiCu53FhDAoevzeP0ibQZyQwaxRiW/pEnRfI+wBcGY6 NEAXmI4B73okHSOKZiulHHq892Nhr5xZODPVUE4IiTI0D44ig4hCw0TNaSIvnlYrPV7n8DOGDaLZ F424U4omUnla4ICt1ozh6II3BuXxJ+zLSR4x6uDMtJltZY+aj8RYVKR7fo62MdW3NMWTT32Eeji/ 4F2IRh+cmaoGK5/ThurKGDAa8TLN/C6i7FuaQpmFpUik50Mj79hHoGrDcJ9nAaYWpx9RiEMum7GE b2kGxcDswpzfsUYWvJnmU2MwMnnX38VmaKUrUI6RnL9jn0P+6Y9mejy7CP5m2j1pZb5CnnrG6t4Y dgb+TNQ9snMH0iweKvMfe8bs8bKbM1NFauzW7pg4z+IhXY3jmC0F6CAy4Mw0g8wY0T4Or4NfQGmK aTtfKZaQjmMqSBcRAa/YjgsTdBVKcvjSmzFZRXUyQCeRAK/YLtP8qwi6Gb50K8QpxNN8WhTBmemA JCRwSDjRnZjYgtIsTrkXUxEGZ6b9MOmZJGNkwpfeDrpZsXqwbOTNVJSFtIThIDMLVIJalYVkz9m4 u8X2NlAsUpkOeSTdRhgmPlu2LzKB2u6xbzskRmD2dTyonYTXTAEBGxh1ow0ZKXbRMCobxLEVg7+f fBZSL9U7XjONa4IWX/uoLgW3GCfQ6DXNWhGOgrKTRV6gZWPvVN/+Z4r+bW/351Ro9Dphm2zmgkhv B1Z990q9E0ZMhEYbGWwnq46CslNpUUK20KHGzsAzJqobMdFTg8XElE3RHEQ81+ngpg/jqKKP2N9H ip2qdQ+eMbG8ERM9NdivWouJp8+g9omz3BfAgb5QGUeWfsmi1IFMl+BrifnV0gS2nYdomzGa9xbP 1VCr1TvWVqzKccSFOKJcO3qXOPC3nTXa9IHtt9hw895SjZm4HMIIleRjOBZpDz1NzKn0gzHWqp4a LCYWWHVTRLl577Rt4vlQxpg+BszGT0Y3KHK3M57la2isjUMum7HE2s0LzMTngw/MgSw0SOMLWKha osKn7zz4JpZ5DAGafZHHSG6jJFm8iNong45qE1g8nKZxsajHJUA6Op3mP7Oz4Jt4IrD0mc7zCoVl x8NpzLB/EkeSVaAyXj4ShnRYCGMluj35woWgjzqhNGqbFzc28txM1gSqIyXH3m6sTmV3zjhhxES3 J5dpev5U0Kc5yJdG6JI0szNz9r8F9NE2Ic12qTtv8LNzjJud3aRrFJeCDswPJq2XKsCUNakIOnRB kSq7k8HDqBPdHmcm1jo++3FQmD5I0818No6Tu+Uhfzt3IG2beLl7HaxDEa0qAZ7OnpzclczddROv hFMrcpF44tN4kuYbVMet0g6vyG6a+ILtYu3l7nWxARYPWVwUS9ZLNOPg8JQ1s6Uyb6ZzPezOu2mi ULdNvECT9GL3urGRsOOhbudoirw4c7BaYcsym5ycW2fNS+xAdWqhsL1IYOyAiQzLoY9kMz0/a+9g Pb7p7qRujV+lVl6tQqcZnC5XSRGyZE7goaOxdASZYNgZ1yGsrJtYYzeuXaldvxHWSPzTC5PJLBbo Oad66jPmZw8s8D3cPRM1jMoGcYQhKn3jDNvMDJ9brt9cj5CLt85dari5eO32yxv0dtAeHTSDT1tT tBjC56dGrNJka7jsRDw8E9PQBEGEvEX6DrPuCzfvfLHh5i1a89jGMhdPn6NfnueO5Fp9a4rfSr/s UZKusU8df/zYSJVlHlSrljNerqPYZ9MP+szwjAchYfljczABkbZmbuNOc+CL1MXzLLGsR8gv2e2l pZWVL9uLdBN9KxaZ5xda77bST3+lVnvFNX812dmvfu3r35BYdBRftEaqrCIitCSaFvMbVB2v3n7t dhYlz+mu42rl9TreYME2BMhgMirZMvB13G2cYC7f/WatFdeXl5fvLTNc/Fa9+bm9tLJ0l/1926a0 rsUW9UW2pmt1t9E12Ke+c69Wu/9dO0c3UJjss8btPD5bPWiVjgzRe9/D92sP1vI8F4kfnP0hVn8U ioc0JLI25ZjblqX18FztzI8F54R/YvtzY+Wn9Xr9tTrDnfPLzc+ZLVa34tw6d/n8hc13btU342d2 +/NfMNL9X/6KvpvNn9ff/PVv3nqb7fK33v7t7/AOfv+HN//o7/Ond/6M1b+E4mHTRM1p4v8P7tXC MVEG2woZwx97qZkEVu68co3H3T4mtuISW2Q8rYt27OCQbj/AA7z7kNfhGv66uvq3s3/3y/aGDpbp Ymo4apuweLN+k3vk+cfF2vWbPNJztES4cplD+ieNie+2ERNX7/9r9d8+czkHaVbdFFEORax7WFrh vY6jePVh/aHuNztL0n/q9f9ereT5VB+IQy6bsQSfGHEUG+6VfObbBi8xE1Lvcozk0nzaPvaxj33s Yx/BkFZBZF/MhEYg9bNvMoFa8PHECftkVPDVg0hZcaUpzs18gyohw3M+x1I+IWxi0i/DoeZWhRjy KDQ/1BhG5RgrzFLIJIkxxH1gEMzEIYMkM0hxuBMwKUtlR9JR2SCcyiVNNSkr72ssCtHYRVtj+uqh LcgQmayPF9PHSvRETBIKiNOFA/7iitkm2j3EwVktxFQYazANzYe4jCJ7R7KPsYh0/1DOBtNfD20h Z7KOMMFnpmynNdCjI3XFx9ExiQFmojpGm0fQPbmP7KNHPlWcsMXNHG8srIXmYywlNUd57MD7iLZj quCvh7ZAMrRR/LyX4iHWDph0GbADj0p4fJT/JxaQX7mZgQQrARv8GOTY/NQlQWmMkwjD+Rk4WDk5 GDSIcws4JUJUKnAj2wAQYACChM4LCg0KZW5kc3RyZWFtDWVuZG9iag0xNjIgMCBvYmo8PC9MZW5n dGggNTIwL0ZpbHRlci9GbGF0ZURlY29kZT4+c3RyZWFtDQpIidxPIWvkQBj9ZMSJExURFReoWVjR gRU7UNOFigZWXKCigRNlWFGiSlixhJolrFiGimWoWMKJQk4UpqKQikDWFFJRSEVhVhTmxIqIihEV kd/N77iPj8fjfXyP9wAAEfM/eXAWFI+F+TTxLKZDGk9jeS/FWiSzpHgq2CXruo4eUX7Ds3UmH6S4 FXzJzZcJfgZqq/Rfrbc6uU6qTdV+tmzCxErwBW93bffVNW9NMk2q56p+raPLqH6u9U6zC9a8NupD 6Q9dv9R0QJv3Jl2mpE/IgPhjP7vLjDHhWchXPJpE3r7nfHOy39noZBSMg/wul49S71A+YP2Caou2 Sn6H8RS7DskA0wXqD4yuIjpEcYv+iR9OQvOF4ga9Ay+dp+6+Sw6J4zjunjs6HvX6mgyo+bQ+GoD2 +owOO/+07fVJttbJFJOZYL9YeB5WZV1tNL8RVYnVpq7KDqBQ2za9tr85AAOwSluVFZto1/UAav+U NVvt7lEAAcDVVtMjli5EOhejY1aUlfeDABjHIemSJzOTrZFdoHrv6FACWIeRdyD5Sma3UqxkfGXF DKCXTC0J04VFu5E/tugDKPmgiifFl1qsdH6vAAKAlF2odG6rJeoN5T3WzyhWaAyG55r063hqTySZ 2+Rx84b+GOkASZ9+32Pk0MauwnPWtl27w6IsitI2/R/mnwADAPzWJoUKDQplbmRzdHJlYW0NZW5k b2JqDTE2MyAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDIyMDcvRmlsdGVyL0ZsYXRlRGVj b2RlL0JpdHNQZXJDb21wb25lbnQgOC9Db2xvclNwYWNlIDE5NyAwIFIvV2lkdGggMzQyL0hlaWdo dCA4MC9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KSInsV4l/G0cVfrPyemTtsuvRsStkrVgpiSSHWFC1 tgstobLVugnlJlyxOQtNXShxAgjicNNyNC0pTQul3HcKtJwtFPjfmNn1MVb28Ewr/VhJ39qj9eib 92Y/v33zHkKCUFKQmmI36jRghf8G0jOixpIJECJzCCVlQNNfBVRWA5vKLBB+fTort8ukQUjVHMnl AaaJBpAP4xRgmo5WisYs2AgRUDlnk1gNhmIW6Vg0rTDCq0FHTEyESoxjwxznbBKrwdhJlAqUQwgF u0BHh8YqZvFsAJdZJ7EaxifeB4laV5zRWF71qZDhFldeI+guoRBVVcMuHV2sRXBsepjpe6oSzlnc SZd4SD5h0YRSpgRedg1HVYcaMpny1QMZIHtEeJ+JhHDclPMYcD4sq9Lvie3ZzSGN5lbkwlHOWTYt vsMk4hV/Gw0oISamjnRw+461SayGoZy34Fg+IgEooE0RjAuogC1doTHLOZvEajBoXq1Dow4RstLO Cs+yCC2XcOpgxzqJ1WBouIlgzrCiaoBwZ5NYDeHTOh4aaEYqH09iNQSY5knahOawlLPsvMyy5EFU 1Qwcp7GqmnkpZ/YINwA8RB/TmAYMFliGlLPXTlQNgT1DyJyks0msBkP1PwpEytmJiaqB8F/9OVNC ngWHxarh1MSXJg3CNYClItcB67i4q2YLXgfGfKspvjRpEM4AJiYASjwxAC6kwMFjIKr4aVVIgVaO ZNga4Nez/KvSm4Md603QHgdRJWqAaiq6rLLBmiGADWRgU5kFwjuz4GapkixpEFIVOISSNKBxeoz2 XwrYCBFQ974xoAU3zY+DrEKqkgwhu7/hFkveSFDJQixy92pbw4EmzmJnDGSV6AIKqGhHfH+8SIci TCHMulpj/2SbaQFKZ5stXXyXSYOoqtU6fa8bUK9GstQUzauQ8RyQ/VlAR25BavCSkYKoqgT0Airo QCI4hgLY3tWTZ8bm5MRD8gkx8T4IDqe4FmQW6aep0aHK17aAsmlBf8mEqKo7Iinh61ycKno30yk6 NKHBO6uNcJxyEH1KzfTqey8Og1E3q/6NDi6Tn8ujgE5MVA2CikEj04DdMEIZLJKjl40K2NIVyB1w Voao8mFkIBw7i5klMPOLod/bO/ma1k9qCS8d7FjpzwmJTSYOkm9kUYnnBDobh2pVQtWG11nVpf4b dFE6K7MwaRBVR995wWVjNb0sszBpEFXVqiO9joqm1KFDnWWPyCxMGiTqVZuuUcIrq2hn2XmZhUmD cG81g1xahzYieqsIZ6rXBhjhFcSIQFTVPD7K4jWfknIGDdoGVJ2bZRYnCcJdQMpChJ5WU1LOKqBD 7dZ2aAsxKhCvkKgkc+SYpLNlgKXRF1W2C5B2NgtvGH1RxVTNEURye1d4cVX2KwR1GnBfx1p13ggN mX0mC0KqAiDgoIbxiGfVwKYyC4Rfb9zavu32MZBVPgMYcDx4XqmDZ1UBmwnMaQ9O263B8ujL+jLy aq0cOF0taaZntWTRwYY5ztmbXLQIbiUn7zQZEMur+n5ejeR5VnEesYjmMqs33Rr5SBXNq9p+Xo3i +XkViDdm+pylTwptMJEYSGWV41UlnLND/EeSjUE+oR+rJquvqjdkgNoIi7oLwcoKDpUB/FjVUnRw 4WifM3pcCe8yaRBStaTRC5bYqEXx/FjVmXwKcJWC7wyP/nEl/jrCm2MpfqwWsKUrwFdRvrMxOK4k VNVjKX6sonIJp/o6VoZsWthn0iCh6tTLdDYGx9VAYjXa2RgcVwPJqzHORr+7kqgBUrE1QIyz0T+u BlKvBuOODqx4N6N/XA3v5FjtdqF7J7sb/eNqeA94F1O1u4b2j6tF/4vC0LYwNAxP1bs9VVfRSceg 3VUT11xYYPOVI0PbwtAwPFVPeaqeRm7becvJZmveQBUm63KrObQtDA3DU/WOe5iq3bdSWd/2duwY iHW2CxUcKqrg1gZKH+xehKBqgLmO9R3vZKqyaH0XmO9OM9wO7wmP1ImqQTCwqcwC2Z/oeKqeWmue ee+Z2SyD8z54f+0V2tqYqKqAjRABdW/CV7X7gQ/On2g77OSnOTUPkHaXvWOrmS4sVDzici1qa2XL i+8d7h766Hs2Q6x4dNfv8m5zo56jWikwtnvIjpDxKH3GOBxdFCWLDjbM7U2c9VRd3/jQh7sf+ShN rJXWxz5+173wCfgk3NfpnKO5tonv3+xs3u/n2jBVDQef63Tug9zB6T56btdmiBWP3oAHmD8IfV8Y FtvOpz7debCdiyLt4xZqE1Yq0TblgfN0MIDLrPAZqur5rQt0vHjms2Xrc0zle+cX2p+H3vrGF6gA X7y03b186Us+O8yw8eWN9R58pW+2n/5VZvNroRHj078Ove5liIlC9xtb37z4UL+/UDwMPYi1KQ3I eCPhZs4yGS94eeBbnc63vZvvnF797iMAVx597HtXH//+E9c2rj3x5ONX6f1T9Pdq0O8PfvjoFXj6 R33zz/T9/cgWXHnmxz8599Pg62lv/Nl52ILzPw/h7Fy/6F375bVf/TqSw12/+S0A9H43KFXJDaqO Dba7vx+QqqZGhyqfASiun3r2uheif0Bo7R528yyd/ePG1jb8id5sbm/0NrZXog2f7cH21sZzMe6f YzZ7a9GkzW2gpDh/F5+//PzWn2P88Tb/Ar2/HpYuiOkUHZoBCWbl7u7fPKfX/04TAH3u5j9euNDd Zp3Ww5fWu+uXKjcsOYAFGgoXXngxuidrvrhrMwo0B3b/GZ9Xt7sXH/pXWDURZHNweVUHl5VXagRl 7fQq+7Cclzqdf+dgMYubK52VJv5PlN1FyK12/vuSY0V692yuUptRpJPwAPXXiKsBmL8H206kP97m ZmdwNUABW7rSX/8Eouyf1C4yyvzfYfCryx1urM1IS/6j16L9LfDcWOzw9AHVq0gt4SUlnjbBBBP8 H+N/AgwANq+gaAoNCmVuZHN0cmVhbQ1lbmRvYmoNMTY0IDAgb2JqPDwvTGVuZ3RoIDE1MC9GaWx0 ZXIvRmxhdGVEZWNvZGU+PnN0cmVhbQ0KSIliYGD4//+/pYVlT1fP9+/fly5b+vzx82Onj2VnZgcF Br3//L66snrrtq1Tpk1p6WpZu2nt89fPr12/du/+vXOnzxVXFk+ZNWXOrDnHDh/bumnr2lVrg0KD klOT7z2+9/71e0sby++fvydnJt+7fq+nr6e6tvr9+/d79+3de3jvufPnokKjGEbBKBhoABBgAPG3 T2MKDQplbmRzdHJlYW0NZW5kb2JqDTE2NSAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDEz OTYvRmlsdGVyL0ZsYXRlRGVjb2RlL0JpdHNQZXJDb21wb25lbnQgOC9Db2xvclNwYWNlIDE5MiAw IFIvV2lkdGggMzI1L0hlaWdodCA0My9UeXBlL1hPYmplY3Q+PnN0cmVhbQ0KSInsVw17qjoMTgJV amEDPwBRcUdx+v9/4U3awtw5U9Fnd9d7Ht5NhPC2KeFNUhG/BxTwIQR1mzkayzHSqGDCJ4Zu8SFO QDy88GFyw8MrpNlrPEWePOwx+QzUJFQw7rcWSBA9c049PdwFWNhj3pOeQ8Efd3aDqiPHcXPf8JBD BIwSF/0mXwp7gf3WYn13THeyuOXhHvR6xBbjSgRl9eWPl6EgdRyrA3+8iARWa9zMIev3hkJNidKU 9VuL9d0xe2rgHtSGD9s+6YxhAG+/UFQg+bC7ng9TVpVbKe1lLCyv0nMY8bGBpYItnwT19aWUkKHV eq+1WIl0zH4e7sK84sOak7QHVeLCOADXLtTmKjkGB4NGo8T0cJXONVG+IHm30azm15fSqanXWqwS O2YBa/Fwfch9iGXRCja3mQeYuZNGVDX1Eb2ELC7jMoJ4xqqZig6aq/SRVWoBx1SSgnvSrbVkaJXY ay1WiR1z08vDXZiQjtWNguVgIE/4T4kCVFnp8PYQW4dCql7VzaIbgCn5I2NUrKvJdbatiSvI+q3F PR4zXy2zl4f7sNnTqU9FRO3yU9J/qWtzXVkOLusaU+vrFRHtnKCXUq3UifbpLXaY17DPsN9a/Bvs mKqifY/UGzBgwIABAwYMGDBgwIABAwb8IMBCx+e2cXaRnmmafFzl8OWUyQPrGK/bsyl7UERKzoOA DyGtLw57DnD8ylhFcB7FylykR9Xh7GrxdRDzR9ax6FyUqOoypiW/MtiIJX57YMKfBNiATUCf2fTl IH6O7zcqsYv8DEIUGSrieLqZJjB+YMYfhAsiag5HuiOb15LfKW52VAdNS1MnqJS75WxhXlMe8Kht TmBGbNkfcqoXoYuHt+6Ir7E2/m7emDqS8U1Q0y5FPJpfUW0abGRi58nseIYC8QB4hNDZgv0PRuQB tEpcscpIcV6/44w4ZydEeULkn8LAPOYPjkm/O8scAqXlwQ3kXME2EmCtAuZYJYq1os1YNDTjOfmu KeYAwat4ComSnLj2lfzWlFgKME5tKXC9MKvNJDKolV/ku0vrp4WviTTCkS7Q1SbJ2SWMpCa5x3Df CjLUXhMZlCj64ZMj9wIIJEyN47ASf0mN3UAQAusqgK344dhBJFfCmiJzlhjLaLF0NfEoftMTv5Hm UG/9Iqcw+9Gg3AvXnX1Sj7JYclFqoo7EQM6urBI2HMq2JjqLAVu6EFeV17RwWIkKpIcbwoBvk7RY W/NEo1JHq5Wf/FV4trK2NdGNxNmYc6HEyWwsuRBCq8nnhAtfIVVowcF8k4c5mS64rt/4BsL3WiW6 vsz23BNbLTGH//P29gyyo6jNBzF3c/kxJ1ZiO1cbxI9eFWuc1gAk9fajdz8lvAZZIwdQa/cwokSI DsXh/eDSyOlO9FDN8czCSkyqlmdnCs+VOCe+zgOr1U9KhJWMKcaYSMg+KTFpgxjSDCMTTszq7O6T og2iV8+0rYl76Snp6WZNLKQSbqO2JpbwqSbKPC4AVktyKrozUu0avXQ+8/OaGPvuj4uo69Lcbcof CsdjaINocAxBoQiiKerqEE75N4PruoI5mHgu1G6faODFdeeKuA/D2nXnF+GcdWeJAWTWwbkSR27y 9FyJkdvFZ47OcePvnOKSkg/js8IH8Y37ZXmifbbknlkQK2W6J9nBefh9YqdE2SdCbWSfuPP7RAj+ 3CdKflfOz3lNxJGpaZ/6C1sTl+R4SO63007WtV1SLV7L+l+Pw3+F8PPl13Urvbex5qs/bdEjv4H+ l/g6iLns++5BKnvIzxhB8xXzb8RXQcxAmst9UOZ3i3nuXeJ3otn+aQvL4/0Tlb/ViW382IIGDBgw YMCAAQP+PvwjwAAA9HW+Cg0KZW5kc3RyZWFtDWVuZG9iag0xNjYgMCBvYmo8PC9MZW5ndGggMTUw L0ZpbHRlci9GbGF0ZURlY29kZT4+c3RyZWFtDQpIiWJgYPj////SZUstLSyrK6ufv35+7fq1lq6W 96/fF1cWJ6cmz5k15/v371OmTenp6nn/+f3aTWuDQoO2bts6ZdaUtavWWtpYfv/8PSgwqKevp7q2 euumrcdOH9u7b++9x/eOHT4WFRp17/q9e/fvnTt97vnj5+/fv8/OzD53/tzew3uTM5MZRsEoGGgA EGAAgZpPYwoNCmVuZHN0cmVhbQ1lbmRvYmoNMTY3IDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5n dGggMTYwNy9GaWx0ZXIvRmxhdGVEZWNvZGUvQml0c1BlckNvbXBvbmVudCA4L0NvbG9yU3BhY2Ug MTkzIDAgUi9XaWR0aCAzNDIvSGVpZ2h0IDQ1L1R5cGUvWE9iamVjdD4+c3RyZWFtDQpIiexXgXai OhCdMIFFAygoRijVAtL2/7/wzSTR2l0tae3bredwexpDmGTC5OZmIsSECRMmTPihCBBk6GUZScBf se0yi316zJW3hyRFzBZUCclLMDryMod8KfzmsizMTzxzA/t5uAkryNZYbjwsI9BrBZgIBdugpN9R BMBRVV4eJCgFlRCbEteZ6fcRapCFhFr4zGVTrvgnwTLY8sDWw2p8+l9HCCnHy2fpJBAnHqCJeWo+ XSJgSz8PNC6vwiP9R0KkMMJtnFMxRzE+lyhFu0ZmYEXf4OfhJuzYhcilhykziUrVmC66GrPf7CUz YgdP9LAf8bBFKmLVCpkLjtNuZC5b7gNifC5dJW1UK20GboTcU+VpzMNNCIC1TKKHaddS0UIdQOLV RaFhkvUwGzHXMiyWj1TBjIrFGLUlPooepfCai42qGTihgfGXj4eboOCt9ECcY2KNV2NdmA38PX4e QANhfQzBmLDGJVnnG+E1F6uhbuCVp4ebkMJbOYokAIw8w5Roaafu5wFgmSwy2s+swsKV10G7eqmI bl5zOQ8jlX4ebsLabKGtjwKIXsPqwFuaz/Os/NhYlaFliZ8HGKjY8P5kjUyYtR+gMFr9BM9ec7Hx LOVnPNyGBlrBquZh2mPOtnT8sP6NHXA5WHR+Hux7+n7Jh0rLGcEHcMyH1GsuNqrmGOzhxc/DbTjw mrWc+Y1icDlnzELfQ/GxdVPURQ1D0fp5WAPtgo4+teZFME8fwGYulCl4zcXqagE977PQz8ONIHWq c+2R0oegVUp/ETElKHS+8Bjc3QKC5aiHBWKQwpyT9bwOxo6SRQ7ZMgOag89c7GgL1EXAakoelqMe bsVal9Jn3SK3pYkXQY6V143VssTLQ1tBqTj0B1nqUc3bKE2LzHvHYy4ugmGFuUmnvDxMmDBhwoQJ EyZMmDBhwoQJEyZ8F8Agr8/buuiqeZRjct67vmCTwhfm0bVv/ZWIJcxiqsbYC7HA9kqnHwsKaFGv X9+FR1dXzQe9e9e7uGCjvhJVUMdaCxuhh2bQVM+23FIPXxjwnwIklwnkZ225vGqu37+C5QWbL3EV 0mNN/hIRhCKEiAIc2tl1XxjxXwIsL3OORDdAmSVGFA4iUSVU7dGsl4BqY17Fpxa9Y67GWyyzA/Wu ogGG1nE12EMeCLE1glFK9zYudMmk3CgESZtbVI1Csot5YDvugaL5zHV4FlVg27bXl/lnAmZcJkCb LIJ5kcJcPKB+EWIGaYAYWquYPl0RrTvMG9vSIwYZkHAsEFWKFLwCXA/mKuliQf/iAR4o3vBCb/M6 AFqIGYuNBEWmtD6AsxcJjWhg5vi4pN4h2Swh7I4a3kD4t+NyG466SgfU2igZWF2NeNf1sLVWGTO0 IKP9kTUZf2hBXF1Dz9aBqDlcB+pBXOVn4itECY+QkVLW7GFLtgkpaEQ8pO2dcVSFaXnT1epVcBh5 wfRRtXu2vyfYHAD0Iz8sooalgHU1QG4wRwYBmdELCtVJV1GaliUdLO6xAGaWROZqYHQipg4ZjYMZ L4BwiksKagef5/SQ2ZY3XdXcIsKXUDS5/bWe7wpWV6OSGHJ4BSjRcXXlwu2slCtPB5lrKU7LQmzk lhUwV10aQEYdRM/MNPPWNFOjOg0OKzfWiaunyqbsqBeYgL5lCPcBq6tm48/xITEfnlOb0i/Nrnl5 sFaOmedcteytBQxs13QXuJpQB9reTFcb0CNX09z1seF6x1U8BjCYk0iw4rbnGcJ9wOUA/NFmNw6O q+aASF7HdbXiIyXcBxTJC7pKOokmcuqcqzvKMcRmyI5RPefq4Dwc4OmUCxwu5sU/GDZfJRYtxAzr 3RxgJ3K9WwiNaaCZJ4ze5QBvXI0pB6CNvBQtVcx5Tk8ZVVrDyBnIYmbGpoOHr2rvuCpyVEEOj+dc nbvrRYruN+NbFWUIuKBFun7b+5FwXN3R5yVZqddRiaIpiX/09Ge+enZB6AeALXOorbCUB45bt/8j Xz1dMFbnXBWbrctXT7oalO5gfGYec4bAGtLaDLjA/zcIPwrJu6crF9Xws+c31n80ze/ssPpGrC5H VXE++xnU+99b2nu7BHwjLnI1AnMGfgaJ7n5rkXeWrX4nNocLjUn9+VtR3/w+xtcmNOEv4D8BBgDc 7YRcCg0KZW5kc3RyZWFtDWVuZG9iag0xNjggMCBvYmo8PC9Dcm9wQm94WzAgMCA1OTUuMjIgODQy XS9QYXJlbnQgMjAwIDAgUi9Db250ZW50cyAxNzAgMCBSL1JvdGF0ZSA5MC9NZWRpYUJveFswIDAg NTk1LjIyIDg0Ml0vUmVzb3VyY2VzIDE2OSAwIFIvVHlwZS9QYWdlPj4NZW5kb2JqDTE2OSAwIG9i ajw8L1hPYmplY3Q8PC9JbTEzMyAxNzEgMCBSL0ltMTM1IDE3MiAwIFI+Pi9Db2xvclNwYWNlPDwv Q3M2IDIwOCAwIFI+Pi9Gb250PDwvVFQ0IDIxNSAwIFIvVFQ2IDIxNiAwIFIvVFQ3IDE3NCAwIFI+ Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUJdL0V4dEdTdGF0ZTw8L0dTMSAyMDkgMCBSPj4+Pg1l bmRvYmoNMTcwIDAgb2JqPDwvTGVuZ3RoIDIxMTUvRmlsdGVyL0ZsYXRlRGVjb2RlPj5zdHJlYW0N CkiJvNfLbiNFFAbgfT9FLR0k19S9uiTEYhiEYAWipVkgFsZpD0axnYkdYN6e/3T71nZs/M8FjTKO 0677qe8cv6+smquqBF1qlaw21qpxyjqq7Ix6aiuXddg/WVRvv1LL6tW366Sma2W7f+sp/vL9L1a9 Ww8/fdzNrPp5/6HXTfWqaQKaNrPKqGC0cWrcvxhVrHZJWWt0KiapZrEfzmi3/UnGF9cNPEYrY7xq puip+bsafbtaTh+e1/PV8q75s/quqd73K7TJHU1tsMTB4rdLPCxt8PR0SbvObdI2qZK1Lejc6ehU Clln+Zy1Xqewe7jt3+g6pZSxluhKsHjNJZm6G/E9luJ1HfCflR2RDqItpWTpxGQT0WCKfflhYb1X b1bdRC62scboYtEoUo2CzhGNHNWo1rGgUWIaWRyMZ0fChrvMjuSMtpYdyXldIj0Szl42wjONvNUJ G+EL1SjqgI2IVET4or1sRGYaBfwtsmsKSRfZCKZNxOXw7JJi0CmzS4qIV9kHanqAxEdySQk+YBsi FXkZtsnFqKlGeJDZJWWEq2VZqa2OkV1THbWXeKBivC7aeRaw4j+CypI6KiMT4w6+dlQya3LwlabS wVeaSgdfhUoqYJ0kNNkIqk3hpXTgVaR0zL114JWW0oFXkdJTawKvIqWndhy8ipSOubguOFpKB11F Sk/tOHgVKbklgVeR0lE7Dl5FSkftOHgVKh1zbx18pal0qfBUOvhKU+ngq1DpqSCHr0KlpyyCr0Il 16Z0UjoqiorrpHRUFIFXWkoPXmkpPXilpfTgVaT0TBR58CpSUqx4GzsqPRNFHr7SVHr4KlQ6Jsi9 fI1ji0oPX+mi0sNXuqj0vqap9OCVptLDV5pKiMdT6eErTaWHrzSVHr4KlZYK8hQ7Ki215fBVqKRm B15pKT14paX04JWV0kNXWkpf17yUHryKlJYKIvAqUlomiAJ4FSktc0wBvNJSBvBKSxms5aUM4JWW MoBXWsoAXkVK5mwDdBUoLRNFAboKlJaJ1+ADDWUArjSUAbrSUAboSkMZoCsNZYCuNJQButJQhmR5 KAN0pWvKAF1pKQN4paUM4JWVMkBXWspQB17KAF5pKQN45aUEr3RNGcErLWUEr7SU0WReSrDPS4lt 66SkXMELLWWErnRJibXwUkZvaCkjdBUpDXVK4JWWEiHXSRmZGMcXJl5KiNJJyR0TeKWljDF3UgZq y8ErW1JG6EpDGaGrQGmoIIKuLJQRuAqUkZpdbXgoI3QVKAMVRNCVhjJCV0CJHEA1Sh2UhgmiBF1p KJPxHZRUk8wzmWArmAyFiYcEW1kmE2gFk6Fmkm2CrTSTySVhMmQmhrAHvJMJuNJOJuAKJ0OhYgi4 0k4m4AonQ2FCPAFX2skUvTgZauqcgCvrZIKttJMJuNJOJuDKOplgK5xEDUY1SryTCbjCSdSVVKPA O5mAK+1kAq68k8CVd7IU1skMWmknM3ClnczAlXUyw1bayQxcaSezc3Q5mWErzWSGrTSTGbbSTGbY eo1Jn15qBFtPmIx9I2lm1VxVNtS6RhusA59C04R3qB9q9dRWb9Wyet1Ur5omK6uaGUay2CU17v6X N0jlbtvaJNUsKnzdUv1PrdbTJVo00+prY+rwTfNn9V1zNLJki4Ahczc08mEJqJqLrH8wdtqN7Wpt nBr3L4fRuw5wbN3oxshv0+rX0ZvX3/90N8Zd1WH0+LTatNPNWt6jDBvdTzYT+R0l+ui+fZj/1T59 kPe1LqP5nRkt+zdxNMObybTt27nR6m6Migd/3bbtHj+s27vfmh8Hi3MOl7dGaaCNtWqcso6IMCML s6nb3u2jRfX2K6wUW49/smHDx8cNZ0d7139od2xBxvqfTm078vbUsvb1px7auDu1JEP2h7Yb8qae nEUFb7fH3/Whth0wM77YuwuC4yG4cjfEPp6OpnqpC48uhErp4rPOzXvX0bifW7+FXWzfMq86dV9I Pv+8ChZczvZsf89umBvE0s5+gbkFJNV9tOyxGM2Xt8wqOtyPL7FjEe/T8UnW3axmIs8t86rt/iZ/ 3nnV+GaTzyJsNbtlVgkg5S8R9wnHEO1ZfM06iG+ZWC5dlXSY2Fi+wYVUQCTyJSbUvDla73g3yN/I Kk+r5818+U5NlsvV83LaLtrlZq3uxiB49PsHdd9OV8+PD/KJx8nmD7VLDLu0YKLORzkPOQXJHpWH ubpw563k9kGm66czuV89buarbb4Ko8nyfvcrjHqcvJvIU32en0o+yjKD/DRMXWf5afj4Qn7afuhw vojoj1/mYZXXTnfb2gVUmf4oH/RdnATgJ03Q4Tuh9WfXQvb+lglKXe9fvhefNC2PQj6fT2sQByfZ 3CEH+MN4KOpRTOBvaHplPI/P5XReeIXTwiuOpqvF40N/SeRPZdRKBeVG/8zXco36OiogN0g6lRM+ DVSfwqVCahjD54E6eHwaqNcKpN36rhRIx7XR8Ert7zY+7s4380pB8+K27oZNxoMuGfojy6Vt74Ny 6YXezyLyplVdHO20fOrT7XFUXLsx2148qoFw6cZ80vw87qI7L+/aXXjeMLmAaseXLzG5aNxLzBzu yg2zSwhpY4e5DgGQsdDTXNfXHOsP6027WOvhQoJ3l9LF8IKe3cLhY+YWBnf9Cg6/o1yJ/K6j/7hU B7/661X69Cr3S91FCPXU3j9P27Xa/NEiyT9MPqjVTD207+ab+WKyaU8TvdSZF9ga7uXZhg0fv7Bh 5+uLRb+gcT4kv0GxcnK0MV2sBIaLOJ9puVYJdDO1Xj4x7l+Mij7oXKuMwD4ud21/66x5Zc12cv8K MABEU/ZeCg0KZW5kc3RyZWFtDWVuZG9iag0xNzEgMCBvYmo8PC9TdWJ0eXBlL0ltYWdlL0xlbmd0 aCAyNy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lkdGggMTYvSGVpZ2h0IDEz L1R5cGUvWE9iamVjdD4+c3RyZWFtDQoAAKioAACqqgAAiIgAAKqqAACoqAAAqqoAAAoNCmVuZHN0 cmVhbQ1lbmRvYmoNMTcyIDAgb2JqPDwvU3VidHlwZS9JbWFnZS9MZW5ndGggMjcvSW1hZ2VNYXNr IHRydWUvQml0c1BlckNvbXBvbmVudCAxL1dpZHRoIDE0L0hlaWdodCAxMy9UeXBlL1hPYmplY3Q+ PnN0cmVhbQ0KAAOoqwADqqsAA4iLAAOqqwADqKsAA6qrAAMKDQplbmRzdHJlYW0NZW5kb2JqDTE3 MyAwIG9iajw8L1N1YnR5cGUvQ0lERm9udFR5cGUyL0ZvbnREZXNjcmlwdG9yIDE3NSAwIFIvQmFz ZUZvbnQvQkhHTE5FK1dpbmdkaW5ncy9XWzEzMls3NDZdXS9DSURTeXN0ZW1JbmZvPDwvU3VwcGxl bWVudCAwL09yZGVyaW5nKElkZW50aXR5KS9SZWdpc3RyeShBZG9iZSk+Pi9EVyAxMDAwL1R5cGUv Rm9udD4+DWVuZG9iag0xNzQgMCBvYmo8PC9TdWJ0eXBlL1R5cGUwL0Rlc2NlbmRhbnRGb250c1sx NzMgMCBSXS9CYXNlRm9udC9CSEdMTkUrV2luZ2RpbmdzL0VuY29kaW5nL0lkZW50aXR5LUgvVHlw ZS9Gb250Pj4NZW5kb2JqDTE3NSAwIG9iajw8L1N0ZW1WIDAvRm9udE5hbWUvQkhHTE5FK1dpbmdk aW5ncy9Gb250U3RyZXRjaC9Ob3JtYWwvRm9udEZpbGUyIDE3NiAwIFIvRm9udFdlaWdodCA0MDAv RmxhZ3MgNC9EZXNjZW50IC0yMTAvRm9udEJCb3hbMCAtMjExIDEzNTkgODk5XS9Bc2NlbnQgODk4 L0ZvbnRGYW1pbHkoV2luZ2RpbmdzKS9DYXBIZWlnaHQgMC9UeXBlL0ZvbnREZXNjcmlwdG9yL0l0 YWxpY0FuZ2xlIDA+Pg1lbmRvYmoNMTc2IDAgb2JqPDwvTGVuZ3RoIDMyNTQvRmlsdGVyL0ZsYXRl RGVjb2RlL0xlbmd0aDEgNjA3Mj4+c3RyZWFtDQpIicxWfVBU1xU/9973sbtgQD7UShrf+gIxsoif UdHgKrsr4KSCH3FXa91dwKCiEnWoX3EwmqoP0plMSDqxScW0Jvix6VtRixmnsaYYJra1/pE0Vmv6 QUcnDZ3JVGs6nZb+3nvAANOk/aN/lMNvz7nn/N6555x738wjRkQp1EiCJi9eWjh1yi+6DaKRYXif rGrYpr1VePw47AtEctHa+qc2/vTuHBP250TSmqfqdqxtvf1MBfjw0c7amlj1dfbeHaLRjVg/VgtH Rqbn20QeK9/DtRu3bS9bYBzCejeROFi3uSqW1ZvVS5ThI2KXN8a214sV7H08HwVf2xTbWJPoeh/r zLvgr6/fUlO/+L1H1hA9IGG9jP7f/q59YWQKpIqF+V6+EtZ3KY7fw0A18Aq1UAtvdzg0DTBhldNt uYum0hbbP4124zdAn7M2+pbtmUtxxONgd0IXI1YFzewcLazZ1s/QfuT+jLfzS/ySHZ2HvOUWwxHe LnfBb+XbR2/RLXYRnF30ImLn6Zr1FDK3UILuswmQJvZH1sMr4GXW/sizAewW1Ptjuk5/YVmsmBns AjgZfK9di7NbIzidkGt2FkueYHVsM9vCDiFnNxd8BrJu5gd5Kzf5JRGRiuUuJUOZqdYhCyOO2zkS HVrZvkZLsXOcnh7I6sgvGWeVbBmrZS+zVtTQyXogd3kBn4epW/KSiEqp0h15g/w6pEtZrr7mUpBb JoXGkka5NB1dBbFHJWqupvW005ZdkN2Y5bN0hFrpKB2nJL1NP7H2pBt0i+5jOmkQq6+ZbDZbAYlA trA9bD/m0TRInmevsnb2Nuq7wj7g49C1I3Xo3qlyHz/Mz/Ar/Gf8Y97NP+GfCRJusUbExVZxTJwQ V8VVqVRqlY5KN6WbMpNNe1IZSpayWmmCNKtudYO6X31BfU0955lEo9GXD32V0wp0tQOd7KaDZNin loScobOQLvrE6gPS29eJJbNZgIXYckiErWRRtpFtZdsHOvoBe4O1sTPo5QPIR+wG+x37E/uzLfe5 wkfx/IH+KvhSvoJv4C/zV/ir/CRuZDu/wD/it9BjN7+HHlNEhsgWD4mgCEGWiVViu9gnEuKSuCF6 cG6p0uNSsbRcWo3eL0vd0h2cJJeFnCvPkIsgtfImeY/cJH8PN7pH7lFS7alkKJnKHOWAckRpV64r /1Cz1VHqeMgkdYq6VK1TG9QTard623XKPd+9zr3F46MTNJl+NOztPYvb/S5frRTSWHYDt+FpkQaW Zr17PFWtc6/j7VZ16lI2ASf1G7ov3LRIukwrxCqqk+MiRf2U2thWaS87KUJ0io6pDeyCiIoecUzO VeY48+SHxQl1hxpVb6PSu+JFuVadxObLTayNz8MbvYVV0l/ZPfoGdt7GJ9JlOkQHWQO5qMV1io3A u9bJx7Em+XVxWmoVQXkPexQnmCN3iedoBmVTKk2g8bjrMmUB5J85a+b0aVOnTC6cVODLn/johEfy ch/Wx3u1cQ999cGcsV8ZM3pUdlZmxsj0tAdGpKZ43C5VkSXBGfmCeiiqmXlRU8rTS0sLrLUegyM2 yBE1NbhCQzmmFrVp2lCmH8y1w5h+h+kfYLJ0bS7NLfBpQV0zfx7QtQ62sjIM+/mAHtHMHtt+wral PHsxAguvF09owTG1Ac1kUS1ohhpqjWA0gHzJFE+JXlLjKfBR0pMCMwWWGdLrkyxUzGyDh4JFSU6u EajKLNcDQbNMD1glmCI3GKs2KyrDwUCO1xsp8JmspEqPm6QvMNPybQqV2NuYSomp2tto66x2qElL +i4azR3pFI/mp1br1bGvh00Ri1h7jMw3F+oBc+HO7jEFvg72xrKw6S7pYLQsfJ7KexuTZY2BQMTa LaMkfMCmjwZ99M7uHGEEx6zTrKVhHNDM1srw4KjX+o1EkLTAt2hJ2Iuq9WCzZrWxJGx3gKRsTCGK tHxWm07DNXrQ8kTXa6ZbX6DXGuujOKyxhklLdnhPjy33n+/9LZUHNWNZWPea83L0SCzwYDKLjCU7 2sv8WtnQSIEvmT7SmXTygbQ+I3XEYKNmIGZbNt2yUHX/qJlVkV6GK2JqVRoqCesmz51l/dTMIqNq Fmj4izBMdB3mFzXSi6yDkHPTdc24R7gIes+nQz2xPo+Sm36PLNO6LgNXDvF+28zPNydOtG6KWoKj RWXF9npGga/BXKTXp2vmIoyMKsJ4KFJUiJF7vdYpN3X4KY6F2VgZdtYaxXNOk78wP2LyqBW52B/J Xm5FGvsjA49HdVznM2R9sGWbrryB/7T0UZnB2iKTjfqScI0Tx+sT1JKSnGtUhPNiRlNOXtRojuBo QngVDSOkayEjasQ6ehvjupauG8lFi4z6YLS/pY7ei005pr85UsswVHOaMw0zsyQscnjEsXiOiBSQ VYc65Z8V+LhsJuq96vnYrmzw3+/xEddoGQrgslBM5e4J1OJZB1ykcjWPWtwXKCFOUKfrFCXU8ZRw p/VhjYOUA0AzJVydlPC8Qwn5Ow4srrQZuIYYvmDUl6jc1Yqc+2F7nbgNy14IPyC1U0IJ4/kaB+oh B1K1A4uvvENP9sP1B/BK4buCPc4hngOkwDcdvr3Q2dSilFFL/17y3/rQBaBmZRX82X11THRqcfuR C3WryOc6D43+1G8CL2A9DXqT06vrOTz/OPRaavfk00EJs7PQvxfmWT4Ms4ZgFzi7hs3ifwx8AybE cadne5/hOOLgP/Eki9c9mMPS+2LXYKf929w2WHyY78AXc/87uOLDgG97l3N/p3wZPArup+KcuX3u Q/P+asD+sA99a2XGULgMBwPxvw/FgH83dVqwzti250MPgrhBVSKbqlwLqdqfSqEQesgY6fKXah38 sdOlU6H22YqdctRJRx13VJuj3nTU9x111FFHHFXmqFJHLXTUAkf5HVXsqLmOmu0oxVGSo4SjmH8x 9E3gBvBr4EPgXeAccBb4IZAATgFtwJvAkX+xX32hcRRh/JvbvcwkPdNLDeHwtJ0z/nkITS4pNJFa TS7GRq4pMWdpUwrN9XYvWZreht1NoC8lIAVBI4sNvlkittIKqVdTMC0KCv7JU5/ig09CwQfFSF/0 wWLO3+yuaUujRXwS3Lnf/H7f983MfjN3w8wB54B3gDeAV4EScCwY88Nw6MWQPgjp/ZAuhHQ+pHMh vRBSX0h7Q+oJiYcUDykWEvX2gr8FvgFWgK+Br4AvgY+Bq8AScBlYAN4CTgHGYFdzfXN9t7/MZnpf 4v673D/L/Tnu29yf5H6Z+yb3j3L/CPdHuX+YPyEeF1JsF4+KR0RKtIhmsU0kRaNIiAYhRJ3QRUzg N1p9WMvH8oUcy1c/K1H+uKz+WmhdZg0vH6nGW3Osui1P+VdyqWpPWzX2WnDzWGa1K4y9eSatLh3X iLHambl0xKOj1NJ2/5O6x8oPn/qEdrBu4qh3LfEdX3DlLcDrB15fef3Am2IfDVNXvvj62GO0ycB3 Hva30XtaDlhqusOHrwjKjfYfDXkptqUB8xlLZ0ZzLcmp54LJ7cmkTqev68Qu0hacvQlc5h4CVGhn 384+FcKJpUKN6p4XhVKn92TS19nFKJSEuwlLSYxvZz5u2kK/od8g0lr+ZDI0mVBX8L94hgpSUu8t eatW18bOUyfvZNXZO+GYOjO1WZwhGhavtXcrX2X6KnuPSK9RvKZdY98TdayvJdfo+Z9Rd2Z3NWWa nsw0ZWY1+n02RusUX/mtZ1ZfUWf0Is3Hh3BeadT8KbEYjmrS2G0MsIZPZ7YbXRf1hXl94fZY8Pan /i9B2fsfLupJ0Nsb97EuokhrlIQVah06F+k66JFIc/z+jqMl6fWwDLoZaUaSvRjpGDWycqQ1+L1I 69Dzka6Dvhppju2yekl2ZbO75ZBVcmzXLnuy33ambKfoWXalXfZNTsoRa3zCc+WI6ZrOjGm05wb3 7T8w0HbIqowbgPsge0NIy5Wm5U2YDv6mOua45XqmYxrSc4qGebLonJC2itxlljfPS1oViWHkwYrl oX/BK3qmK4sVowMD2MELSvZ0xXMs022XdIkk1jeLshtqiCwqkUM2uUCZPPj6oRyaCuoiPBZUhdoR 6aNJFInvwaJxmkDMDSwTbKL1DGoDLXM0SPtoPx2gAWqjQ2hdQXsjYjfoMU7TGKuIXg9q/W/j93sk lKpNsId5qNwlcpFglZmKeoFXzUdCq5UwYJ0MMj4Bn73RZ/No+R+trgxyk1E2kg7CsoIc1PsLUMXA coN3VuDtiDKw75pBCdY0oiojK2itvrVwZ91kCfSZo0bsjCTUM3D/VKshxoI4DoOnf+xoP7b12V9E WgTb7MLi2XXFn+d+mCBaH274jncG+zbatX8IMAAPPVtzCg0KZW5kc3RyZWFtDWVuZG9iag0xNzcg MCBvYmpbL0luZGV4ZWQgMjA4IDAgUiAyMjYgMzUgMCBSXQ1lbmRvYmoNMTc4IDAgb2JqPDwvU3Vi dHlwZS9UcnVlVHlwZS9Gb250RGVzY3JpcHRvciAxNzkgMCBSL0xhc3RDaGFyIDExOC9XaWR0aHNb MjUwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAyNTAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDcyMiA2NjcgMCA3MjIgMCAwIDAgNzIyIDMzMyAwIDAgMCAwIDAgMCA1NTYg MCAwIDU1NiA2MTEgMCAwIDAgMCAwIDAgMCAwIDAgMCA1MDAgMCA0NDQgNTAwIDQ0NCAwIDQ0NCAz MzMgNTAwIDUwMCAyNzggMCA1MDAgMjc4IDc3OCA1MDAgNTAwIDUwMCAwIDMzMyAzODkgMjc4IDUw MCA1MDBdL0Jhc2VGb250L1RpbWVzTmV3Um9tYW4vRmlyc3RDaGFyIDMyL0VuY29kaW5nL1dpbkFu c2lFbmNvZGluZy9UeXBlL0ZvbnQ+Pg1lbmRvYmoNMTc5IDAgb2JqPDwvU3RlbVYgODIvRm9udE5h bWUvVGltZXNOZXdSb21hbi9Gb250U3RyZXRjaC9Ob3JtYWwvRm9udFdlaWdodCA0MDAvRmxhZ3Mg MzQvRGVzY2VudCAtMjE2L0ZvbnRCQm94Wy01NjggLTMwNyAyMDAwIDEwMDddL0FzY2VudCA4OTEv Rm9udEZhbWlseShUaW1lcyBOZXcgUm9tYW4pL0NhcEhlaWdodCA2NTYvVHlwZS9Gb250RGVzY3Jp cHRvci9JdGFsaWNBbmdsZSAwPj4NZW5kb2JqDTE4MCAwIG9iajw8L1N1YnR5cGUvVHJ1ZVR5cGUv Rm9udERlc2NyaXB0b3IgMTgxIDAgUi9MYXN0Q2hhciAxMjEvV2lkdGhzWzI3OCAyNzggMCAwIDAg MCAwIDAgMzMzIDMzMyAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgNjY3IDY2NyAwIDcyMiAwIDAgMCA3MjIgMCAwIDAgMCAwIDAgMCA2NjcgMCAwIDY2NyA2MTEg MCAwIDAgNjY3IDAgMCAwIDAgMCAwIDU1NiAwIDU1NiAwIDAgNTU2IDU1NiAyNzggMCA1NTYgMjIy IDAgMCAyMjIgODMzIDU1NiA1NTYgMCAwIDMzMyA1MDAgMjc4IDU1NiA1MDAgNzIyIDAgNTAwXS9C YXNlRm9udC9BcmlhbCxJdGFsaWMvRmlyc3RDaGFyIDMyL0VuY29kaW5nL1dpbkFuc2lFbmNvZGlu Zy9UeXBlL0ZvbnQ+Pg1lbmRvYmoNMTgxIDAgb2JqPDwvU3RlbVYgODUuODYzL0ZvbnROYW1lL0Fy aWFsLEl0YWxpYy9Gb250U3RyZXRjaC9Ob3JtYWwvRm9udFdlaWdodCA0MDAvRmxhZ3MgOTYvRGVz Y2VudCAtMjExL0ZvbnRCQm94Wy01MTcgLTMyNSAxMzc5IDk5OF0vQXNjZW50IDkwNS9Gb250RmFt aWx5KEFyaWFsKS9DYXBIZWlnaHQgNzE4L1R5cGUvRm9udERlc2NyaXB0b3IvSXRhbGljQW5nbGUg LTE1Pj4NZW5kb2JqDTE4MiAwIG9iajw8L1N1YnR5cGUvSW1hZ2UvTGVuZ3RoIDI3L0ltYWdlTWFz ayB0cnVlL0JpdHNQZXJDb21wb25lbnQgMS9XaWR0aCAxNC9IZWlnaHQgMTMvVHlwZS9YT2JqZWN0 Pj5zdHJlYW0NCqqrAAMqKwADqqsAAyIjAAOqqwADKisAA6qrCg0KZW5kc3RyZWFtDWVuZG9iag0x ODMgMCBvYmpbL0luZGV4ZWQgMjA4IDAgUiA2MiA0MSAwIFJdDWVuZG9iag0xODQgMCBvYmpbL0lu ZGV4ZWQgMjA4IDAgUiAxNiA0MyAwIFJdDWVuZG9iag0xODUgMCBvYmpbL0luZGV4ZWQgMjA4IDAg UiAyNDcgMzAgMCBSXQ1lbmRvYmoNMTg2IDAgb2JqWy9JbmRleGVkIDIwOCAwIFIgNjcgMjggMCBS XQ1lbmRvYmoNMTg3IDAgb2JqWy9JbmRleGVkIDIwOCAwIFIgNjkgMzMgMCBSXQ1lbmRvYmoNMTg4 IDAgb2JqWy9JbmRleGVkIDIwOCAwIFIgMCAyNiAwIFJdDWVuZG9iag0xODkgMCBvYmo8PC9TdWJ0 eXBlL0ltYWdlL0xlbmd0aCAyNy9JbWFnZU1hc2sgdHJ1ZS9CaXRzUGVyQ29tcG9uZW50IDEvV2lk dGggMTYvSGVpZ2h0IDEzL1R5cGUvWE9iamVjdD4+c3RyZWFtDQqqqgAAKioAAKqqAAAiIgAAqqoA ACoqAACqqgoNCmVuZHN0cmVhbQ1lbmRvYmoNMTkwIDAgb2JqWy9JbmRleGVkIDIwOCAwIFIgMjU1 IDE1MSAwIFJdDWVuZG9iag0xOTEgMCBvYmpbL0luZGV4ZWQgMjA4IDAgUiAyNTUgMTU0IDAgUl0N ZW5kb2JqDTE5MiAwIG9ialsvSW5kZXhlZCAyMDggMCBSIDI1NSAxNjQgMCBSXQ1lbmRvYmoNMTkz IDAgb2JqWy9JbmRleGVkIDIwOCAwIFIgMjU1IDE2NiAwIFJdDWVuZG9iag0xOTQgMCBvYmpbL0lu ZGV4ZWQgMjA4IDAgUiAyNTUgMTU4IDAgUl0NZW5kb2JqDTE5NSAwIG9ialsvSW5kZXhlZCAyMDgg MCBSIDI1NSAxNTYgMCBSXQ1lbmRvYmoNMTk2IDAgb2JqWy9JbmRleGVkIDIwOCAwIFIgMjU1IDE2 MCAwIFJdDWVuZG9iag0xOTcgMCBvYmpbL0luZGV4ZWQgMjA4IDAgUiAyNTUgMTYyIDAgUl0NZW5k b2JqDTE5OCAwIG9iajw8L051bXNbMCAxOTkgMCBSXT4+DWVuZG9iag0xOTkgMCBvYmo8PC9TL0Q+ Pg1lbmRvYmoNMjAwIDAgb2JqPDwvQ291bnQgMTAvVHlwZS9QYWdlcy9LaWRzWzIwNSAwIFIgMSAw IFIgMTMgMCBSIDE4IDAgUiAyMyAwIFIgNDUgMCBSIDgwIDAgUiAxMDYgMCBSIDE0NyAwIFIgMTY4 IDAgUl0+Pg1lbmRvYmoNMjAxIDAgb2JqPDwvU3VidHlwZS9YTUwvTGVuZ3RoIDM1NjcvVHlwZS9N ZXRhZGF0YT4+c3RyZWFtDQo8P3hwYWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENlaGlIenJl U3pOVGN6a2M5ZCI/Pgo8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRr PSIzLjEtNzAxIj4KICAgPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5 LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4KICAgICAgPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9 IiIKICAgICAgICAgICAgeG1sbnM6cGRmPSJodHRwOi8vbnMuYWRvYmUuY29tL3BkZi8xLjMvIj4K ICAgICAgICAgPHBkZjpQcm9kdWNlcj5BY3JvYmF0IERpc3RpbGxlciA3LjAgKFdpbmRvd3MpPC9w ZGY6UHJvZHVjZXI+CiAgICAgIDwvcmRmOkRlc2NyaXB0aW9uPgogICAgICA8cmRmOkRlc2NyaXB0 aW9uIHJkZjphYm91dD0iIgogICAgICAgICAgICB4bWxuczp4YXA9Imh0dHA6Ly9ucy5hZG9iZS5j b20veGFwLzEuMC8iPgogICAgICAgICA8eGFwOkNyZWF0b3JUb29sPlBTY3JpcHQ1LmRsbCBWZXJz aW9uIDUuMi4yPC94YXA6Q3JlYXRvclRvb2w+CiAgICAgICAgIDx4YXA6TW9kaWZ5RGF0ZT4yMDEw LTExLTA4VDIyOjAxOjEyKzA4OjAwPC94YXA6TW9kaWZ5RGF0ZT4KICAgICAgICAgPHhhcDpDcmVh dGVEYXRlPjIwMTAtMTEtMDhUMjI6MDE6MTIrMDg6MDA8L3hhcDpDcmVhdGVEYXRlPgogICAgICA8 L3JkZjpEZXNjcmlwdGlvbj4KICAgICAgPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIKICAg ICAgICAgICAgeG1sbnM6ZGM9Imh0dHA6Ly9wdXJsLm9yZy9kYy9lbGVtZW50cy8xLjEvIj4KICAg ICAgICAgPGRjOmZvcm1hdD5hcHBsaWNhdGlvbi9wZGY8L2RjOmZvcm1hdD4KICAgICAgICAgPGRj OnRpdGxlPgogICAgICAgICAgICA8cmRmOkFsdD4KICAgICAgICAgICAgICAgPHJkZjpsaSB4bWw6 bGFuZz0ieC1kZWZhdWx0Ij5NaWNyb3NvZnQgUG93ZXJQb2ludCAtIGRyYWZ0LXpoYW5nLWlkci1k ZWNvdXBsaW5nLTAxLnBwdHg8L3JkZjpsaT4KICAgICAgICAgICAgPC9yZGY6QWx0PgogICAgICAg ICA8L2RjOnRpdGxlPgogICAgICAgICA8ZGM6Y3JlYXRvcj4KICAgICAgICAgICAgPHJkZjpTZXE+ CiAgICAgICAgICAgICAgIDxyZGY6bGk+bWluZ3VpPC9yZGY6bGk+CiAgICAgICAgICAgIDwvcmRm OlNlcT4KICAgICAgICAgPC9kYzpjcmVhdG9yPgogICAgICA8L3JkZjpEZXNjcmlwdGlvbj4KICAg ICAgPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIKICAgICAgICAgICAgeG1sbnM6eGFwTU09 Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9tbS8iPgogICAgICAgICA8eGFwTU06RG9jdW1l bnRJRD51dWlkOmU2MTU5NjVhLTI3NWMtNGM0Ni1hMWEzLTdhM2M4NzkxYzA0ZjwveGFwTU06RG9j dW1lbnRJRD4KICAgICAgICAgPHhhcE1NOkluc3RhbmNlSUQ+dXVpZDo3MTFkOTM5Ny1iMGY0LTQ0 M2QtYjA4NC05ZGRmMWE1NWZmNjQ8L3hhcE1NOkluc3RhbmNlSUQ+CiAgICAgIDwvcmRmOkRlc2Ny aXB0aW9uPgogICA8L3JkZjpSREY+CjwveDp4bXBtZXRhPgogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgCjw/eHBhY2tldCBlbmQ9InciPz4NCmVuZHN0 cmVhbQ1lbmRvYmoNMjAyIDAgb2JqPDwvQ3JlYXRpb25EYXRlKEQ6MjAxMDExMDgyMjAxMTIrMDgn MDAnKS9BdXRob3IobWluZ3VpKS9DcmVhdG9yKFBTY3JpcHQ1LmRsbCBWZXJzaW9uIDUuMi4yKS9Q cm9kdWNlcihBY3JvYmF0IERpc3RpbGxlciA3LjAgXChXaW5kb3dzXCkpL01vZERhdGUoRDoyMDEw MTEwODIyMDExMiswOCcwMCcpL1RpdGxlKE1pY3Jvc29mdCBQb3dlclBvaW50IC0gZHJhZnQtemhh bmctaWRyLWRlY291cGxpbmctMDEucHB0eCk+Pg1lbmRvYmoNeHJlZg0KMCAyMDMNCjAwMDAwMDAw MDAgNjU1MzUgZg0KMDAwMDAxMDAxMiAwMDAwMCBuDQowMDAwMDEwMTQ2IDAwMDAwIG4NCjAwMDAw MTA0MDMgMDAwMDAgbg0KMDAwMDAxMjk1OCAwMDAwMCBuDQowMDAwMDIwMDU1IDAwMDAwIG4NCjAw MDAwMjM4MjggMDAwMDAgbg0KMDAwMDAyMzk4MyAwMDAwMCBuDQowMDAwMDI4NDA1IDAwMDAwIG4N CjAwMDAwMjg1NjAgMDAwMDAgbg0KMDAwMDAzOTQ2NiAwMDAwMCBuDQowMDAwMDQ0MTM4IDAwMDAw IG4NCjAwMDAwNTAwMzMgMDAwMDAgbg0KMDAwMDA2MTc0OCAwMDAwMCBuDQowMDAwMDYxODg1IDAw MDAwIG4NCjAwMDAwNjIwNjUgMDAwMDAgbg0KMDAwMDA2MzgzNiAwMDAwMCBuDQowMDAwMDYzOTky IDAwMDAwIG4NCjAwMDAwNjQxNDggMDAwMDAgbg0KMDAwMDA2NDI4NSAwMDAwMCBuDQowMDAwMDY0 NDY1IDAwMDAwIG4NCjAwMDAwNjgyNDQgMDAwMDAgbg0KMDAwMDA2ODQwMCAwMDAwMCBuDQowMDAw MDY4NTU2IDAwMDAwIG4NCjAwMDAwNjg2OTMgMDAwMDAgbg0KMDAwMDA2OTE0NyAwMDAwMCBuDQow MDAwMDcyMzIxIDAwMDAwIG4NCjAwMDAwNzIzNzMgMDAwMDAgbg0KMDAwMDA3MjU4MyAwMDAwMCBu DQowMDAwMDcyODIyIDAwMDAwIG4NCjAwMDAwNzMzMjIgMDAwMDAgbg0KMDAwMDA3NDA2OCAwMDAw MCBuDQowMDAwMDc1MTQ1IDAwMDAwIG4NCjAwMDAwNzk1NjUgMDAwMDAgbg0KMDAwMDA3OTgxNCAw MDAwMCBuDQowMDAwMDgwMzIwIDAwMDAwIG4NCjAwMDAwODEwMTQgMDAwMDAgbg0KMDAwMDA4MjAy MCAwMDAwMCBuDQowMDAwMDg3MTk2IDAwMDAwIG4NCjAwMDAwODc3NTEgMDAwMDAgbg0KMDAwMDA5 MTI3OSAwMDAwMCBuDQowMDAwMDk1MzMyIDAwMDAwIG4NCjAwMDAwOTU1NjIgMDAwMDAgbg0KMDAw MDA5NjA4MSAwMDAwMCBuDQowMDAwMDk2MTgyIDAwMDAwIG4NCjAwMDAwOTY0MjggMDAwMDAgbg0K MDAwMDA5NjU2NSAwMDAwMCBuDQowMDAwMDk3MTA1IDAwMDAwIG4NCjAwMDAxMDUzNjggMDAwMDAg bg0KMDAwMDEwNTUyNCAwMDAwMCBuDQowMDAwMTA1NjY5IDAwMDAwIG4NCjAwMDAxMDU4MjUgMDAw MDAgbg0KMDAwMDEwNTk4NyAwMDAwMCBuDQowMDAwMTA2MTIwIDAwMDAwIG4NCjAwMDAxMDYyODEg MDAwMDAgbg0KMDAwMDEwNjQyMiAwMDAwMCBuDQowMDAwMTA2NTg0IDAwMDAwIG4NCjAwMDAxMDY3 MjQgMDAwMDAgbg0KMDAwMDEwNjg4NCAwMDAwMCBuDQowMDAwMTA3MDQyIDAwMDAwIG4NCjAwMDAx MDcyMDAgMDAwMDAgbg0KMDAwMDEwNzM2MiAwMDAwMCBuDQowMDAwMTA3NTA3IDAwMDAwIG4NCjAw MDAxMDc2NTcgMDAwMDAgbg0KMDAwMDEwNzc5NiAwMDAwMCBuDQowMDAwMTA3OTU4IDAwMDAwIG4N CjAwMDAxMDgxMDMgMDAwMDAgbg0KMDAwMDEwODI1MyAwMDAwMCBuDQowMDAwMTA4MzkyIDAwMDAw IG4NCjAwMDAxMDg1NDQgMDAwMDAgbg0KMDAwMDEwODY4NCAwMDAwMCBuDQowMDAwMTA4ODQ2IDAw MDAwIG4NCjAwMDAxMDg5OTEgMDAwMDAgbg0KMDAwMDEwOTEzMCAwMDAwMCBuDQowMDAwMTA5MjYy IDAwMDAwIG4NCjAwMDAxMDk0MTQgMDAwMDAgbg0KMDAwMDEwOTU1NCAwMDAwMCBuDQowMDAwMTA5 NzE2IDAwMDAwIG4NCjAwMDAxMDk4NjEgMDAwMDAgbg0KMDAwMDExMDAwMCAwMDAwMCBuDQowMDAw MTEwMTMyIDAwMDAwIG4NCjAwMDAxMTAyNjkgMDAwMDAgbg0KMDAwMDExMDcyMSAwMDAwMCBuDQow MDAwMTE5MjMxIDAwMDAwIG4NCjAwMDAxMTkzNzYgMDAwMDAgbg0KMDAwMDExOTUzOCAwMDAwMCBu DQowMDAwMTE5NjcxIDAwMDAwIG4NCjAwMDAxMTk4MzIgMDAwMDAgbg0KMDAwMDExOTk3MyAwMDAw MCBuDQowMDAwMTIwMTM1IDAwMDAwIG4NCjAwMDAxMjAyNzUgMDAwMDAgbg0KMDAwMDEyMDQzNSAw MDAwMCBuDQowMDAwMTIwNTkzIDAwMDAwIG4NCjAwMDAxMjA3NTEgMDAwMDAgbg0KMDAwMDEyMDkx MyAwMDAwMCBuDQowMDAwMTIxMDU4IDAwMDAwIG4NCjAwMDAxMjExOTcgMDAwMDAgbg0KMDAwMDEy MTMyOSAwMDAwMCBuDQowMDAwMTIxNDkxIDAwMDAwIG4NCjAwMDAxMjE2MzYgMDAwMDAgbg0KMDAw MDEyMTc3NSAwMDAwMCBuDQowMDAwMTIxOTA4IDAwMDAwIG4NCjAwMDAxMjIwNzEgMDAwMDAgbg0K MDAwMDEyMjIxNyAwMDAwMCBuDQowMDAwMTIyMzYzIDAwMDAwIG4NCjAwMDAxMjI0OTYgMDAwMDAg bg0KMDAwMDEyMjYzMiAwMDAwMCBuDQowMDAwMTIyNzcyIDAwMDAwIG4NCjAwMDAxMjM0NzEgMDAw MDAgbg0KMDAwMDEzNTUyOSAwMDAwMCBuDQowMDAwMTM1NjkyIDAwMDAwIG4NCjAwMDAxMzU4NDAg MDAwMDAgbg0KMDAwMDEzNjAwMyAwMDAwMCBuDQowMDAwMTM2MTUwIDAwMDAwIG4NCjAwMDAxMzYz MTMgMDAwMDAgbg0KMDAwMDEzNjQ3NSAwMDAwMCBuDQowMDAwMTM2NjIxIDAwMDAwIG4NCjAwMDAx MzY3NzggMDAwMDAgbg0KMDAwMDEzNjkxOCAwMDAwMCBuDQowMDAwMTM3MDc0IDAwMDAwIG4NCjAw MDAxMzcyMDcgMDAwMDAgbg0KMDAwMDEzNzM1MyAwMDAwMCBuDQowMDAwMTM3NTA4IDAwMDAwIG4N CjAwMDAxMzc2NTYgMDAwMDAgbg0KMDAwMDEzNzc5OCAwMDAwMCBuDQowMDAwMTM3OTM2IDAwMDAw IG4NCjAwMDAxMzgwOTkgMDAwMDAgbg0KMDAwMDEzODI0NSAwMDAwMCBuDQowMDAwMTM4Mzg1IDAw MDAwIG4NCjAwMDAxMzg1MTggMDAwMDAgbg0KMDAwMDEzODY4MSAwMDAwMCBuDQowMDAwMTM4ODI3 IDAwMDAwIG4NCjAwMDAxMzg5NzMgMDAwMDAgbg0KMDAwMDEzOTEwOSAwMDAwMCBuDQowMDAwMTM5 MjcyIDAwMDAwIG4NCjAwMDAxMzk0MjkgMDAwMDAgbg0KMDAwMDEzOTU3NSAwMDAwMCBuDQowMDAw MTM5NzM4IDAwMDAwIG4NCjAwMDAxMzk4ODYgMDAwMDAgbg0KMDAwMDE0MDA0MyAwMDAwMCBuDQow MDAwMTQwMTgxIDAwMDAwIG4NCjAwMDAxNDAzMzYgMDAwMDAgbg0KMDAwMDE0MDQ5OSAwMDAwMCBu DQowMDAwMTQwNjU0IDAwMDAwIG4NCjAwMDAxNDA4MTcgMDAwMDAgbg0KMDAwMDE0MDk1OSAwMDAw MCBuDQowMDAwMTQxMTA1IDAwMDAwIG4NCjAwMDAxNDEyNjAgMDAwMDAgbg0KMDAwMDE0MTQwMCAw MDAwMCBuDQowMDAwMTQxODI3IDAwMDAwIG4NCjAwMDAxNDQwOTkgMDAwMDAgbg0KMDAwMDE0NDI1 NiAwMDAwMCBuDQowMDAwMTQ0NDQ3IDAwMDAwIG4NCjAwMDAxNDQ4MTkgMDAwMDAgbg0KMDAwMDE0 NDk3NiAwMDAwMCBuDQowMDAwMTQ1MTYxIDAwMDAwIG4NCjAwMDAxNDU1MjUgMDAwMDAgbg0KMDAw MDE0NTkwMSAwMDAwMCBuDQowMDAwMTQ4NzcxIDAwMDAwIG4NCjAwMDAxNDkwODEgMDAwMDAgbg0K MDAwMDE1MTUwMCAwMDAwMCBuDQowMDAwMTUyMDY3IDAwMDAwIG4NCjAwMDAxNTQ5NjcgMDAwMDAg bg0KMDAwMDE1NTU1NyAwMDAwMCBuDQowMDAwMTU3OTIwIDAwMDAwIG4NCjAwMDAxNTgxNDAgMDAw MDAgbg0KMDAwMDE1OTY5MiAwMDAwMCBuDQowMDAwMTU5OTEyIDAwMDAwIG4NCjAwMDAxNjE2NzUg MDAwMDAgbg0KMDAwMDE2MTgxNSAwMDAwMCBuDQowMDAwMTYyMDAwIDAwMDAwIG4NCjAwMDAxNjQx ODYgMDAwMDAgbg0KMDAwMDE2NDM0MyAwMDAwMCBuDQowMDAwMTY0NTAwIDAwMDAwIG4NCjAwMDAx NjQ2ODcgMDAwMDAgbg0KMDAwMDE2NDgwMyAwMDAwMCBuDQowMDAwMTY1MDM2IDAwMDAwIG4NCjAw MDAxNjgzNzQgMDAwMDAgbg0KMDAwMDE2ODQyMCAwMDAwMCBuDQowMDAwMTY4ODA3IDAwMDAwIG4N CjAwMDAxNjkwMzMgMDAwMDAgbg0KMDAwMDE2OTQyNSAwMDAwMCBuDQowMDAwMTY5NjQ1IDAwMDAw IG4NCjAwMDAxNjk4MDIgMDAwMDAgbg0KMDAwMDE2OTg0NyAwMDAwMCBuDQowMDAwMTY5ODkyIDAw MDAwIG4NCjAwMDAxNjk5MzggMDAwMDAgbg0KMDAwMDE2OTk4MyAwMDAwMCBuDQowMDAwMTcwMDI4 IDAwMDAwIG4NCjAwMDAxNzAwNzIgMDAwMDAgbg0KMDAwMDE3MDIyOSAwMDAwMCBuDQowMDAwMTcw Mjc2IDAwMDAwIG4NCjAwMDAxNzAzMjMgMDAwMDAgbg0KMDAwMDE3MDM3MCAwMDAwMCBuDQowMDAw MTcwNDE3IDAwMDAwIG4NCjAwMDAxNzA0NjQgMDAwMDAgbg0KMDAwMDE3MDUxMSAwMDAwMCBuDQow MDAwMTcwNTU4IDAwMDAwIG4NCjAwMDAxNzA2MDUgMDAwMDAgbg0KMDAwMDE3MDY0MiAwMDAwMCBu DQowMDAwMTcwNjY3IDAwMDAwIG4NCjAwMDAxNzA3ODcgMDAwMDAgbg0KMDAwMDE3NDQzMiAwMDAw MCBuDQp0cmFpbGVyDQo8PC9TaXplIDIwMz4+DQpzdGFydHhyZWYNCjExNg0KJSVFT0YNCg== --Boundary_(ID_ICuXPqK3RSSyye5ZlJOrzw) Content-type: text/plain; name=draft-zhang-idr-decoupling-01.txt Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=draft-zhang-idr-decoupling-01.txt INTERNET-DRAFT Mingui Zhang Intended Status: Proposed Standard Huawei Expires: April 28, 2011 Bin Liu Tsinghua University Dacheng Zhang Huawei Beichuan Zhang The University of Arizona October 25, 2010 Secure Extension of BGP by Decoupling Path Propagation and Adoption draft-zhang-idr-decoupling-01 Status of this Memo This Internet-Draft is submitted to IETF in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/1id-abstracts.html The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html Copyright Notice Copyright (c) 2010 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must Zhang Expires April 28, 2011 [Page 1] INTERNET-DRAFT DBGP October 25, 2010 include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Zhang Expires April 28, 2011 [Page 2] INTERNET-DRAFT DBGP October 25, 2010 Abstract This draft proposes a novel mitigation scheme to protect the inter- domain data delivery during false routing announcements. A new path attribute is defined to Decouple propagation of a path and adoption of a path for data forwarding in BGP (DBGP). DBGP does not use suspicious paths for data forwarding, but still propagates them in the routing system to facilitate attack detection. It can extensively protect data delivery from routing announcements of false sub- prefixes, false origins, false nodes and false links, and works well with ongoing attack detection and prevention systems. Conventions used in this document The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119]. Table of Contents 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . 5 2 Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . 5 3 False Routing Announcements . . . . . . . . . . . . . . . . . . 5 3.1 Problem . . . . . . . . . . . . . . . . . . . . . . . . . . 5 3.2 Countermeasures . . . . . . . . . . . . . . . . . . . . . . 6 3.2.1 Prevention . . . . . . . . . . . . . . . . . . . . . . 6 3.2.2 Detection . . . . . . . . . . . . . . . . . . . . . . . 6 3.2.3. Traditional Mitigation . . . . . . . . . . . . . . . . 8 3.3 Paradox of Blocking Suspicious Routing Updates and Attack Detection . . . . . . . . . . . . . . . . . . . . . . . . . 8 4. DBGP's Mitigation: Decoupling Path Propagation and Adoption . . 9 4.1 Quarantine Time . . . . . . . . . . . . . . . . . . . . . . 9 4.2 Working with Detection and Prevention . . . . . . . . . . 10 5 Protocol Descriptions . . . . . . . . . . . . . . . . . . . . . 10 5.1 DAS_PATH Attribute Definition . . . . . . . . . . . . . . 11 5.2 Identification of Suspicious Paths . . . . . . . . . . . . 12 5.3 Propagating Updates . . . . . . . . . . . . . . . . . . . 13 5.4 Choosing Alternative Paths . . . . . . . . . . . . . . . . 14 5.5 Releasing Quarantined Paths . . . . . . . . . . . . . . . 14 6 Security Considerations . . . . . . . . . . . . . . . . . . . 15 7 IANA Considerations . . . . . . . . . . . . . . . . . . . . . 15 8 References . . . . . . . . . . . . . . . . . . . . . . . . . . 15 8.1 Normative References . . . . . . . . . . . . . . . . . . 15 8.2 Informative References . . . . . . . . . . . . . . . . . 16 Appendix A: Empirical Evaluation . . . . . . . . . . . . . . . . 16 Author's Addresses . . . . . . . . . . . . . . . . . . . . . . . 17 Zhang Expires April 28, 2011 [Page 3] INTERNET-DRAFT DBGP October 25, 2010 Zhang Expires April 28, 2011 [Page 4] INTERNET-DRAFT DBGP October 25, 2010 1 Introduction False routing announcements cause serious security issues to the inter-domain routing system, which can lead to widespread service disruptions. A special case is prefix hijacking, in which a network announces an IP prefix that belongs to another network. Existing works such as Pretty Good BGP (PGBGP)[PGBGP] block suspicious routing updates to protect data delivery. However, such an approach has the side effect of blocking the view of detection systems at the control plane and data plane. As a result, an attack will not be detected and operators will not be alerted to take actions to stop the attack. This draft proposes an extension of BGP, to solve this paradox by decoupling path propagation and adoption in BGP. In current BGP, the path a router adopts for data forwarding is the same path being propagated to neighbors. That is why upon receiving a suspicious path, a router has to either accept it (no mitigation but good detection) or reject it (good mitigation but no detection). Our idea is for a router to use trusted paths for data forwarding, but still inform its neighbors about the suspicious path. The suspicious paths will be carried in an optional transitive attribute in BGP updates, while the routers still use trusted paths for data forwarding. This way the data traffic is protected while false routing announcements are being propagated to detection systems. 2 Terminology DBGP: Decoupling path propagation and adoption in BGP 3 False Routing Announcements 3.1 Problem False routing announcements can be caused by either inadvertent mis- configurations or malicious attacks. For the ease of exposition, we use "attacker" to refer to the network (or Autonomous System, AS) that makes the false routing announcements regardless of the intention. Based on which part of the routing path is false, such announcements can be classified into five types, each of which has different severity: o Prefix origin: The attacker originates someone else's prefix. Depending on where a network is in the Internet topology, some will choose paths leading to the true origin and some will choose paths leading to the false origin. o Intermediate node: The attacker does not forge the prefix or its origin, but inserts itself into the path as an intermediate Zhang Expires April 28, 2011 [Page 5] INTERNET-DRAFT DBGP October 25, 2010 AS. Similar to the case of false origin, some networks will choose the correct paths and some the false paths. But usually fewer networks will choose the false path since it is longer than that of false origin attack. o Intermediate link: The attacker forges a new link to bypass some of the ASes to get a shorter path. The shortened path is expected to attract more networks' traffic. o Sub-prefix: The attacker originates a sub-prefix of someone else's prefix. Due to the longest match in routing lookup, a false sub-prefix will win over the original prefix. Thus, all traffic destined to the sub-prefix range will be forwarded to the attacker. o Super-prefix: Theoretically the attacker can also announce a false super-prefix, but that will not attract any traffic unless part of the prefix range is unused by the real owner, in which case it is equivalent to announcing a false origin of the unused prefix range. 3.2 Countermeasures The current strategies proposed for the problem of false announcements fall in three categories: prevention, detection and mitigation. 3.2.1 Prevention Prevention schemes (e.g., [SBGP], [SoBGP], and [SPV]) use cryptographic mechanisms to protect the routing updates and let routers reject any forged announcement. Unfortunately no prevention scheme has seen much deployment on the Internet due to the lack of incentives for those first movers. Since crypto-based schemes add significant computational load to routers and require upgrade on software or hardware, individual ISPs need to see immediate benefits to justify the deployment. On the current Internet, however, the first mover's routing announcements will be accepted by other networks without authentication, and adding authentication does not bring any immediate benefit. 3.2.2 Detection The representative detection systems proposed in recent years include [Cyclops], [PHAS], [MyASN], [IAR], [iSPY], [NWatch], [OList], and [LWeight]. Such systems are designed to detect false routing by examining routing updates, probing data paths, cross-checking with registry databases, or a combination of these techniques. Once a Zhang Expires April 28, 2011 [Page 6] INTERNET-DRAFT DBGP October 25, 2010 false routing case is detected, the owner of the prefix will be notified, and it is expected that the owner will take actions to resolve the problem, which, in today's Internet, usually involves contacting the offending network or its upstream provider to stop the false routing announcements. This process of detection, notification and resolution takes time, ranging from an hour to a day in some past incidents and varying from network to network [NWatch][RIPE]. In the meantime, the damage to data traffic has already been made and malicious attackers may have already achieved their objectives. Zhang Expires April 28, 2011 [Page 7] INTERNET-DRAFT DBGP October 25, 2010 3.2.3. Traditional Mitigation A mitigation schemes attempts to protect the data traffic while an attack is going on. The common approach is to somehow identify abnormal routing updates and block them. As proposed in [PGBGP] and [PGBGP++], a router can examine the content of incoming updates. If an AS path contains unexpected prefix origin or links, it will be suppressed from propagating for a period of time to wait for the network operator's validation. The length of the time is configurable by the network operators. Instead, an alternative path (via trusted prefix origin and links) will be employed for data delivery in the suppression period. After this period,if the path is not proved to be illegal, the router will adopt and announce the new path. PGBGP gives operators certain reaction time to resolve potential false announcements while protecting data delivery in the meantime. When a real attack is detected and resolved, the corresponding false announcement will be withdrawn from the routing system, whereas legitimate announcement will stay in the routing system and eventually be accepted. But blocking false routing announcements can get in the way of detection systems. For instance, on September 22, 2008, a Russian ISP AS8997 hijacked a large number of prefixes as it leaked an entire table [ASN8997]. However, since the upstream ISP of AS8997 blocked the routing updates, detection systems such as MyASN and IAR did not pick up this incident. The attack mainly affected ISPs and users within Russia but largely went unnoticed by prefix owners. Each existing solution has its drawbacks, and none is sufficiently effective by itself. The future of the Internet probably will have several different solutions at the same time, complementary to each other, forming a multi-line defense to protect routing and data delivery before, during, and after attacks. 3.3 Paradox of Blocking Suspicious Routing Updates and Attack Detection It has been realized that a mitigation mechanism and a detection system that complement each other well can be integrated into an effective routing defense solution. For instance, the mitigation mechanism can help the detection system to confine the damage caused by an attack, as the affected data traffic may be vulnerable for hours before the attack can be actually detected by the detection mechanism and be eventually stopped. Also, the mitigation mechanism can also obtain benefit from the detection system because a mitigation mechanism normally cannot identity false routing information accurately with its limited knowledge, resource and time. The output from the detection system can be used to correct the many false positives generated by the mitigation mechanism and also inform Zhang Expires April 28, 2011 [Page 8] INTERNET-DRAFT DBGP October 25, 2010 the prefix owner to resolve the attack. However, there is a dilemma: the mitigation mechanism tries to render the attack ineffective while the detection system needs the attack to be effective in order to detect it. 4. DBGP's Mitigation: Decoupling Path Propagation and Adoption The suspicious paths are serially blocked hop by hop for validation in traditional mitigation schemes, which gets in the way of detection systems. In order to solve this dilemma, this document proposes a solution which decouples path propagation and path adoption. The basic idea of this solution is to extend BGP's update message with a new optional transitive path attribute so that a router can inform its neighbor routers about the suspicious path and meanwhile the router uses another trusted path for data forwarding. In order to achieve this, a new BGP attribute, DAS_PATH, is defined in Section 5. 4.1 Quarantine Time Based on operating experiences, a false routing announcement can be detected and corrected in a certain period (e.g., one day) after it is launched, and so an announcement will be trusted if it is not withdrawn in a pre-defined period. Therefore, in mitigation schemes, when a new path is identified as a suspicious one, it will be quarantined (or blocked) from being used for a period of time, which is called the quarantine time and noted as T_q. If a new path has stayed in a router's Adj-RIBs-In for more than T_q, it will be trusted by this router. If this path is the most preferred from the Adj-RIBs-In, the router will use this path for data delivery and announce this path to its neighbors. A router MAY determine the quarantine time itself. Assume there are two routers, R1 and R2. R1 is the downstream of R2, and the quarantine time of R1 and R2 is T1 and T2 respectively. The suspicious path is PATH at R1. There are two possibilities. o T1 is shorter than T2. When T1 expires, PATH becomes trusted by R1 and R1 begins to use it for data delivery. R1 will announce R1-PATH as a legitimate AS path to R2. However, at this time, the path R1-PATH is still being quarantined by R2. o T1 is longer than T2. When T2 expires, R1-PATH becomes trusted by R2. However, R2 can not use this path for data delivery as R1 has not announced R1-PATH as an AS path. It will be cached in the Adj-RIBs-In until the downstream router R1 has announced it as an AS path when T1 expires. Zhang Expires April 28, 2011 [Page 9] INTERNET-DRAFT DBGP October 25, 2010 Compared to the traditional mitigation schemes, the propagation of suspicious paths through DAS_PATHs in DBGP enables the parallel validation, which accelerates the adoption process of suspected legitimate paths (the false positive). 4.2 Working with Detection and Prevention Traditional mitigation mechanisms block the propagation of suspicious paths, which undermines the effectiveness of detection systems. DBGP is proposed to address this shortage. In DBGP, the data traffic is protected while the false routing announcements are spread out to be monitored by detection systems. The capacity of propagating the suspicious path in DBGP is not worse than that in BGP. However, the issue of enhancing this capacity is out of the scope of this document. As a mitigation scheme, DBGP routers validate the AS_PATHs based on the limited information stored in local Adj-RIBs-In. This would cause some legitimate paths to be identified as suspicious and blocked from being used for data delivery (high false positive). If a down stream router would like their paths be adopted quickly, it can include the certificate for its AS_PATHs. Then, the up stream routers can verify and adopt such AS_PATHs immediately. Therefore, the deployment of DBGP actually creates the incentive for deploying prevention systems. 5 Protocol Descriptions Take Figure 5.1 for example. A, B, C, and O are DBGP routers residing in different ASes, , X is the attacker and p is the prefix of interest. Before the attack, the preferred path for traffic is ABCO. Here, we use the notation "R1R2...Rn-p" to denote the AS path which is destined to prefix "p" via routers R1, R2, ..., Rn. When X makes a false announcement of X-p to B, B will regard this new path as suspicious because it would divert traffic to an AS(X) that previously was not on the data path (BCO). B will store the suspicious path in its Adj-RIBs-In (The routing tables of an AS router is comprised of three sub-tables: Adj-RIBs-In, Loc-RIB and Adj-RIBs-Out [BGP4]), but keep using the existing path in its Loc-RIB for data forwarding. At the same time, B re-announces its path (BCO) in an update message to A, and encapsulates the new, suspicious path (BX) as an optional transitive attribute which is defined in Section 5.1. After receiving the update message, router A learns this suspicious path, stores it, and propagates it further to its neighbors using the optional attribute the same way. Therefore, the suspicious path is propagated to the Internet while not adopted for data forwarding. This approach enable the detection systems to intercept the suspicious path and notify the prefix owner to take actions. Once the attack is stopped, the false announcements will be Zhang Expires April 28, 2011 [Page 10] INTERNET-DRAFT DBGP October 25, 2010 withdrawn from the routing system, i.e., deleted or replaced in the Adj-RIBs-In of the involved routers. However, a router realizes that the quarantine time has been expired and the suspicious path is still in the Adj-RIBs-In, the router regards the path as a legitimate one. Hence the DBGP router will install the path in its Loc-RIB for data forwarding and re-announce the path using the regular ASPATH attribute in the update message. For example, if BX-p has been validated as legitimate, B will announce it to A as its AS_PATH. The rest of this section will discuss the design details in new BGP attribute definition, identifying suspicious paths, choosing alternative paths for data forwarding, propagating the paths, and releasing quarantined paths. [X]->p ^ | [A]->[B]->[C]->[O]-p Figure 5.1: Attack Example 1 The rest of this section will discuss the design details in the definition of the new DAS_PATH Attribute, identifying suspicious paths, choosing alternative paths for data forwarding, propagating the paths, and releasing quarantined paths. 5.1 DAS_PATH Attribute Definition +----------------------------------+ | Attribute Type (2 octets) | +----------------------------------+ | Attribute Length (1 or 2 octets) | +------------------------------------------------------------------+ | Attribute Value (variable length) | +------------------------------------------------------------------+ Figure 5.2: The DAS_PATH Attribute DAS_PATH (Decoupled AS_PATH) is defined as a new optional transitive Path Attribute (Figure 5.2) to be included in BGP's UPDATE message. The first bit of the Attribute Type is set (1), therefore the attribute is optional. The second bit of Attribute Type is set (1), therefore the attribute is transitive and SHOULD be passed on to other BGP peers. The third and fourth bits are Partial bit and Extended Length bit respectively, which has already been defined in [BGP4]. The Attribute Type code is assigned by the IANA (Internet Assigned Numbers Authority). The definition of Attribute Length is the same as that in [BGP4]. Zhang Expires April 28, 2011 [Page 11] INTERNET-DRAFT DBGP October 25, 2010 The Attribute Value is composed of a sequence of DAS path segments. Each DAS path segment is encoded as a triple . The path segment type is a 1-octet field with the following two allowable values: Value Segment Type 1 DAS_SET unordered set of ASs a route in the UPDATE message has traversed 2 DAS_SEQUENCE ordered set of ASs a route in the UPDATE message has traversed The path segment length is a 1-octet long field containing the number of ASs in the path segment value field. The path segment value field contains one or more AS numbers, each encoded as a 2-octets long field. When a DAS_PATH is propagated across the network, the operations on DAS_PATH follows the well-known AS_PATH attribute only that DAS_PATH is non-mandatory. If a router which does not deploy DBGP receives the update messages containing DAS_PATH attribute, i.e., does not understand this attribute, it will just pass it on to the next router. If its downstream router is a DBGP router, it will be able to pick up the information from this attribute and continue DBGP operations. Therefore DBGP can be incrementally deployed over the Internet. 5.2 Identification of Suspicious Paths For a given prefix p, a path is trusted if it has been staying in the Adj-RIBs-In continuously for the required quarantine time, T_q. All the nodes, links, and origins that appear in trusted paths are trusted components, and the set of them is denoted by trusted(p). This set of trusted components is derived from current contents of all Adj-RIBs-In without using a database to store historical information like PGBGP does. Nodes, links, and origins that do not belong to trusted(p) are said to be suspicious components for this particular prefix p. A new path is suspicious if it contains any suspicious component for its prefix. However, not all suspicious paths need to be explicitly quarantined. DBGP quarantines paths that satisfy the following condition: o A new path is quarantined if and only if it is suspicious, more preferred than other alternative paths, and contains an AS that is not in the current data forwarding path. Zhang Expires April 28, 2011 [Page 12] INTERNET-DRAFT DBGP October 25, 2010 If the new path is not better than alternative paths, it will not be able to divert any traffic. One may suggest that the attacker can first announce a less preferred path so that DBGP routers will take it as a backup path without suspicion, and then make the primary path fail to trick the router to use the false backup path. But in this case, if the attacker has the control of the primary path, it can already get the traffic without doing this. If the attacker does not have control of the primary path, it will not know when the primary path may fail and which backup path the router will choose, thus the attack will not be effective. If the new path does not introduce any new AS on the data path, it is not quarantined since it does not divert any traffic. In Figure 5.3, when X launches an attack by announcing X-p, this path is not quarantined by B since B already sends its traffic to X. B will accept this path and announces it to A. Assuming ABX-p is more preferred than ACO-p, A will quarantine ABX-p since this new path would divert A's traffic to a new place, AS X, and X is a suspicious origin to A. To reduce the potential false positives in quarantining paths, we introduce an optimization rule. If the current best path is replaced by a suspicious path (i.e., the same neighbor that sent the best path previously sends another path to replace it), then the current best path is cached for a short time period. This rule is used to accommodate some unstable prefixes, which may get announced and withdrawn or oscillate between two paths frequently. With this rule, quick re-announcement of a path will not be treated as suspicious. Previous measurement work has shown that (1) most prefixes are stable, and only a small number of prefixes are very unstable; (2) the most popular prefixes are stable; and (3) the most preferred paths are being used by routers for most of the time [BGPpop][Stable][BGPHA]. Therefore, DBGP's criterion for suspicious paths will not generate excessive false positives in reality. The majority of the rest prefixes is only suspicious infrequently. +---------------+ | | | v [A]->[B]->[X]->[C]->[O]-p | p Figure 5.3: Attack Example 2 5.3 Propagating Updates DBGP uses the new BGP attribute, DAS_PATH, to carry a suspicious path Zhang Expires April 28, 2011 [Page 13] INTERNET-DRAFT DBGP October 25, 2010 in a update. In certain cases DBGP router may need to select a DAS_PATH from multiple ones to announce. For example, in Figure 5.4, assume C does not deploy DBGP and accepts the false announcement of X-p. When B receives BCX-p, B quarantines this new path and switches to its backup BDO-p. The update from B to A will have BDO as the AS_PATH, and BCX as the DAS_PATH attribute. However, since BDO is suspicious to A as well, A will quarantine BDO and switch to AEFO. Thus the update from A can contain either ABCX or ABDO. A router's neighbors may simultaneously send updates containing the DAS_PATH to it, which also makes the router have multiple DAS_PATHs to choose. DBGP always let a router select the best DAS_PATH from the multiple ones to announce, which is similar to the traditional BGP's AS_PATH selection process. This rule works well due to the following two facts. First, during attacks, the best DAS_PATH is most likely the bogus path aiming to attract data traffic. Second, during false positives, the best DAS_PATH will most likely become the best AS_PATH when the quarantine time ends. [X]->p ^ | [A]->[B]->[C]->[O]-p | | ^ | | /| | +-->[D]-+ | | | +------->[E]->[F] Figure 5.4: Attack Example 3 5.4 Choosing Alternative Paths When a new path is the most preferred but suspicious, DBGP routers will use an alternative path for data delivery. The question is which alternative path to be chosen. First, if the existing path that is being used for data forwarding is still the best, then the router can stick to that path without any changes. Second, if the existing path in use will have been replaced by the suspicious path, then the router needs to pick an alternative. For example, in Figure 5.4, suppose C does not deploy DBGP and blindly accepts the false announcement X-p. B's existing path BCO-p will be replaced by a suspicious path BCX-p, therefore B needs to temporarily switch to a backup path BDO-p from its Adj-RIBs-In. Third, if there is no alternative path or all alternative paths are labeled as suspicious, then the router err on data delivery by adopting a suspicious path to forward packets. 5.5 Releasing Quarantined Paths Zhang Expires April 28, 2011 [Page 14] INTERNET-DRAFT DBGP October 25, 2010 If the quarantined paths are false announcements, it is likely that within T_q, the attack will be stopped and these paths being withdrawn from the routing system. In this case, there is no explicit release of the quarantined path. Just the upstream router will send an update with empty DAS_PATH attribute. If T_q has passed and the quarantined path is still in the Adj-RIBs-In, then it is more likely that this is a legitimate path. The router will treat the path as a regular path and make it go through the path selection process. If the path turns out to be the most preferred one, it will be used for data forwarding and trigger routing updates to neighbor routers. 6 Security Considerations The entire document is about security consideration. 7 IANA Considerations The attribute type code of DAS_PATH should be assigned by the IANA, which identifies the attribute uniquely from all others. 8 References 8.1 Normative References [PGBGP] J. Karlin, S. Forrest, and J. Rexford, "Pretty Good BGP: Improving BGP by Cautiously Adopting Routes," in Proceedings of IEEE ICNP, 2006. [SBGP] S. Kent, C. Lynn, and K. Seo, "Secure Border Gateway Protocol (SBGP)," IEEE Journal on Selected Areas in Communications, vol. 18, no. 4, pp. 582-592, 2000. [Cyclops] Y.-J. Chi, R. Olivera, and L. Zhang, "Cyclops: the as- level connectivity observatory," SIGCOMM Comput. Commun. Rev., vol. 38, no. 5, pp. 5-16, 2008. [PHAS] M. Lad, D. Massey, D. Pei, B. Zhang, and L. Zhang, "PHAS: A Prefix Hijack Alert System," in 15th USENIX Security Symposium, 2006, pp.153-166. [MyASN] "RIPE myASN System," http://www.ris.ripe.net/myasn.html. [IAR] [Online]. Available: http://iar.cs.unm.edu/ [iSPY] Z. Zhang, Y. Zhang, Y. C. Hu, Z. M. Mao, and R. Bush, "iSPY: Detecting IP Prefix Hijacking on My Own," in Proceedings of ACM SIGCOMM, 2008. [NWatch] G. Siganos and M. Faloutsos, "Neighborhood Watch for Internet Routing: Can We Improve the Robustness of Internet Routing Today?" in Proceedings of IEEE INFOCOM, 2007. [Olist] X. Zhao, D. Pei, L. Wang, D. Massey, A. Mankin, S. Wu, and L. Zhang,"Dection of Invalid Routing Announcement in the Internet," in Proceedings of the IEEE DSN, June 2002. Zhang Expires April 28, 2011 [Page 15] INTERNET-DRAFT DBGP October 25, 2010 [LWeight] C. Zheng, L. Ji, D. Pei, J. Wang, and P. Francis, "A Light-weight Distributed Scheme for Detecting IP Prefix Hijacks in Real-time," in Proceedings of ACM SIGCOMM, 2007. [SoBGP] J. Ng, "Extensions to BGP to Support Secure Origin BGP," April 2004, ftp://ftp-eng.cisco.com/sobgp/drafts/draft- ng-sobgp-bgp-extensions-02.txt. [SPV] Y.-C. Hu, A. Perrig, and M. Sirbu, "SPV: Secure Path Vector Routing for Securing BGP," in Proceedings of ACM SIGCOMM, 2004. [RIPE] [Online]. Available: http://www.ripe.net/news/study- youtubehijacking.html [ASN8997] "Prefix hijack by ASN 8997." [Online]. Available: http://www.merit.edu/mail.archives/nanog/2008- 09/msg00704.html [BGPpop] J. Rexford, J. Wang, Z. Xiao, and Y. Zhang, "BGP Routing Stability of Popular Destinations," in Proceedings of ACM IMC 2002, pp. 197-202. [Stable] K. Butler, P. McDaniel, and W. Aiello, "Optimizing BGP Security by Exploiting Path Stability," in Proceedings of ACM CCS, Alexandria, VA, United States, 2006, pp. 298- 310. [BGPHA] R. V. Oliveira, R. Izhak-Ratzin, B. Zhang, and L. Zhang, "Measurement of Highly Active Prefixes in BGP," in Proceedings of IEEE Globecom,2005. [BGP4] J. W. Stewart, BGP4: Inter-Domain Routing in the Internet. Boston,MA, USA: Addison-Wesley Longman Publishing Co., Inc., 1998. 8.2 Informative References Appendix A: Empirical Evaluation The following aspects of DBGP are tested on the SSFNet-2.0 simulation platform which has implemented BGP4. o The ability to counter different types of attacks o The ability to rectify the false positives o The memory and message overhead The evaluation proves that DBGP can be used to mitigate all types of attacks. Compared with previous mitigation approaches [PGBGP], it reduces the delay of legitimate announcements significantly, only incurs a small amount of messages and memory overhead. Zhang Expires April 28, 2011 [Page 16] INTERNET-DRAFT DBGP October 25, 2010 Author's Addresses Mingui Zhang Huawei Technologies Co.,Ltd HuaWei Building, No.3 Xinxi Rd., Shang-Di Information Industry Base, Hai-Dian District, Beijing, 100085 P.R. China Email: mingui@huawei.com Bin Liu Tsinghua University East Main Building RM9-416 Tsinghua University, Hai-Dian District, Beijing, 100084 P.R. China Email: lmyujie@gmail.com Dacheng Zhang Huawei Technologies Co.,Ltd HuaWei Building, No.3 Xinxi Rd., Shang-Di Information Industry Base, Hai-Dian District, Beijing, 100085 P.R. China Email: zhangdacheng@huawei.com Beichuan Zhang University of Arizona Computer Science Department, The University of Arizona Tucson, AZ 85721 U.S.A. Email: bzhang@arizona.edu Zhang Expires April 28, 2011 [Page 17] --Boundary_(ID_ICuXPqK3RSSyye5ZlJOrzw)-- From kotikalapudi.sriram@nist.gov Mon Nov 15 18:43:23 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 790203A6D86 for ; Mon, 15 Nov 2010 18:43:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k8Ax+OiK18YB for ; Mon, 15 Nov 2010 18:43:22 -0800 (PST) Received: from smtp.nist.gov (rimp2.nist.gov [129.6.16.227]) by core3.amsl.com (Postfix) with ESMTP id 280783A6D7F for ; Mon, 15 Nov 2010 18:43:21 -0800 (PST) Received: from WSXGHUB2.xchange.nist.gov (WSXGHUB2.xchange.nist.gov [129.6.18.19]) by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id oAG2htiq031256; Mon, 15 Nov 2010 21:43:55 -0500 Received: from MBCLUSTER.xchange.nist.gov ([fe80::41df:f63f:c718:e08]) by WSXGHUB2.xchange.nist.gov ([129.6.18.19]) with mapi; Mon, 15 Nov 2010 21:43:33 -0500 From: "Sriram, Kotikalapudi" To: Pradosh Mohapatra Date: Mon, 15 Nov 2010 21:43:32 -0500 Thread-Topic: [sidr] I-D Action:draft-ietf-sidr-pfx-validate-00.txt Thread-Index: AQHLhTcFdhzRO9zy0kqXv/iw7pllRQ== Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 X-NIST-MailScanner: Found to be clean X-NIST-MailScanner-From: kotikalapudi.sriram@nist.gov Cc: "sidr@ietf.org" Subject: Re: [sidr] I-D Action:draft-ietf-sidr-pfx-validate-00.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 02:43:23 -0000 Hi Pradosh, I provided a comment on draft-ietf-sidr-roa-validation-10 which is also applicable to this draft. Please see my comment at: http://www.ietf.org/mail-archive/web/sidr/current/msg02106.html Sriram ________________________________________ From: sidr-bounces@ietf.org [sidr-bounces@ietf.org] On Behalf Of Internet-Drafts@ietf.org [Internet-Drafts@ietf.org] Sent: Wednesday, August 04, 2010 1:30 PM To: i-d-announce@ietf.org Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-pfx-validate-00.txt A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : BGP Prefix Origin Validation Author(s) : P. Mohapatra, et al. Filename : draft-ietf-sidr-pfx-validate-00.txt Pages : 11 Date : 2010-07-28 A BGP route associates an address prefix with a set of autonomous systems (AS) that identify the interdomain path the prefix has traversed in the form of BGP announcements. This set is represented as the AS_PATH attribute in BGP and starts with the AS that originated the prefix. To help reduce well-known threats against BGP including prefix mis-announcing and monkey-in-the-middle attacks, one of the security requirements is the ability to validate the origination AS of BGP routes. More specifically, one needs to validate that the AS number claiming to originate an address prefix (as derived from the AS_PATH attribute of the BGP route) is in fact authorized by the prefix holder to do so. This document describes a simple validation mechanism to partially satisfy this requirement. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-pfx-validate-00.txt From rogaglia@cisco.com Tue Nov 16 06:38:32 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1FED43A6C6E for ; Tue, 16 Nov 2010 06:38:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YW8oW3IbPeFr for ; Tue, 16 Nov 2010 06:38:30 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id E96C03A6C67 for ; Tue, 16 Nov 2010 06:38:29 -0800 (PST) Authentication-Results: ams-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: smime.p7s : 3815 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AvIEAI4m4kyQ/khNgWdsb2JhbACiXxUBARYiIqNvmyKFSwSKWA X-IronPort-AV: E=Sophos;i="4.59,206,1288569600"; d="p7s'?scan'208";a="69366780" Received: from ams-core-4.cisco.com ([144.254.72.77]) by ams-iport-1.cisco.com with ESMTP; 16 Nov 2010 14:39:13 +0000 Received: from ams3-vpn-dhcp7405.cisco.com (ams3-vpn-dhcp7405.cisco.com [10.61.92.236]) by ams-core-4.cisco.com (8.14.3/8.14.3) with ESMTP id oAGEdCQc004961; Tue, 16 Nov 2010 14:39:12 GMT Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: multipart/signed; boundary=Apple-Mail-56-226040594; protocol="application/pkcs7-signature"; micalg=sha1 From: Roque Gagliano In-Reply-To: <3F59A12A-49B3-4FDE-8208-5A18FCF1BEB0@apnic.net> Date: Tue, 16 Nov 2010 15:39:29 +0100 Message-Id: <043040F4-BDC9-4DAE-A02D-59DE529D8AE0@cisco.com> References: <20101111031644.1EF263A6965@core3.amsl.com> <3F59A12A-49B3-4FDE-8208-5A18FCF1BEB0@apnic.net> To: Geoff Huston X-Mailer: Apple Mail (2.1082) Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG Last Call request for draft-ietf-sidr-rescerts-provisioning-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 14:38:32 -0000 --Apple-Mail-56-226040594 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Geoff, As I listened to the recorded version of the session in Beijing, looks = like there some level of consensus that it may be a good idea to add an = additional "error_response" code value for "algorithm suite not = supported". I believe that will help the algorithm migration process as = we can write the exact process in the draft. You could always use the code 1203, but that is a generic response to a = malformed message. Regards, Roque On Nov 11, 2010, at 4:22 AM, Geoff Huston wrote: > Hi, >=20 > I've revised this draft as per the feedback from the WG in today's = SIDR meeting regarding text in the Security Considerations that notes = that the protocol itself does not describe how a client and a server can = "reset" the CMS signing time attribute value >=20 > Given that this addresses the WG comments from today's session. I'd = like to request the chairs to conduct a WG Last Call for this draft. >=20 > thanks >=20 > Geoff & Byron >=20 >=20 > Begin forwarded message: >=20 >> From: IETF I-D Submission Tool >> Date: 11 November 2010 2:16:44 PM AEDT >> To: gih@apnic.net >> Cc: robertl@apnic.net,bje@apnic.net,sra@isc.org >> Subject: New Version Notification for = draft-ietf-sidr-rescerts-provisioning-09=20 >>=20 >>=20 >> A new version of I-D, draft-ietf-sidr-rescerts-provisioning-09.txt = has been successfully submitted by Geoff Huston and posted to the IETF = repository. >>=20 >> Filename: draft-ietf-sidr-rescerts-provisioning >> Revision: 09 >> Title: A Protocol for Provisioning Resource = Certificates >> Creation_date: 2010-11-11 >> WG ID: sidr >> Number_of_pages: 31 >>=20 >> Abstract: >> This document defines a framework for certificate management >> interactions between a resource issuer ("Issuer") and a resource >> recipient ("Subject") through the specification of a protocol for >> interaction between the two parties. The protocol supports the >> transmission of requests from the Subject, and corresponding >> responses from the Issuer encompassing the actions of certificate >> issuance, certificate revocation and certificate status information >> reports. This protocol is intended to be limited to the application >> of resource certificate management and is not intended to be used as >> part of a more general certificate management framework. >>=20 >>=20 >>=20 >> The IETF Secretariat. >>=20 >>=20 >=20 > -- >=20 > Geoff Huston > Chief Scientist, APNIC >=20 > +61 7 3858 3100 > gih@apnic.net >=20 >=20 >=20 >=20 > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr --Apple-Mail-56-226040594 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKHjCCBMww ggQ1oAMCAQICEByunWua9OYvIoqj2nRhbB4wDQYJKoZIhvcNAQEFBQAwXzELMAkGA1UEBhMCVVMx FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAxIFB1YmxpYyBQcmltYXJ5 IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA1MTAyODAwMDAwMFoXDTE1MTAyNzIzNTk1OVow gd0xCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNp Z24gVHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZl cmlzaWduLmNvbS9ycGEgKGMpMDUxHjAcBgNVBAsTFVBlcnNvbmEgTm90IFZhbGlkYXRlZDE3MDUG A1UEAxMuVmVyaVNpZ24gQ2xhc3MgMSBJbmRpdmlkdWFsIFN1YnNjcmliZXIgQ0EgLSBHMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMnfrOfq+PgDFMQAktXBfjbCPO98chXLwKuMPRyV zm8eECw/AO2XJua2x+atQx0/pIdHR0w+VPhs+Mf8sZ69MHC8l7EDBeqV8a1AxUR6SwWi8mD81zpl Yu//EHuiVrvFTnAt1qIfPO2wQuhejVchrKaZ2RHp0hoHwHRHQgv8xTTq/ea6JNEdCBU3otdzzwFB L2OyOj++pRpu9MlKWz2VphW7NQIZ+dTvvI8OcXZZu0u2Ptb8Whb01g6J8kn+bAztFenZiHWcec5g J925rXXOL3OVekA6hXVJsLjfaLyrzROChRFQo+A8C67AClPN1zBvhTJGG+RJEMJs4q8fef/btLUC AwEAAaOCAYQwggGAMBIGA1UdEwEB/wQIMAYBAf8CAQAwRAYDVR0gBD0wOzA5BgtghkgBhvhFAQcX ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMAsGA1UdDwQEAwIB BjARBglghkgBhvhCAQEEBAMCAQYwLgYDVR0RBCcwJaQjMCExHzAdBgNVBAMTFlByaXZhdGVMYWJl bDMtMjA0OC0xNTUwHQYDVR0OBBYEFBF9Xhl9PATfamzWoooaPzHYO5RSMDEGA1UdHwQqMCgwJqAk oCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTEuY3JsMIGBBgNVHSMEejB4oWOkYTBfMQsw CQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDEgUHVi bGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHmCEQDNun9W8N/kvFT+IqyzcqpVMA0G CSqGSIb3DQEBBQUAA4GBALEv2ZbhkqLugWDlyCog++FnLNYAmFOjAhvpkEv4GESfD0b3+qD+0x0Y o9K/HOzWGZ9KTUP4yru+E4BJBd0hczNXwkJavvoAk7LmBDGRTl088HMFN2Prv4NZmP1m3umGMpqS KTw6rlTaphJRsY/IytNHeObbpR6HBuPRFMDCIfa6MIIFSjCCBDKgAwIBAgIQL5vTKNUCwWQOjacT KoWGmzANBgkqhkiG9w0BAQUFADCB3TELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJ bmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1 c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEeMBwGA1UECxMVUGVyc29u YSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAxIEluZGl2aWR1YWwgU3Vi c2NyaWJlciBDQSAtIEcyMB4XDTEwMDUxMjAwMDAwMFoXDTExMDUxMjIzNTk1OVowggETMRcwFQYD VQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazFGMEQG A1UECxM9d3d3LnZlcmlzaWduLmNvbS9yZXBvc2l0b3J5L1JQQSBJbmNvcnAuIGJ5IFJlZi4sTElB Qi5MVEQoYyk5ODEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTMwMQYDVQQLEypEaWdp dGFsIElEIENsYXNzIDEgLSBOZXRzY2FwZSBGdWxsIFNlcnZpY2UxFzAVBgNVBAMUDlJvcXVlIEdh Z2xpYW5vMSEwHwYJKoZIhvcNAQkBFhJyb2dhZ2xpYUBjaXNjby5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDGyowL31WLYDEbY59gvyg0OcBMh/AqsE5EpWzobCsYs1secYJvZlKm 5+2CjNWTQziHYo19cp7DG9XDLLGdLW7HC0VikR65cxIURXJoUKQO3QJYV99mrtnwCKf/FyzxeF11 pRILFbkgvpAZjCLig/RgNLt5cGGl8FGCe22sBWdBxU+sQiffsS774edvd3xFiRPaB/sOVPc4fbvw twOkEuas4IaH9Oivt1ZUvrFmBnS8mCYbk0OKjKjIEeS62TPsGCZv3f9Ffgm0Az4On6MiP1dARKp/ it5aow047hoFNXFCsWVLeEyDLk3avqS3/9fH//9NWvj0Mq/FhkaEw4Sv66TLAgMBAAGjgcwwgckw CQYDVR0TBAIwADBEBgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LnZlcmlzaWduLmNvbS9ycGEwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwME BggrBgEFBQcDAjBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vSW5kQzFEaWdpdGFsSUQtY3JsLnZl cmlzaWduLmNvbS9JbmRDMURpZ2l0YWxJRC5jcmwwDQYJKoZIhvcNAQEFBQADggEBAIxI8f9LAL0e mThKlUnwxlBH+q2htxBy9vBt24uGl8dunGyK4Aq7PAQiCF2XJfM2sWSRpdkIdbd9cD5upkcteP4s pL/T85qsfT1dLiQDTZ6/o19umk6DkqG0DpR+n+7jTUGdCzDhhzTZZblqY0afimcQ79uqZcF5ojDl N5Np93N3djqAmD37aKG1KE8xzBP0WiwxfVIGYua098YIsioWb0zvGmPd9JdMO55+jwkjFAOsT5kK ivXkjDnZJ1HM8GVQjGPnYBDEJBmC2B+kdbpi17cntYE/6V/SgrpB4t14YuswgMYRh1lGP7eKiiAj mwnaJL9aMMrqBwHLY/BLEA+3hRsxggSLMIIEhwIBATCB8jCB3TELMAkGA1UEBhMCVVMxFzAVBgNV BAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYD VQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEe MBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAx IEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYabMAkGBSsOAwIa BQCgggJtMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEwMTExNjE0 MzkyOVowIwYJKoZIhvcNAQkEMRYEFGLjuwXKZj5bCpkx90VIU3d4dM91MIIBAwYJKwYBBAGCNxAE MYH1MIHyMIHdMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsT FlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1zIG9mIHVzZSBhdCBodHRwczov L3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTA1MR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0 ZWQxNzA1BgNVBAMTLlZlcmlTaWduIENsYXNzIDEgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBIC0g RzICEC+b0yjVAsFkDo2nEyqFhpswggEFBgsqhkiG9w0BCRACCzGB9aCB8jCB3TELMAkGA1UEBhMC VVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3 b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3Jw YSAoYykwNTEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2ln biBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYab MA0GCSqGSIb3DQEBAQUABIIBAD8qKboxAPqyHD+KIBxxsXxk7k26nxoaR3Mx7yU7HIxeO56faZZ9 NK3KqX/92U3JUYVFFxsRU0Tjlx6tuL9oS9i97GGR1bK+Bz8msnNYMMsM91cQoncIRACVX9bAcyhd 5dLIbsp/KKBANSFPAlOt8yvWTHGM3GM+ADUF1b3Y07fN7Sy5uPs1Bf91BMwHr917ZJNh4GrGg90T z2x795DVDLnqwpct2Wh0KUDJVEkO8XaUmKMtlrPZbSErgVPLHlaKkAcU3HggD9IYUZWELueetJqx J6VSUtpFapT6L3wC/MXeTiriruNM39uLazabnUQo9el407bXaaGiTavu1Q6tcFoAAAAAAAA= --Apple-Mail-56-226040594-- From rogaglia@cisco.com Tue Nov 16 06:45:27 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 95C7F3A6B73 for ; Tue, 16 Nov 2010 06:45:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SE1SSlyqF7IK for ; Tue, 16 Nov 2010 06:45:26 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id C34C43A6A2E for ; Tue, 16 Nov 2010 06:45:25 -0800 (PST) Authentication-Results: ams-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: smime.p7s : 3815 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AvIEALsn4kyQ/khNgWdsb2JhbACiXxUBARYiIqN4myaFSwSKWA X-IronPort-AV: E=Sophos;i="4.59,206,1288569600"; d="p7s'?scan'208,217";a="69367358" Received: from ams-core-4.cisco.com ([144.254.72.77]) by ams-iport-1.cisco.com with ESMTP; 16 Nov 2010 14:46:08 +0000 Received: from ams3-vpn-dhcp7405.cisco.com (ams3-vpn-dhcp7405.cisco.com [10.61.92.236]) by ams-core-4.cisco.com (8.14.3/8.14.3) with ESMTP id oAGEk8Kk006305; Tue, 16 Nov 2010 14:46:08 GMT Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: multipart/signed; boundary=Apple-Mail-58-226456544; protocol="application/pkcs7-signature"; micalg=sha1 From: Roque Gagliano In-Reply-To: Date: Tue, 16 Nov 2010 15:46:25 +0100 Message-Id: <69FD7AD2-A398-419C-BDEE-31845426CF30@cisco.com> References: <20101108055538.655EC3A69B6@core3.amsl.com> To: Randy Bush X-Mailer: Apple Mail (2.1082) Cc: sidr wg Subject: Re: [sidr] draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 14:45:27 -0000 --Apple-Mail-58-226456544 Content-Type: multipart/alternative; boundary=Apple-Mail-57-226456450 --Apple-Mail-57-226456450 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Randy I have a comment on section 5 of this draft based on our experience = playing with this. When you say: " Announcements with invalid origins MAY be used, but SHOULD be less preferred than those with valid or unknown." It would be worthy to write a note warning that invalid announcements = which are more specific that an existing valid announcement SHOULD be = discarded as they will always be preferred, independently of validation = state of BGP attributes (longest prefix match). Regards, Roque PS: we are working on code for this feature. On Nov 8, 2010, at 6:57 AM, Randy Bush wrote: >=20 > From: IETF I-D Submission Tool > Date: November 8, 2010 6:55:37 AM GMT+01:00 > To: randy@psg.com > Subject: New Version Notification for draft-ymbk-rpki-origin-ops-00=20 >=20 >=20 >=20 > A new version of I-D, draft-ymbk-rpki-origin-ops-00.txt has been = successfully submitted by Randy Bush and posted to the IETF repository. >=20 > Filename: draft-ymbk-rpki-origin-ops > Revision: 00 > Title: RPKI-Based Origin Validation Operations > Creation_date: 2010-11-08 > WG ID: Independent Submission > Number_of_pages: 7 >=20 > Abstract: > Deployment of the RPKI-based BGP origin validation has many > operational considerations. This document attempts to collect and > present them. It is expected to evolve as RPKI-based origin > validation is deployed and the dynamics are better understood. >=20 >=20 >=20 > The IETF Secretariat. >=20 >=20 >=20 > A new version of I-D, draft-ymbk-rpki-origin-ops-00.txt has been = successfully submitted by Randy Bush and posted to the IETF repository. >=20 > Filename: draft-ymbk-rpki-origin-ops > Revision: 00 > Title: RPKI-Based Origin Validation Operations > Creation_date: 2010-11-08 > WG ID: Independent Submission > Number_of_pages: 7 >=20 > Abstract: > Deployment of the RPKI-based BGP origin validation has many > operational considerations. This document attempts to collect and > present them. It is expected to evolve as RPKI-based origin > validation is deployed and the dynamics are better understood. >=20 >=20 >=20 > The IETF Secretariat. >=20 >=20 >=20 >=20 > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr --Apple-Mail-57-226456450 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hi = Randy

I have a comment on section 5 = of this draft based on our experience playing with this.

When you = say:
 "  =
Announcements with invalid origins MAY be used, but SHOULD be less
   preferred than those with valid or unknown."
It would be worthy to write a note warning that invalid = announcements which are more specific that an existing valid = announcement SHOULD be discarded as they will always be preferred, = independently of validation state of BGP attributes (longest prefix = match).

Regards,

R= oque

PS: we are working on code for this = feature.



On = Nov 8, 2010, at 6:57 AM, Randy Bush wrote:


From: = IETF I-D Submission Tool <idsubmission@ietf.org>
Date: November 8, 2010 6:55:37 AM = GMT+01:00
Subject: = New Version Notification for = draft-ymbk-rpki-origin-ops-00



A new = version of I-D, draft-ymbk-rpki-origin-ops-00.txt has been successfully = submitted by Randy Bush and posted to the IETF = repository.

Filename: = draft-ymbk-rpki-origin-ops
Revision: 00
Title: = RPKI-Based Origin Validation Operations
Creation_date: = 2010-11-08
WG ID: Independent = Submission
Number_of_pages: 7

Abstract:
Deployment of the = RPKI-based BGP origin validation has many
operational considerations. =  This document attempts to collect and
present them.  It is = expected to evolve as RPKI-based origin
validation is deployed and = the dynamics are better understood.



The IETF = Secretariat.



A new version of I-D, = draft-ymbk-rpki-origin-ops-00.txt has been successfully submitted by = Randy Bush and posted to the IETF repository.

Filename: = draft-ymbk-rpki-origin-ops
Revision: 00
Title: = RPKI-Based Origin Validation Operations
Creation_date: = 2010-11-08
WG ID: Independent = Submission
Number_of_pages: 7

Abstract:
Deployment of the = RPKI-based BGP origin validation has many
operational considerations. =  This document attempts to collect and
present them.  It is = expected to evolve as RPKI-based origin
validation is deployed and = the dynamics are better understood.



The IETF = Secretariat.




__________________________________________= _____
sidr mailing list
sidr@ietf.org
https://www.ietf.org/ma= ilman/listinfo/sidr

= --Apple-Mail-57-226456450-- --Apple-Mail-58-226456544 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKHjCCBMww ggQ1oAMCAQICEByunWua9OYvIoqj2nRhbB4wDQYJKoZIhvcNAQEFBQAwXzELMAkGA1UEBhMCVVMx FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAxIFB1YmxpYyBQcmltYXJ5 IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA1MTAyODAwMDAwMFoXDTE1MTAyNzIzNTk1OVow gd0xCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNp Z24gVHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZl cmlzaWduLmNvbS9ycGEgKGMpMDUxHjAcBgNVBAsTFVBlcnNvbmEgTm90IFZhbGlkYXRlZDE3MDUG A1UEAxMuVmVyaVNpZ24gQ2xhc3MgMSBJbmRpdmlkdWFsIFN1YnNjcmliZXIgQ0EgLSBHMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMnfrOfq+PgDFMQAktXBfjbCPO98chXLwKuMPRyV zm8eECw/AO2XJua2x+atQx0/pIdHR0w+VPhs+Mf8sZ69MHC8l7EDBeqV8a1AxUR6SwWi8mD81zpl Yu//EHuiVrvFTnAt1qIfPO2wQuhejVchrKaZ2RHp0hoHwHRHQgv8xTTq/ea6JNEdCBU3otdzzwFB L2OyOj++pRpu9MlKWz2VphW7NQIZ+dTvvI8OcXZZu0u2Ptb8Whb01g6J8kn+bAztFenZiHWcec5g J925rXXOL3OVekA6hXVJsLjfaLyrzROChRFQo+A8C67AClPN1zBvhTJGG+RJEMJs4q8fef/btLUC AwEAAaOCAYQwggGAMBIGA1UdEwEB/wQIMAYBAf8CAQAwRAYDVR0gBD0wOzA5BgtghkgBhvhFAQcX ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMAsGA1UdDwQEAwIB BjARBglghkgBhvhCAQEEBAMCAQYwLgYDVR0RBCcwJaQjMCExHzAdBgNVBAMTFlByaXZhdGVMYWJl bDMtMjA0OC0xNTUwHQYDVR0OBBYEFBF9Xhl9PATfamzWoooaPzHYO5RSMDEGA1UdHwQqMCgwJqAk oCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTEuY3JsMIGBBgNVHSMEejB4oWOkYTBfMQsw CQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDEgUHVi bGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHmCEQDNun9W8N/kvFT+IqyzcqpVMA0G CSqGSIb3DQEBBQUAA4GBALEv2ZbhkqLugWDlyCog++FnLNYAmFOjAhvpkEv4GESfD0b3+qD+0x0Y o9K/HOzWGZ9KTUP4yru+E4BJBd0hczNXwkJavvoAk7LmBDGRTl088HMFN2Prv4NZmP1m3umGMpqS KTw6rlTaphJRsY/IytNHeObbpR6HBuPRFMDCIfa6MIIFSjCCBDKgAwIBAgIQL5vTKNUCwWQOjacT KoWGmzANBgkqhkiG9w0BAQUFADCB3TELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJ bmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1 c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEeMBwGA1UECxMVUGVyc29u YSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAxIEluZGl2aWR1YWwgU3Vi c2NyaWJlciBDQSAtIEcyMB4XDTEwMDUxMjAwMDAwMFoXDTExMDUxMjIzNTk1OVowggETMRcwFQYD VQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazFGMEQG A1UECxM9d3d3LnZlcmlzaWduLmNvbS9yZXBvc2l0b3J5L1JQQSBJbmNvcnAuIGJ5IFJlZi4sTElB Qi5MVEQoYyk5ODEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTMwMQYDVQQLEypEaWdp dGFsIElEIENsYXNzIDEgLSBOZXRzY2FwZSBGdWxsIFNlcnZpY2UxFzAVBgNVBAMUDlJvcXVlIEdh Z2xpYW5vMSEwHwYJKoZIhvcNAQkBFhJyb2dhZ2xpYUBjaXNjby5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDGyowL31WLYDEbY59gvyg0OcBMh/AqsE5EpWzobCsYs1secYJvZlKm 5+2CjNWTQziHYo19cp7DG9XDLLGdLW7HC0VikR65cxIURXJoUKQO3QJYV99mrtnwCKf/FyzxeF11 pRILFbkgvpAZjCLig/RgNLt5cGGl8FGCe22sBWdBxU+sQiffsS774edvd3xFiRPaB/sOVPc4fbvw twOkEuas4IaH9Oivt1ZUvrFmBnS8mCYbk0OKjKjIEeS62TPsGCZv3f9Ffgm0Az4On6MiP1dARKp/ it5aow047hoFNXFCsWVLeEyDLk3avqS3/9fH//9NWvj0Mq/FhkaEw4Sv66TLAgMBAAGjgcwwgckw CQYDVR0TBAIwADBEBgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LnZlcmlzaWduLmNvbS9ycGEwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwME BggrBgEFBQcDAjBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vSW5kQzFEaWdpdGFsSUQtY3JsLnZl cmlzaWduLmNvbS9JbmRDMURpZ2l0YWxJRC5jcmwwDQYJKoZIhvcNAQEFBQADggEBAIxI8f9LAL0e mThKlUnwxlBH+q2htxBy9vBt24uGl8dunGyK4Aq7PAQiCF2XJfM2sWSRpdkIdbd9cD5upkcteP4s pL/T85qsfT1dLiQDTZ6/o19umk6DkqG0DpR+n+7jTUGdCzDhhzTZZblqY0afimcQ79uqZcF5ojDl N5Np93N3djqAmD37aKG1KE8xzBP0WiwxfVIGYua098YIsioWb0zvGmPd9JdMO55+jwkjFAOsT5kK ivXkjDnZJ1HM8GVQjGPnYBDEJBmC2B+kdbpi17cntYE/6V/SgrpB4t14YuswgMYRh1lGP7eKiiAj mwnaJL9aMMrqBwHLY/BLEA+3hRsxggSLMIIEhwIBATCB8jCB3TELMAkGA1UEBhMCVVMxFzAVBgNV BAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYD VQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEe MBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAx IEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYabMAkGBSsOAwIa BQCgggJtMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEwMTExNjE0 NDYyNVowIwYJKoZIhvcNAQkEMRYEFDFxwXsXPlk1TBoYHOcmgCrk1ug+MIIBAwYJKwYBBAGCNxAE MYH1MIHyMIHdMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsT FlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1zIG9mIHVzZSBhdCBodHRwczov L3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTA1MR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0 ZWQxNzA1BgNVBAMTLlZlcmlTaWduIENsYXNzIDEgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBIC0g RzICEC+b0yjVAsFkDo2nEyqFhpswggEFBgsqhkiG9w0BCRACCzGB9aCB8jCB3TELMAkGA1UEBhMC VVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3 b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3Jw YSAoYykwNTEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2ln biBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYab MA0GCSqGSIb3DQEBAQUABIIBAB0wxUPwZGM9k4jbWn/bRRmz3lMLCqvV0WXZeTQauPKRDzqjMoTr jem68iykPkoLSDWBqCpvzRH9AssLPIW6T0S13U+fpFJkTsG6yQJ65VLhw5qJ1BotJLx0iI/pChCI r5Smy9LgWCLmkv+GKEFjNGV5KzRrScKkLIol42m706q9iw6FoeIVMzs80PNkA7B5F0OB2fk5diQL XmRzi3DSaqA9yeYtc+oTXzHiCfpWrWOf+uTUQJsKDgrhZqitvS8XjoD1kRTh3I7tR+CStioF8NEx 7+5dFMXSOLf3sOKkApwErXi1oZpIr874eqdvhWZkaPeGc50CCB7c7EYhe6b5GBgAAAAAAAA= --Apple-Mail-58-226456544-- From randy@psg.com Tue Nov 16 06:53:46 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 81B663A6C8A for ; Tue, 16 Nov 2010 06:53:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.542 X-Spam-Level: X-Spam-Status: No, score=-2.542 tagged_above=-999 required=5 tests=[AWL=0.057, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nlI0K0AbKmmw for ; Tue, 16 Nov 2010 06:53:45 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36]) by core3.amsl.com (Postfix) with ESMTP id 9E3583A6C87 for ; Tue, 16 Nov 2010 06:53:45 -0800 (PST) Received: from localhost ([127.0.0.1] helo=rmac.psg.com.psg.com) by ran.psg.com with esmtp (Exim 4.72 (FreeBSD)) (envelope-from ) id 1PIMvS-0008K5-Pv; Tue, 16 Nov 2010 14:54:27 +0000 Date: Tue, 16 Nov 2010 15:54:25 +0100 Message-ID: From: Randy Bush To: Roque Gagliano In-Reply-To: <69FD7AD2-A398-419C-BDEE-31845426CF30@cisco.com> References: <20101108055538.655EC3A69B6@core3.amsl.com> <69FD7AD2-A398-419C-BDEE-31845426CF30@cisco.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Cc: sidr wg Subject: Re: [sidr] draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 14:53:46 -0000 > It would be worthy to write a note warning that invalid announcements > which are more specific that an existing valid announcement SHOULD be > discarded could you give an example in real cisco ios or junos cli? randy From rogaglia@cisco.com Tue Nov 16 07:07:23 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 22EFD3A6CB5 for ; Tue, 16 Nov 2010 07:07:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PBngEjJ9T6mo for ; Tue, 16 Nov 2010 07:07:22 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id B86293A6C89 for ; Tue, 16 Nov 2010 07:07:21 -0800 (PST) Authentication-Results: ams-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: smime.p7s : 3815 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AvIEAKEt4kyQ/khLgWdsb2JhbACiXxUBARYiIqQRmyeFSwSKWA X-IronPort-AV: E=Sophos;i="4.59,206,1288569600"; d="p7s'?scan'208";a="69369504" Received: from ams-core-2.cisco.com ([144.254.72.75]) by ams-iport-1.cisco.com with ESMTP; 16 Nov 2010 15:08:04 +0000 Received: from ams3-vpn-dhcp7405.cisco.com (ams3-vpn-dhcp7405.cisco.com [10.61.92.236]) by ams-core-2.cisco.com (8.14.3/8.14.3) with ESMTP id oAGF84DO026664; Tue, 16 Nov 2010 15:08:04 GMT Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: multipart/signed; boundary=Apple-Mail-66-227772361; protocol="application/pkcs7-signature"; micalg=sha1 From: Roque Gagliano In-Reply-To: Date: Tue, 16 Nov 2010 16:08:21 +0100 Message-Id: References: <20101108055538.655EC3A69B6@core3.amsl.com> <69FD7AD2-A398-419C-BDEE-31845426CF30@cisco.com> To: Randy Bush X-Mailer: Apple Mail (2.1082) Cc: sidr wg Subject: Re: [sidr] draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 15:07:23 -0000 --Apple-Mail-66-227772361 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii Hi Randy, >> It would be worthy to write a note warning that invalid announcements >> which are more specific that an existing valid announcement SHOULD be >> discarded > > could you give an example in real cisco ios or junos cli? > not yet. stay tuned. r. > randy --Apple-Mail-66-227772361 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKHjCCBMww ggQ1oAMCAQICEByunWua9OYvIoqj2nRhbB4wDQYJKoZIhvcNAQEFBQAwXzELMAkGA1UEBhMCVVMx FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAxIFB1YmxpYyBQcmltYXJ5 IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA1MTAyODAwMDAwMFoXDTE1MTAyNzIzNTk1OVow gd0xCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNp Z24gVHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZl cmlzaWduLmNvbS9ycGEgKGMpMDUxHjAcBgNVBAsTFVBlcnNvbmEgTm90IFZhbGlkYXRlZDE3MDUG A1UEAxMuVmVyaVNpZ24gQ2xhc3MgMSBJbmRpdmlkdWFsIFN1YnNjcmliZXIgQ0EgLSBHMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMnfrOfq+PgDFMQAktXBfjbCPO98chXLwKuMPRyV zm8eECw/AO2XJua2x+atQx0/pIdHR0w+VPhs+Mf8sZ69MHC8l7EDBeqV8a1AxUR6SwWi8mD81zpl Yu//EHuiVrvFTnAt1qIfPO2wQuhejVchrKaZ2RHp0hoHwHRHQgv8xTTq/ea6JNEdCBU3otdzzwFB L2OyOj++pRpu9MlKWz2VphW7NQIZ+dTvvI8OcXZZu0u2Ptb8Whb01g6J8kn+bAztFenZiHWcec5g J925rXXOL3OVekA6hXVJsLjfaLyrzROChRFQo+A8C67AClPN1zBvhTJGG+RJEMJs4q8fef/btLUC AwEAAaOCAYQwggGAMBIGA1UdEwEB/wQIMAYBAf8CAQAwRAYDVR0gBD0wOzA5BgtghkgBhvhFAQcX ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMAsGA1UdDwQEAwIB BjARBglghkgBhvhCAQEEBAMCAQYwLgYDVR0RBCcwJaQjMCExHzAdBgNVBAMTFlByaXZhdGVMYWJl bDMtMjA0OC0xNTUwHQYDVR0OBBYEFBF9Xhl9PATfamzWoooaPzHYO5RSMDEGA1UdHwQqMCgwJqAk oCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTEuY3JsMIGBBgNVHSMEejB4oWOkYTBfMQsw CQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDEgUHVi bGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHmCEQDNun9W8N/kvFT+IqyzcqpVMA0G CSqGSIb3DQEBBQUAA4GBALEv2ZbhkqLugWDlyCog++FnLNYAmFOjAhvpkEv4GESfD0b3+qD+0x0Y o9K/HOzWGZ9KTUP4yru+E4BJBd0hczNXwkJavvoAk7LmBDGRTl088HMFN2Prv4NZmP1m3umGMpqS KTw6rlTaphJRsY/IytNHeObbpR6HBuPRFMDCIfa6MIIFSjCCBDKgAwIBAgIQL5vTKNUCwWQOjacT KoWGmzANBgkqhkiG9w0BAQUFADCB3TELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJ bmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1 c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEeMBwGA1UECxMVUGVyc29u YSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAxIEluZGl2aWR1YWwgU3Vi c2NyaWJlciBDQSAtIEcyMB4XDTEwMDUxMjAwMDAwMFoXDTExMDUxMjIzNTk1OVowggETMRcwFQYD VQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazFGMEQG A1UECxM9d3d3LnZlcmlzaWduLmNvbS9yZXBvc2l0b3J5L1JQQSBJbmNvcnAuIGJ5IFJlZi4sTElB Qi5MVEQoYyk5ODEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTMwMQYDVQQLEypEaWdp dGFsIElEIENsYXNzIDEgLSBOZXRzY2FwZSBGdWxsIFNlcnZpY2UxFzAVBgNVBAMUDlJvcXVlIEdh Z2xpYW5vMSEwHwYJKoZIhvcNAQkBFhJyb2dhZ2xpYUBjaXNjby5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDGyowL31WLYDEbY59gvyg0OcBMh/AqsE5EpWzobCsYs1secYJvZlKm 5+2CjNWTQziHYo19cp7DG9XDLLGdLW7HC0VikR65cxIURXJoUKQO3QJYV99mrtnwCKf/FyzxeF11 pRILFbkgvpAZjCLig/RgNLt5cGGl8FGCe22sBWdBxU+sQiffsS774edvd3xFiRPaB/sOVPc4fbvw twOkEuas4IaH9Oivt1ZUvrFmBnS8mCYbk0OKjKjIEeS62TPsGCZv3f9Ffgm0Az4On6MiP1dARKp/ it5aow047hoFNXFCsWVLeEyDLk3avqS3/9fH//9NWvj0Mq/FhkaEw4Sv66TLAgMBAAGjgcwwgckw CQYDVR0TBAIwADBEBgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LnZlcmlzaWduLmNvbS9ycGEwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwME BggrBgEFBQcDAjBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vSW5kQzFEaWdpdGFsSUQtY3JsLnZl cmlzaWduLmNvbS9JbmRDMURpZ2l0YWxJRC5jcmwwDQYJKoZIhvcNAQEFBQADggEBAIxI8f9LAL0e mThKlUnwxlBH+q2htxBy9vBt24uGl8dunGyK4Aq7PAQiCF2XJfM2sWSRpdkIdbd9cD5upkcteP4s pL/T85qsfT1dLiQDTZ6/o19umk6DkqG0DpR+n+7jTUGdCzDhhzTZZblqY0afimcQ79uqZcF5ojDl N5Np93N3djqAmD37aKG1KE8xzBP0WiwxfVIGYua098YIsioWb0zvGmPd9JdMO55+jwkjFAOsT5kK ivXkjDnZJ1HM8GVQjGPnYBDEJBmC2B+kdbpi17cntYE/6V/SgrpB4t14YuswgMYRh1lGP7eKiiAj mwnaJL9aMMrqBwHLY/BLEA+3hRsxggSLMIIEhwIBATCB8jCB3TELMAkGA1UEBhMCVVMxFzAVBgNV BAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYD VQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEe MBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAx IEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYabMAkGBSsOAwIa BQCgggJtMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEwMTExNjE1 MDgyMVowIwYJKoZIhvcNAQkEMRYEFCGCvHpBB4S9NvNCUySksTXWUzk5MIIBAwYJKwYBBAGCNxAE MYH1MIHyMIHdMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsT FlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1zIG9mIHVzZSBhdCBodHRwczov L3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTA1MR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0 ZWQxNzA1BgNVBAMTLlZlcmlTaWduIENsYXNzIDEgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBIC0g RzICEC+b0yjVAsFkDo2nEyqFhpswggEFBgsqhkiG9w0BCRACCzGB9aCB8jCB3TELMAkGA1UEBhMC VVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3 b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3Jw YSAoYykwNTEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2ln biBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYab MA0GCSqGSIb3DQEBAQUABIIBAIYX9zU6LMuY/ZzNH6WeIgAvmEsgWn1l0Zr0WUTW4yYu66CpC3LF DXSrcYsSQcnxTYWBV9WxY2lwY0Gc9fkWKeEKcWEHw7+UpVPrx41pnxrs55niX0RufG01TAVMrFSa VQKBY8aFrPi0AHNLThbETMMuVvwL+I3FLjqNURjO3tNxGRSASdKPZWWO42Ws0Y5cMEFbw0XXOfEq ap2YlkUAkZsPtdhwzTg6W/C7QxgSxBWmeXLBpOWxu36TU6/J0DBKGBGJr0uXZCEjuM4+Ke6zi6/D BMgbDho7vgkC8rITQ1JmV/Xdyj9rh0MbCqbGsXtqp2wetzUJ5bVB1YrWQ7YjfRQAAAAAAAA= --Apple-Mail-66-227772361-- From randy@psg.com Tue Nov 16 07:10:09 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4BC123A6CAA for ; Tue, 16 Nov 2010 07:10:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.544 X-Spam-Level: X-Spam-Status: No, score=-2.544 tagged_above=-999 required=5 tests=[AWL=0.055, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kPuGcVjUI890 for ; Tue, 16 Nov 2010 07:10:07 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36]) by core3.amsl.com (Postfix) with ESMTP id 915373A6CB1 for ; Tue, 16 Nov 2010 07:10:06 -0800 (PST) Received: from localhost ([127.0.0.1] helo=rmac.psg.com.psg.com) by ran.psg.com with esmtp (Exim 4.72 (FreeBSD)) (envelope-from ) id 1PINBI-0008Ma-IU; Tue, 16 Nov 2010 15:10:49 +0000 Date: Tue, 16 Nov 2010 16:10:46 +0100 Message-ID: From: Randy Bush To: Roque Gagliano In-Reply-To: References: <20101108055538.655EC3A69B6@core3.amsl.com> <69FD7AD2-A398-419C-BDEE-31845426CF30@cisco.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Cc: sidr wg Subject: Re: [sidr] draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 15:10:10 -0000 >>> It would be worthy to write a note warning that invalid announcements >>> which are more specific that an existing valid announcement SHOULD be >>> discarded >> >> could you give an example in real cisco ios or junos cli? > not yet. stay tuned. my point was that lengh comparison is not supported in cli, and probebly should not be. making a career out of unneeded complexity is not a helpful path. randy From gih@apnic.net Tue Nov 16 07:21:34 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B67513A6DAC for ; Tue, 16 Nov 2010 07:21:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.101 X-Spam-Level: X-Spam-Status: No, score=-101.101 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.398, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id maDsPWvEIv-P for ; Tue, 16 Nov 2010 07:21:34 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 3F9B33A6DA7 for ; Tue, 16 Nov 2010 07:21:33 -0800 (PST) Received: from dhcp-27-178.ripemtg.ripe.net (dhcp-27-178.ripemtg.ripe.net [193.0.27.178]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 2C026D598F; Wed, 17 Nov 2010 01:22:07 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: <043040F4-BDC9-4DAE-A02D-59DE529D8AE0@cisco.com> Date: Wed, 17 Nov 2010 02:21:50 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: <8AC230CA-229E-43FC-A3C2-38852D82ED3D@apnic.net> References: <20101111031644.1EF263A6965@core3.amsl.com> <3F59A12A-49B3-4FDE-8208-5A18FCF1BEB0@apnic.net> <043040F4-BDC9-4DAE-A02D-59DE529D8AE0@cisco.com> To: Roque Gagliano X-Mailer: Apple Mail (2.1082) Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG Last Call request for draft-ietf-sidr-rescerts-provisioning-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 15:21:34 -0000 On 17/11/2010, at 1:39 AM, Roque Gagliano wrote: > As I listened to the recorded version of the session in Beijing, looks = like there some level of consensus that it may be a good idea to add an = additional "error_response" code value for "algorithm suite not = supported". I did not hear that as a clear consensus, and in my discussions with = others who are familiar with this protocol, I tended to the opinion that = there was adequate information already in the provisioning protocol to = support multiple algorithms via classes. > I believe that will help the algorithm migration process as we can = write the exact process in the draft. I am of the opinion that the protocol already has sufficient knobs to = support an environment of algorithm transition without further = augmentation. The existing protocol supports: - multiple algorithms are implemented as multiple classes - algorithms for each class are identified in the certificate provided = by the server in the response to a LIST command - the server performs a proof of possession text using the algorithm = associated with the class that was nominated in the certificate request. Geoff From randy@psg.com Tue Nov 16 07:52:41 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9F09E3A6DF2 for ; Tue, 16 Nov 2010 07:52:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.547 X-Spam-Level: X-Spam-Status: No, score=-2.547 tagged_above=-999 required=5 tests=[AWL=0.052, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u9QMdnBL6dEE for ; Tue, 16 Nov 2010 07:52:40 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36]) by core3.amsl.com (Postfix) with ESMTP id 88DAB3A6DEF for ; Tue, 16 Nov 2010 07:52:40 -0800 (PST) Received: from localhost ([127.0.0.1] helo=rmac.psg.com.psg.com) by ran.psg.com with esmtp (Exim 4.72 (FreeBSD)) (envelope-from ) id 1PINqS-0008Sh-C6; Tue, 16 Nov 2010 15:53:20 +0000 Date: Tue, 16 Nov 2010 16:53:18 +0100 Message-ID: From: Randy Bush To: Geoff Huston In-Reply-To: <8AC230CA-229E-43FC-A3C2-38852D82ED3D@apnic.net> References: <20101111031644.1EF263A6965@core3.amsl.com> <3F59A12A-49B3-4FDE-8208-5A18FCF1BEB0@apnic.net> <043040F4-BDC9-4DAE-A02D-59DE529D8AE0@cisco.com> <8AC230CA-229E-43FC-A3C2-38852D82ED3D@apnic.net> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG Last Call request for draft-ietf-sidr-rescerts-provisioning-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 15:52:41 -0000 > I am of the opinion that the protocol already has sufficient knobs to > support an environment of algorithm transition without further > augmentation. > > The existing protocol supports: > - multiple algorithms are implemented as multiple classes > - algorithms for each class are identified in the certificate provided > by the server in the response to a LIST command > - the server performs a proof of possession text using the algorithm > associated with the class that was nominated in the certificate > request. From kseo@bbn.com Tue Nov 16 08:30:40 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CA54D3A6DBD for ; Tue, 16 Nov 2010 08:30:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.134 X-Spam-Level: X-Spam-Status: No, score=-2.134 tagged_above=-999 required=5 tests=[AWL=0.465, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id neDL4KBfNiIQ for ; Tue, 16 Nov 2010 08:30:39 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id EE3923A6DAB for ; Tue, 16 Nov 2010 08:30:37 -0800 (PST) Received: from dhcp89-089-210.bbn.com ([128.89.89.210]:50198 helo=[128.89.89.198]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PIORF-0005A5-F9; Tue, 16 Nov 2010 11:31:21 -0500 Mime-Version: 1.0 Message-Id: Date: Tue, 16 Nov 2010 11:31:13 -0400 To: "sidr@ietf.org wg" From: Karen Seo Content-Type: text/plain; charset="us-ascii" ; format="flowed" Subject: [sidr] Certificate Policy -- last change X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 16:30:40 -0000 Sandy, Chris -- If there are no complaints by the end of this week about the proposed change below, we will have addressed all known comments and request that you declare WGLC done on the Certificate Policy. All -- Based on input from Geoff Huston and Randy Bush, we propose to change the 2nd paragraph of the Overview as follows. From: "The structure of the RPKI is modeled on the existing organizational structure that is already responsible for IP address and AS number resource allocation. In this allocation hierarchy, IANA allocates resources to five Regional Internet Registries (RIRs), each of which manages address and AS number allocation within a defined geopolitical region. The RIRs in turn allocate resources to Internet Service Providers, to subscribers with so-called provider- independent ("portable") allocations, and in some regions, to National Internet Registries (NIRs). (The term LIR is used in some regions to refer to what other regions define as an ISP. Throughout the rest of this document we will use the term ISP to simplify references to these entities.)" To: "The structure of the RPKI is congruent with the number resource allocation framework of the Internet. The IANA allocates number resources for special purposes [RFC5736], to Regional Internet Registries (RIRs), and to others. The RIRs, in turn, manage the allocation of number resources to end users, Internet Service Providers, and others." Thank you, Karen From gih@apnic.net Tue Nov 16 20:02:03 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5CD8F3A67ED for ; Tue, 16 Nov 2010 20:02:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.101 X-Spam-Level: X-Spam-Status: No, score=-101.101 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.398, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nLb2U-XRq2rF for ; Tue, 16 Nov 2010 20:02:02 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 0C8963A677E for ; Tue, 16 Nov 2010 20:02:01 -0800 (PST) Received: from dhcp-27-178.ripemtg.ripe.net (dhcp-27-178.ripemtg.ripe.net [193.0.27.178]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 77221D5953; Wed, 17 Nov 2010 14:02:05 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Wed, 17 Nov 2010 15:01:41 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20101111020725.D08B63A68C8@core3.amsl.com> <72030833-DB5D-48F6-A9AA-C0A579646727@apnic.net> To: "Sriram, Kotikalapudi" X-Mailer: Apple Mail (2.1082) Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG Last Call Request for draft-ietf-sidr-roa-validation-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Nov 2010 04:02:03 -0000 On 16/11/2010, at 10:27 AM, Sriram, Kotikalapudi wrote: > This comment applies to draft-ietf-sidr-roa-validation=20 > and also to draft-ietf-sidr-pfx-validate-00. >=20 > One additional question that I feel the origin validation algorithms = need to consider is > as follows. Should there be a fourth Validation state added to the = existing three? > 1. Valid > 2. Valid-i (Valid - imperfect; AS matches but max-length exceeded) -- = proposed new state > 3. Unknown (or Not Found) > 4. Invalid >=20 > The rationale for the proposed additional state "Valid-i" is as = follows. > Let us say a prefix owner has prefix 10.1.0.0/20 and also own AS1. > He has a ROA registered: {10.1.0.0/20, AS1, maxlength =3D 22}, > and has announced 10.1.0.0/20 with origin AS =3D AS1.=20 > An adversary has AS2, and announces 10.1.0.0/23 with origin AS =3D = AS2. > During partial deployment, the adversary's announcement gets > accepted in routing tables because potentially the /23 could be a = suballocation > to a customer with AS2 that does not have a ROA yet. In draft-ietf-sidr-roa-validation the table on page 4 indicates quite clearly that the intent of the {10.1.0.0/20, AS1, maxlength =3D 22} includes the intent that relying parties should treat more specifics of this route has having a validity state of "invalid" > The legitimate prefix owner detects that there is a hijack attempt, > and then announces 10.1.0.0/23 with origin AS =3D AS1 > in order to recover quickly at least some of the traffic. Again the draft indicates quite clearly that with this additional route advertisement BOTH advertisements (origin AS2 and AS3) would have a = validity state of "invalid". =20 > But both the hijack update of the adversary as well as the recovery > update of the legitimate prefix owner for 10.1.0.0/23 will be marked = as "Invalid". agreed. > The legitimate prefix owner has no advantage over the hijacker! > I think this is not desirable. The origin AS in the recovery update > matches that in the ROA, except that the legitimate owner > has momentarily exceeded the maxlength in order to recover his = hijacked subprefix. > If we introduce the additional validation state "Valid-i" as > described above, then this undue disadvantage for the legitimate > owner can be mitigated. > Routers will give higher preference for "Valid-i" over "Invalid" > and thus mitigate the problem stated above. > The same principles will apply if the legitimate prefix owner > wants to recover his traffic by announcing even more specific /24s.=20 >=20 If folk chose to accept routes with a validity state of "invalid" then one has to ask oneself: why bother with this entire exercise? If AS1 wants to bias a relying party who accepts routes with an "invalid" validity state, then surely the response would be to issue a new ROA with maxlength 23 when advertising the more specific route (i.e. a ROA with {10.1.0.0/20, AS1, maxlength =3D 23}). Of course the downside of this form of response is that a naughty=20 party can generate a bogus route for the /23 and fake the origin to be AS1. But also of course all we are talking about so far is origination validation, and the story about securing BGP routes is totally=20 incomplete without also having a mechanism to undertake AS_PATH=20 validation. Origin validation alone cannot address attacks that lie about Path, and to my mind trying to address one form of attack with a different form of provision of validation credentials is yet again an instance of trying to jam round pegs into square holes. Having explored such byways of additional validity states in earlier iterations of this draft (see -00, for example), and receiving at the time robust negative comment from WG members at the time as to the wisdom and feasibility of such an approach, it is my impression that=20 most WG members with an active interest in this topic see no value in adding further complexity to the ROA semantics beyond what is in the current iteration of this draft. Having spent some time thinking about this myself in revising this document in response to such=20 earlier comments, its a position with which I now personally favour=20 as well. thanks, Geoff >=20 > Sriram >=20 >> -----Original Message----- >> From: sidr-bounces@ietf.org [mailto:sidr-bounces@ietf.org] On Behalf = Of Geoff Huston >> Sent: Wednesday, November 10, 2010 9:12 PM >> To: sidr@ietf.org wg >> Cc: sidr-chairs@tools.ietf.org >> Subject: [sidr] WG Last Call Request for = draft-ietf-sidr-roa-validation-10 >>=20 >> Hi, >>=20 >> We've revised this draft as per the informal poll of the WG in = today's SIDR meeting >> regarding the text concerning a "origin AS" when the AS_PATH contain = as AS_SET path >> element. >>=20 >> We request the chairs to conduct a WG Last Call for this draft. >>=20 >> thanks >>=20 >> Geoff & George >>=20 From Sandra.Murphy@cobham.com Wed Nov 17 20:53:43 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 866B93A66B4 for ; Wed, 17 Nov 2010 20:53:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NjPvzNMPUYMS for ; Wed, 17 Nov 2010 20:53:42 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id A12833A677C for ; Wed, 17 Nov 2010 20:53:41 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI4sSqt010181 for ; Wed, 17 Nov 2010 22:54:28 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI4sSAI027219 for ; Wed, 17 Nov 2010 22:54:28 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 17 Nov 2010 23:54:28 -0500 Date: Wed, 17 Nov 2010 23:54:25 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="-1463793359-982282665-1290056068=:15064" X-OriginalArrivalTime: 18 Nov 2010 04:54:28.0286 (UTC) FILETIME=[AE263DE0:01CB86DC] Subject: [sidr] upcoming wg calls X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 04:53:43 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. ---1463793359-982282665-1290056068=:15064 Content-Type: TEXT/PLAIN; format=flowed; charset=UTF-8 Content-Transfer-Encoding: 8BIT Before during and after the meeting, there were many requests for last calls and wg adoption. I'm pretty sure that I've captured them all, and I list them below. As soon as I send this message I'm going to start sending the calls to the list. If I have missed tallying a request, please let me know. There are a lot of them. I asked those attending the meeting if they wanted the whole lot all at the same time and there was strong support for sending them all at once. So get ready, here it comes. --Sandy long before meeting: last calls were announced: – draft-ietf-sidr-arch-11.txt: An Infrastructure to Support Secure Internet Routing – draft-ietf-sidr-signed-object-01: Signed Object Template for the Resource Public Key Infrastructure – draft-ietf-sidr-ta-06: A Profile for Trust Anchor Material for the Resource Certificate PKI the week before meeting: Matt Lepinski requested wglc for 1. roa-format during the sidr meeting: Randy Bush requested wglc for 2. rpki-rtr Geoff Huston requested wglc for 3. keyroll 4. res-certs 5. repos-struct 6. rescerts-provisioning 7. rpki-algs 8. rpki-manifests Steve Kent requested wg adoption for 9. algorithm-agility Randy requested wg adoption for 10. ghostbusters 11. rpki-origin-ops during and after meeting on the list Geoff requested wglc for 12. roa-validation rescerts-provisioning (reiteration of previous request) ---1463793359-982282665-1290056068=:15064-- From Sandra.Murphy@cobham.com Wed Nov 17 20:54:27 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 30ECB3A6781 for ; Wed, 17 Nov 2010 20:54:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FxTclKirEF5d for ; Wed, 17 Nov 2010 20:54:26 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 61F9E3A677C for ; Wed, 17 Nov 2010 20:54:26 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI4tDWo010185 for ; Wed, 17 Nov 2010 22:55:13 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI4tDjT027255 for ; Wed, 17 Nov 2010 22:55:13 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 17 Nov 2010 23:55:12 -0500 Date: Wed, 17 Nov 2010 23:55:10 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 04:55:12.0926 (UTC) FILETIME=[C8C1C3E0:01CB86DC] Subject: [sidr] WGLC for draft-ietf-sidr-roa-format-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 04:54:27 -0000 Matt Lepinski has requested a WG LC for draft "A Profile for Route Origin Authorizations (ROAs)". The document and the draft version history are available at http://tools.ietf.org/wg/sidr/draft-ietf-sidr-roa-format. The Last Call will end Wed, 1 Dec 2010 (AOE). As usual, please address all comments to the WG mailing list, and please be clear in your comments to this last call if you are supporting the document's submission to the IESG or if you are opposed. If you are opposed, please indicate why. --Sandy, speaking with wg chair bonnet on From Sandra.Murphy@cobham.com Wed Nov 17 20:55:01 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D0FD23A67AD for ; Wed, 17 Nov 2010 20:55:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M3gGy1J-6Dss for ; Wed, 17 Nov 2010 20:55:01 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 00A413A679F for ; Wed, 17 Nov 2010 20:55:00 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI4tlwJ010193 for ; Wed, 17 Nov 2010 22:55:47 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI4tlYq027267 for ; Wed, 17 Nov 2010 22:55:47 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 17 Nov 2010 23:55:47 -0500 Date: Wed, 17 Nov 2010 23:55:45 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 04:55:47.0582 (UTC) FILETIME=[DD69D9E0:01CB86DC] Subject: [sidr] WGLC for draft-ietf-sidr-rpki-rtr-02 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 04:55:01 -0000 Randy Bush has requested a WG LC for draft "The RPKI/Router Protocol". The document and the draft version history are available at http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-rtr. The Last Call will end Wed, 1 Dec 2010 (AOE). As usual, please address all comments to the WG mailing list, and please be clear in your comments to this last call if you are supporting the document's submission to the IESG or if you are opposed. If you are opposed, please indicate why. --Sandy, speaking with wg chair cloche on From Sandra.Murphy@cobham.com Wed Nov 17 20:55:35 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 78C573A67AE for ; Wed, 17 Nov 2010 20:55:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7zOIBw6EdL4m for ; Wed, 17 Nov 2010 20:55:33 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 250C13A66B4 for ; Wed, 17 Nov 2010 20:55:33 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI4uJDd010199 for ; Wed, 17 Nov 2010 22:56:19 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI4uJAF027289 for ; Wed, 17 Nov 2010 22:56:19 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 17 Nov 2010 23:56:19 -0500 Date: Wed, 17 Nov 2010 23:56:17 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 04:56:19.0738 (UTC) FILETIME=[F09477A0:01CB86DC] Subject: [sidr] WGLC for draft-ietf-sidr-keyroll-04 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 04:55:35 -0000 Geoff Huston has requested a WG LC for draft "CA Key Rollover in the RPKI". The document and the draft version history are available at http://tools.ietf.org/wg/sidr/draft-ietf-sidr-keyroll. The Last Call will end Wed, 1 Dec 2010 (AOE). As usual, please address all comments to the WG mailing list, and please be clear in your comments to this last call if you are supporting the document's submission to the IESG or if you are opposed. If you are opposed, please indicate why. --Sandy, speaking with wg chair derby on From Sandra.Murphy@cobham.com Wed Nov 17 20:56:10 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E570E3A67A1 for ; Wed, 17 Nov 2010 20:56:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l7k492C0-nuC for ; Wed, 17 Nov 2010 20:56:10 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id E2D2C3A679F for ; Wed, 17 Nov 2010 20:56:09 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI4uuCX010207 for ; Wed, 17 Nov 2010 22:56:56 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI4uuHU027308 for ; Wed, 17 Nov 2010 22:56:56 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 17 Nov 2010 23:56:56 -0500 Date: Wed, 17 Nov 2010 23:56:54 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 04:56:56.0488 (UTC) FILETIME=[067C1280:01CB86DD] Subject: [sidr] WGLC for draft-ietf-sidr-res-certs-20 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 04:56:11 -0000 Geoff Huston has requested a WG LC for draft "A Profile for X.509 PKIX Resource Certificates". The document and the draft version history are available at http://tools.ietf.org/wg/sidr/draft-ietf-sidr-res-certs. The Last Call will end Wed, 1 Dec 2010 (AOE). As usual, please address all comments to the WG mailing list, and please be clear in your comments to this last call if you are supporting the document's submission to the IESG or if you are opposed. If you are opposed, please indicate why. --Sandy, speaking with wg chair boater on From Sandra.Murphy@cobham.com Wed Nov 17 20:56:53 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6B99D3A66B4 for ; Wed, 17 Nov 2010 20:56:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aUX1TO2jrin1 for ; Wed, 17 Nov 2010 20:56:52 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 7B56A3A67AE for ; Wed, 17 Nov 2010 20:56:48 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI4vZqA010213 for ; Wed, 17 Nov 2010 22:57:35 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI4vZhf027317 for ; Wed, 17 Nov 2010 22:57:35 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 17 Nov 2010 23:57:34 -0500 Date: Wed, 17 Nov 2010 23:57:32 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 04:57:35.0097 (UTC) FILETIME=[1D7F5690:01CB86DD] Subject: [sidr] WGLC for draft-ietf-sidr-repos-struct-06 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 04:56:53 -0000 Geoff Huston has requested a WG LC for draft "A Profile for Resource Certificate Repository Structure". The document and the draft version history are available at http://tools.ietf.org/wg/sidr/draft-ietf-sidr-repos-struct. The Last Call will end Wed, 1 Dec 2010 (AOE). As usual, please address all comments to the WG mailing list, and please be clear in your comments to this last call if you are supporting the document's submission to the IESG or if you are opposed. If you are opposed, please indicate why. --Sandy, speaking with wg chair fedora on From Sandra.Murphy@cobham.com Wed Nov 17 20:57:27 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1E23B3A67AF for ; Wed, 17 Nov 2010 20:57:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lDdF8noUr+aq for ; Wed, 17 Nov 2010 20:57:26 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 2ABB93A67AE for ; Wed, 17 Nov 2010 20:57:26 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI4wCtu010217 for ; Wed, 17 Nov 2010 22:58:12 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI4wCuj027331 for ; Wed, 17 Nov 2010 22:58:12 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 17 Nov 2010 23:58:09 -0500 Date: Wed, 17 Nov 2010 23:58:07 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 04:58:09.0785 (UTC) FILETIME=[322C4E90:01CB86DD] Subject: [sidr] WGLC for draft-ietf-sidr-rescerts-provisioning-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 04:57:27 -0000 Geoff Huston has requested a WG LC for draft "A Protocol for Provisioning Resource Certificates". The document and the draft version history are available at http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rescerts-provisioning. The Last Call will end Wed, 1 Dec 2010 (AOE). As usual, please address all comments to the WG mailing list, and please be clear in your comments to this last call if you are supporting the document's submission to the IESG or if you are opposed. If you are opposed, please indicate why. --Sandy, speaking with wg chair bowler on From Sandra.Murphy@cobham.com Wed Nov 17 20:58:02 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3D3983A6784 for ; Wed, 17 Nov 2010 20:58:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N8+bgTNDm5K9 for ; Wed, 17 Nov 2010 20:58:01 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 6B1003A66B4 for ; Wed, 17 Nov 2010 20:58:01 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI4wmBl010221 for ; Wed, 17 Nov 2010 22:58:48 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI4wmUa027337 for ; Wed, 17 Nov 2010 22:58:48 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 17 Nov 2010 23:58:47 -0500 Date: Wed, 17 Nov 2010 23:58:45 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 04:58:48.0050 (UTC) FILETIME=[48FB1520:01CB86DD] Subject: [sidr] WGLC for draft-ietf-sidr-rpki-algs-04 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 04:58:02 -0000 Geoff Huston has requested a WG LC for draft " A Profile for Algorithms and Key Sizes for use in the Resource Public Key Infrastructure". The document and the draft version history are available at http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-algs/. The Last Call will end Wed, 1 Dec 2010 (AOE). As usual, please address all comments to the WG mailing list, and please be clear in your comments to this last call if you are supporting the document's submission to the IESG or if you are opposed. If you are opposed, please indicate why. --Sandy, speaking with wg chair homburg on From Sandra.Murphy@cobham.com Wed Nov 17 20:58:39 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 41B5D3A67B5 for ; Wed, 17 Nov 2010 20:58:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8t2DB2Hqyi2R for ; Wed, 17 Nov 2010 20:58:38 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 3803D3A67AE for ; Wed, 17 Nov 2010 20:58:38 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI4xPhq010225 for ; Wed, 17 Nov 2010 22:59:25 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI4xOso027351 for ; Wed, 17 Nov 2010 22:59:24 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Wed, 17 Nov 2010 23:59:24 -0500 Date: Wed, 17 Nov 2010 23:59:22 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 04:59:24.0800 (UTC) FILETIME=[5EE2B000:01CB86DD] Subject: [sidr] WGLC for draft-ietf-sidr-rpki-manifests-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 04:58:39 -0000 Geoff Huston has requested a WG LC for draft "Manifests for the Resource Public Key Infrastructure". The document and the draft version history are available at http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-manifests. The Last Call will end Wed, 1 Dec 2010 (AOE). As usual, please address all comments to the WG mailing list, and please be clear in your comments to this last call if you are supporting the document's submission to the IESG or if you are opposed. If you are opposed, please indicate why. --Sandy, speaking with wg chair beret on From Sandra.Murphy@cobham.com Wed Nov 17 20:59:18 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C2C883A67AE for ; Wed, 17 Nov 2010 20:59:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HFljQroT+VYn for ; Wed, 17 Nov 2010 20:59:18 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id D59E23A66B4 for ; Wed, 17 Nov 2010 20:59:17 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI504Jk010248 for ; Wed, 17 Nov 2010 23:00:04 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI504JQ027378 for ; Wed, 17 Nov 2010 23:00:04 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Thu, 18 Nov 2010 00:00:03 -0500 Date: Wed, 17 Nov 2010 23:59:58 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 05:00:04.0503 (UTC) FILETIME=[768CE270:01CB86DD] Subject: [sidr] WG Adoption for draft-rgaglian-sidr-algorithm-agility-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 04:59:18 -0000 Steve Kent has requested that the working group adopt the draft draft-rgaglian-sidr-algorithm-agility-00.txt, Algorithm Agility Procedure for RPKI, as a work item. It is available at http://tools.ietf.org/html/draft-rgaglian-sidr-algorithm-agility-00. Recall that active support for adoption is necessary for the wg chairs to judge acceptance as a working group work item, so silence works against adoption. The wg chairs also want to know who would be willing to work on the draft. Please respond to the list, giving your recommendation for or against adoption of the draft as a wg work item as well as your intention to work on the draft if adopted. The call for adoption will end in two weeks on Wed 1 Dec 2010 AOE. --Sandy, speaking with wg chair helmet on From Sandra.Murphy@cobham.com Wed Nov 17 20:59:50 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 73C103A67C3 for ; Wed, 17 Nov 2010 20:59:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cX7MVbum0iZY for ; Wed, 17 Nov 2010 20:59:49 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 952CE3A67BD for ; Wed, 17 Nov 2010 20:59:49 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI50adi010252 for ; Wed, 17 Nov 2010 23:00:36 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI50aKg027398 for ; Wed, 17 Nov 2010 23:00:36 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Thu, 18 Nov 2010 00:00:35 -0500 Date: Thu, 18 Nov 2010 00:00:33 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 05:00:36.0237 (UTC) FILETIME=[89771BD0:01CB86DD] Subject: [sidr] WG Adoption for draft-ymbk-ghostbusters-01 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 04:59:50 -0000 Randy Bush has requested that the working group adopt the draft draft-ymbk-ghostbusters-01, "The RPKI Ghostbusters Record", as a work item. It is available at http://tools.ietf.org/html/draft-ymbk-ghostbusters-01. Recall that active support for adoption is necessary for the wg chairs to judge acceptance as a working group work item, so silence works against adoption. The wg chairs also want to know who would be willing to work on the draft. Please respond to the list, giving your recommendation for or against adoption of the draft as a wg work item as well as your intention to work on the draft if adopted. The call for adoption will end in two weeks on Wed 1 Dec 2010 AOE. --Sandy, speaking with wg chair coronet on From Sandra.Murphy@cobham.com Wed Nov 17 21:00:37 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0BF743A67A4 for ; Wed, 17 Nov 2010 21:00:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4IM-QM-c+qkt for ; Wed, 17 Nov 2010 21:00:36 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 32BA93A66B4 for ; Wed, 17 Nov 2010 21:00:36 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI51NdE010260 for ; Wed, 17 Nov 2010 23:01:23 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI51M2j027427 for ; Wed, 17 Nov 2010 23:01:23 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Thu, 18 Nov 2010 00:01:22 -0500 Date: Thu, 18 Nov 2010 00:01:20 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 05:01:22.0611 (UTC) FILETIME=[A51B3830:01CB86DD] Subject: [sidr] WG Adoption for draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 05:00:37 -0000 Randy Bush has requested that the working group adopt the draft draft-ymbk-rpki-origin-ops-00, "RPKI-Based Origin Validation Operations", as a work item. It is available at http://tools.ietf.org/html/draft-ymbk-rpki-origin-ops-00. Recall that active support for adoption is necessary for the wg chairs to judge acceptance as a working group work item, so silence works against adoption. The wg chairs also want to know who would be willing to work on the draft. Please respond to the list, giving your recommendation for or against adoption of the draft as a wg work item as well as your intention to work on the draft if adopted. The call for adoption will end in two weeks on Wed 1 Dec 2010 AOE. --Sandy, speaking with wg chair wimple on From Sandra.Murphy@cobham.com Wed Nov 17 21:01:12 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6E24F3A67B3 for ; Wed, 17 Nov 2010 21:01:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JQNA9TsPoY5m for ; Wed, 17 Nov 2010 21:01:11 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 685943A67A4 for ; Wed, 17 Nov 2010 21:01:11 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI51wKt010264 for ; Wed, 17 Nov 2010 23:01:58 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI51wuY027449 for ; Wed, 17 Nov 2010 23:01:58 -0600 Received: from sparta.com ([85.18.36.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Thu, 18 Nov 2010 00:01:57 -0500 Date: Thu, 18 Nov 2010 00:01:55 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 05:01:58.0064 (UTC) FILETIME=[BA3CEB00:01CB86DD] Subject: [sidr] WG LC for draft-ietf-sidr-roa-validation-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 05:01:12 -0000 Geoff Huston has requested a WG LC for draft "Validation of Route Origination using the Resource Certificate PKI and ROAs". The document and the draft version history are available at http://tools.ietf.org/wg/sidr/draft-ietf-sidr-roa-validation. The Last Call will end Wed, 1 Dec 2010 (AOE). As usual, please address all comments to the WG mailing list, and please be clear in your comments to this last call if you are supporting the document's submission to the IESG or if you are opposed. If you are opposed, please indicate why. --Sandy, speaking with wg chair turban on From randy@psg.com Wed Nov 17 22:05:29 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 326A63A67E6 for ; Wed, 17 Nov 2010 22:05:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.532 X-Spam-Level: X-Spam-Status: No, score=-2.532 tagged_above=-999 required=5 tests=[AWL=0.067, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dz-9ZQGLmIij for ; Wed, 17 Nov 2010 22:05:28 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36]) by core3.amsl.com (Postfix) with ESMTP id 03E313A67E3 for ; Wed, 17 Nov 2010 22:05:28 -0800 (PST) Received: from localhost ([127.0.0.1] helo=rmac.psg.com.psg.com) by ran.psg.com with esmtp (Exim 4.72 (FreeBSD)) (envelope-from ) id 1PIxdN-000EUB-4R; Thu, 18 Nov 2010 06:06:13 +0000 Date: Thu, 18 Nov 2010 07:06:11 +0100 Message-ID: From: Randy Bush To: Sandra Murphy In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Cc: sidr@ietf.org Subject: Re: [sidr] upcoming wg calls X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 06:05:29 -0000 WG Adoption for draft-ymbk-rpki-origin-ops-00 WG Adoption for draft-ymbk-ghostbusters-01 WGLC for draft-ietf-sidr-rpki-manifests-09 WGLC for draft-ietf-sidr-rpki-algs-04 WGLC for draft-ietf-sidr-rescerts-provisioning-09 WGLC for draft-ietf-sidr-repos-struct-06 WGLC for draft-ietf-sidr-res-certs-20 WGLC for draft-ietf-sidr-keyroll-04 WGLC for draft-ietf-sidr-rpki-rtr-02 WGLC for draft-ietf-sidr-roa-format-09 yes please randy From henk@ripe.net Wed Nov 17 23:43:22 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F3A1B3A67D7 for ; Wed, 17 Nov 2010 23:43:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.546 X-Spam-Level: X-Spam-Status: No, score=-102.546 tagged_above=-999 required=5 tests=[AWL=0.053, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2mfUhqrvBiO3 for ; Wed, 17 Nov 2010 23:43:21 -0800 (PST) Received: from postlady.ripe.net (postlady.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1341]) by core3.amsl.com (Postfix) with ESMTP id 9F52C3A659C for ; Wed, 17 Nov 2010 23:43:20 -0800 (PST) Received: from ayeaye.ripe.net ([193.0.23.5]) by postlady.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PIzA1-0002gJ-R8 for sidr@ietf.org; Thu, 18 Nov 2010 08:44:07 +0100 Received: from [193.0.21.124] (helo=dhcp-25-110.ripemtg.ripe.net) by ayeaye.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PIzA1-0006qI-Lo for sidr@ietf.org; Thu, 18 Nov 2010 08:44:01 +0100 Message-ID: <4CE4D941.1010802@ripe.net> Date: Thu, 18 Nov 2010 08:44:01 +0100 From: Henk Uijterwaal Organization: RIPE NCC User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: e0cdef1f45f89a40ad608d255b27e7d5322c5073a4f4e6fa5c6f22ce062bc003 X-RIPE-Spam-Level: -- X-RIPE-Signature: e0cdef1f45f89a40ad608d255b27e7d5322c5073a4f4e6fa5c6f22ce062bc003 Subject: Re: [sidr] WGLC for draft-ietf-sidr-keyroll-04 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 07:43:22 -0000 On 18/11/2010 05:56, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft "CA Key Rollover in the RPKI". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-keyroll. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. Nit, not quite sure where it belongs. The architecture document still refers to draft-huston-sidr-keyroll. This should be fixed. Henk -- ------------------------------------------------------------------------------ Henk Uijterwaal Email: henk.uijterwaal(at)ripe.net RIPE Network Coordination Centre http://www.xs4all.nl/~henku P.O.Box 10096 Singel 258 Phone: +31.20.5354414 1001 EB Amsterdam 1016 AB Amsterdam Fax: +31.20.5354445 The Netherlands The Netherlands Mobile: +31.6.55861746 ------------------------------------------------------------------------------ I confirm today what I denied yesterday. Anonymous Politician. From henk@ripe.net Wed Nov 17 23:45:32 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 67E703A67D7 for ; Wed, 17 Nov 2010 23:45:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.547 X-Spam-Level: X-Spam-Status: No, score=-102.547 tagged_above=-999 required=5 tests=[AWL=0.052, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DxYaufgzhxjO for ; Wed, 17 Nov 2010 23:45:31 -0800 (PST) Received: from postgirl.ripe.net (postgirl.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1342]) by core3.amsl.com (Postfix) with ESMTP id 246853A659C for ; Wed, 17 Nov 2010 23:45:31 -0800 (PST) Received: from ayeaye.ripe.net ([193.0.23.5]) by postgirl.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PIzC6-0008Tr-JQ for sidr@ietf.org; Thu, 18 Nov 2010 08:46:17 +0100 Received: from [193.0.21.124] (helo=dhcp-25-110.ripemtg.ripe.net) by ayeaye.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PIzC6-00070b-DV for sidr@ietf.org; Thu, 18 Nov 2010 08:46:10 +0100 Message-ID: <4CE4D9C2.9060007@ripe.net> Date: Thu, 18 Nov 2010 08:46:10 +0100 From: Henk Uijterwaal Organization: RIPE NCC User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: e0cdef1f45f89a40ad608d255b27e7d56ddb6f8f730611d8ff175ffad29055b3 X-RIPE-Spam-Level: -- X-RIPE-Signature: e0cdef1f45f89a40ad608d255b27e7d56ddb6f8f730611d8ff175ffad29055b3 Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-rtr-02 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 07:45:32 -0000 On 18/11/2010 05:55, Sandra Murphy wrote: > > Randy Bush has requested a WG LC for draft "The RPKI/Router Protocol". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-rtr. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. As far as I can see, this document is not referred to in the architecture document, making it quite hard to understand where it fits in the grand scheme of things. Can this be fixed? Henk -- ------------------------------------------------------------------------------ Henk Uijterwaal Email: henk.uijterwaal(at)ripe.net RIPE Network Coordination Centre http://www.xs4all.nl/~henku P.O.Box 10096 Singel 258 Phone: +31.20.5354414 1001 EB Amsterdam 1016 AB Amsterdam Fax: +31.20.5354445 The Netherlands The Netherlands Mobile: +31.6.55861746 ------------------------------------------------------------------------------ I confirm today what I denied yesterday. Anonymous Politician. From henk@ripe.net Wed Nov 17 23:46:09 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8C5083A67E7 for ; Wed, 17 Nov 2010 23:46:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.548 X-Spam-Level: X-Spam-Status: No, score=-102.548 tagged_above=-999 required=5 tests=[AWL=0.051, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a9SeJaALJqKI for ; Wed, 17 Nov 2010 23:46:08 -0800 (PST) Received: from postgirl.ripe.net (postgirl.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1342]) by core3.amsl.com (Postfix) with ESMTP id 6F43A3A67A7 for ; Wed, 17 Nov 2010 23:46:08 -0800 (PST) Received: from ayeaye.ripe.net ([193.0.23.5]) by postgirl.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PIzCj-0008Ux-Rk for sidr@ietf.org; Thu, 18 Nov 2010 08:46:55 +0100 Received: from [193.0.21.124] (helo=dhcp-25-110.ripemtg.ripe.net) by ayeaye.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PIzCj-00073M-Dv for sidr@ietf.org; Thu, 18 Nov 2010 08:46:49 +0100 Message-ID: <4CE4D9E9.70901@ripe.net> Date: Thu, 18 Nov 2010 08:46:49 +0100 From: Henk Uijterwaal Organization: RIPE NCC User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: e0cdef1f45f89a40ad608d255b27e7d58d936a1ca6b399cf350e7eea8a85f58a X-RIPE-Spam-Level: -- X-RIPE-Signature: e0cdef1f45f89a40ad608d255b27e7d58d936a1ca6b399cf350e7eea8a85f58a Subject: Re: [sidr] WGLC for XXX X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 07:46:09 -0000 > The Last Call will end Wed, 1 Dec 2010 (AOE). Other than the 2 comments I just posted, I think these documents should go forward. Henk -- ------------------------------------------------------------------------------ Henk Uijterwaal Email: henk.uijterwaal(at)ripe.net RIPE Network Coordination Centre http://www.xs4all.nl/~henku P.O.Box 10096 Singel 258 Phone: +31.20.5354414 1001 EB Amsterdam 1016 AB Amsterdam Fax: +31.20.5354445 The Netherlands The Netherlands Mobile: +31.6.55861746 ------------------------------------------------------------------------------ I confirm today what I denied yesterday. Anonymous Politician. From henk@ripe.net Wed Nov 17 23:47:29 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1AF683A659C for ; Wed, 17 Nov 2010 23:47:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.549 X-Spam-Level: X-Spam-Status: No, score=-102.549 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4otJDyttg2d5 for ; Wed, 17 Nov 2010 23:47:28 -0800 (PST) Received: from postgirl.ripe.net (postgirl.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1342]) by core3.amsl.com (Postfix) with ESMTP id F24943A67E9 for ; Wed, 17 Nov 2010 23:47:27 -0800 (PST) Received: from ayeaye.ripe.net ([193.0.23.5]) by postgirl.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PIzE1-00005K-Ce for sidr@ietf.org; Thu, 18 Nov 2010 08:48:14 +0100 Received: from [193.0.21.124] (helo=dhcp-25-110.ripemtg.ripe.net) by ayeaye.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PIzE1-00079S-3e for sidr@ietf.org; Thu, 18 Nov 2010 08:48:09 +0100 Message-ID: <4CE4DA38.8080304@ripe.net> Date: Thu, 18 Nov 2010 08:48:08 +0100 From: Henk Uijterwaal Organization: RIPE NCC User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: e0cdef1f45f89a40ad608d255b27e7d5f2727c027caf2b91fb9ea5ba07ec6a64 X-RIPE-Spam-Level: -- X-RIPE-Signature: e0cdef1f45f89a40ad608d255b27e7d5f2727c027caf2b91fb9ea5ba07ec6a64 Subject: Re: [sidr] WG Adoption for X, Y and Z X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 07:47:29 -0000 Support all 3, Henk -- ------------------------------------------------------------------------------ Henk Uijterwaal Email: henk.uijterwaal(at)ripe.net RIPE Network Coordination Centre http://www.xs4all.nl/~henku P.O.Box 10096 Singel 258 Phone: +31.20.5354414 1001 EB Amsterdam 1016 AB Amsterdam Fax: +31.20.5354445 The Netherlands The Netherlands Mobile: +31.6.55861746 ------------------------------------------------------------------------------ I confirm today what I denied yesterday. Anonymous Politician. From gih@apnic.net Thu Nov 18 00:13:54 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9EE4E3A67FC for ; Thu, 18 Nov 2010 00:13:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.101 X-Spam-Level: X-Spam-Status: No, score=-101.101 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.398, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KiALVsDbU3rR for ; Thu, 18 Nov 2010 00:13:53 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id B959D3A67FA for ; Thu, 18 Nov 2010 00:13:52 -0800 (PST) Received: from dhcp-27-178.ripemtg.ripe.net (dhcp-27-178.ripemtg.ripe.net [193.0.27.178]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 09474D59AB; Thu, 18 Nov 2010 18:14:27 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Thu, 18 Nov 2010 19:14:02 +1100 Content-Transfer-Encoding: 7bit Message-Id: <35359AF6-EE04-438C-AA2A-A2F9732A23BB@apnic.net> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-roa-format-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:13:54 -0000 On 18/11/2010, at 3:55 PM, Sandra Murphy wrote: > > Matt Lepinski has requested a WG LC for draft "A Profile for Route > Origin Authorizations (ROAs)". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-roa-format. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > I support this document advancing Geoff From gih@apnic.net Thu Nov 18 00:14:07 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B0F8B3A6809 for ; Thu, 18 Nov 2010 00:14:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.101 X-Spam-Level: X-Spam-Status: No, score=-101.101 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.398, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Nfa11XoiT6Y for ; Thu, 18 Nov 2010 00:14:06 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 586F63A6801 for ; Thu, 18 Nov 2010 00:14:06 -0800 (PST) Received: from dhcp-27-178.ripemtg.ripe.net (dhcp-27-178.ripemtg.ripe.net [193.0.27.178]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 08AE1D59BA; Thu, 18 Nov 2010 18:14:39 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Thu, 18 Nov 2010 19:14:34 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: <0B763E89-6F37-42A0-B5F3-C544DFBAE51C@apnic.net> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WG LC for draft-ietf-sidr-signed-object-01 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:14:07 -0000 On 06/11/2010, at 7:11 AM, Sandra Murphy wrote: > The authors of draft-ietf-sidr-signed-object-01 = (http://tools.ietf.org/html/draft-ietf-sidr-signed-object-01) have = requested a working group last call. >=20 > The chairs ask the working group to consider this draft and decide if = it is worthy of publication. >=20 > This draft has not been through a last call before and next week is = the IETF week, so the last call will end on 26 November. >=20 I support this document advancing Geoff From gih@apnic.net Thu Nov 18 00:14:30 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 88B893A6804 for ; Thu, 18 Nov 2010 00:14:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.101 X-Spam-Level: X-Spam-Status: No, score=-101.101 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.398, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W8nQ0mRCDCfj for ; Thu, 18 Nov 2010 00:14:29 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 451BE3A67FF for ; Thu, 18 Nov 2010 00:14:29 -0800 (PST) Received: from dhcp-27-178.ripemtg.ripe.net (dhcp-27-178.ripemtg.ripe.net [193.0.27.178]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 9C35BD59AB; Thu, 18 Nov 2010 18:15:00 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Thu, 18 Nov 2010 19:14:46 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: <9D9F5625-0A52-4FEA-9A0C-24FB771D7700@apnic.net> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WG LC for draft-ietf-sidr-arch-11 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:14:30 -0000 On 06/11/2010, at 7:10 AM, Sandra Murphy wrote: > The authors of draft-ietf-sidr-arch = (http://tools.ietf.org/html/draft-ietf-sidr-arch-11) have requested a = working group last call. >=20 > The chairs ask the working group to consider this draft and decide = whether it is worthy of publication. >=20 > This draft was in last call about a year ago and some changes have = been made in the time since. Given that the IETF is next week, the WG = LC will end on 26 November. I support this document advancing Geoff From gih@apnic.net Thu Nov 18 00:14:47 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C7AFD3A680A for ; Thu, 18 Nov 2010 00:14:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.101 X-Spam-Level: X-Spam-Status: No, score=-101.101 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.398, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m1-csYg6IuXD for ; Thu, 18 Nov 2010 00:14:45 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id AEB803A67FB for ; Thu, 18 Nov 2010 00:14:44 -0800 (PST) Received: from dhcp-27-178.ripemtg.ripe.net (dhcp-27-178.ripemtg.ripe.net [193.0.27.178]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 2D106D59AB; Thu, 18 Nov 2010 18:15:23 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Thu, 18 Nov 2010 19:15:19 +1100 Content-Transfer-Encoding: 7bit Message-Id: <6549C46C-3F54-4C04-A8BC-8574588E30DA@apnic.net> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-rtr-02 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:14:47 -0000 On 18/11/2010, at 3:55 PM, Sandra Murphy wrote: > > Randy Bush has requested a WG LC for draft "The RPKI/Router Protocol". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-rtr. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > I support this document advancing Geoff From gih@apnic.net Thu Nov 18 00:15:14 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E1E353A680B for ; Thu, 18 Nov 2010 00:15:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.101 X-Spam-Level: X-Spam-Status: No, score=-101.101 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.398, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kFmVMNdWekXy for ; Thu, 18 Nov 2010 00:15:10 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id CE0143A6804 for ; Thu, 18 Nov 2010 00:15:07 -0800 (PST) Received: from dhcp-27-178.ripemtg.ripe.net (dhcp-27-178.ripemtg.ripe.net [193.0.27.178]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 25F14D59AB; Thu, 18 Nov 2010 18:15:45 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Thu, 18 Nov 2010 19:15:44 +1100 Content-Transfer-Encoding: 7bit Message-Id: References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WG Adoption for draft-rgaglian-sidr-algorithm-agility-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:15:14 -0000 On 18/11/2010, at 3:59 PM, Sandra Murphy wrote: > > Steve Kent has requested that the working group adopt the draft > draft-rgaglian-sidr-algorithm-agility-00.txt, Algorithm Agility > Procedure for RPKI, as a work item. > > It is available at > http://tools.ietf.org/html/draft-rgaglian-sidr-algorithm-agility-00. > > Recall that active support for adoption is necessary for the wg chairs > to judge acceptance as a working group work item, so silence works > against adoption. The wg chairs also want to know who would be > willing to work on the draft. > > Please respond to the list, giving your recommendation for or against > adoption of the draft as a wg work item as well as your intention to > work on the draft if adopted. The call for adoption will end in two > weeks on Wed 1 Dec 2010 AOE. > I support this document being adopted Geoff From gih@apnic.net Thu Nov 18 00:17:01 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C266B3A67F2 for ; Thu, 18 Nov 2010 00:17:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.101 X-Spam-Level: X-Spam-Status: No, score=-101.101 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.398, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WcA7RPrp3qw6 for ; Thu, 18 Nov 2010 00:17:01 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id B6FEB3A6783 for ; Thu, 18 Nov 2010 00:17:00 -0800 (PST) Received: from dhcp-27-178.ripemtg.ripe.net (dhcp-27-178.ripemtg.ripe.net [193.0.27.178]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id A3F75D59AB; Thu, 18 Nov 2010 18:17:30 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Thu, 18 Nov 2010 19:17:04 +1100 Content-Transfer-Encoding: 7bit Message-Id: References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WG Adoption for draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:17:01 -0000 On 18/11/2010, at 4:01 PM, Sandra Murphy wrote: > > Randy Bush has requested that the working group adopt the draft > draft-ymbk-rpki-origin-ops-00, "RPKI-Based Origin Validation > Operations", as a work item. > > It is available at > http://tools.ietf.org/html/draft-ymbk-rpki-origin-ops-00. > > Recall that active support for adoption is necessary for the wg chairs > to judge acceptance as a working group work item, so silence works > against adoption. The wg chairs also want to know who would be > willing to work on the draft. > > Please respond to the list, giving your recommendation for or against > adoption of the draft as a wg work item as well as your intention to > work on the draft if adopted. The call for adoption will end in two > weeks on Wed 1 Dec 2010 AOE. > I support this document being adopted Geoff From mkohno@juniper.net Thu Nov 18 00:22:41 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0A1503A67DB for ; Thu, 18 Nov 2010 00:22:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id te84SPACicP4 for ; Thu, 18 Nov 2010 00:22:38 -0800 (PST) Received: from exprod7og121.obsmtp.com (exprod7og121.obsmtp.com [64.18.2.20]) by core3.amsl.com (Postfix) with ESMTP id 2D18F3A67FD for ; Thu, 18 Nov 2010 00:22:37 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob121.postini.com ([64.18.6.12]) with SMTP ID DSNKTOTidl9CUG09LJ5O/EAztUMSKC2FMQpH@postini.com; Thu, 18 Nov 2010 00:23:25 PST Received: from emailfehk1.jnpr.net (172.27.128.44) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.2.254.0; Thu, 18 Nov 2010 00:21:03 -0800 Received: from EMAILHK2.jnpr.net ([172.27.128.49]) by emailfehk1.jnpr.net with Microsoft SMTPSVC(6.0.3790.4675); Thu, 18 Nov 2010 16:21:01 +0800 x-mimeole: Produced By Microsoft Exchange V6.5 Content-Class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 18 Nov 2010 16:20:49 +0800 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [sidr] WG Adoption for draft-ymbk-rpki-origin-ops-00 Thread-Index: AcuG3airC2YvV6PATCyQjNVBRATSfQAG8qwA References: From: Miya Kohno To: Sandra Murphy , X-OriginalArrivalTime: 18 Nov 2010 08:21:01.0730 (UTC) FILETIME=[8937B820:01CB86F9] Subject: Re: [sidr] WG Adoption for draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:22:41 -0000 Support.=20 Miya > -----Original Message----- > From: sidr-bounces@ietf.org [mailto:sidr-bounces@ietf.org] On Behalf Of > Sandra Murphy > Sent: Thursday, November 18, 2010 2:01 PM > To: sidr@ietf.org > Subject: [sidr] WG Adoption for draft-ymbk-rpki-origin-ops-00 >=20 >=20 > Randy Bush has requested that the working group adopt the draft > draft-ymbk-rpki-origin-ops-00, "RPKI-Based Origin Validation > Operations", as a work item. >=20 > It is available at > http://tools.ietf.org/html/draft-ymbk-rpki-origin-ops-00. >=20 > Recall that active support for adoption is necessary for the wg chairs > to judge acceptance as a working group work item, so silence works > against adoption. The wg chairs also want to know who would be > willing to work on the draft. >=20 > Please respond to the list, giving your recommendation for or against > adoption of the draft as a wg work item as well as your intention to > work on the draft if adopted. The call for adoption will end in two > weeks on Wed 1 Dec 2010 AOE. >=20 > --Sandy, speaking with wg chair wimple on >=20 > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From tim@ripe.net Thu Nov 18 00:29:42 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4557D3A67E4 for ; Thu, 18 Nov 2010 00:29:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fyprrgg5rYKf for ; Thu, 18 Nov 2010 00:29:40 -0800 (PST) Received: from postgirl.ripe.net (postgirl.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1342]) by core3.amsl.com (Postfix) with ESMTP id 605DB3A681A for ; Thu, 18 Nov 2010 00:29:24 -0800 (PST) Received: from ayeaye.ripe.net ([193.0.23.5]) by postgirl.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PIzrs-0001vs-VX for sidr@ietf.org; Thu, 18 Nov 2010 09:29:39 +0100 Received: from timbru.vpn.ripe.net ([193.0.21.62] helo=dhcp-24-102.ripemtg.ripe.net) by ayeaye.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PIzro-00027N-O4 for sidr@ietf.org; Thu, 18 Nov 2010 09:29:16 +0100 Message-ID: <4CE4E3DC.5010206@ripe.net> Date: Thu, 18 Nov 2010 09:29:16 +0100 From: Tim Bruijnzeels User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a07194a1d00003375eb97c4dabac464a74e58 X-RIPE-Spam-Level: -- X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a07194a1d00003375eb97c4dabac464a74e58 Subject: Re: [sidr] WG Adoption for draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:29:42 -0000 On 11/18/10 6:01 AM, Sandra Murphy wrote: > > Randy Bush has requested that the working group adopt the draft > draft-ymbk-rpki-origin-ops-00, "RPKI-Based Origin Validation > Operations", as a work item. > support From tim@ripe.net Thu Nov 18 00:29:44 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 354D33A67E4 for ; Thu, 18 Nov 2010 00:29:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5tK0ED8EEFQ8 for ; Thu, 18 Nov 2010 00:29:41 -0800 (PST) Received: from postgirl.ripe.net (postgirl.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1342]) by core3.amsl.com (Postfix) with ESMTP id 8C12B3A681E for ; Thu, 18 Nov 2010 00:29:30 -0800 (PST) Received: from ayeaye.ripe.net ([193.0.23.5]) by postgirl.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PIzsT-0001xz-Fc for sidr@ietf.org; Thu, 18 Nov 2010 09:30:03 +0100 Received: from timbru.vpn.ripe.net ([193.0.21.62] helo=dhcp-24-102.ripemtg.ripe.net) by ayeaye.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PIzsT-0002B4-5e for sidr@ietf.org; Thu, 18 Nov 2010 09:29:57 +0100 Message-ID: <4CE4E404.9040301@ripe.net> Date: Thu, 18 Nov 2010 09:29:56 +0100 From: Tim Bruijnzeels User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719af9c67fff102266d094600ce7b1e4129 X-RIPE-Spam-Level: -- X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719af9c67fff102266d094600ce7b1e4129 Subject: Re: [sidr] WG Adoption for draft-rgaglian-sidr-algorithm-agility-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:29:44 -0000 On 11/18/10 5:59 AM, Sandra Murphy wrote: > > Steve Kent has requested that the working group adopt the draft > draft-rgaglian-sidr-algorithm-agility-00.txt, Algorithm Agility > Procedure for RPKI, as a work item. > support From tim@ripe.net Thu Nov 18 00:32:13 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 009E53A67C2 for ; Thu, 18 Nov 2010 00:32:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id idj-tmAMxMFp for ; Thu, 18 Nov 2010 00:32:12 -0800 (PST) Received: from postgirl.ripe.net (postgirl.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1342]) by core3.amsl.com (Postfix) with ESMTP id 1B0A53A6783 for ; Thu, 18 Nov 2010 00:32:12 -0800 (PST) Received: from ayeaye.ripe.net ([193.0.23.5]) by postgirl.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PIzvJ-000276-5J for sidr@ietf.org; Thu, 18 Nov 2010 09:32:58 +0100 Received: from timbru.vpn.ripe.net ([193.0.21.62] helo=dhcp-24-102.ripemtg.ripe.net) by ayeaye.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PIzvI-0002RI-MN for sidr@ietf.org; Thu, 18 Nov 2010 09:32:52 +0100 Message-ID: <4CE4E4B4.2060600@ripe.net> Date: Thu, 18 Nov 2010 09:32:52 +0100 From: Tim Bruijnzeels User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a071994025dbe8628ba4cf8bcb493cd764092 X-RIPE-Spam-Level: -- X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a071994025dbe8628ba4cf8bcb493cd764092 Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-rtr-02 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:32:13 -0000 On 11/18/10 5:55 AM, Sandra Murphy wrote: > > Randy Bush has requested a WG LC for draft "The RPKI/Router Protocol". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-rtr. > support I have not worked with this as an implementer myself but considering that Randy and others have this working in test I believe this can go forward. > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair cloche on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From ggm@apnic.net Thu Nov 18 00:32:14 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D76EC3A67AF for ; Thu, 18 Nov 2010 00:32:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.961 X-Spam-Level: X-Spam-Status: No, score=0.961 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_DHCP=1.398, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lrm3fErk2V5a for ; Thu, 18 Nov 2010 00:32:14 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id C91933A6783 for ; Thu, 18 Nov 2010 00:32:13 -0800 (PST) Received: from dhcp-26-224.ripemtg.ripe.net (unknown [193.0.26.224]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 94C6BD59AB; Thu, 18 Nov 2010 18:32:53 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: George Michaelson In-Reply-To: Date: Thu, 18 Nov 2010 09:32:49 +0100 Content-Transfer-Encoding: 7bit Message-Id: References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] upcoming wg calls X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:32:15 -0000 Call for WGLC, I support: draft-ietf-sidr-roa-format draft-ietf-sidr-rpki-rtr draft-ietf-sidr-keyroll draft-ietf-sidr-res-certs draft-ietf-sidr-repos-struct draft-ietf-sidr-rescerts-provisioning draft-ietf-sidr-rpki-algs draft-ietf-sidr-rpki-manifests draft-ietf-sidr-roa-validation draft-ietf-sidr-signed-object draft-ietf-sidr-ta draft-ietf-sidr-arch Call for WG adoption, I support: draft-rgaglian-sidr-algorithm-agility draft-ymbk-rpki-origin-ops From tim@ripe.net Thu Nov 18 00:32:48 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D87EA3A680A for ; Thu, 18 Nov 2010 00:32:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 377mHT4fekMJ for ; Thu, 18 Nov 2010 00:32:47 -0800 (PST) Received: from postgirl.ripe.net (postgirl.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1342]) by core3.amsl.com (Postfix) with ESMTP id 3CE4C3A6809 for ; Thu, 18 Nov 2010 00:32:47 -0800 (PST) Received: from ayeaye.ripe.net ([193.0.23.5]) by postgirl.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PIzvs-00027w-7T for sidr@ietf.org; Thu, 18 Nov 2010 09:33:34 +0100 Received: from timbru.vpn.ripe.net ([193.0.21.62] helo=dhcp-24-102.ripemtg.ripe.net) by ayeaye.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PIzvs-0002U2-2J for sidr@ietf.org; Thu, 18 Nov 2010 09:33:28 +0100 Message-ID: <4CE4E4D7.9060008@ripe.net> Date: Thu, 18 Nov 2010 09:33:27 +0100 From: Tim Bruijnzeels User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719860151c6623bb5a49566859b961fe85c X-RIPE-Spam-Level: -- X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719860151c6623bb5a49566859b961fe85c Subject: Re: [sidr] WG LC for draft-ietf-sidr-arch-11 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:32:49 -0000 On 11/5/10 9:10 PM, Sandra Murphy wrote: > The authors of draft-ietf-sidr-arch > (http://tools.ietf.org/html/draft-ietf-sidr-arch-11) have requested a > working group last call. > support > The chairs ask the working group to consider this draft and decide > whether it is worthy of publication. > > This draft was in last call about a year ago and some changes have been > made in the time since. Given that the IETF is next week, the WG LC > will end on 26 November. > > --Sandy, wg chair turban on > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From kent@bbn.com Thu Nov 18 00:49:43 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0FB913A6800 for ; Thu, 18 Nov 2010 00:49:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.262 X-Spam-Level: X-Spam-Status: No, score=-102.262 tagged_above=-999 required=5 tests=[AWL=0.337, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m4eGTZqo188h for ; Thu, 18 Nov 2010 00:49:42 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id 50D2B3A67E9 for ; Thu, 18 Nov 2010 00:49:42 -0800 (PST) Received: from dommiel.bbn.com ([192.1.122.15]:57166 helo=[193.0.26.46]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PJ0CK-000Gkx-W0 for sidr@ietf.org; Thu, 18 Nov 2010 03:50:29 -0500 Mime-Version: 1.0 Message-Id: Date: Thu, 18 Nov 2010 03:48:59 -0500 To: sidr@ietf.org From: Stephen Kent Content-Type: text/plain; charset="us-ascii" ; format="flowed" Subject: [sidr] WGLC and WG adoption X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 08:49:43 -0000 copied from randy's message, WG Adoption for draft-ymbk-rpki-origin-ops-00 WG Adoption for draft-ymbk-ghostbusters-01 WGLC for draft-ietf-sidr-rpki-manifests-09 WGLC for draft-ietf-sidr-rpki-algs-04 WGLC for draft-ietf-sidr-rescerts-provisioning-09 WGLC for draft-ietf-sidr-repos-struct-06 WGLC for draft-ietf-sidr-res-certs-20 WGLC for draft-ietf-sidr-keyroll-04 WGLC for draft-ietf-sidr-rpki-rtr-02 WGLC for draft-ietf-sidr-roa-format-09 yes. Steve From andrei@ripe.net Thu Nov 18 01:16:16 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BFAEB3A67E9 for ; Thu, 18 Nov 2010 01:16:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.58 X-Spam-Level: X-Spam-Status: No, score=-102.58 tagged_above=-999 required=5 tests=[AWL=0.019, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YVOjIHpfW-Tj for ; Thu, 18 Nov 2010 01:16:16 -0800 (PST) Received: from postlady.ripe.net (postlady.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1341]) by core3.amsl.com (Postfix) with ESMTP id A78D83A677D for ; Thu, 18 Nov 2010 01:16:15 -0800 (PST) Received: from dodo.ripe.net ([193.0.23.4]) by postlady.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PJ0bt-0005dO-14 for sidr@ietf.org; Thu, 18 Nov 2010 10:16:59 +0100 Received: from andrei.vpn.ripe.net ([193.0.21.36] helo=Andrei-Robachevskys-MacBook-Air.local) by dodo.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PJ0bs-0005qg-2D; Thu, 18 Nov 2010 10:16:52 +0100 Message-ID: <4CE4EF03.7020509@ripe.net> Date: Thu, 18 Nov 2010 10:16:51 +0100 From: Andrei Robachevsky User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: 4330a47f43bd7e517cd9d6f2bba43afbe571882842e26132315df17bafe2538d X-RIPE-Spam-Level: -- X-RIPE-Signature: 4330a47f43bd7e517cd9d6f2bba43afbe571882842e26132315df17bafe2538d Subject: Re: [sidr] WGLC for draft-ietf-sidr-roa-format-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 09:16:16 -0000 I support this request Andrei Sandra Murphy wrote on 18/11/10 5:55 AM: > > Matt Lepinski has requested a WG LC for draft "A Profile for Route > Origin Authorizations (ROAs)". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-roa-format. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair bonnet on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr > From Sandra.Murphy@cobham.com Thu Nov 18 01:23:03 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0728F3A680E for ; Thu, 18 Nov 2010 01:23:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.166 X-Spam-Level: X-Spam-Status: No, score=-2.166 tagged_above=-999 required=5 tests=[AWL=0.433, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y5L7GNgsoH4B for ; Thu, 18 Nov 2010 01:23:01 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 288F73A6808 for ; Thu, 18 Nov 2010 01:23:01 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI9NlTD011050 for ; Thu, 18 Nov 2010 03:23:48 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI9NlgV030573 for ; Thu, 18 Nov 2010 03:23:48 -0600 Received: from sparta.com ([193.0.24.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Thu, 18 Nov 2010 04:23:47 -0500 Date: Thu, 18 Nov 2010 04:23:45 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: sidr@ietf.org Message-ID: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII X-OriginalArrivalTime: 18 Nov 2010 09:23:47.0732 (UTC) FILETIME=[4DEE0540:01CB8702] Subject: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 09:23:03 -0000 (OK, so there *is* another one, making lucky 13.) Randy Bush has requested a WG LC for draft "BGP Prefix Origin Validation" The document and the draft version history are available at http://tools.ietf.org/wg/sidr/draft-ietf-sidr-pfx-validate. The Last Call will end Thu, 2 Dec 2010 (AOE). As usual, please address all comments to the WG mailing list, and please be clear in your comments to this last call if you are supporting the document's submission to the IESG or if you are opposed. If you are opposed, please indicate why. --Sandy, speaking with wg chair cap on From randy@psg.com Thu Nov 18 01:31:48 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E488C3A680B for ; Thu, 18 Nov 2010 01:31:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.534 X-Spam-Level: X-Spam-Status: No, score=-2.534 tagged_above=-999 required=5 tests=[AWL=0.065, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Cr1uswvz22Ei for ; Thu, 18 Nov 2010 01:31:48 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:1::36]) by core3.amsl.com (Postfix) with ESMTP id 34B043A677D for ; Thu, 18 Nov 2010 01:31:47 -0800 (PST) Received: from localhost ([127.0.0.1] helo=rmac.psg.com.psg.com) by ran.psg.com with esmtp (Exim 4.72 (FreeBSD)) (envelope-from ) id 1PJ0r2-000ExK-QU; Thu, 18 Nov 2010 09:32:33 +0000 Date: Thu, 18 Nov 2010 10:32:31 +0100 Message-ID: From: Randy Bush To: Sandra Murphy In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 09:31:49 -0000 > Randy Bush has requested a WG LC for draft "BGP Prefix Origin > Validation" > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-pfx-validate. strangely enough, i support this one too randy From tim@ripe.net Thu Nov 18 01:39:14 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C88E13A67E9 for ; Thu, 18 Nov 2010 01:39:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VciM9+yLZy8T for ; Thu, 18 Nov 2010 01:39:13 -0800 (PST) Received: from postlady.ripe.net (postlady.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1341]) by core3.amsl.com (Postfix) with ESMTP id 709993A6765 for ; Thu, 18 Nov 2010 01:39:13 -0800 (PST) Received: from dodo.ripe.net ([193.0.23.4]) by postlady.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PJ0yA-0006La-SC for sidr@ietf.org; Thu, 18 Nov 2010 10:40:00 +0100 Received: from timbru.vpn.ripe.net ([193.0.21.62] helo=dhcp-24-102.ripemtg.ripe.net) by dodo.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PJ0yA-0007yA-MA for sidr@ietf.org; Thu, 18 Nov 2010 10:39:54 +0100 Message-ID: <4CE4F46A.3020806@ripe.net> Date: Thu, 18 Nov 2010 10:39:54 +0100 From: Tim Bruijnzeels User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719e0255c6991718ca7d25d5ef16b03d107 X-RIPE-Spam-Level: -- X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719e0255c6991718ca7d25d5ef16b03d107 Subject: Re: [sidr] upcoming wg calls X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 09:39:14 -0000 Hi, I started sending separate replies, but I am loosing track and spamming the list in the process. I agree with George's list, so let me just quote that: > Call for WGLC, I support: > > draft-ietf-sidr-roa-format One very minor nit: I think it would be desirable to have a normative naming scheme similar to the one used for manifests as defined in the repos-struct document; using the extension .roa. Operationally, for validation, it would be useful to have at least the file extension defined to prevent having to try and parse objects retrieved to figure out what they are. But.. I don't want to block this one going forward if others disagree with this. A large if parses, else if parses, else if parses etc block in the code is ugly but it can be done. > draft-ietf-sidr-rpki-rtr > draft-ietf-sidr-keyroll > draft-ietf-sidr-res-certs > draft-ietf-sidr-repos-struct > draft-ietf-sidr-rescerts-provisioning > draft-ietf-sidr-rpki-algs > draft-ietf-sidr-rpki-manifests > draft-ietf-sidr-roa-validation > draft-ietf-sidr-signed-object > draft-ietf-sidr-ta > draft-ietf-sidr-arch > > Call for WG adoption, I support: > > draft-rgaglian-sidr-algorithm-agility > draft-ymbk-rpki-origin-ops > Cheers Tim From mkohno@juniper.net Thu Nov 18 01:41:00 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 226933A67FA for ; Thu, 18 Nov 2010 01:41:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NpbKNN3l6F4e for ; Thu, 18 Nov 2010 01:40:59 -0800 (PST) Received: from exprod7og120.obsmtp.com (exprod7og120.obsmtp.com [64.18.2.18]) by core3.amsl.com (Postfix) with ESMTP id 9BC433A6765 for ; Thu, 18 Nov 2010 01:40:58 -0800 (PST) Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob120.postini.com ([64.18.6.12]) with SMTP ID DSNKTOT02pxPsird2Nvdf4PJzrWyTbCnSo/N@postini.com; Thu, 18 Nov 2010 01:41:46 PST Received: from emailfehk1.jnpr.net (172.27.128.44) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server id 8.2.254.0; Thu, 18 Nov 2010 01:39:43 -0800 Received: from EMAILHK2.jnpr.net ([172.27.128.49]) by emailfehk1.jnpr.net with Microsoft SMTPSVC(6.0.3790.4675); Thu, 18 Nov 2010 17:39:40 +0800 x-mimeole: Produced By Microsoft Exchange V6.5 Content-Class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 18 Nov 2010 17:39:40 +0800 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 Thread-Index: AcuHAlaKoRR9MH51S82wRDqj8pyRNQAAcrLA References: From: Miya Kohno To: Sandra Murphy , X-OriginalArrivalTime: 18 Nov 2010 09:39:40.0933 (UTC) FILETIME=[8614F350:01CB8704] Subject: Re: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 09:41:00 -0000 I support this document progressing. Miya > -----Original Message----- > From: sidr-bounces@ietf.org [mailto:sidr-bounces@ietf.org] On Behalf Of > Sandra Murphy > Sent: Thursday, November 18, 2010 6:24 PM > To: sidr@ietf.org > Subject: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 >=20 > (OK, so there *is* another one, making lucky 13.) >=20 > Randy Bush has requested a WG LC for draft "BGP Prefix Origin > Validation" >=20 > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-pfx-validate. >=20 > The Last Call will end Thu, 2 Dec 2010 (AOE). >=20 > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. >=20 > --Sandy, speaking with wg chair cap on >=20 > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From Sandra.Murphy@cobham.com Thu Nov 18 01:48:32 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 44C7C3A6812 for ; Thu, 18 Nov 2010 01:48:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.274 X-Spam-Level: X-Spam-Status: No, score=-2.274 tagged_above=-999 required=5 tests=[AWL=0.325, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qXlTQjRrdZJz for ; Thu, 18 Nov 2010 01:48:31 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id 4267A3A680E for ; Thu, 18 Nov 2010 01:48:31 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAI9nHk2011108; Thu, 18 Nov 2010 03:49:17 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAI9nIjB030930; Thu, 18 Nov 2010 03:49:18 -0600 Received: from sparta.com ([193.0.24.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Thu, 18 Nov 2010 04:49:17 -0500 Date: Thu, 18 Nov 2010 04:49:15 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: Randy Bush In-Reply-To: Message-ID: References: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-OriginalArrivalTime: 18 Nov 2010 09:49:18.0066 (UTC) FILETIME=[DE147520:01CB8705] Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 09:48:32 -0000 Looks like I need to say: Support on wg calls from authors of the documents under consideration is essentially a no-op for my determination of consensus. I consider having authored a document sufficient indication of support. (Note that this means that adding a whole bunch of co-authors could leave a draft without anyone to stand and cheer when needed.) --Sandy On Thu, 18 Nov 2010, Randy Bush wrote: >> Randy Bush has requested a WG LC for draft "BGP Prefix Origin >> Validation" >> >> The document and the draft version history are available at >> http://tools.ietf.org/wg/sidr/draft-ietf-sidr-pfx-validate. > > strangely enough, i support this one too > > randy > From ggm@apnic.net Thu Nov 18 02:06:43 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 826BB3A680E for ; Thu, 18 Nov 2010 02:06:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.961 X-Spam-Level: X-Spam-Status: No, score=0.961 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_DYNAMIC_DHCP=1.398, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5U7svnyMXXuc for ; Thu, 18 Nov 2010 02:06:42 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id E43603A6804 for ; Thu, 18 Nov 2010 02:06:41 -0800 (PST) Received: from dhcp-26-224.ripemtg.ripe.net (unknown [193.0.26.224]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 317F5D598F; Thu, 18 Nov 2010 20:07:26 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: George Michaelson In-Reply-To: Date: Thu, 18 Nov 2010 11:07:22 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr wg Subject: Re: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 10:06:43 -0000 On 18/11/2010, at 10:49 AM, Sandra Murphy wrote: > Looks like I need to say: >=20 > Support on wg calls from authors of the documents under consideration = is essentially a no-op for my determination of consensus. I consider = having authored a document sufficient indication of support. >=20 > (Note that this means that adding a whole bunch of co-authors could = leave a draft without anyone to stand and cheer when needed.) >=20 > --Sandy >=20 Then please note my co-authorship of keyroll, repos-struct, res-certs, = provisioning, roa-validation, ta and adjust accordingly. And accept my apologies for a faux pas -george= From andrei@ripe.net Thu Nov 18 02:06:51 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C87083A6765 for ; Thu, 18 Nov 2010 02:06:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.581 X-Spam-Level: X-Spam-Status: No, score=-102.581 tagged_above=-999 required=5 tests=[AWL=0.018, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id crGBTQmjrj71 for ; Thu, 18 Nov 2010 02:06:51 -0800 (PST) Received: from postgirl.ripe.net (postgirl.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1342]) by core3.amsl.com (Postfix) with ESMTP id B3E493A6818 for ; Thu, 18 Nov 2010 02:06:50 -0800 (PST) Received: from ayeaye.ripe.net ([193.0.23.5]) by postgirl.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PJ1Ot-0007eJ-KJ for sidr@ietf.org; Thu, 18 Nov 2010 11:07:37 +0100 Received: from andrei.vpn.ripe.net ([193.0.21.36] helo=dhcp-27-188.ripemtg.ripe.net) by ayeaye.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PJ1Ot-0001XI-5E; Thu, 18 Nov 2010 11:07:31 +0100 Message-ID: <4CE4FAE2.5080400@ripe.net> Date: Thu, 18 Nov 2010 11:07:30 +0100 From: Andrei Robachevsky User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: 4330a47f43bd7e517cd9d6f2bba43afbce2649f673364f8d6b5790e698dbd4b8 X-RIPE-Spam-Level: -- X-RIPE-Signature: 4330a47f43bd7e517cd9d6f2bba43afbce2649f673364f8d6b5790e698dbd4b8 Subject: [sidr] WGLC X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 10:06:51 -0000 I support requests for the WGLC for the following drafts: draft-ietf-sidr-rpki-rtr draft-ietf-sidr-keyroll draft-ietf-sidr-res-certs draft-ietf-sidr-repos-struct draft-ietf-sidr-rescerts-provisioning draft-ietf-sidr-rpki-algs draft-ietf-sidr-rpki-manifests draft-ietf-sidr-roa-validation draft-ietf-sidr-signed-object draft-ietf-sidr-ta draft-ietf-sidr-arch draft-ietf-sidr-pfx-validate Andrei From Sandra.Murphy@cobham.com Thu Nov 18 02:24:00 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7D5B83A681E for ; Thu, 18 Nov 2010 02:24:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.339 X-Spam-Level: X-Spam-Status: No, score=-2.339 tagged_above=-999 required=5 tests=[AWL=0.260, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FNxImk27wXK5 for ; Thu, 18 Nov 2010 02:23:54 -0800 (PST) Received: from M4.sparta.com (M4.sparta.com [157.185.61.2]) by core3.amsl.com (Postfix) with ESMTP id E885C3A6804 for ; Thu, 18 Nov 2010 02:23:53 -0800 (PST) Received: from Beta5.sparta.com (beta5.sparta.com [157.185.63.21]) by M4.sparta.com (8.13.5/8.13.5) with ESMTP id oAIAOcQ2013029; Thu, 18 Nov 2010 04:24:38 -0600 Received: from mailbin2.ads.sparta.com (mailbin.sparta.com [157.185.85.6]) by Beta5.sparta.com (8.13.8/8.13.8) with ESMTP id oAIAOcYj031844; Thu, 18 Nov 2010 04:24:38 -0600 Received: from sparta.com ([193.0.24.138]) by mailbin2.ads.sparta.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Thu, 18 Nov 2010 05:24:37 -0500 Date: Thu, 18 Nov 2010 05:24:35 -0500 (EST) From: Sandra Murphy X-X-Sender: sandy@localhost6.localdomain6 To: George Michaelson In-Reply-To: Message-ID: References: User-Agent: Alpine 2.00 (LFD 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-OriginalArrivalTime: 18 Nov 2010 10:24:37.0943 (UTC) FILETIME=[CDA00470:01CB870A] Cc: sidr wg Subject: Re: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 10:24:01 -0000 Which part of "no-op" did you interpret as indicating a faux pas? Just trying to help people avoid sending more mail than necessary. Tho' since people seem to be optimizing by aggregation there probably won't be much overall reduction in email. There's no intent to indicate a faux pas in that observation, either. --Sandy On Thu, 18 Nov 2010, George Michaelson wrote: > > On 18/11/2010, at 10:49 AM, Sandra Murphy wrote: > >> Looks like I need to say: >> >> Support on wg calls from authors of the documents under consideration is essentially a no-op for my determination of consensus. I consider having authored a document sufficient indication of support. >> >> (Note that this means that adding a whole bunch of co-authors could leave a draft without anyone to stand and cheer when needed.) >> >> --Sandy >> > > Then please note my co-authorship of keyroll, repos-struct, res-certs, provisioning, roa-validation, ta and adjust accordingly. > > And accept my apologies for a faux pas > > -george From kent@bbn.com Thu Nov 18 02:25:34 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 936FC3A6765 for ; Thu, 18 Nov 2010 02:25:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.323 X-Spam-Level: X-Spam-Status: No, score=-102.323 tagged_above=-999 required=5 tests=[AWL=0.276, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E2HcDMw1sBUQ for ; Thu, 18 Nov 2010 02:25:32 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by core3.amsl.com (Postfix) with ESMTP id 7A43E3A6823 for ; Thu, 18 Nov 2010 02:25:31 -0800 (PST) Received: from dommiel.bbn.com ([192.1.122.15]:53793 helo=[193.0.26.46]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PJ1h4-000LSO-1h for sidr@ietf.org; Thu, 18 Nov 2010 05:26:18 -0500 Mime-Version: 1.0 Message-Id: Date: Thu, 18 Nov 2010 05:09:40 -0500 To: sidr@ietf.org From: Stephen Kent Content-Type: text/plain; charset="us-ascii" ; format="flowed" Subject: [sidr] WGLC support X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 10:25:34 -0000 In addition to the lust I copied from Randy, I also support progressing draft-ietf-sidr-roa-validation-10 draft-ietf-sidr-arch-11 draft-ietf-sidr-signed-object-01 draft-ietf-sidr-ta-06 From sra@hactrn.net Thu Nov 18 03:20:10 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A16663A681D for ; Thu, 18 Nov 2010 03:20:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.499 X-Spam-Level: X-Spam-Status: No, score=-102.499 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9V9eVwCwm072 for ; Thu, 18 Nov 2010 03:20:09 -0800 (PST) Received: from cyteen.hactrn.net (cyteen.hactrn.net [IPv6:2002:425c:4242:0:210:5aff:fe86:1f54]) by core3.amsl.com (Postfix) with ESMTP id 64C9E3A682F for ; Thu, 18 Nov 2010 03:20:09 -0800 (PST) Received: from nargothrond.hactrn.net (dhcp-25-111.ripemtg.ripe.net [193.0.25.111]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "nargothrond.hactrn.net", Issuer "Grunchweather Associates" (verified OK)) by cyteen.hactrn.net (Postfix) with ESMTPS id BC39628441 for ; Thu, 18 Nov 2010 11:20:53 +0000 (UTC) Received: from nargothrond.hactrn.net (localhost [IPv6:::1]) by nargothrond.hactrn.net (Postfix) with ESMTP id 478FD21BD6C for ; Thu, 18 Nov 2010 12:20:52 +0100 (CET) Date: Thu, 18 Nov 2010 12:20:52 +0100 From: Rob Austein To: sidr@ietf.org In-Reply-To: References: <20101111020725.D08B63A68C8@core3.amsl.com> <72030833-DB5D-48F6-A9AA-C0A579646727@apnic.net> User-Agent: Wanderlust/2.15.5 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Message-Id: <20101118112052.478FD21BD6C@nargothrond.hactrn.net> Subject: Re: [sidr] WG Last Call Request for draft-ietf-sidr-roa-validation-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 11:20:10 -0000 At Wed, 17 Nov 2010 15:01:41 +1100, Geoff Huston wrote: > > Having explored such byways of additional validity states in earlier > iterations of this draft (see -00, for example), and receiving at the > time robust negative comment from WG members at the time as to the > wisdom and feasibility of such an approach, it is my impression that > most WG members with an active interest in this topic see no value > in adding further complexity to the ROA semantics beyond what is in > the current iteration of this draft. Having spent some time thinking > about this myself in revising this document in response to such > earlier comments, its a position with which I now personally favour > as well. Strongly agree. Please keep this simple. From aservin@lacnic.net Thu Nov 18 03:48:00 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AD2A028B56A for ; Thu, 18 Nov 2010 03:48:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.524 X-Spam-Level: X-Spam-Status: No, score=-1.524 tagged_above=-999 required=5 tests=[AWL=-0.476, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SWUxNY-NGRgv for ; Thu, 18 Nov 2010 03:47:47 -0800 (PST) Received: from mail.lacnic.net.uy (mail.lacnic.net.uy [IPv6:2001:13c7:7001:4000::3]) by core3.amsl.com (Postfix) with ESMTP id EFEA13A682C for ; Thu, 18 Nov 2010 03:47:46 -0800 (PST) Received: from 85-7-200.lacnic.net.uy (unknown [200.7.85.188]) by mail.lacnic.net.uy (Postfix) with ESMTP id AED77308540; Thu, 18 Nov 2010 09:48:21 -0200 (UYST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Arturo Servin In-Reply-To: Date: Thu, 18 Nov 2010 09:48:20 -0200 Content-Transfer-Encoding: quoted-printable Message-Id: <00F57424-C674-49E9-BA60-F685DF34729F@lacnic.net> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) X-LACNIC.uy-MailScanner-Information: Please contact the ISP for more information X-LACNIC.uy-MailScanner: Found to be clean X-LACNIC.uy-MailScanner-SpamCheck: X-LACNIC.uy-MailScanner-From: aservin@lacnic.net Cc: sidr@ietf.org Subject: Re: [sidr] WG LC for draft-ietf-sidr-arch-11 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 11:48:00 -0000 Support. -as On 5 Nov 2010, at 18:10, Sandra Murphy wrote: > The authors of draft-ietf-sidr-arch = (http://tools.ietf.org/html/draft-ietf-sidr-arch-11) have requested a = working group last call. >=20 > The chairs ask the working group to consider this draft and decide = whether it is worthy of publication. >=20 > This draft was in last call about a year ago and some changes have = been made in the time since. Given that the IETF is next week, the WG = LC will end on 26 November. >=20 > --Sandy, wg chair turban on > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From aservin@lacnic.net Thu Nov 18 03:48:17 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9E2B13A6835 for ; Thu, 18 Nov 2010 03:48:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.286 X-Spam-Level: X-Spam-Status: No, score=-1.286 tagged_above=-999 required=5 tests=[AWL=-0.238, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xyvoD4ClNM9t for ; Thu, 18 Nov 2010 03:48:17 -0800 (PST) Received: from mail.lacnic.net.uy (mail.lacnic.net.uy [IPv6:2001:13c7:7001:4000::3]) by core3.amsl.com (Postfix) with ESMTP id 996793A682C for ; Thu, 18 Nov 2010 03:48:16 -0800 (PST) Received: from 85-7-200.lacnic.net.uy (unknown [200.7.85.188]) by mail.lacnic.net.uy (Postfix) with ESMTP id 6E8AF30853C; Thu, 18 Nov 2010 09:48:49 -0200 (UYST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Arturo Servin In-Reply-To: Date: Thu, 18 Nov 2010 09:48:48 -0200 Content-Transfer-Encoding: 7bit Message-Id: <3C2F0E9E-97E1-45DA-A663-64DCD377D78B@lacnic.net> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) X-LACNIC.uy-MailScanner-Information: Please contact the ISP for more information X-LACNIC.uy-MailScanner: Found to be clean X-LACNIC.uy-MailScanner-SpamCheck: X-LACNIC.uy-MailScanner-From: aservin@lacnic.net Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-rtr-02 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 11:48:17 -0000 Support. .as On 18 Nov 2010, at 02:55, Sandra Murphy wrote: > > Randy Bush has requested a WG LC for draft "The RPKI/Router Protocol". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-rtr. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair cloche on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From aservin@lacnic.net Thu Nov 18 03:48:47 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A728F28C0D0 for ; Thu, 18 Nov 2010 03:48:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.207 X-Spam-Level: X-Spam-Status: No, score=-1.207 tagged_above=-999 required=5 tests=[AWL=-0.159, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fLTnYXalsFUV for ; Thu, 18 Nov 2010 03:48:47 -0800 (PST) Received: from mail.lacnic.net.uy (mail.lacnic.net.uy [IPv6:2001:13c7:7001:4000::3]) by core3.amsl.com (Postfix) with ESMTP id 8217828C0CE for ; Thu, 18 Nov 2010 03:48:46 -0800 (PST) Received: from 85-7-200.lacnic.net.uy (unknown [200.7.85.188]) by mail.lacnic.net.uy (Postfix) with ESMTP id 6EA12308545; Thu, 18 Nov 2010 09:49:31 -0200 (UYST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Arturo Servin In-Reply-To: Date: Thu, 18 Nov 2010 09:49:31 -0200 Content-Transfer-Encoding: 7bit Message-Id: References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) X-LACNIC.uy-MailScanner-Information: Please contact the ISP for more information X-LACNIC.uy-MailScanner: Found to be clean X-LACNIC.uy-MailScanner-SpamCheck: X-LACNIC.uy-MailScanner-From: aservin@lacnic.net Cc: sidr@ietf.org Subject: Re: [sidr] WG Adoption for draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 11:48:47 -0000 Support. -as On 18 Nov 2010, at 03:01, Sandra Murphy wrote: > > Randy Bush has requested that the working group adopt the draft > draft-ymbk-rpki-origin-ops-00, "RPKI-Based Origin Validation > Operations", as a work item. > > It is available at > http://tools.ietf.org/html/draft-ymbk-rpki-origin-ops-00. > > Recall that active support for adoption is necessary for the wg chairs > to judge acceptance as a working group work item, so silence works > against adoption. The wg chairs also want to know who would be > willing to work on the draft. > > Please respond to the list, giving your recommendation for or against > adoption of the draft as a wg work item as well as your intention to > work on the draft if adopted. The call for adoption will end in two > weeks on Wed 1 Dec 2010 AOE. > > --Sandy, speaking with wg chair wimple on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From aservin@lacnic.net Thu Nov 18 03:49:17 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EF1043A6835 for ; Thu, 18 Nov 2010 03:49:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.167 X-Spam-Level: X-Spam-Status: No, score=-1.167 tagged_above=-999 required=5 tests=[AWL=-0.119, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VovHGq8ACeT2 for ; Thu, 18 Nov 2010 03:49:17 -0800 (PST) Received: from mail.lacnic.net.uy (mail.lacnic.net.uy [IPv6:2001:13c7:7001:4000::3]) by core3.amsl.com (Postfix) with ESMTP id A70383A682C for ; Thu, 18 Nov 2010 03:49:16 -0800 (PST) Received: from 85-7-200.lacnic.net.uy (unknown [200.7.85.188]) by mail.lacnic.net.uy (Postfix) with ESMTP id 7509730853F; Thu, 18 Nov 2010 09:49:50 -0200 (UYST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Arturo Servin In-Reply-To: Date: Thu, 18 Nov 2010 09:49:50 -0200 Content-Transfer-Encoding: 7bit Message-Id: <285F53D9-7FDB-499C-AEB5-8FA95D8E1C0D@lacnic.net> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) X-LACNIC.uy-MailScanner-Information: Please contact the ISP for more information X-LACNIC.uy-MailScanner: Found to be clean X-LACNIC.uy-MailScanner-SpamCheck: X-LACNIC.uy-MailScanner-From: aservin@lacnic.net Cc: sidr@ietf.org Subject: Re: [sidr] WG Adoption for draft-rgaglian-sidr-algorithm-agility-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 11:49:18 -0000 Support. -as On 18 Nov 2010, at 02:59, Sandra Murphy wrote: > > Steve Kent has requested that the working group adopt the draft > draft-rgaglian-sidr-algorithm-agility-00.txt, Algorithm Agility > Procedure for RPKI, as a work item. > > It is available at > http://tools.ietf.org/html/draft-rgaglian-sidr-algorithm-agility-00. > > Recall that active support for adoption is necessary for the wg chairs > to judge acceptance as a working group work item, so silence works > against adoption. The wg chairs also want to know who would be > willing to work on the draft. > > Please respond to the list, giving your recommendation for or against > adoption of the draft as a wg work item as well as your intention to > work on the draft if adopted. The call for adoption will end in two > weeks on Wed 1 Dec 2010 AOE. > > --Sandy, speaking with wg chair helmet on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From aservin@lacnic.net Thu Nov 18 03:52:27 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A0C373A6827 for ; Thu, 18 Nov 2010 03:52:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.143 X-Spam-Level: X-Spam-Status: No, score=-1.143 tagged_above=-999 required=5 tests=[AWL=-0.095, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xLwqIgfCMw+P for ; Thu, 18 Nov 2010 03:52:26 -0800 (PST) Received: from mail.lacnic.net.uy (mail.lacnic.net.uy [IPv6:2001:13c7:7001:4000::3]) by core3.amsl.com (Postfix) with ESMTP id 919F73A6826 for ; Thu, 18 Nov 2010 03:52:26 -0800 (PST) Received: from 85-7-200.lacnic.net.uy (unknown [200.7.85.188]) by mail.lacnic.net.uy (Postfix) with ESMTP id 9066B30853D; Thu, 18 Nov 2010 09:52:57 -0200 (UYST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Arturo Servin In-Reply-To: Date: Thu, 18 Nov 2010 09:52:55 -0200 Content-Transfer-Encoding: 7bit Message-Id: References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) X-LACNIC.uy-MailScanner-Information: Please contact the ISP for more information X-LACNIC.uy-MailScanner: Found to be clean X-LACNIC.uy-MailScanner-SpamCheck: X-LACNIC.uy-MailScanner-From: aservin@lacnic.net Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-roa-format-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 11:52:27 -0000 Support. -as On 18 Nov 2010, at 02:55, Sandra Murphy wrote: > > Matt Lepinski has requested a WG LC for draft "A Profile for Route > Origin Authorizations (ROAs)". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-roa-format. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair bonnet on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From sanjaya@apnic.net Thu Nov 18 03:59:38 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0BDC73A6826 for ; Thu, 18 Nov 2010 03:59:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.851 X-Spam-Level: **** X-Spam-Status: No, score=4.851 tagged_above=-999 required=5 tests=[AWL=1.854, BAYES_00=-2.599, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HOST_EQ_AU=0.327, HOST_EQ_STATIC=1.172, HOST_MISMATCH_AU=2.444] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cVFGo4EbBHiz for ; Thu, 18 Nov 2010 03:59:37 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 0FF833A6824 for ; Thu, 18 Nov 2010 03:59:37 -0800 (PST) Received: from [192.168.0.9] (27-33-46-197.static.tpgi.com.au [27.33.46.197]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 6C0FCD59AB for ; Thu, 18 Nov 2010 22:00:23 +1000 (EST) Message-ID: <4CE5154B.9080402@apnic.net> Date: Thu, 18 Nov 2010 22:00:11 +1000 From: Sanjaya User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: sidr@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [sidr] WGLC support X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 11:59:38 -0000 I support for WGLC draft-ietf-sidr-roa-format-10 draft-ietf-sidr-rpki-rtr-02 draft-ietf-sidr-keyroll-04 draft-ietf-sidr-res-certs-20 draft-ietf-sidr-repos-struct-06 draft-ietf-sidr-rescerts-provisioning-09 draft-ietf-sidr-rpki-algs-04 draft-ietf-sidr-rpki-manifests-09 draft-ietf-sidr-roa-validation-10 draft-ietf-sidr-signed-object-01 draft-ietf-sidr-ta-06 draft-ietf-sidr-arch-11 I support for adoption draft-rgaglian-sidr-algorithm-agility-00 draft-ymbk-rpki-origin-ops-00 Cheers, Sanjaya From rogaglia@cisco.com Thu Nov 18 05:48:49 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 88F283A67A7 for ; Thu, 18 Nov 2010 05:48:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2AsOzadWVgBu for ; Thu, 18 Nov 2010 05:48:48 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by core3.amsl.com (Postfix) with ESMTP id 2EEFE3A657C for ; Thu, 18 Nov 2010 05:48:48 -0800 (PST) Authentication-Results: ams-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: smime.p7s : 3815 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AuoEAJu95EyQ/khLgWdsb2JhbACiUhUBARYiIqIym0KFSwSKWg X-IronPort-AV: E=Sophos;i="4.59,217,1288569600"; d="p7s'?scan'208";a="13562401" Received: from ams-core-2.cisco.com ([144.254.72.75]) by ams-iport-2.cisco.com with ESMTP; 18 Nov 2010 13:49:35 +0000 Received: from dhcp-144-254-20-89.cisco.com (dhcp-144-254-20-89.cisco.com [144.254.20.89]) by ams-core-2.cisco.com (8.14.3/8.14.3) with ESMTP id oAIDnZWM011124; Thu, 18 Nov 2010 13:49:35 GMT Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: multipart/signed; boundary=Apple-Mail-183-395866345; protocol="application/pkcs7-signature"; micalg=sha1 From: Roque Gagliano In-Reply-To: <8AC230CA-229E-43FC-A3C2-38852D82ED3D@apnic.net> Date: Thu, 18 Nov 2010 14:49:55 +0100 Message-Id: <34C4618E-712C-4E61-A889-90F4239E0046@cisco.com> References: <20101111031644.1EF263A6965@core3.amsl.com> <3F59A12A-49B3-4FDE-8208-5A18FCF1BEB0@apnic.net> <043040F4-BDC9-4DAE-A02D-59DE529D8AE0@cisco.com> <8AC230CA-229E-43FC-A3C2-38852D82ED3D@apnic.net> To: Geoff Huston X-Mailer: Apple Mail (2.1082) Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG Last Call request for draft-ietf-sidr-rescerts-provisioning-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 13:48:49 -0000 --Apple-Mail-183-395866345 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Geoff, Thank you for your email, please see comments inline. >=20 > I am of the opinion that the protocol already has sufficient knobs to = support an environment of algorithm transition without further = augmentation. >=20 > The existing protocol supports: > - multiple algorithms are implemented as multiple classes (Roque) agree. > - algorithms for each class are identified in the certificate provided = by the server in the response to a LIST command (Roque) agree. I believe you meant that as we implement top-down you = could use the issuer's certificate, correct? > - the server performs a proof of possession text using the algorithm = associated with the class that was nominated in the certificate request. (Roque) agree. And if we do not create any additional error code and if = a client sends a "issue" request using a non-supported algorithm for a = given class, the server will respond MUST an error code 1203: badly = formed payload. correct? I will add text describing this mechanism in the next version of the = agility draft. Regards, Roque. > Geoff >=20 --Apple-Mail-183-395866345 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKHjCCBMww ggQ1oAMCAQICEByunWua9OYvIoqj2nRhbB4wDQYJKoZIhvcNAQEFBQAwXzELMAkGA1UEBhMCVVMx FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAxIFB1YmxpYyBQcmltYXJ5 IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA1MTAyODAwMDAwMFoXDTE1MTAyNzIzNTk1OVow gd0xCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNp Z24gVHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZl cmlzaWduLmNvbS9ycGEgKGMpMDUxHjAcBgNVBAsTFVBlcnNvbmEgTm90IFZhbGlkYXRlZDE3MDUG A1UEAxMuVmVyaVNpZ24gQ2xhc3MgMSBJbmRpdmlkdWFsIFN1YnNjcmliZXIgQ0EgLSBHMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMnfrOfq+PgDFMQAktXBfjbCPO98chXLwKuMPRyV zm8eECw/AO2XJua2x+atQx0/pIdHR0w+VPhs+Mf8sZ69MHC8l7EDBeqV8a1AxUR6SwWi8mD81zpl Yu//EHuiVrvFTnAt1qIfPO2wQuhejVchrKaZ2RHp0hoHwHRHQgv8xTTq/ea6JNEdCBU3otdzzwFB L2OyOj++pRpu9MlKWz2VphW7NQIZ+dTvvI8OcXZZu0u2Ptb8Whb01g6J8kn+bAztFenZiHWcec5g J925rXXOL3OVekA6hXVJsLjfaLyrzROChRFQo+A8C67AClPN1zBvhTJGG+RJEMJs4q8fef/btLUC AwEAAaOCAYQwggGAMBIGA1UdEwEB/wQIMAYBAf8CAQAwRAYDVR0gBD0wOzA5BgtghkgBhvhFAQcX ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMAsGA1UdDwQEAwIB BjARBglghkgBhvhCAQEEBAMCAQYwLgYDVR0RBCcwJaQjMCExHzAdBgNVBAMTFlByaXZhdGVMYWJl bDMtMjA0OC0xNTUwHQYDVR0OBBYEFBF9Xhl9PATfamzWoooaPzHYO5RSMDEGA1UdHwQqMCgwJqAk oCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTEuY3JsMIGBBgNVHSMEejB4oWOkYTBfMQsw CQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDEgUHVi bGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHmCEQDNun9W8N/kvFT+IqyzcqpVMA0G CSqGSIb3DQEBBQUAA4GBALEv2ZbhkqLugWDlyCog++FnLNYAmFOjAhvpkEv4GESfD0b3+qD+0x0Y o9K/HOzWGZ9KTUP4yru+E4BJBd0hczNXwkJavvoAk7LmBDGRTl088HMFN2Prv4NZmP1m3umGMpqS KTw6rlTaphJRsY/IytNHeObbpR6HBuPRFMDCIfa6MIIFSjCCBDKgAwIBAgIQL5vTKNUCwWQOjacT KoWGmzANBgkqhkiG9w0BAQUFADCB3TELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJ bmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1 c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEeMBwGA1UECxMVUGVyc29u YSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAxIEluZGl2aWR1YWwgU3Vi c2NyaWJlciBDQSAtIEcyMB4XDTEwMDUxMjAwMDAwMFoXDTExMDUxMjIzNTk1OVowggETMRcwFQYD VQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazFGMEQG A1UECxM9d3d3LnZlcmlzaWduLmNvbS9yZXBvc2l0b3J5L1JQQSBJbmNvcnAuIGJ5IFJlZi4sTElB Qi5MVEQoYyk5ODEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTMwMQYDVQQLEypEaWdp dGFsIElEIENsYXNzIDEgLSBOZXRzY2FwZSBGdWxsIFNlcnZpY2UxFzAVBgNVBAMUDlJvcXVlIEdh Z2xpYW5vMSEwHwYJKoZIhvcNAQkBFhJyb2dhZ2xpYUBjaXNjby5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDGyowL31WLYDEbY59gvyg0OcBMh/AqsE5EpWzobCsYs1secYJvZlKm 5+2CjNWTQziHYo19cp7DG9XDLLGdLW7HC0VikR65cxIURXJoUKQO3QJYV99mrtnwCKf/FyzxeF11 pRILFbkgvpAZjCLig/RgNLt5cGGl8FGCe22sBWdBxU+sQiffsS774edvd3xFiRPaB/sOVPc4fbvw twOkEuas4IaH9Oivt1ZUvrFmBnS8mCYbk0OKjKjIEeS62TPsGCZv3f9Ffgm0Az4On6MiP1dARKp/ it5aow047hoFNXFCsWVLeEyDLk3avqS3/9fH//9NWvj0Mq/FhkaEw4Sv66TLAgMBAAGjgcwwgckw CQYDVR0TBAIwADBEBgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LnZlcmlzaWduLmNvbS9ycGEwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwME BggrBgEFBQcDAjBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vSW5kQzFEaWdpdGFsSUQtY3JsLnZl cmlzaWduLmNvbS9JbmRDMURpZ2l0YWxJRC5jcmwwDQYJKoZIhvcNAQEFBQADggEBAIxI8f9LAL0e mThKlUnwxlBH+q2htxBy9vBt24uGl8dunGyK4Aq7PAQiCF2XJfM2sWSRpdkIdbd9cD5upkcteP4s pL/T85qsfT1dLiQDTZ6/o19umk6DkqG0DpR+n+7jTUGdCzDhhzTZZblqY0afimcQ79uqZcF5ojDl N5Np93N3djqAmD37aKG1KE8xzBP0WiwxfVIGYua098YIsioWb0zvGmPd9JdMO55+jwkjFAOsT5kK ivXkjDnZJ1HM8GVQjGPnYBDEJBmC2B+kdbpi17cntYE/6V/SgrpB4t14YuswgMYRh1lGP7eKiiAj mwnaJL9aMMrqBwHLY/BLEA+3hRsxggSLMIIEhwIBATCB8jCB3TELMAkGA1UEBhMCVVMxFzAVBgNV BAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYD VQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEe MBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAx IEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYabMAkGBSsOAwIa BQCgggJtMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEwMTExODEz NDk1NVowIwYJKoZIhvcNAQkEMRYEFBBtLSa8etHn6OEHYZTt9Sd3+krtMIIBAwYJKwYBBAGCNxAE MYH1MIHyMIHdMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsT FlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1zIG9mIHVzZSBhdCBodHRwczov L3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTA1MR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0 ZWQxNzA1BgNVBAMTLlZlcmlTaWduIENsYXNzIDEgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBIC0g RzICEC+b0yjVAsFkDo2nEyqFhpswggEFBgsqhkiG9w0BCRACCzGB9aCB8jCB3TELMAkGA1UEBhMC VVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3 b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3Jw YSAoYykwNTEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2ln biBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYab MA0GCSqGSIb3DQEBAQUABIIBAJaWmFnz5Do54jheYuFMOQjFq/oNhQgxO21U0SQ3NcB/EYEAux5i Rk5BvYv/4skiYCHIEvOvfnn/jugUs2IApIteIcxkjKKGzzuEsZOrNkcO6h2BTvGbUiaQdKywHRAw ZDyThVhxV6NKL7RrzcO9UTtdJRx2bjQcTs8bLen1hpJzu6lionwZGHJdNqn2U2VlpZUQHBVmq+/l D2xFbKITlF0EtNwhG/5CnDZDLAY4bQD8zj21eGBScC0CqfCJiNI2vNCtgZ9A3A1N3nOy5fiJwmaf WYXjZYudN3hyVwDR5fzwrJtBZv8GlnPh/SEP5ciwFpFLX7FOFds8ZuO31jgcUlsAAAAAAAA= --Apple-Mail-183-395866345-- From andrei@ripe.net Thu Nov 18 06:04:54 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 20E8B3A67FA for ; Thu, 18 Nov 2010 06:04:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.582 X-Spam-Level: X-Spam-Status: No, score=-102.582 tagged_above=-999 required=5 tests=[AWL=0.017, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wjfRZ+qxM5PV for ; Thu, 18 Nov 2010 06:04:53 -0800 (PST) Received: from postgirl.ripe.net (postgirl.ipv6.ripe.net [IPv6:2001:610:240:11::c100:1342]) by core3.amsl.com (Postfix) with ESMTP id 98D563A67E7 for ; Thu, 18 Nov 2010 06:04:52 -0800 (PST) Received: from ayeaye.ripe.net ([193.0.23.5]) by postgirl.ripe.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PJ57D-0003LY-M4; Thu, 18 Nov 2010 15:05:37 +0100 Received: from andrei.vpn.ripe.net ([193.0.21.36] helo=Andrei-Robachevskys-MacBook-Air.local) by ayeaye.ripe.net with esmtp (Exim 4.63) (envelope-from ) id 1PJ57C-0004L2-2h; Thu, 18 Nov 2010 15:05:31 +0100 Message-ID: <4CE532A9.1000500@ripe.net> Date: Thu, 18 Nov 2010 15:05:29 +0100 From: Andrei Robachevsky User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Karen Seo References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-RIPE-Signature: 4330a47f43bd7e517cd9d6f2bba43afb306fc3743915f21ebd8aab548520f66a X-RIPE-Spam-Level: -- X-RIPE-Signature: 4330a47f43bd7e517cd9d6f2bba43afb306fc3743915f21ebd8aab548520f66a Cc: "sidr@ietf.org wg" Subject: Re: [sidr] Certificate Policy -- last change X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 14:04:54 -0000 This change works for me, I support the request for the WGLC for this document. Andrei Karen Seo wrote on 16/11/10 4:31 PM: > Sandy, Chris -- If there are no complaints by the end of this week about > the proposed change below, we will have addressed all known comments and > request that you declare WGLC done on the Certificate Policy. > > All -- Based on input from Geoff Huston and Randy Bush, we propose to > change the 2nd paragraph of the Overview as follows. > > From: > "The structure of the RPKI is modeled on the existing organizational > structure that is already responsible for IP address and AS number > resource allocation. In this allocation hierarchy, IANA allocates > resources to five Regional Internet Registries (RIRs), each of which > manages address and AS number allocation within a defined > geopolitical region. The RIRs in turn allocate resources to Internet > Service Providers, to subscribers with so-called provider- > independent ("portable") allocations, and in some regions, to > National Internet Registries (NIRs). (The term LIR is used in some > regions to refer to what other regions define as an ISP. Throughout > the rest of this document we will use the term ISP to simplify > references to these entities.)" > > To: > "The structure of the RPKI is congruent with the number resource > allocation framework of the Internet. The IANA allocates number > resources for special purposes [RFC5736], to Regional Internet > Registries (RIRs), and to others. The RIRs, in turn, manage the > allocation of number resources to end users, Internet Service > Providers, and others." > > Thank you, > Karen > > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr > From gih@apnic.net Thu Nov 18 06:20:29 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9C5473A680B for ; Thu, 18 Nov 2010 06:20:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.801 X-Spam-Level: X-Spam-Status: No, score=-100.801 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.398, J_CHICKENPOX_31=0.6, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qzByTKEPx0nq for ; Thu, 18 Nov 2010 06:20:27 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 4823C3A6835 for ; Thu, 18 Nov 2010 06:20:25 -0800 (PST) Received: from dhcp-27-178.ripemtg.ripe.net (dhcp-27-178.ripemtg.ripe.net [193.0.27.178]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 0F92BD59A3; Fri, 19 Nov 2010 00:20:52 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Fri, 19 Nov 2010 01:20:27 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 14:20:29 -0000 On 18/11/2010, at 8:23 PM, Sandra Murphy wrote: > (OK, so there *is* another one, making lucky 13.) >=20 > Randy Bush has requested a WG LC for draft "BGP Prefix Origin > Validation" >=20 > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-pfx-validate. >=20 > The Last Call will end Thu, 2 Dec 2010 (AOE). >=20 > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. >=20 I don't think this document is ready to head to the IESG.=20 By and large I agree with the observations and recommendations in this = document, but I don;t believe that this is ready for the IESG. More = wordsmithing for clarity and consistency is requires in my view (see = below) Also, one statement struck me as needing further commentary: Section 5. Routing Policy Announcements with invalid origins MAY be used, but SHOULD be less preferred than those with valid or unknown. Here I agree with the sentiment in terms of the relativity to valid or = unknown, but I am worried about the MAY statement here, and I would like = the document to explain this further. For example, a simple reading of the document leads one to believe that = all announcements MAY still be accepted according to the routing policy = selection allowed in section 5, yet if that were the case then the = ability of origin validation to "deal with inadvertent = mis-advertisement" is questionable. I would prefer the document to look at the implication of _why_ a party = MAY accept a route that the origination validation framework is leading = to a local judgement that the route is invalid. i.e. is it because of = missing information in the relying party's local cache, which may bne = resolved over time? Is is due to potential circularity of dependence, = where parts of the RPKI distributed repository lie behind routes that = can only be judged as valid using certs and ROAs found in that = repository?=20 I would also like to see the security considerations section include a = statement to the effect that if a party were to use routes that have an = invalid validity state then the ability to detect and filter certain = forms of mis-advertisement would in effect be negated. Back to the wordsmithing and consistency comment, the terminology of = unvalidatable origins and unknown origin is used in different sentences = - it would be better to use consistent terminology. It would also be good if the terminology of validity state is consistent = - are we talking about "announcements" or "routes"? Are we talking about = "valid origin" or "routes that are validated by the RPKI ROA framework"? So close, but not quite ready for shipping yet in my opinion. (My apologies - I should've commented earlier on this, but its only a = WGLC that leads to these reviews happening for me.) thanks, Geoff From gih@apnic.net Thu Nov 18 06:29:31 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DBEB63A680C for ; Thu, 18 Nov 2010 06:29:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.068 X-Spam-Level: X-Spam-Status: No, score=-101.068 tagged_above=-999 required=5 tests=[AWL=0.033, BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.398, RDNS_DYNAMIC=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N0yBcGiLaNeI for ; Thu, 18 Nov 2010 06:29:30 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 1C2D33A680B for ; Thu, 18 Nov 2010 06:29:30 -0800 (PST) Received: from dhcp-27-178.ripemtg.ripe.net (dhcp-27-178.ripemtg.ripe.net [193.0.27.178]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 288EAD59A3; Fri, 19 Nov 2010 00:29:39 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: <34C4618E-712C-4E61-A889-90F4239E0046@cisco.com> Date: Fri, 19 Nov 2010 01:28:46 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: <0BED4FFA-289A-4BE6-A416-53012B608296@apnic.net> References: <20101111031644.1EF263A6965@core3.amsl.com> <3F59A12A-49B3-4FDE-8208-5A18FCF1BEB0@apnic.net> <043040F4-BDC9-4DAE-A02D-59DE529D8AE0@cisco.com> <8AC230CA-229E-43FC-A3C2-38852D82ED3D@apnic.net> <34C4618E-712C-4E61-A889-90F4239E0046@cisco.com> To: Roque Gagliano X-Mailer: Apple Mail (2.1082) Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG Last Call request for draft-ietf-sidr-rescerts-provisioning-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 14:29:32 -0000 On 19/11/2010, at 12:49 AM, Roque Gagliano wrote: > Hi Geoff, >=20 > Thank you for your email, please see comments inline. >=20 >>=20 >> I am of the opinion that the protocol already has sufficient knobs to = support an environment of algorithm transition without further = augmentation. >>=20 >> The existing protocol supports: >> - multiple algorithms are implemented as multiple classes > (Roque) agree. >> - algorithms for each class are identified in the certificate = provided by the server in the response to a LIST command > (Roque) agree. I believe you meant that as we implement top-down you = could use the issuer's certificate, correct? geoff: yes. >> - the server performs a proof of possession text using the algorithm = associated with the class that was nominated in the certificate request. > (Roque) agree. And if we do not create any additional error code and = if a client sends a "issue" request using a non-supported algorithm for = a given class, the server will respond MUST an error code 1203: badly = formed payload. correct? Geoff: Correct. In an algorithm transition context, the client MUST use = the same algorithm as used in the server (issuer's) certificate within a = resource class (as provided by the Issuer in the LIST command = response), and the server will response with a 1203 error code = otherwise. You can write that up in the algorithm document.=20 >=20 > I will add text describing this mechanism in the next version of the = agility draft. thank you Geoff From ietfc@btconnect.com Thu Nov 18 10:48:05 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DE1BF3A68AC for ; Thu, 18 Nov 2010 10:48:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.601 X-Spam-Level: X-Spam-Status: No, score=0.601 tagged_above=-999 required=5 tests=[BAYES_50=0.001, J_CHICKENPOX_35=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A2W4G1mX9Dz1 for ; Thu, 18 Nov 2010 10:48:05 -0800 (PST) Received: from mail.btconnect.com (c2beaomr10.btconnect.com [213.123.26.188]) by core3.amsl.com (Postfix) with ESMTP id 9A8B73A6897 for ; Thu, 18 Nov 2010 10:48:04 -0800 (PST) Received: from host81-153-12-94.range81-153.btcentralplus.com (HELO pc6) ([81.153.12.94]) by c2beaomr10.btconnect.com with SMTP id ARX05866; Thu, 18 Nov 2010 18:48:08 +0000 (GMT) Message-ID: <000201cb8748$7f6c7340$4001a8c0@gateway.2wire.net> From: "t.petch" To: "Stephen Kent" References: <003201c9512c$9bb96840$0601a8c0@allison> Date: Thu, 18 Nov 2010 17:49:14 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Mirapoint-IP-Reputation: reputation=Neutral-1, source=Queried, refid=tid=0001.0A0B0301.4CE574E2.0297, actions=tag X-Junkmail-Status: score=10/50, host=c2beaomr10.btconnect.com X-Junkmail-Signature-Raw: score=unknown, refid=str=0001.0A0B0208.4CE574E8.029C,ss=1,fgs=0, ip=0.0.0.0, so=2010-07-22 22:03:31, dmn=2009-09-10 00:05:08, mode=single engine X-Junkmail-IWF: false Cc: sidr@ietf.org Subject: [sidr] WG Last Call on -arch was Re: One and only one RPKI X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 18:48:06 -0000 Back in 2008, you explained to me what an RPKI was and implied that the words you used here, or something like them, would go in the arch document. Your first two paragraphs would seem appropriate but I don't see them:-( The start of 2.1 would seem a suitable place. I note too that RPKI is never expanded, on first or subsequent use (or should that be rPKI?). Tom Petch ----- Original Message ----- From: "Stephen Kent" To: "tom.petch" Cc: Sent: Monday, December 01, 2008 4:29 PM Subject: Re: [sidr] One and only one RPKI > At 7:40 PM +0100 11/26/08, tom.petch wrote: > >piggybacking, a question that has been bugging me , what is an RPKI? > > The resource PKI is an instance of a PKI, devoted to issuing certs > for the "resources" that are managed by IANA and the RIRs, i.e., > Internet address space and autonomous system numbers. > > >Is it an 'object class' of which the one discussed within sidr is an object > >instance? > > There is only one resource allocation system for the Internet, so > there is only one RPKI. > > >or is it something invented by sidr/RPSEC/IETF etc and does not > >exist outside this? > > SIDR is creating the standards that define the RPKI, while IANA and > the RIRs are implementing CAs, protocols, and repositories consistent > with those standards. > > >I have been through the I-Ds and they all seem to take this knowledge > >as a prerequisite but without any normative reference thereto. > > Sorry that we didn't do an adequate job there. We will revisit the > documents , primarily the architecture document, and see how we can > improve the communication. > > >Perhaps draft-ietf-sidr-arch could contain an explanation (and an expansion > >of RPKI when first it appears:-). > > yes, it should! > > Steve From rogaglia@cisco.com Thu Nov 18 11:32:21 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DA4EE3A6834 for ; Thu, 18 Nov 2010 11:32:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.299 X-Spam-Level: X-Spam-Status: No, score=-10.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_111=0.6, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mo8SPxyKE1hb for ; Thu, 18 Nov 2010 11:32:21 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by core3.amsl.com (Postfix) with ESMTP id 556603A6832 for ; Thu, 18 Nov 2010 11:32:20 -0800 (PST) Authentication-Results: ams-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: smime.p7s : 3815 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ai0DAHgO5UyQ/khMgWdsb2JhbACiVhUBARYiIqQPmzqFSwSFL4Ur X-IronPort-AV: E=Sophos;i="4.59,218,1288569600"; d="p7s'?scan'208";a="13584164" Received: from ams-core-3.cisco.com ([144.254.72.76]) by ams-iport-2.cisco.com with ESMTP; 18 Nov 2010 19:33:07 +0000 Received: from dhcp-144-254-20-89.cisco.com (dhcp-144-254-20-89.cisco.com [144.254.20.89]) by ams-core-3.cisco.com (8.14.3/8.14.3) with ESMTP id oAIJX7qV021269; Thu, 18 Nov 2010 19:33:07 GMT Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: multipart/signed; boundary=Apple-Mail-219-416478402; protocol="application/pkcs7-signature"; micalg=sha1 From: Roque Gagliano In-Reply-To: Date: Thu, 18 Nov 2010 20:33:27 +0100 Message-Id: <55F1661B-060C-453A-9EB7-4CDA8FBA5B02@cisco.com> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-roa-format-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 19:32:22 -0000 --Apple-Mail-219-416478402 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Sandra, I support this document with one editing comment. I do not know the history behind the name ROA, I believe at one time = there were some document that used the last A=3Dattestation and some = A=3Dauthorization. AFAIK, all WG texts take the later definition. However, the OID for the ContentType is registrated as = routeOriginAttestation. I believe this generate some confusion. If there = is not any issue, it may be a good time to request a change of the = description in the registry. This can be done by sending an email to the = email: ietf-pkix-oid-reg@imc.org Roque. On Nov 18, 2010, at 5:55 AM, Sandra Murphy wrote: >=20 > Matt Lepinski has requested a WG LC for draft "A Profile for Route > Origin Authorizations (ROAs)". >=20 > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-roa-format. >=20 > The Last Call will end Wed, 1 Dec 2010 (AOE). >=20 > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. >=20 > --Sandy, speaking with wg chair bonnet on >=20 > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr --Apple-Mail-219-416478402 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKHjCCBMww ggQ1oAMCAQICEByunWua9OYvIoqj2nRhbB4wDQYJKoZIhvcNAQEFBQAwXzELMAkGA1UEBhMCVVMx FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAxIFB1YmxpYyBQcmltYXJ5 IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA1MTAyODAwMDAwMFoXDTE1MTAyNzIzNTk1OVow gd0xCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNp Z24gVHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZl cmlzaWduLmNvbS9ycGEgKGMpMDUxHjAcBgNVBAsTFVBlcnNvbmEgTm90IFZhbGlkYXRlZDE3MDUG A1UEAxMuVmVyaVNpZ24gQ2xhc3MgMSBJbmRpdmlkdWFsIFN1YnNjcmliZXIgQ0EgLSBHMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMnfrOfq+PgDFMQAktXBfjbCPO98chXLwKuMPRyV zm8eECw/AO2XJua2x+atQx0/pIdHR0w+VPhs+Mf8sZ69MHC8l7EDBeqV8a1AxUR6SwWi8mD81zpl Yu//EHuiVrvFTnAt1qIfPO2wQuhejVchrKaZ2RHp0hoHwHRHQgv8xTTq/ea6JNEdCBU3otdzzwFB L2OyOj++pRpu9MlKWz2VphW7NQIZ+dTvvI8OcXZZu0u2Ptb8Whb01g6J8kn+bAztFenZiHWcec5g J925rXXOL3OVekA6hXVJsLjfaLyrzROChRFQo+A8C67AClPN1zBvhTJGG+RJEMJs4q8fef/btLUC AwEAAaOCAYQwggGAMBIGA1UdEwEB/wQIMAYBAf8CAQAwRAYDVR0gBD0wOzA5BgtghkgBhvhFAQcX ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMAsGA1UdDwQEAwIB BjARBglghkgBhvhCAQEEBAMCAQYwLgYDVR0RBCcwJaQjMCExHzAdBgNVBAMTFlByaXZhdGVMYWJl bDMtMjA0OC0xNTUwHQYDVR0OBBYEFBF9Xhl9PATfamzWoooaPzHYO5RSMDEGA1UdHwQqMCgwJqAk oCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTEuY3JsMIGBBgNVHSMEejB4oWOkYTBfMQsw CQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDEgUHVi bGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHmCEQDNun9W8N/kvFT+IqyzcqpVMA0G CSqGSIb3DQEBBQUAA4GBALEv2ZbhkqLugWDlyCog++FnLNYAmFOjAhvpkEv4GESfD0b3+qD+0x0Y o9K/HOzWGZ9KTUP4yru+E4BJBd0hczNXwkJavvoAk7LmBDGRTl088HMFN2Prv4NZmP1m3umGMpqS KTw6rlTaphJRsY/IytNHeObbpR6HBuPRFMDCIfa6MIIFSjCCBDKgAwIBAgIQL5vTKNUCwWQOjacT KoWGmzANBgkqhkiG9w0BAQUFADCB3TELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJ bmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1 c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEeMBwGA1UECxMVUGVyc29u YSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAxIEluZGl2aWR1YWwgU3Vi c2NyaWJlciBDQSAtIEcyMB4XDTEwMDUxMjAwMDAwMFoXDTExMDUxMjIzNTk1OVowggETMRcwFQYD VQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazFGMEQG A1UECxM9d3d3LnZlcmlzaWduLmNvbS9yZXBvc2l0b3J5L1JQQSBJbmNvcnAuIGJ5IFJlZi4sTElB Qi5MVEQoYyk5ODEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTMwMQYDVQQLEypEaWdp dGFsIElEIENsYXNzIDEgLSBOZXRzY2FwZSBGdWxsIFNlcnZpY2UxFzAVBgNVBAMUDlJvcXVlIEdh Z2xpYW5vMSEwHwYJKoZIhvcNAQkBFhJyb2dhZ2xpYUBjaXNjby5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDGyowL31WLYDEbY59gvyg0OcBMh/AqsE5EpWzobCsYs1secYJvZlKm 5+2CjNWTQziHYo19cp7DG9XDLLGdLW7HC0VikR65cxIURXJoUKQO3QJYV99mrtnwCKf/FyzxeF11 pRILFbkgvpAZjCLig/RgNLt5cGGl8FGCe22sBWdBxU+sQiffsS774edvd3xFiRPaB/sOVPc4fbvw twOkEuas4IaH9Oivt1ZUvrFmBnS8mCYbk0OKjKjIEeS62TPsGCZv3f9Ffgm0Az4On6MiP1dARKp/ it5aow047hoFNXFCsWVLeEyDLk3avqS3/9fH//9NWvj0Mq/FhkaEw4Sv66TLAgMBAAGjgcwwgckw CQYDVR0TBAIwADBEBgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LnZlcmlzaWduLmNvbS9ycGEwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwME BggrBgEFBQcDAjBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vSW5kQzFEaWdpdGFsSUQtY3JsLnZl cmlzaWduLmNvbS9JbmRDMURpZ2l0YWxJRC5jcmwwDQYJKoZIhvcNAQEFBQADggEBAIxI8f9LAL0e mThKlUnwxlBH+q2htxBy9vBt24uGl8dunGyK4Aq7PAQiCF2XJfM2sWSRpdkIdbd9cD5upkcteP4s pL/T85qsfT1dLiQDTZ6/o19umk6DkqG0DpR+n+7jTUGdCzDhhzTZZblqY0afimcQ79uqZcF5ojDl N5Np93N3djqAmD37aKG1KE8xzBP0WiwxfVIGYua098YIsioWb0zvGmPd9JdMO55+jwkjFAOsT5kK ivXkjDnZJ1HM8GVQjGPnYBDEJBmC2B+kdbpi17cntYE/6V/SgrpB4t14YuswgMYRh1lGP7eKiiAj mwnaJL9aMMrqBwHLY/BLEA+3hRsxggSLMIIEhwIBATCB8jCB3TELMAkGA1UEBhMCVVMxFzAVBgNV BAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYD VQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNTEe MBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2lnbiBDbGFzcyAx IEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYabMAkGBSsOAwIa BQCgggJtMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEwMTExODE5 MzMyN1owIwYJKoZIhvcNAQkEMRYEFBbbbdxxAzHgwOihDxK35rST4oTRMIIBAwYJKwYBBAGCNxAE MYH1MIHyMIHdMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsT FlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1zIG9mIHVzZSBhdCBodHRwczov L3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTA1MR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0 ZWQxNzA1BgNVBAMTLlZlcmlTaWduIENsYXNzIDEgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENBIC0g RzICEC+b0yjVAsFkDo2nEyqFhpswggEFBgsqhkiG9w0BCRACCzGB9aCB8jCB3TELMAkGA1UEBhMC VVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3 b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3Jw YSAoYykwNTEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5WZXJpU2ln biBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEcyAhAvm9Mo1QLBZA6NpxMqhYab MA0GCSqGSIb3DQEBAQUABIIBAAGQ1vWqnv8Sc0ee+mSkfrA91M+Eryfwsvy/Id8nvxJwiVHrZIb2 iUyPy6FY9cBwAoh56IFoXE5HMlITBDyyraXOpQS3YnbnKQGcOITB3XdtJUAPeQj97vojPu6uZEf1 MvsS3Hba8YM9PuHchILYSXK0+ZgC8XKAsPcU7WXZUPAfm9A4Tebqo2GJAXP1uYABm/NvDZLoeNND +NYqa+EMOzCsMLiprNB9shgTneGBwsOJ8ALeQ74eNyWkzrGSxqCAXkU+KYe5dp78md49MnClzKtT hHTb+fqQ3W/qd873NOpUYG9jHH7EH9uuKc95znEgK4W4vaU+0++39u2vp4jmi5YAAAAAAAA= --Apple-Mail-219-416478402-- From bje@apnic.net Thu Nov 18 15:56:06 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A38C33A6807 for ; Thu, 18 Nov 2010 15:56:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qihsrcGG8rDK for ; Thu, 18 Nov 2010 15:56:06 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 532B93A687A for ; Thu, 18 Nov 2010 15:56:05 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 2D7E3D59AE for ; Fri, 19 Nov 2010 09:56:52 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: Date: Fri, 19 Nov 2010 09:56:51 +1000 Content-Transfer-Encoding: 7bit Message-Id: References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WGLC for draft-ietf-sidr-roa-format-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 23:56:06 -0000 I support this draft advancing. On 18/11/2010, at 2:55 PM, Sandra Murphy wrote: > > Matt Lepinski has requested a WG LC for draft "A Profile for Route > Origin Authorizations (ROAs)". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-roa-format. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair bonnet on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From bje@apnic.net Thu Nov 18 15:56:30 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B9F293A680E for ; Thu, 18 Nov 2010 15:56:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lWVZFnpso3OT for ; Thu, 18 Nov 2010 15:56:29 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 473C53A6807 for ; Thu, 18 Nov 2010 15:56:29 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id AF859D59AE for ; Fri, 19 Nov 2010 09:57:16 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: Date: Fri, 19 Nov 2010 09:57:16 +1000 Content-Transfer-Encoding: 7bit Message-Id: <0B248611-04E5-4C96-B2DB-8CD93D632D29@apnic.net> References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-rtr-02 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 23:56:30 -0000 I support this draft advancing. On 18/11/2010, at 2:55 PM, Sandra Murphy wrote: > > Randy Bush has requested a WG LC for draft "The RPKI/Router Protocol". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-rtr. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair cloche on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr -- Byron Ellacott email: bje@apnic.net Technical Director, APNIC sip: bje@voip.apnic.net http://www.apnic.net phone: +61 7 3858 3100 ________________________________________________________________________ * Sent by email to save paper. Print only if necessary. From bje@apnic.net Thu Nov 18 15:57:07 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7896B3A68AC for ; Thu, 18 Nov 2010 15:57:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0RE+-lnJ-mxz for ; Thu, 18 Nov 2010 15:57:06 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 115D03A689A for ; Thu, 18 Nov 2010 15:57:06 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 78148D59A3 for ; Fri, 19 Nov 2010 09:57:53 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: Date: Fri, 19 Nov 2010 09:57:53 +1000 Content-Transfer-Encoding: 7bit Message-Id: <989999DA-AC4A-4E82-BA63-476B766A252C@apnic.net> References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WGLC for draft-ietf-sidr-keyroll-04 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 23:57:07 -0000 I support this one, too. On 18/11/2010, at 2:56 PM, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft "CA Key Rollover in the RPKI". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-keyroll. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair derby on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr -- Byron Ellacott email: bje@apnic.net Technical Director, APNIC sip: bje@voip.apnic.net http://www.apnic.net phone: +61 7 3858 3100 ________________________________________________________________________ * Sent by email to save paper. Print only if necessary. From bje@apnic.net Thu Nov 18 15:57:25 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B79013A68D5 for ; Thu, 18 Nov 2010 15:57:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xbQqWBfwi99h for ; Thu, 18 Nov 2010 15:57:24 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 866FB3A68CF for ; Thu, 18 Nov 2010 15:57:24 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id F0926D59A3 for ; Fri, 19 Nov 2010 09:58:11 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: Date: Fri, 19 Nov 2010 09:58:11 +1000 Content-Transfer-Encoding: 7bit Message-Id: <964E6FD3-2B54-4F5F-B031-17541901E6D2@apnic.net> References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WGLC for draft-ietf-sidr-res-certs-20 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 23:57:25 -0000 I also support this one. On 18/11/2010, at 2:56 PM, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft "A Profile for X.509 PKIX > Resource Certificates". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-res-certs. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair boater on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr -- Byron Ellacott email: bje@apnic.net Technical Director, APNIC sip: bje@voip.apnic.net http://www.apnic.net phone: +61 7 3858 3100 ________________________________________________________________________ * Sent by email to save paper. Print only if necessary. From bje@apnic.net Thu Nov 18 15:57:46 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DB68C3A6807 for ; Thu, 18 Nov 2010 15:57:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BSEx2z9wQuWI for ; Thu, 18 Nov 2010 15:57:46 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id D82FD3A687A for ; Thu, 18 Nov 2010 15:57:45 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 4CA15D59A3 for ; Fri, 19 Nov 2010 09:58:33 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: Date: Fri, 19 Nov 2010 09:58:33 +1000 Content-Transfer-Encoding: 7bit Message-Id: References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WGLC for draft-ietf-sidr-repos-struct-06 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 23:57:46 -0000 +1 support here. On 18/11/2010, at 2:57 PM, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft "A Profile for Resource > Certificate Repository Structure". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-repos-struct. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair fedora on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr -- Byron Ellacott email: bje@apnic.net Technical Director, APNIC sip: bje@voip.apnic.net http://www.apnic.net phone: +61 7 3858 3100 ________________________________________________________________________ * Sent by email to save paper. Print only if necessary. From bje@apnic.net Thu Nov 18 15:58:20 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E501B3A68B8 for ; Thu, 18 Nov 2010 15:58:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3h2X1C5WYYfj for ; Thu, 18 Nov 2010 15:58:20 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 85FE73A689A for ; Thu, 18 Nov 2010 15:58:19 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 05D02D59A3 for ; Fri, 19 Nov 2010 09:59:07 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: Date: Fri, 19 Nov 2010 09:59:06 +1000 Content-Transfer-Encoding: 7bit Message-Id: <60BC6FF1-23F7-42B5-84D8-A76EC4F96718@apnic.net> References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-algs-04 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 23:58:21 -0000 I support this draft advancing. On 18/11/2010, at 2:58 PM, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft " A Profile for Algorithms > and Key Sizes for use in the Resource Public Key Infrastructure". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-algs/. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair homburg on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From bje@apnic.net Thu Nov 18 15:58:48 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 497963A68E5 for ; Thu, 18 Nov 2010 15:58:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1zF7-c5R-Thz for ; Thu, 18 Nov 2010 15:58:47 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 34CD23A6807 for ; Thu, 18 Nov 2010 15:58:47 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id A690FD59A3 for ; Fri, 19 Nov 2010 09:59:34 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: Date: Fri, 19 Nov 2010 09:59:34 +1000 Content-Transfer-Encoding: 7bit Message-Id: <88C34BE1-68B7-44E5-BF75-EB12939BF4A1@apnic.net> References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-manifests-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 23:58:48 -0000 I support this WGLC. On 18/11/2010, at 2:59 PM, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft "Manifests for the > Resource Public Key Infrastructure". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-manifests. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair beret on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From bje@apnic.net Thu Nov 18 16:01:16 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9CF043A68E5 for ; Thu, 18 Nov 2010 16:01:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ls-1wfMCHSsU for ; Thu, 18 Nov 2010 16:01:15 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 91F6E3A68B8 for ; Thu, 18 Nov 2010 16:01:15 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 10EA6D59A3 for ; Fri, 19 Nov 2010 10:02:03 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: Date: Fri, 19 Nov 2010 10:02:02 +1000 Content-Transfer-Encoding: 7bit Message-Id: <56D45841-F8A4-4363-B614-243F008F37E3@apnic.net> References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WG LC for draft-ietf-sidr-roa-validation-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 00:01:16 -0000 I support this document advancing. On 18/11/2010, at 3:01 PM, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft "Validation of Route > Origination using the Resource Certificate PKI and ROAs". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-roa-validation. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair turban on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From bje@apnic.net Thu Nov 18 16:02:26 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6E6FA3A6807 for ; Thu, 18 Nov 2010 16:02:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id twAZZKHYcW6G for ; Thu, 18 Nov 2010 16:02:25 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 625DA3A687A for ; Thu, 18 Nov 2010 16:02:25 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id C4AA4D59A3 for ; Fri, 19 Nov 2010 10:03:12 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: Date: Fri, 19 Nov 2010 10:03:12 +1000 Content-Transfer-Encoding: 7bit Message-Id: References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WG Adoption for draft-rgaglian-sidr-algorithm-agility-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 00:02:26 -0000 I support adoption of this draft. On 18/11/2010, at 2:59 PM, Sandra Murphy wrote: > > Steve Kent has requested that the working group adopt the draft > draft-rgaglian-sidr-algorithm-agility-00.txt, Algorithm Agility > Procedure for RPKI, as a work item. > > It is available at > http://tools.ietf.org/html/draft-rgaglian-sidr-algorithm-agility-00. > > Recall that active support for adoption is necessary for the wg chairs > to judge acceptance as a working group work item, so silence works > against adoption. The wg chairs also want to know who would be > willing to work on the draft. > > Please respond to the list, giving your recommendation for or against > adoption of the draft as a wg work item as well as your intention to > work on the draft if adopted. The call for adoption will end in two > weeks on Wed 1 Dec 2010 AOE. > > --Sandy, speaking with wg chair helmet on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From bje@apnic.net Thu Nov 18 16:02:43 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3C8D23A68FF for ; Thu, 18 Nov 2010 16:02:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PLK35oBBZYZh for ; Thu, 18 Nov 2010 16:02:42 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 3D0CC3A689A for ; Thu, 18 Nov 2010 16:02:42 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id A8B7BD59A3 for ; Fri, 19 Nov 2010 10:03:29 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: Date: Fri, 19 Nov 2010 10:03:29 +1000 Content-Transfer-Encoding: 7bit Message-Id: References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WG Adoption for draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 00:02:43 -0000 I support adoption of this draft. On 18/11/2010, at 3:01 PM, Sandra Murphy wrote: > > Randy Bush has requested that the working group adopt the draft > draft-ymbk-rpki-origin-ops-00, "RPKI-Based Origin Validation > Operations", as a work item. > > It is available at > http://tools.ietf.org/html/draft-ymbk-rpki-origin-ops-00. > > Recall that active support for adoption is necessary for the wg chairs > to judge acceptance as a working group work item, so silence works > against adoption. The wg chairs also want to know who would be > willing to work on the draft. > > Please respond to the list, giving your recommendation for or against > adoption of the draft as a wg work item as well as your intention to > work on the draft if adopted. The call for adoption will end in two > weeks on Wed 1 Dec 2010 AOE. > > --Sandy, speaking with wg chair wimple on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From bje@apnic.net Thu Nov 18 16:05:19 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 611DA3A687A for ; Thu, 18 Nov 2010 16:05:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ewrWeDrVE5HP for ; Thu, 18 Nov 2010 16:05:18 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 070C63A6807 for ; Thu, 18 Nov 2010 16:05:18 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 7E1E0D59AE for ; Fri, 19 Nov 2010 10:06:05 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: <4CE4E4D7.9060008@ripe.net> Date: Fri, 19 Nov 2010 10:06:04 +1000 Content-Transfer-Encoding: 7bit Message-Id: <91573A72-D4FF-4503-81EA-6474E850EDCD@apnic.net> References: <4CE4E4D7.9060008@ripe.net> To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WG LC for draft-ietf-sidr-arch-11 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 00:05:19 -0000 +1 support on this document, too. On 18/11/2010, at 6:33 PM, Tim Bruijnzeels wrote: > On 11/5/10 9:10 PM, Sandra Murphy wrote: >> The authors of draft-ietf-sidr-arch >> (http://tools.ietf.org/html/draft-ietf-sidr-arch-11) have requested a >> working group last call. >> > > support > >> The chairs ask the working group to consider this draft and decide >> whether it is worthy of publication. >> >> This draft was in last call about a year ago and some changes have been >> made in the time since. Given that the IETF is next week, the WG LC >> will end on 26 November. >> >> --Sandy, wg chair turban on >> _______________________________________________ >> sidr mailing list >> sidr@ietf.org >> https://www.ietf.org/mailman/listinfo/sidr > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr -- Byron Ellacott email: bje@apnic.net Technical Director, APNIC sip: bje@voip.apnic.net http://www.apnic.net phone: +61 7 3858 3100 ________________________________________________________________________ * Sent by email to save paper. Print only if necessary. From robertl@apnic.net Thu Nov 18 16:26:02 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 251783A68B9 for ; Thu, 18 Nov 2010 16:26:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sxkG3xZ1PA6w for ; Thu, 18 Nov 2010 16:26:01 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 7AA683A68AC for ; Thu, 18 Nov 2010 16:26:00 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:5bff:fef1:8eb9] (unknown [IPv6:2001:dc0:a000:4:21f:5bff:fef1:8eb9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id EC0F4D59AE for ; Fri, 19 Nov 2010 10:26:47 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1082) From: Robert Loomans In-Reply-To: Date: Fri, 19 Nov 2010 10:26:47 +1000 Content-Transfer-Encoding: 7bit Message-Id: <93D23A38-DDD6-48A5-BF10-DAB36D5F63CD@apnic.net> References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1082) Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-algs-04 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 00:26:02 -0000 Support. On 18/11/2010, at 14:58, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft " A Profile for Algorithms > and Key Sizes for use in the Resource Public Key Infrastructure". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-algs/. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair homburg on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr -- Robert Loomans email: robertl@apnic.net Senior Software Engineer, APNIC sip: robertl@voip.apnic.net http://www.apnic.net/ phone: +61 7 3858 3100 From robertl@apnic.net Thu Nov 18 16:26:17 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6F2233A68C5 for ; Thu, 18 Nov 2010 16:26:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1acTqkMF+lzo for ; Thu, 18 Nov 2010 16:26:16 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 0B5953A68C4 for ; Thu, 18 Nov 2010 16:26:16 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:5bff:fef1:8eb9] (unknown [IPv6:2001:dc0:a000:4:21f:5bff:fef1:8eb9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 7F275D59AE for ; Fri, 19 Nov 2010 10:27:03 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1082) From: Robert Loomans In-Reply-To: Date: Fri, 19 Nov 2010 10:27:03 +1000 Content-Transfer-Encoding: 7bit Message-Id: References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1082) Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-manifests-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 00:26:17 -0000 Support On 18/11/2010, at 14:59, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft "Manifests for the > Resource Public Key Infrastructure". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-manifests. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair beret on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr -- Robert Loomans email: robertl@apnic.net Senior Software Engineer, APNIC sip: robertl@voip.apnic.net http://www.apnic.net/ phone: +61 7 3858 3100 From robertl@apnic.net Thu Nov 18 16:26:43 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 166D73A68B9 for ; Thu, 18 Nov 2010 16:26:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U1k-+el7ZR6W for ; Thu, 18 Nov 2010 16:26:42 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id E78B33A68FF for ; Thu, 18 Nov 2010 16:26:41 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:5bff:fef1:8eb9] (unknown [IPv6:2001:dc0:a000:4:21f:5bff:fef1:8eb9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 66B29D59AE; Fri, 19 Nov 2010 10:27:29 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Robert Loomans In-Reply-To: Date: Fri, 19 Nov 2010 10:27:29 +1000 Content-Transfer-Encoding: 7bit Message-Id: <9B16AD35-26FD-49E1-A5E9-319741381103@apnic.net> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WG LC for draft-ietf-sidr-roa-validation-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 00:26:43 -0000 Support. On 18/11/2010, at 15:01, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft "Validation of Route > Origination using the Resource Certificate PKI and ROAs". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-roa-validation. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair turban on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr -- Robert Loomans email: robertl@apnic.net Senior Software Engineer, APNIC sip: robertl@voip.apnic.net http://www.apnic.net/ phone: +61 7 3858 3100 From robertl@apnic.net Thu Nov 18 16:28:14 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 247C53A68E5 for ; Thu, 18 Nov 2010 16:28:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0VPpJJ6CVL+M for ; Thu, 18 Nov 2010 16:28:13 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 12C743A687D for ; Thu, 18 Nov 2010 16:28:13 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:5bff:fef1:8eb9] (unknown [IPv6:2001:dc0:a000:4:21f:5bff:fef1:8eb9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 8B87FD59AE; Fri, 19 Nov 2010 10:29:00 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Robert Loomans In-Reply-To: Date: Fri, 19 Nov 2010 10:29:00 +1000 Content-Transfer-Encoding: 7bit Message-Id: <09E07E02-DA1B-48E6-8EAE-1F61E5E7FA8D@apnic.net> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-keyroll-04 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 00:28:14 -0000 Support. On 18/11/2010, at 14:56, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft "CA Key Rollover in the RPKI". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-keyroll. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair derby on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr -- Robert Loomans email: robertl@apnic.net Senior Software Engineer, APNIC sip: robertl@voip.apnic.net http://www.apnic.net/ phone: +61 7 3858 3100 From robertl@apnic.net Thu Nov 18 16:28:36 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EC69B3A6903 for ; Thu, 18 Nov 2010 16:28:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id spS-J1tPq0ko for ; Thu, 18 Nov 2010 16:28:36 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 981883A68C4 for ; Thu, 18 Nov 2010 16:28:35 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:5bff:fef1:8eb9] (unknown [IPv6:2001:dc0:a000:4:21f:5bff:fef1:8eb9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 0A8DDD59AE; Fri, 19 Nov 2010 10:29:23 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Robert Loomans In-Reply-To: Date: Fri, 19 Nov 2010 10:29:22 +1000 Content-Transfer-Encoding: 7bit Message-Id: References: To: Sandra Murphy X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-roa-format-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 00:28:37 -0000 Support. On 18/11/2010, at 14:55, Sandra Murphy wrote: > > Matt Lepinski has requested a WG LC for draft "A Profile for Route > Origin Authorizations (ROAs)". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-roa-format. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair bonnet on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr -- Robert Loomans email: robertl@apnic.net Senior Software Engineer, APNIC sip: robertl@voip.apnic.net http://www.apnic.net/ phone: +61 7 3858 3100 From mreynold@bbn.com Thu Nov 18 17:25:12 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 00DF13A68AC for ; Thu, 18 Nov 2010 17:25:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, STOX_REPLY_TYPE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2pDzo4UPaDSf for ; Thu, 18 Nov 2010 17:25:11 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id DF8483A63CB for ; Thu, 18 Nov 2010 17:25:10 -0800 (PST) Received: from dhcp89-081-145.bbn.com ([128.89.81.145]:2475 helo=mreynoldsxp) by smtp.bbn.com with smtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PJFjj-0008pK-4y for sidr@ietf.org; Thu, 18 Nov 2010 20:25:59 -0500 Message-ID: <6875673984F24664BF741D505C817E20@cam.bbn.com> From: "Mark Reynolds" To: References: <0B248611-04E5-4C96-B2DB-8CD93D632D29@apnic.net> Date: Thu, 18 Nov 2010 20:24:23 -0500 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5931 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5994 Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-rtr-02 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 01:25:12 -0000 The text refers to "rcynic" in two places. However, rcynic is not the only relying party software that supports the RTR protocol. Wouldn't it improve the generality of the text to say "relying party software that supports this protocol (such as rcynic)" instead of just "rcynic". > > On 18/11/2010, at 2:55 PM, Sandra Murphy wrote: > >> >> Randy Bush has requested a WG LC for draft "The RPKI/Router Protocol". >> >> The document and the draft version history are available at >> http://tools.ietf.org/wg/sidr/draft-ietf-sidr-rpki-rtr. >> >> The Last Call will end Wed, 1 Dec 2010 (AOE). >> >> As usual, please address all comments to the WG mailing list, and >> please be clear in your comments to this last call if you are >> supporting the document's submission to the IESG or if you are >> opposed. If you are opposed, please indicate why. >> >> --Sandy, speaking with wg chair cloche on >> >> _______________________________________________ >> sidr mailing list >> sidr@ietf.org >> https://www.ietf.org/mailman/listinfo/sidr > > -- > Byron Ellacott email: bje@apnic.net > Technical Director, APNIC sip: bje@voip.apnic.net > http://www.apnic.net phone: +61 7 3858 3100 > ________________________________________________________________________ > * Sent by email to save paper. Print only if necessary. > > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr > From eosterweil@verisign.com Thu Nov 18 17:33:01 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A4FCE3A68AC for ; Thu, 18 Nov 2010 17:33:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.19 X-Spam-Level: X-Spam-Status: No, score=-8.19 tagged_above=-999 required=5 tests=[AWL=2.409, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 66raez-ddGaQ for ; Thu, 18 Nov 2010 17:33:00 -0800 (PST) Received: from peregrine.verisign.com (peregrine.verisign.com [216.168.239.74]) by core3.amsl.com (Postfix) with ESMTP id 72C7E3A6767 for ; Thu, 18 Nov 2010 17:33:00 -0800 (PST) Received: from dul1wnexcn04.vcorp.ad.vrsn.com (dul1wnexcn04.vcorp.ad.vrsn.com [10.170.12.139]) by peregrine.verisign.com (8.13.6/8.13.4) with ESMTP id oAJ1W1YG016375 for ; Thu, 18 Nov 2010 20:32:02 -0500 Received: from DUL1WNEXMB11.vcorp.ad.vrsn.com ([10.170.13.11]) by dul1wnexcn04.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 18 Nov 2010 20:33:48 -0500 Received: from 10.100.0.37 ([10.100.0.37]) by DUL1WNEXMB11.vcorp.ad.vrsn.com ([10.170.13.11]) with Microsoft Exchange Server HTTP-DAV ; Fri, 19 Nov 2010 01:33:48 +0000 User-Agent: Microsoft-Entourage/12.27.0.100910 Date: Thu, 18 Nov 2010 17:33:47 -0800 From: "Osterweil, Eric" To: SIDR Message-ID: Thread-Topic: [sidr] WGLC for draft-ietf-sidr-keyroll-04 Thread-Index: AcuG3PeaVQ5bcKniSmy/34zGvfUPTgArNfJv In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-transfer-encoding: 7bit X-OriginalArrivalTime: 19 Nov 2010 01:33:48.0885 (UTC) FILETIME=[D0853050:01CB8789] Subject: Re: [sidr] WGLC for draft-ietf-sidr-keyroll-04 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 01:33:01 -0000 Hello everyone, I have reviewed this draft and I have several questions and comments. As a relative newcomer to this list, I have not at all ruled out the possibility that some comments and questions below are the result of my own naivety. However, I have done the obvious background reading to try and minimize the incidence of this. :-P As a reader, Section 2 para 4 kind of confuses me. There is a vague discussion of "a period of time" and "'staging period,'" but neither is explained until much later in the draft. My suggestion is to be more explicit about _why_ the draft has the need for this waiting period. From reading the entire draft, it later seems that this is to ensure that the new CA is propagated widely enough before going live? Could the draft just say something along those lines? Later in the Section there is a 6-step rollover process: - In step 2 I am a little worried about the notion that no rollover is possible until the issuer has issued a request and received a responded with new certificate. I can clearly see how clean this model is, but practically speaking, doesn't that mean that an authority cannot take action in response to an event (such as a key compromise) until someone else's operational cycles are met? - Related to this, I am also a little confused about the "CPS." I'm wondering how realistic it is for someone to predict their turnaround time on something like this. What if the prediction is very off (sometimes, occasionally, etc)? To be clear, my trepidation on this doesn't come from ambiguity of the concept (it does seem quite clean), but from some observations of complications in the DNSSEC rollout. When implementing some simple ideas, things have sometimes become very complicated. :) - Also in step 2 I don't understand why the issues must select a distinct subject name? Also, is there an expectation that this is globally distinct? - In step 3, the second bullet includes the statement "As quickly as possible..." I think it might be more instructive to explain some tradeoffs of various timing decisions? As a reader, I don't clearly understand why this should be done quickly, or what the draft considers "quickly." Would it be possible to explain why delaying causes trouble, and at what point delaying causes that trouble, etc? - Also in step 3, I believe the third bullet explains that the new CA needs to create a temporary EE cert solely to seed the new CA's manifest, and then below the private portion of that EE's key [must|should|may] be destroyed. I don't think I understand why so many moving parts exist here. Is this because the manifest cannot begin by being empty? If so, why not, and why not define something that can securely illustrate an empty manifest? I can clearly see how this is intended to work, but not why it needs so many moving parts. In its current form, it seems like there is a fair amount of room for operational mistakes to wreak some havoc? For example, what if the private portion of the EE key is compromised? Is this a problem? - In step 4, the text says "all RPs." Does this mean all RPs in the Internet, or some other subset, and if the former what order of magnitude are people envisioning for the number of global RPs? - Also in step 4, I was wondering what happens if the load of keeping the current CA and the new CA up to date causes them to fall behind? I think that (assuming the current and new CAs are on the same directory repo) the text essentially requires the directory repo to do double duty (i.e. double its load) during a rollover. What if it cannot keep up, it will be in a rollover state forever, right? - A somewhat related concern in step 4, I think revocation gets kind of hairy too: if a cert is issued during a rollover, and then revoked before the rollover finishes, I don't think the text explains how this should be represented in the new CA. The text says new certs should go in the new CA, but it also says no revocations should go in the new CA's CRL. The staging period exists so that RPs can be learning of the new CA, right? So they would see the new cert, but no revocation? Finally, the end of Section 5 really got my attention with the text, " When a CA rekeys, it changes many signed objects, thus impacting all RPs." This statement makes me wonder how large an effect any given CA can have on global stability. Could this be a [D]DoS vector? I think some clarification on how to determine the impact a single party can have on the rest of the RPs would be very useful here? I hope some of this made sense, :) Eric On 11/17/10 8:56 PM, "Sandra Murphy" wrote: > > > Geoff Huston has requested a WG LC for draft "CA Key Rollover in the > RPKI". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-keyroll. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair derby on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr > From bje@apnic.net Thu Nov 18 20:12:51 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6B1713A67B5 for ; Thu, 18 Nov 2010 20:12:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FogxjSpALR05 for ; Thu, 18 Nov 2010 20:12:50 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 5B6D53A635F for ; Thu, 18 Nov 2010 20:12:47 -0800 (PST) Received: from [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6] (unknown [IPv6:2001:dc0:a000:4:21f:f3ff:fe8b:8df6]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id B048BD59BA for ; Fri, 19 Nov 2010 14:13:34 +1000 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Byron Ellacott In-Reply-To: <47C8DA8E-4003-4109-9975-BA8EC8674026@apnic.net> Date: Fri, 19 Nov 2010 14:13:33 +1000 Content-Transfer-Encoding: quoted-printable Message-Id: <33325E75-8AB0-4A69-B5EB-4943FB63C5C1@apnic.net> References: <47C8DA8E-4003-4109-9975-BA8EC8674026@apnic.net> To: sidr@ietf.org X-Mailer: Apple Mail (2.1081) Subject: Re: [sidr] WG LC for draft-ietf-sidr-ta-05 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 04:12:51 -0000 Oops, missed one, I also support this WG LC. Thanks, Byron > From: Sandra Murphy > Date: 5 November 2010 9:15:45 PM GMT+01:00 > To: sidr@ietf.org > Subject: [sidr] WG LC for draft-ietf-sidr-ta-05 >=20 > On 14 September, Chris Morrow, with wg fedora on, said of = draft-ietf-sidr-ta-04: >=20 >> Unless there are complaints about this, please get a last rev in >> before Bejing so it can start LC just before the meeting. >=20 > The authors have submitted a new version = (http://tools.ietf.org/html/draft-ietf-sidr-ta-05) and have requested a = working group last call. >=20 > The chairs ask the working group to consider this draft and decide = whether it is worthy of publication. >=20 > Given that next week is IETF week, the last call will end 26 November. >=20 > --Sandy, wg chair skullcap on > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From gih@apnic.net Thu Nov 18 21:21:00 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 542033A6887 for ; Thu, 18 Nov 2010 21:21:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.437 X-Spam-Level: X-Spam-Status: No, score=-100.437 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xPHfZ+1EeWPo for ; Thu, 18 Nov 2010 21:20:59 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 3AE6C28C0E6 for ; Thu, 18 Nov 2010 21:20:56 -0800 (PST) Received: from matrix-db.apnic.net (unknown [202.12.29.117]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 32AC3D59C5; Fri, 19 Nov 2010 15:21:42 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Fri, 19 Nov 2010 15:51:48 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: <079C87E6-9093-4808-96FD-D41EB1AA3519@apnic.net> References: To: "Osterweil, Eric" X-Mailer: Apple Mail (2.1082) Cc: SIDR Subject: Re: [sidr] WGLC for draft-ietf-sidr-keyroll-04 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 05:21:00 -0000 Thank you for these review comments. On 19/11/2010, at 12:33 PM, Osterweil, Eric wrote: > Hello everyone, >=20 > I have reviewed this draft and I have several questions and comments. = As a > relative newcomer to this list, I have not at all ruled out the = possibility > that some comments and questions below are the result of my own = naivety. > However, I have done the obvious background reading to try and = minimize the > incidence of this. :-P >=20 > As a reader, Section 2 para 4 kind of confuses me. There is a vague > discussion of "a period of time" and "'staging period,'" but neither = is > explained until much later in the draft. My suggestion is to be more > explicit about _why_ the draft has the need for this waiting period. = From > reading the entire draft, it later seems that this is to ensure that = the new > CA is propagated widely enough before going live? Could the draft = just say > something along those lines? The draft adopts what I consider to be a conventional approach of = describing the algorithm in terms of an overall summary, then describes = the algorithm in detail. Given that its a technical document describing a complex process I am = not sure that the document necessarily could be understood in a single = reading. Doubtless an implementor would read though it multiple times in = order to ensure that they fully understand the implications of this = process for relying parties as well as for CAs. In terms of explaining motivation for the procedure and the overall = interaction of the parties here, this task has been undertaken by the = sidr architecture document, and this document defers to the architecture = for the detail on _why_ specific actions are required, as key roll = itself is not a process that exist in isolation from the other = components of the RPKI. >=20 > Later in the Section there is a 6-step rollover process: > - In step 2 I am a little worried about the notion that no rollover is > possible until the issuer has issued a request and received a = responded with > new certificate. I can clearly see how clean this model is, but = practically > speaking, doesn't that mean that an authority cannot take action in = response > to an event (such as a key compromise) until someone else's = operational > cycles are met? Perhaps a thorough read of the architecture document, and the CP = document would answer. Given that the subject is requesting an issuer to = mint a new certificate, then the conventional process in PKIs is for the = subject to request a certificate and await the outcome of the issuer's = operational cycles that result in the certificate being issued. Indeed = its somewhat difficult to understand what an alternate process may look = like. On the other hand it is also noted that the staging period is a minimum = of 24 hours, but no maximum is stated. If a CA wishes to use a procedure = of preparing a new CA certificate well in advance and holding it ready = in preparation for a rollover, then the CA entity can perform an = emergency key rollover that relates to the issuance and publication of = subordinate products with the NEW CA key within timing constraints that = are completely under the CA entity's control. However, such operational practices are up to the CA concerned. This = document describes in normative language that part of the algorithm that = is the essential component that is requires for safe interoperation in = the context of the RPKI. > - Related to this, I am also a little confused about the "CPS." I'm > wondering how realistic it is for someone to predict their turnaround = time > on something like this. What if the prediction is very off = (sometimes, > occasionally, etc)? To be clear, my trepidation on this doesn't come = from > ambiguity of the concept (it does seem quite clean), but from some > observations of complications in the DNSSEC rollout. When = implementing some > simple ideas, things have sometimes become very complicated. :) I am unsure what text, if any you are proposing here. The document is = clear that the CA MUST perform the steps steps in the order given, and, = unless specified otherwise, each step SHOULD be performed without any = intervening delay, and that the process MUST be run through to = completion. The staging period is specified as: This duration of the Staging Period = is determined by the CA, but it MUST be no less than 24 hours. The = Staging Period is intended to afford an opportunity for all RPs to = download the NEW CA certificate, prior to publication of certificates. I'm unsure where the process complication arises in this description of = time elements. > - Also in step 2 I don't understand why the issues must select a = distinct > subject name? Also, is there an expectation that this is globally = distinct? There was an extended discussion on the uniqueness of subject names on = this mailing list. I refer you to the list's archives, and will not = attempt to reproduce this conversation here. This discussion also included consideration of the scope of uniqueness = of names, and again I refer you to the mailing list archive. The topic = of subject name uniqueness is also considered in the res-cert draft, = both in the specification section and in the security considerations = section. > - In step 3, the second bullet includes the statement "As quickly as > possible..." I think it might be more instructive to explain some = tradeoffs > of various timing decisions? As a reader, I don't clearly understand = why > this should be done quickly, or what the draft considers "quickly." = Would > it be possible to explain why delaying causes trouble, and at what = point > delaying causes that trouble, etc? Again there is a certain amount of interlocking of documents here, and = the motivation for this is contained in the manifest draft. This = document is part of a set of documents that the WG chose to split into = distinct parts. If you are saying that choice was inappropriate then you = should review the WG archives and make your case, but given that we have = a number of documents that each describe a particular part of the = overall RPKI function, then each document does not attempt to reproduce = the rationale and material contained in the others. The document is = saying that there are a number of distinct actions that should occur = "together". Neither the world, nor the RPKI, will break if this does not = happen, but RPs will encounter inconsistencies in the distributed = repository state. Such inconsistencies should be avoided, and the = optimal way that they can be avoided is by synchronising these distinct = actions as much as possible. But if they do appear, even in a transient = manner, then nothing fatal ensures - its just more work on the part of = the RP to resolve them. > - Also in step 3, I believe the third bullet explains that the new CA = needs > to create a temporary EE cert solely to seed the new CA's manifest, = and then > below the private portion of that EE's key [must|should|may] be = destroyed. > I don't think I understand why so many moving parts exist here. Is = this > because the manifest cannot begin by being empty? It is not empty: there is a CRL. > If so, why not, and why > not define something that can securely illustrate an empty manifest? But there is a CRL. It is not empty. > I can > clearly see how this is intended to work, but not why it needs so many > moving parts. For motivation and rational for this procedure you are referred to the = arch and cp drafts. This document does not replicate the material = contained there. > In its current form, it seems like there is a fair amount of > room for operational mistakes to wreak some havoc? Perhaps you should send proposed procedure and text that addresses your = concerns. In and of itself this is not a comment that has a tangible = response in terms of revising the document to address specific concerns. > For example, what if the > private portion of the EE key is compromised? Is this a problem? Key compromise of an active key is always a problem. I'm not sure that = there is any other response, but at the same time I'm not sure how, in a = public/private keyed system, how the compromise of private keys could be = anything but a problem. > - In step 4, the text says "all RPs." Does this mean all RPs in the > Internet, or some other subset, and if the former what order of = magnitude > are people envisioning for the number of global RPs? Please see the architecture draft. > - Also in step 4, I was wondering what happens if the load of keeping = the > current CA and the new CA up to date causes them to fall behind? I = think > that (assuming the current and new CAs are on the same directory repo) = the > text essentially requires the directory repo to do double duty (i.e. = double > its load) during a rollover. What if it cannot keep up, it will be in = a > rollover state forever, right? The draft states: "during the Staging Period, the NEW CA SHOULD = re-issue, **but not publish**, all of the products that were issued = under the CURRENT CA" There is no "double duty" in the repository = publication function at this point. > - A somewhat related concern in step 4, I think revocation gets kind = of > hairy too: if a cert is issued during a rollover, and then revoked = before > the rollover finishes, I don't think the text explains how this should = be > represented in the new CA. The text says new certs should go in the = new CA, > but it also says no revocations should go in the new CA's CRL. The = staging > period exists so that RPs can be learning of the new CA, right? So = they > would see the new cert, but no revocation? "during the Staging Period, the NEW CA SHOULD re-issue, **but not = publish**, all of the products that were issued under the CURRENT CA" given that no subordinate products of the NEW CA are being published at = this point, the intent of the staging period ti to allow RPs to pick up = the NEW CA cert itself, and the associated manifest and CRL. Nothing = more. >=20 > Finally, the end of Section 5 really got my attention with the text, " = When > a CA rekeys, it changes many signed objects, thus impacting all RPs." = This > statement makes me wonder how large an effect any given CA can have on > global stability. Could this be a [D]DoS vector? I think some > clarification on how to determine the impact a single party can have = on the > rest of the RPs would be very useful here? >=20 This is a fine research question, and I for one would encourage you to = perform that research, but in terms of the draft describing the key = rollover procedure, if you have alternative suggestions here please = propose them. At such the comment above is not a comment that leads to = any particular proposed revision of the text. At this point I do not believe that you have proposed any revised text = for the document. Unless you are in a position to be more specific about = what textual changes you are proposing here, there is not much more I = can do here as the document's editor. Geoff From kent@bbn.com Fri Nov 19 00:32:42 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0873A28C0F4 for ; Fri, 19 Nov 2010 00:32:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.046 X-Spam-Level: X-Spam-Status: No, score=-102.046 tagged_above=-999 required=5 tests=[AWL=-0.047, BAYES_00=-2.599, J_CHICKENPOX_15=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sedUn1lwMULm for ; Fri, 19 Nov 2010 00:32:41 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id 5BE0B28C0CF for ; Fri, 19 Nov 2010 00:32:41 -0800 (PST) Received: from dommiel.bbn.com ([192.1.122.15]:58158 helo=[193.0.26.46]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PJMPS-000DXa-5Q; Fri, 19 Nov 2010 03:33:30 -0500 Mime-Version: 1.0 Message-Id: In-Reply-To: <000201cb8748$7f6c7340$4001a8c0@gateway.2wire.net> References: <003201c9512c$9bb96840$0601a8c0@allison> <000201cb8748$7f6c7340$4001a8c0@gateway.2wire.net> Date: Fri, 19 Nov 2010 03:33:17 -0500 To: "t.petch" From: Stephen Kent Content-Type: text/plain; charset="us-ascii" ; format="flowed" Cc: sidr@ietf.org Subject: Re: [sidr] WG Last Call on -arch was Re: One and only one RPKI X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 08:32:42 -0000 At 5:49 PM +0100 11/18/10, t.petch wrote: >Back in 2008, you explained to me what an RPKI was and implied that the words >you used here, or something like them, would go in the arch document. Your >first two paragraphs would seem appropriate but I don't see them:-( > >The start of 2.1 would seem a suitable place. > >I note too that RPKI is never expanded, on first or subsequent use (or should >that be rPKI?). > >Tom Petch Tom, We sort of expand the acronym in the doc title "Certificate Policy (CP) for the Resource PKI (RPKI)" and we expand PKI in the abstract and the intro. But, we have not expanded RPKI in the intro, so we should make this minor edit. and no, it's not rPKI :-). Steve From aservin@lacnic.net Fri Nov 19 03:48:46 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 915143A68E2 for ; Fri, 19 Nov 2010 03:48:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.127 X-Spam-Level: X-Spam-Status: No, score=-1.127 tagged_above=-999 required=5 tests=[AWL=-0.079, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HqksAAauA9eJ for ; Fri, 19 Nov 2010 03:48:45 -0800 (PST) Received: from mail.lacnic.net.uy (mail.lacnic.net.uy [IPv6:2001:13c7:7001:4000::3]) by core3.amsl.com (Postfix) with ESMTP id 629593A68A7 for ; Fri, 19 Nov 2010 03:48:45 -0800 (PST) Received: from 85-7-200.lacnic.net.uy (unknown [200.7.85.188]) by mail.lacnic.net.uy (Postfix) with ESMTP id 787683084FD for ; Fri, 19 Nov 2010 09:49:22 -0200 (UYST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1082) From: Arturo Servin In-Reply-To: Date: Fri, 19 Nov 2010 09:49:21 -0200 Content-Transfer-Encoding: 7bit Message-Id: <88D8604D-18B1-417D-87EC-6BA0AF9BE946@lacnic.net> References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1082) X-LACNIC.uy-MailScanner-Information: Please contact the ISP for more information X-LACNIC.uy-MailScanner: Found to be clean X-LACNIC.uy-MailScanner-SpamCheck: X-LACNIC.uy-MailScanner-From: aservin@lacnic.net Subject: Re: [sidr] WGLC for draft-ietf-sidr-res-certs-20 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 11:48:46 -0000 +1 On 18 Nov 2010, at 02:56, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft "A Profile for X.509 PKIX > Resource Certificates". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-res-certs. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair boater on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From aservin@lacnic.net Fri Nov 19 03:50:13 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C724B3A68A7 for ; Fri, 19 Nov 2010 03:50:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.116 X-Spam-Level: X-Spam-Status: No, score=-1.116 tagged_above=-999 required=5 tests=[AWL=-0.068, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y+tv6D9N-Jw0 for ; Fri, 19 Nov 2010 03:50:13 -0800 (PST) Received: from mail.lacnic.net.uy (mail.lacnic.net.uy [IPv6:2001:13c7:7001:4000::3]) by core3.amsl.com (Postfix) with ESMTP id D55393A6822 for ; Fri, 19 Nov 2010 03:50:12 -0800 (PST) Received: from 85-7-200.lacnic.net.uy (unknown [200.7.85.188]) by mail.lacnic.net.uy (Postfix) with ESMTP id 6A4743084FD for ; Fri, 19 Nov 2010 09:51:01 -0200 (UYST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1082) From: Arturo Servin In-Reply-To: Date: Fri, 19 Nov 2010 09:51:00 -0200 Content-Transfer-Encoding: 7bit Message-Id: <095E6440-D38B-48FC-9FAC-21DC54B1861F@lacnic.net> References: To: sidr@ietf.org X-Mailer: Apple Mail (2.1082) X-LACNIC.uy-MailScanner-Information: Please contact the ISP for more information X-LACNIC.uy-MailScanner: Found to be clean X-LACNIC.uy-MailScanner-SpamCheck: X-LACNIC.uy-MailScanner-From: aservin@lacnic.net Subject: Re: [sidr] WG LC for draft-ietf-sidr-roa-validation-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 11:50:13 -0000 +1 On 18 Nov 2010, at 03:01, Sandra Murphy wrote: > > Geoff Huston has requested a WG LC for draft "Validation of Route > Origination using the Resource Certificate PKI and ROAs". > > The document and the draft version history are available at > http://tools.ietf.org/wg/sidr/draft-ietf-sidr-roa-validation. > > The Last Call will end Wed, 1 Dec 2010 (AOE). > > As usual, please address all comments to the WG mailing list, and > please be clear in your comments to this last call if you are > supporting the document's submission to the IESG or if you are > opposed. If you are opposed, please indicate why. > > --Sandy, speaking with wg chair turban on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From kent@bbn.com Fri Nov 19 04:20:39 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6F99028B56A for ; Fri, 19 Nov 2010 04:20:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.343 X-Spam-Level: X-Spam-Status: No, score=-102.343 tagged_above=-999 required=5 tests=[AWL=0.256, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mDqUhJlvJwzv for ; Fri, 19 Nov 2010 04:20:38 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by core3.amsl.com (Postfix) with ESMTP id 7382D3A6824 for ; Fri, 19 Nov 2010 04:20:38 -0800 (PST) Received: from dommiel.bbn.com ([192.1.122.15]:38465 helo=[193.0.26.46]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PJPy3-000GCX-GR for sidr@ietf.org; Fri, 19 Nov 2010 07:21:27 -0500 Mime-Version: 1.0 Message-Id: Date: Fri, 19 Nov 2010 07:21:23 -0500 To: sidr@ietf.org From: Stephen Kent Content-Type: text/plain; charset="us-ascii" ; format="flowed" Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-rtr-02 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 12:20:39 -0000 I had not noticed the issue mark mentioned. I object to citing rcynic as part of this standard. WEe have agreed on rsync as a protocol for synchronization of local RP caches and repositories, but rcynic is a specific RP implementation and we have not adopted any RP implementation as a standard. Thus it seems inappropriate to cite it here (except maybe as an example). Steve From Internet-Drafts@ietf.org Fri Nov 19 05:45:05 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0B00828C0FC; Fri, 19 Nov 2010 05:45:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.382 X-Spam-Level: X-Spam-Status: No, score=-102.382 tagged_above=-999 required=5 tests=[AWL=0.217, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WqvImy2KCVLr; Fri, 19 Nov 2010 05:45:02 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E6F5228C0DC; Fri, 19 Nov 2010 05:45:01 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 3.09 Message-ID: <20101119134501.26591.67968.idtracker@localhost> Date: Fri, 19 Nov 2010 05:45:01 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-rpki-rtr-03.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 13:45:05 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : The RPKI/Router Protocol Author(s) : R. Bush, R. Austein Filename : draft-ietf-sidr-rpki-rtr-03.txt Pages : 20 Date : 2010-11-19 In order to formally validate the origin ASes of BGP announcements, routers need a simple but reliable mechanism to receive RPKI [I-D.ietf-sidr-arch] or analogous prefix origin data from a trusted cache. This document describes a protocol to deliver validated prefix origin data to routers over ssh. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-rpki-rtr-03.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-rpki-rtr-03.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-19053341.I-D@ietf.org> --NextPart-- From warren@kumari.net Sat Nov 20 18:22:06 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 05E7D3A6A2B for ; Sat, 20 Nov 2010 18:22:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.487 X-Spam-Level: X-Spam-Status: No, score=-102.487 tagged_above=-999 required=5 tests=[AWL=0.113, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 37Qe4hXRNbHQ for ; Sat, 20 Nov 2010 18:22:05 -0800 (PST) Received: from smtp.kumari.net (smtp.kumari.net [216.177.58.220]) by core3.amsl.com (Postfix) with ESMTP id 231793A6A2A for ; Sat, 20 Nov 2010 18:22:05 -0800 (PST) Received: from [192.168.0.221] (unknown [64.13.52.115]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.kumari.net (Postfix) with ESMTPSA id D0EB12284A6A; Sat, 20 Nov 2010 21:20:38 -0500 (EST) Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Warren Kumari In-Reply-To: Date: Sat, 20 Nov 2010 21:25:52 -0500 Content-Transfer-Encoding: 7bit Message-Id: References: To: Sandra Murphy X-Mailer: Apple Mail (2.1081) Cc: sidr@ietf.org Subject: Re: [sidr] WG Adoption for draft-ymbk-rpki-origin-ops-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Nov 2010 02:22:06 -0000 Support. W On Nov 18, 2010, at 12:01 AM, Sandra Murphy wrote: > > Randy Bush has requested that the working group adopt the draft > draft-ymbk-rpki-origin-ops-00, "RPKI-Based Origin Validation > Operations", as a work item. > > It is available at > http://tools.ietf.org/html/draft-ymbk-rpki-origin-ops-00. > > Recall that active support for adoption is necessary for the wg chairs > to judge acceptance as a working group work item, so silence works > against adoption. The wg chairs also want to know who would be > willing to work on the draft. > > Please respond to the list, giving your recommendation for or against > adoption of the draft as a wg work item as well as your intention to > work on the draft if adopted. The call for adoption will end in two > weeks on Wed 1 Dec 2010 AOE. > > --Sandy, speaking with wg chair wimple on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From warren@kumari.net Sat Nov 20 18:22:37 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1A87828C12C for ; Sat, 20 Nov 2010 18:22:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.509 X-Spam-Level: X-Spam-Status: No, score=-102.509 tagged_above=-999 required=5 tests=[AWL=0.090, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XsKdcTYTESwn for ; Sat, 20 Nov 2010 18:22:36 -0800 (PST) Received: from smtp.kumari.net (smtp.kumari.net [216.177.58.220]) by core3.amsl.com (Postfix) with ESMTP id 6AFC728C127 for ; Sat, 20 Nov 2010 18:22:36 -0800 (PST) Received: from [192.168.0.221] (unknown [64.13.52.115]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.kumari.net (Postfix) with ESMTPSA id 112192284A6A; Sat, 20 Nov 2010 21:21:10 -0500 (EST) Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Warren Kumari In-Reply-To: Date: Sat, 20 Nov 2010 21:26:25 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <121A8BD0-BE5A-4113-8D6C-9033EAA9D883@kumari.net> References: To: Sandra Murphy X-Mailer: Apple Mail (2.1081) Cc: sidr@ietf.org Subject: Re: [sidr] WG LC for draft-ietf-sidr-arch-11 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Nov 2010 02:22:37 -0000 Support. W On Nov 5, 2010, at 4:10 PM, Sandra Murphy wrote: > The authors of draft-ietf-sidr-arch = (http://tools.ietf.org/html/draft-ietf-sidr-arch-11) have requested a = working group last call. >=20 > The chairs ask the working group to consider this draft and decide = whether it is worthy of publication. >=20 > This draft was in last call about a year ago and some changes have = been made in the time since. Given that the IETF is next week, the WG = LC will end on 26 November. >=20 > --Sandy, wg chair turban on > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From prvs=0941da9f82=larsm@secdatacom.dk Sun Nov 21 10:18:39 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5CF593A6A44 for ; Sun, 21 Nov 2010 10:18:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.31 X-Spam-Level: * X-Spam-Status: No, score=1.31 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HELO_EQ_DK=1.009, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AFLbvy5TYhWJ for ; Sun, 21 Nov 2010 10:18:38 -0800 (PST) Received: from mail.secdatacom.dk (mail.secdatacom.dk [193.89.97.2]) by core3.amsl.com (Postfix) with ESMTP id 42B7A3A69FB for ; Sun, 21 Nov 2010 10:18:38 -0800 (PST) From: =?utf-8?B?TGFycyBNw7hsbGVyIE5pZWxzZW4=?= To: "sidr@ietf.org" Date: Sun, 21 Nov 2010 19:18:56 +0100 Thread-Topic: Vth Thread-Index: AcuJqKKnhsbLNoKpQLaRc9hnIIXlnQ== Message-ID: <05CDB52B-691F-4A45-97ED-98A96EFD2007@secdatacom.dk> Accept-Language: da-DK, en-US Content-Language: da-DK X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: da-DK, en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Subject: [sidr] Vth X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Nov 2010 18:18:39 -0000 DQoNCiANCiANCkxhcnMgTS4gTmllbHNlbiANClN5c3RlbSBFbmdpbmVlcg0KSnVuaXBlciBKTkNJ RS1NIC8gRXh0cmVtZSBFTlMNCg0KDQpTRUMgRGF0YUNvbSBBL1MgfCBHeWRldmFuZyAxNy0xOSB8 IERLIC0gMzQ1MCBBbGxlcsO4ZCANClRlbCArNDUgNDgxMCA4MDAwIHwgd3d3LnNlY2RhdGFjb20u ZGsNCkRpciArNDUgNDgxMCA4MDY2IHwgTW9iaWwgKzQ1IDI5NjEgNjIwNCB8IExhcnNtQHNlY2Rh dGFjb20uZGs= From mreynold@bbn.com Sun Nov 21 12:05:27 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D60F13A69F3 for ; Sun, 21 Nov 2010 12:05:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.391 X-Spam-Level: X-Spam-Status: No, score=-1.391 tagged_above=-999 required=5 tests=[AWL=-1.207, BAYES_40=-0.185, STOX_REPLY_TYPE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gf-1SuHvhJWu for ; Sun, 21 Nov 2010 12:05:27 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by core3.amsl.com (Postfix) with ESMTP id E16C63A690F for ; Sun, 21 Nov 2010 12:05:26 -0800 (PST) Received: from dhcp89-081-145.bbn.com ([128.89.81.145]:1149 helo=mreynoldsxp) by smtp.bbn.com with smtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PKGB0-000J3p-Cl; Sun, 21 Nov 2010 15:06:18 -0500 Message-ID: <7E79588D4C2B4CF9A6AAE04269D178E5@cam.bbn.com> From: "Mark Reynolds" To: "Randy Bush" , "Andrew Chi" References: <4CDAC19A.1060208@bbn.com><4CDBC712.3080107@bbn.com><4CE15905.8050808@bbn.com> Date: Sun, 21 Nov 2010 15:04:05 -0500 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5931 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5994 Cc: sidr wg Subject: Re: [sidr] BBN's trust anchor X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Nov 2010 20:05:28 -0000 Let me provide a brief clarification on terminology. BBN's RP software uses a database to maintain state. At the top level, there are only two types of database events: initialization and update. Initialization is perform when one first starts using the software, and then once every few years after that. Update is performed whenever the operator wants a state update. Initialization takes hours; update takes < 15 minutes. Details. Assume a total set of 300,000 digital objects. To populate an empty database, assuming some nominal network bandwidth model, with the set of definitely valid or possibly-might-become-valid-in-the-future objects, takes ~ 10 hours. Assuming the operator has a backup of the DB, the only reason to re-init the database is to clean out unreachable objects. Of course the DB already handles expiration and revocation, but it does not do classic garbage collection where unreachable objects are removed. Therefore, after a few years the operator might chose to re-init. The re-init operation can be done to an offline DB, so that the current DB is not down for the entire re-init period, only for a few seconds at the end, where the pointer to the "current" DB is switched. For update, we assume a 5% turnover rate per day. That is, rsync changes the contents of the local filesystem at a rate of 5% per day. In this model, an update takes < 15 minutes. Therefore, the operator can update the DB as often as once every hour. Of course, as network transfer time goes up, performance goes down as well, but this applies to any RP implementation, not just BBN's. In our Jan 1 release, we will provide parallelized rsync's, so one slow link won't impact the entire update process. Hope this helps, Mark Reynolds ----- Original Message ----- From: "Randy Bush" To: "Andrew Chi" Cc: "sidr wg" Sent: Monday, November 15, 2010 11:12 AM Subject: Re: [sidr] BBN's trust anchor >> 1) The "startup" cost of downloading and processing all RPKI data needs >> to be on the order of hours and not days. > > no, it has to be minutes not hours > From kseo@bbn.com Mon Nov 22 07:00:50 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C1C6D3A6A97 for ; Mon, 22 Nov 2010 07:00:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.289 X-Spam-Level: X-Spam-Status: No, score=-2.289 tagged_above=-999 required=5 tests=[AWL=0.310, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qLoRQj+cYgz1 for ; Mon, 22 Nov 2010 07:00:50 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by core3.amsl.com (Postfix) with ESMTP id 02BDB3A691A for ; Mon, 22 Nov 2010 07:00:50 -0800 (PST) Received: from dhcp89-089-089.bbn.com ([128.89.89.89]:49340 helo=[192.168.1.151]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PKXtp-0001GI-F2; Mon, 22 Nov 2010 10:01:45 -0500 Mime-Version: 1.0 Message-Id: In-Reply-To: References: Date: Mon, 22 Nov 2010 10:01:42 -0500 To: sidr@ietf.org From: Karen Seo Content-Type: text/plain; charset="us-ascii" ; format="flowed" Cc: dmontana@bbn.com Subject: Re: [sidr] WGLC for draft-ietf-sidr-rpki-rtr-02 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Nov 2010 15:00:50 -0000 In implementing this protocol, we had to add a third error code to the implementation: Invalid Request. The server needs to be able to say something back when the client sends it a badly formed request. We realize that the spec does say that the authors expect the addition of new error codes later, but we may as well add this code now rather than later. Thank you, Karen From Internet-Drafts@ietf.org Mon Nov 22 14:00:02 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 697DB28C0E5; Mon, 22 Nov 2010 14:00:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.462 X-Spam-Level: X-Spam-Status: No, score=-102.462 tagged_above=-999 required=5 tests=[AWL=0.137, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fz4xSmuBZgOI; Mon, 22 Nov 2010 14:00:01 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BCA8028C0E3; Mon, 22 Nov 2010 14:00:01 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 3.09 Message-ID: <20101122220001.27287.89823.idtracker@localhost> Date: Mon, 22 Nov 2010 14:00:01 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-rpki-rtr-04.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Nov 2010 22:00:02 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : The RPKI/Router Protocol Author(s) : R. Bush, R. Austein Filename : draft-ietf-sidr-rpki-rtr-04.txt Pages : 20 Date : 2010-11-22 In order to formally validate the origin ASes of BGP announcements, routers need a simple but reliable mechanism to receive RPKI [I-D.ietf-sidr-arch] or analogous prefix origin data from a trusted cache. This document describes a protocol to deliver validated prefix origin data to routers over ssh. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-rpki-rtr-04.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-rpki-rtr-04.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-22135633.I-D@ietf.org> --NextPart-- From kotikalapudi.sriram@nist.gov Mon Nov 22 15:58:50 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2CCBF28C155 for ; Mon, 22 Nov 2010 15:58:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UrSU5aNtQ1LC for ; Mon, 22 Nov 2010 15:58:49 -0800 (PST) Received: from smtp.nist.gov (rimp2.nist.gov [129.6.16.227]) by core3.amsl.com (Postfix) with ESMTP id 3A5283A68F9 for ; Mon, 22 Nov 2010 15:58:48 -0800 (PST) Received: from WSXGHUB2.xchange.nist.gov (wsxghub2.nist.gov [129.6.18.19]) by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id oAMNxi4s023288; Mon, 22 Nov 2010 18:59:44 -0500 Received: from MBCLUSTER.xchange.nist.gov ([fe80::41df:f63f:c718:e08]) by WSXGHUB2.xchange.nist.gov ([129.6.18.19]) with mapi; Mon, 22 Nov 2010 18:59:09 -0500 From: "Sriram, Kotikalapudi" To: Geoff Huston Date: Mon, 22 Nov 2010 18:59:23 -0500 Thread-Topic: [sidr] WG Last Call Request for draft-ietf-sidr-roa-validation-10 Thread-Index: AcuGDD56/mel3PU8SYqI/FQ4ZNwGugEiJ5PQ Message-ID: References: <20101111020725.D08B63A68C8@core3.amsl.com> <72030833-DB5D-48F6-A9AA-C0A579646727@apnic.net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 X-NIST-MailScanner: Found to be clean X-NIST-MailScanner-From: kotikalapudi.sriram@nist.gov Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG Last Call Request for draft-ietf-sidr-roa-validation-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Nov 2010 23:58:50 -0000 I would support the LC on draft-ietf-sidr-roa-validation-10 if it had informational status, i.e., be advanced for publication as an Informational RFC. I would take the same position on draft-ietf-sidr-pfx-validate-00 after it is revised further to reflect recent new comments on the list. (I do have another concern that the two documents overlap substantially in core content even though they present it differently, but that is a different issue.) My reasons for supporting the documents as Informational RFCs (as opposed to Normative RFCs): These documents offer algorithms that are meant to be used internally in routers, the outcome of which are used for local decision within an AS to assist path selection, and the origin validation outcomes are not communicated to other ASes in eBGP. ISPs together with their vendors may use ROA information in path selection with modified or other enhanced algorithms for origin validation as they find suitable. So the relying parties (RPs) may use these documents as guides but may not like to be bound to them as a normative IETF standard or RFC. One may argue that we need to have agreed upon semantics about how ROAs will be interpreted in origin validation. In final full deployment state, the validation states are Valid or Invalid; those two validation states are unambiguously agreed upon interpretations (in the full deployment state). But during partial deployment, there is ambiguity anyway. Some routers will accept "Unknown"; some may not. Some routers may accept "Invalid" if there is no other update with higher validation state; some may reject them outright, and so on. Some RPs may like to treat prefix-length violations less punitively if the origin AS is matched (during partial deployment). Some ISP routers may assign "Valid" state to customers' prefixes even when they do not have ROAs just because the {prefix, Origin AS} associations are well known for their own customers. Partial deployment period may be quite prolonged. This is where the RP may need to have the flexibility. I feel that the documents (published as Information RFCs) would be excellent for providing general agreed upon understanding about the possible origin validation approaches based on ROAs but should not strictly bind the relying parties to the recommendations (especially, under partial deployment scenarios). Sriram From kotikalapudi.sriram@nist.gov Mon Nov 22 16:43:42 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2CE3728C17C for ; Mon, 22 Nov 2010 16:43:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L+Uv7T01RiwR for ; Mon, 22 Nov 2010 16:43:41 -0800 (PST) Received: from smtp.nist.gov (rimp2.nist.gov [129.6.16.227]) by core3.amsl.com (Postfix) with ESMTP id 498333A6B03 for ; Mon, 22 Nov 2010 16:43:40 -0800 (PST) Received: from WSXGHUB1.xchange.nist.gov (WSXGHUB1.xchange.nist.gov [129.6.18.96]) by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id oAN0iYDA026188; Mon, 22 Nov 2010 19:44:35 -0500 Received: from MBCLUSTER.xchange.nist.gov ([fe80::41df:f63f:c718:e08]) by WSXGHUB1.xchange.nist.gov ([129.6.18.96]) with mapi; Mon, 22 Nov 2010 19:44:23 -0500 From: "Sriram, Kotikalapudi" To: Pradosh Mohapatra Date: Mon, 22 Nov 2010 19:44:18 -0500 Thread-Topic: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 Thread-Index: AcuHAkeqGECfVbXxQZGdYHkXiI+BWgDopmvw Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 X-NIST-MailScanner: Found to be clean X-NIST-MailScanner-From: kotikalapudi.sriram@nist.gov Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Nov 2010 00:43:42 -0000 The document does not yet reflect the consensus generated at the Beijing meeting on treating updates with AS_SET as having indeterminable origin AS. Quoting the document: ** Begin quote: //origin_as is NONE if the AS_PATH begins with a non-trivial //AS_SET and has no [AS4_]AGGREGATOR attribute. ... ... 4. Route Aggregation When an UPDATE message carries AGGREGATOR attribute, the "UPDATE origin AS number" is set to the value encoded in the AGGREGATOR instead of being derived from the AS_PATH attribute. ** End quote. The above quoted statements in the document contradict said consensus. Please also see comment: http://www.ietf.org/mail-archive/web/sidr/current/msg02203.html Thanks, Sriram From gih@apnic.net Mon Nov 22 19:45:53 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ADA0C3A6A21 for ; Mon, 22 Nov 2010 19:45:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -98.015 X-Spam-Level: X-Spam-Status: No, score=-98.015 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vuV368Mo5v-A for ; Mon, 22 Nov 2010 19:45:53 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 3C6A53A6A0D for ; Mon, 22 Nov 2010 19:45:52 -0800 (PST) Received: from [192.168.49.58] (unknown [84.35.81.2]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 6B521D57EE; Tue, 23 Nov 2010 13:46:46 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: Date: Tue, 23 Nov 2010 14:46:42 +1100 Content-Transfer-Encoding: 7bit Message-Id: <6FC80A6D-67FD-4044-83D6-A935116781F8@apnic.net> References: <20101111020725.D08B63A68C8@core3.amsl.com> <72030833-DB5D-48F6-A9AA-C0A579646727@apnic.net> To: "Sriram, Kotikalapudi" X-Mailer: Apple Mail (2.1082) Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WG Last Call Request for draft-ietf-sidr-roa-validation-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Nov 2010 03:45:53 -0000 On 23/11/2010, at 10:59 AM, Sriram, Kotikalapudi wrote: > I would support the LC on draft-ietf-sidr-roa-validation-10 > if it had informational status, > i.e., be advanced for publication as an Informational RFC. That was indeed the intention: please note line 3 of the document: Secure Inter-Domain Routing (SIDR) G. Huston Internet-Draft G. Michaelson Intended status: Informational APNIC Expires: May 15, 2011 November 11, 2010 thanks, Geoff From rbarnes@bbn.com Tue Nov 23 09:32:29 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4C19E3A68DC for ; Tue, 23 Nov 2010 09:32:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gX4ir8t53FnJ for ; Tue, 23 Nov 2010 09:32:27 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id D3F573A693E for ; Tue, 23 Nov 2010 09:32:26 -0800 (PST) Received: from [192.1.255.215] (port=50491 helo=col-dhcp-192-1-255-215.bbn.com) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PKwk8-0009ps-HK; Tue, 23 Nov 2010 12:33:24 -0500 Message-Id: From: "Richard L. Barnes" To: Geoff Huston In-Reply-To: <6FC80A6D-67FD-4044-83D6-A935116781F8@apnic.net> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Date: Tue, 23 Nov 2010 12:33:23 -0500 References: <20101111020725.D08B63A68C8@core3.amsl.com> <72030833-DB5D-48F6-A9AA-C0A579646727@apnic.net> <6FC80A6D-67FD-4044-83D6-A935116781F8@apnic.net> X-Mailer: Apple Mail (2.936) Cc: "Sriram, Kotikalapudi" , "sidr@ietf.org wg" Subject: Re: [sidr] WG Last Call Request for draft-ietf-sidr-roa-validation-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Nov 2010 17:32:29 -0000 I'm not sure I agree with this document being Informational. ROAs need to have some well-defined authorization semantic. Just like information in BGP itself, ROAs communicate information between domains, so the creators and consumers of ROAs need to know what authorization is being communicated. In other words, what needs to be standard is a validate(roa[], route) routine that says whether a given set of ROAs authorize, deny, or ignore a given route. Sriram is correct that AS-internal stuff should be Informational. The AS-internal stuff we're talking about here is what an AS does with the output of the validate(), basically a "deployment considerations" document. In terms of the documents in hand: As I read it, -roa-validation would be a good basis for the Standards Track document I describe above if we just remove Section 3, which talks about what you do with validation outputs. -pfx-validate seems like a good candidate for the Informational document. As a path forward, it would make sense to me to focus -roa-validation on the specific validation semantics of a set of ROAs (advancing it as Standards Track) and to focus -pfx-validate on what an AS can do with these validation results (as Informational). Finally, one specific note on -roa-validation and -roa-format. Before I wrote this email, to make sure I understood things correctly, I wrote a test implementation of the validation algorithm [1]. My comment as an implementor is that the documents don't make it very clear how to implement the algorithm described in Section 2 of -roa- validation. For instance, it's not obvious that the length of the prefix is specified implicitly as the length of the IPAddress BIT STRING. In general, it would be helpful if Section 2 of the -roa- validation document were more specific, phrasing things in terms of the data elements in hand instead of more abstract concepts like "covering aggregate" (which the developer has to interpret as "shorter prefix, same bits"). Sorry to enter the discussion so late, but I hope this is helpful, --Richard [1] On Nov 22, 2010, at 10:46 PM, Geoff Huston wrote: > > On 23/11/2010, at 10:59 AM, Sriram, Kotikalapudi wrote: > >> I would support the LC on draft-ietf-sidr-roa-validation-10 >> if it had informational status, >> i.e., be advanced for publication as an Informational RFC. > > That was indeed the intention: please note line 3 of the document: > > Secure Inter-Domain Routing (SIDR) G. > Huston > Internet-Draft G. > Michaelson > Intended status: Informational > APNIC > Expires: May 15, 2011 November 11, > 2010 > > > thanks, > > Geoff > > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From Wesley.E.George@sprint.com Mon Nov 29 12:14:40 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 86B3228C102 for ; Mon, 29 Nov 2010 12:14:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.736 X-Spam-Level: X-Spam-Status: No, score=-3.736 tagged_above=-999 required=5 tests=[AWL=-0.137, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SMBI44NZpOf7 for ; Mon, 29 Nov 2010 12:14:39 -0800 (PST) Received: from DB3EHSOBE004.bigfish.com (db3ehsobe004.messaging.microsoft.com [213.199.154.142]) by core3.amsl.com (Postfix) with ESMTP id 50B6B28C0F5 for ; Mon, 29 Nov 2010 12:14:35 -0800 (PST) Received: from mail54-db3-R.bigfish.com (10.3.81.243) by DB3EHSOBE004.bigfish.com (10.3.84.24) with Microsoft SMTP Server id 14.1.225.8; Mon, 29 Nov 2010 20:15:44 +0000 Received: from mail54-db3 (localhost.localdomain [127.0.0.1]) by mail54-db3-R.bigfish.com (Postfix) with ESMTP id 971D52E83C9; Mon, 29 Nov 2010 20:15:44 +0000 (UTC) X-SpamScore: -40 X-BigFish: VS-40(zz542N1432N9371Pzz1202hzz8275dh1033ILz2fh2a8h691h668h67dh34h61h) X-Spam-TCS-SCL: 0:0 X-Forefront-Antispam-Report: KIP:(null); UIP:(null); IPVD:NLI; H:plsasdm2.corp.sprint.com; RD:smtpls2.sprint.com; EFVD:NLI Received: from mail54-db3 (localhost.localdomain [127.0.0.1]) by mail54-db3 (MessageSwitch) id 1291061744157422_32614; Mon, 29 Nov 2010 20:15:44 +0000 (UTC) Received: from DB3EHSMHS001.bigfish.com (unknown [10.3.81.243]) by mail54-db3.bigfish.com (Postfix) with ESMTP id 181CB1300051; Mon, 29 Nov 2010 20:15:44 +0000 (UTC) Received: from plsasdm2.corp.sprint.com (144.230.168.26) by DB3EHSMHS001.bigfish.com (10.3.87.101) with Microsoft SMTP Server (TLS) id 14.1.225.8; Mon, 29 Nov 2010 20:15:40 +0000 Received: from PDAWEH01.ad.sprint.com (PDAWEH01.corp.sprint.com [144.226.110.69]) by plsasdm2.corp.sprint.com (Sentrion-MTA-4.0.5/Sentrion-MTA-4.0.5) with ESMTP id oATKFcDo028036 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 29 Nov 2010 14:15:39 -0600 Received: from PLSWM12A.ad.sprint.com ([fe80::dd81:e8a1:cd6b:78f]) by PDAWEH01.ad.sprint.com ([2002:90e2:6e45::90e2:6e45]) with mapi id 14.01.0255.000; Mon, 29 Nov 2010 14:15:38 -0600 From: "George, Wes E [NTK]" To: Sandra Murphy , "sidr@ietf.org" Thread-Topic: [sidr] upcoming wg calls Thread-Index: AQHLhty46Ujt2jP9r06rEmdBnoYPv5OI8VLQ Date: Mon, 29 Nov 2010 20:15:36 +0000 Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E0358D8@PLSWM12A.ad.sprint.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.153.203.37] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_00EA_01CB8FD8.45ABDC70" MIME-Version: 1.0 X-OriginatorOrg: sprint.com Subject: Re: [sidr] upcoming wg calls X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Nov 2010 20:14:40 -0000 ------=_NextPart_000_00EA_01CB8FD8.45ABDC70 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Support=20 draft-ietf-sidr-rpki-rtr=20 draft-ietf-sidr-keyroll=20 draft-ymbk-rpki-origin-ops=20 draft-ymbk-ghostbusters=20 draft-ietf-sidr-roa-validation=20 draft-ietf-sidr-pfx-validate In the future, if we have this many WG calls at once, might I recommend = a doodle poll or something similar that makes it easier for both the = chairs (resplendent in their WG Chair finery) and the rest of us to keep = track of? Wes George > -----Original Message----- > From: sidr-bounces@ietf.org [mailto:sidr-bounces@ietf.org] On Behalf = Of > Sandra Murphy > Sent: Wednesday, November 17, 2010 11:54 PM > To: sidr@ietf.org > Subject: [sidr] upcoming wg calls >=20 > Before during and after the meeting, there were many requests for last > calls and wg adoption. I'm pretty sure that I've captured them all, > and I > list them below. As soon as I send this message I'm going to start > sending the calls to the list. >=20 > If I have missed tallying a request, please let me know. >=20 > There are a lot of them. I asked those attending the meeting if they > wanted the whole lot all at the same time and there was strong support > for > sending them all at once. So get ready, here it comes. >=20 > --Sandy >=20 >=20 > long before meeting: >=20 > last calls were announced: >=20 > =E2=80=93 draft-ietf-sidr-arch-11.txt: An Infrastructure to Support > Secure Internet Routing > =E2=80=93 draft-ietf-sidr-signed-object-01: Signed Object > Template for the Resource Public Key Infrastructure > =E2=80=93 draft-ietf-sidr-ta-06: A Profile for Trust Anchor Material > for the Resource Certificate PKI >=20 > the week before meeting: >=20 > Matt Lepinski requested wglc for > 1. roa-format >=20 > during the sidr meeting: >=20 > Randy Bush requested wglc for > 2. rpki-rtr >=20 > Geoff Huston requested wglc for >=20 > 3. keyroll >=20 > 4. res-certs >=20 > 5. repos-struct >=20 > 6. rescerts-provisioning >=20 > 7. rpki-algs >=20 > 8. rpki-manifests >=20 > Steve Kent requested wg adoption for >=20 > 9. algorithm-agility >=20 > Randy requested wg adoption for >=20 > 10. ghostbusters >=20 > 11. rpki-origin-ops >=20 >=20 > during and after meeting on the list >=20 > Geoff requested wglc for >=20 > 12. roa-validation >=20 > rescerts-provisioning (reiteration of previous request) >=20 ------=_NextPart_000_00EA_01CB8FD8.45ABDC70 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIXHjCCBPYw ggPeoAMCAQICChTCbVgAAAAAAAUwDQYJKoZIhvcNAQEFBQAwcTEbMBkGA1UECxMSQ29weXJpZ2h0 IChjKSAyMDA3MRYwFAYDVQQLEw1TcHJpbnQgTmV4dGVsMTowOAYDVQQDEzFTcHJpbnQgTmV4dGVs IEVudGVycHJpc2UgSW50ZXJtZWRpYXRlIDEgQXV0aG9yaXR5MB4XDTA3MDcxNzE5NDIxNloXDTE1 MDcxNzE5NTIxNloweDETMBEGCgmSJomT8ixkARkWA2NvbTEWMBQGCgmSJomT8ixkARkWBnNwcmlu dDESMBAGCgmSJomT8ixkARkWAmFkMTUwMwYDVQQDEyxTcHJpbnQgTmV4dGVsIEVudGVycHJpc2Ug SXNzdWluZyAxIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL95aoB4 LLMFIOaq8WTtWyNCb7m5xoKdM6oJKXsCx8k8GATPtiX7VPXKMjRNv+jMZXKF9U6RA4wjSKiKMOYg 48ioSpanTxp+7p6+00Nr/eEtjsY+21rDQbANaqFGfkRFv4m59jM53j+mEXIDybTttcQN/CdSvI0d XOD3KxQTPaG+h9uqZmkrdlk/rwvGbKhqmsl2BApItCDlUWt4rbv0GYQR4GP0w6c7e5prJBh89PEq y+NDtv14YqYl5zOBST4IoHX77uS9gZXqglhtpYKDfESgrgcMldsfKyjrOwiRlT7o8ez1iOyCULkp RcGLSe3wxZxx82bPEYjSWJf56V21FV0CAwEAAaOCAYcwggGDMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFAGPJVAshjSbwX6QH9mINbU/rwuJMAsGA1UdDwQEAwIBhjAQBgkrBgEEAYI3FQEEAwIB ADAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAfBgNVHSMEGDAWgBRRAcgiA5nZbiss2II5eNyr GXZEcTBuBgNVHR8EZzBlMGOgYaBfhjBodHRwOi8vY3JsLmNvcnAuc3ByaW50LmNvbS9QUEtJV0Iw MS9QUEtJV0IwMS5jcmyGK2h0dHA6Ly9jcmwuc3ByaW50LmNvbS9QUEtJV0IwMS9QUEtJV0IwMS5j cmwwgYUGCCsGAQUFBwEBBHkwdzA8BggrBgEFBQcwAoYwaHR0cDovL2NybC5jb3JwLnNwcmludC5j b20vUFBLSVdCMDEvUFBLSVdCMDEuY3J0MDcGCCsGAQUFBzAChitodHRwOi8vY3JsLnNwcmludC5j b20vUFBLSVdCMDEvUFBLSVdCMDEuY3J0MA0GCSqGSIb3DQEBBQUAA4IBAQCpeKWuin6cpun45r8E cmaxzwvYsNiZhC3iTS6sMIbUaSZZM7N0+UavCDZX04/9xlFUQNchlMezJDDlrM2EZyEZ2gDZDN65 22gWd8sJHyi5M8yruC42PHGePBdV8sY0EEB2dxuMsV+jQ1uBThyv1Oo8F38FjEuodYIlYuOWVxPY sDiWNAJ0K0wq+EzxHgxuYO3Afg6pc4TlmHH9ZkWhNC6Lb1MzQjlp+a0FUWAljzZe/QeYbZEINsHx swoQIO0/Uyg9ZUTK3K3mGWmWVdrPjYk3UJCfjOU3qLqIM5J17St7wd1o9Q9UDDJowUKgIZVXH6oY obBGb7rBuyi/SEG5pNHGMIIFkzCCA3ugAwIBAgIQRmQhybpKpLtIEeJdHD7ivzANBgkqhkiG9w0B AQUFADBcMRswGQYDVQQLExJDb3B5cmlnaHQgKGMpIDIwMDcxFjAUBgNVBAsTDVNwcmludCBOZXh0 ZWwxJTAjBgNVBAMTHFNwcmludCBOZXh0ZWwgUm9vdCBBdXRob3JpdHkwHhcNMDcwNTIyMTYyODI1 WhcNMjcwNTIyMTYzNTUyWjBcMRswGQYDVQQLExJDb3B5cmlnaHQgKGMpIDIwMDcxFjAUBgNVBAsT DVNwcmludCBOZXh0ZWwxJTAjBgNVBAMTHFNwcmludCBOZXh0ZWwgUm9vdCBBdXRob3JpdHkwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCXnrAnWxH9Pnu51vYiwtYe6Q6hcRrIZr84JcW+ 9ze9zfu5pE3+PcsMzk6q5roX7LnwU/omHSUlKCMpnu2D78I5+VsA+U3in/2T0qN3VEdo2jvO8WZH 7KPwVGqYsbJBPk1cNYiRSKG2CRxsdWTDFpn2ri5/rsfWd7U8ZrNPMlFG17kVKJpb5E3e4d4PP7E9 /snxYnG0PCgT8kTe6SVTLIR0nlWZ6J+MvqGiWu21yd5BNFNFzfTitSgDkGtQZ17HbjmXCBkv3ULr 7jM19TAt5ZFjVewmvJPIKZT9/9+7KT6QaQVe/Ao7Xc9tFKgaEBwMCxLRPLHsxEi4oCgr/0N7wyIe CoZropYeM3fxkFIRqa7hGSNQ0HLC51o/LpljxhrNjkoILnyL48mgevqdsER8jz7hlITqy3rHcyCM HLmlt0YlKEYTTr9REXNnoUXNBkvJQPJgyl44xdaUzm3n8ydPtO4Cl0grRouQ4CJ3fQ2Hfi90zYhc vs3hPI4YgccdUv9l2X++lRnazRME7FSGPd9RQh5eerR3bSWBukYo5KwgMGxyIU/hpraYHI38bbiA PZmmpZ8vFk6iP2zVXHTkH+PqatzYGNdSkHLYQG5NM3GZlrE3khygDpfBuNo/VFtzIXAqNfWPJq7y QM7AkGwbN5Y9uOalzh74O+Ej+nQUhVCuaZ46NQIDAQABo1EwTzALBgNVHQ8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAdBgNVHQ4EFgQU6o073JNr96Z42jmfdFu4WxRjgs0wEAYJKwYBBAGCNxUBBAMC AQAwDQYJKoZIhvcNAQEFBQADggIBAHIdGEzkUTJjPn1vyv/vL944OZ8hoVd6anmS1OMR+vRn9L5i fdfmos332+Y+TGGB74lLeMp6lsP1tRd9TgMhB2DvcShCoEpyX8lNdiVczo4cKkZ5zSbaQzlK8Cfr necuMFiFEk2Hi+T790l7DKSz4NbKfZGokZIx15grgrKlGK5ZQuTjfudKfguAXqFasFuxsLX4tcT1 2W2dcBjHdQxJy9LbwDJK39cgOuJlHj+VhwR07ZwS8by5JCm5JbOOrv40uyEWc1mnY6E8Jptq6iyf wpItMr1gAJ1bVkaKjHXfyEqb0OPgu5sbne9mSIJQlwxiiHYHIB4OJXY5bczKpb2OAyyb9jmF/jC6 LMBhl7SmM81ftBiD1HQctqirilaUTlKNtIaZN7dZBFltnQyqSZE6GtQ+xOgojNGyceE/MI9asIFJ jGVXYgUUX15Ri7OajEF+0E3DliTN2VZ2ECmdsuvGyz4AC+pWl8jZLPWUNsGfTgSR1S1+5iIRb6ia yAkpKanTWNTPOPbTGbcetg5oXuKaPywcr6znRysmh1e+spAviXR/o5wv5NyApPix5sxV4urovGJ5 cVu07fw8UPMI0/25cJ4P+owxoRMRMWuEO7K1AF0GuCPr84v0d+CZLb3FqoK3DNJBLTvqGPA8VnAZ ukt2co0Mcw8raOlCypTSGnYoWz0JMIIF2jCCA8KgAwIBAgIKYSGdxgAAAAAAAzANBgkqhkiG9w0B AQUFADBcMRswGQYDVQQLExJDb3B5cmlnaHQgKGMpIDIwMDcxFjAUBgNVBAsTDVNwcmludCBOZXh0 ZWwxJTAjBgNVBAMTHFNwcmludCBOZXh0ZWwgUm9vdCBBdXRob3JpdHkwHhcNMDcwNTIyMTk1MjQw WhcNMjAwNTIyMjAwMjQwWjBxMRswGQYDVQQLExJDb3B5cmlnaHQgKGMpIDIwMDcxFjAUBgNVBAsT DVNwcmludCBOZXh0ZWwxOjA4BgNVBAMTMVNwcmludCBOZXh0ZWwgRW50ZXJwcmlzZSBJbnRlcm1l ZGlhdGUgMSBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5IX+RYNn IeUe+BkJ5VfMppHbxZlrSzd831LTblSkdTXQyi8+5A1p1ZObUSzm5mIW352SxStOtGvfSRTKcLg4 HBiZyArS+pQ8QvnXxdY70kzqfrN4+urXrHCol1y9LuUxfSShM0ZsFkC3DEtFj4zC0wi9I71Cb+8V 0rhVx6iTFCHo/KrDJJm/7twjmN39ZxaXZJFV+ofLEd+7wZijHuVlsKy6597etMor3CkeuwcMdp+1 lm/YAWZqmUY98LKKxKIet59OSDJPXP7L2nBJfwkkt6z4ibWQU1j4OJ1cZE5e/STDOXOR9by9FMh9 kDIAKyG/tGaHsxfrMY5miX8MywPlAgMBAAGjggGHMIIBgzAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud DgQWBBRRAcgiA5nZbiss2II5eNyrGXZEcTALBgNVHQ8EBAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAw GQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwHwYDVR0jBBgwFoAU6o073JNr96Z42jmfdFu4WxRj gs0wbgYDVR0fBGcwZTBjoGGgX4YwaHR0cDovL2NybC5jb3JwLnNwcmludC5jb20vUFBLSVdBMDEv UFBLSVdBMDEuY3JshitodHRwOi8vY3JsLnNwcmludC5jb20vUFBLSVdBMDEvUFBLSVdBMDEuY3Js MIGFBggrBgEFBQcBAQR5MHcwPAYIKwYBBQUHMAKGMGh0dHA6Ly9jcmwuY29ycC5zcHJpbnQuY29t L1BQS0lXQTAxL1BQS0lXQTAxLmNydDA3BggrBgEFBQcwAoYraHR0cDovL2NybC5zcHJpbnQuY29t L1BQS0lXQTAxL1BQS0lXQTAxLmNydDANBgkqhkiG9w0BAQUFAAOCAgEAPnhPbwWBkx8lJuBkvFQZ +ndd5xT2WonpdzuqC1B7br4auN7RzovHVmC40RUrZfxf0mkNX9awG4naZaVjQzoMG0ijE8YEz/+X JxOadLsXiatSjljJWSuRp4w6cc9yH2Vc3wkCjSYYhawD6kBVV/j10CWLJVfQ5gLw2OXa/k8jSxoZ 7eyPinEM4bkJOJTNkwPW99MiKwua/qFWeoshPy0w1KlT6mgEQM65mZfIwZ16/AiWcAg1QKgr6YYY kzFu1M7cNEUhhohonAm/XPpsadSBIHKiQrW2rgWW56d5iDoUtoYXPaRZ7b/LaxqtuDrChaCYtYHA iD8LwynwNqNG1L541S/nfAoyQcSmYgx2mo2b23ZsYI6LIEDeAOFtlLOZN/cUeSYACO60y75j1aj1 j9mbfSTA9VfOyayfgVOadeNHdse6zM8pRQ4AJt1yC7mNPkmkON9k+16IqOMXgwa+M4derUwRy+tt QUOZe7iMtI7dgf8hsFteMSrXKkjNth0x2mEdGU8777WRCd4hFEKkGkJ2xTYGXDf8S6tmZM+OQ+Xt gBvxZWMnehlUiycJtDdNazacLowHaRND8C7L6zcFlyeAkCOHoYxcUK7hm5FMfYrr2KZDFcakrjIy AxYyTa/LlKv+spIBjxA+QOKJUYfrM8b+csCvy8vGhihP1EaxSv2J0xEwggarMIIFk6ADAgECAgo8 FVeJAAAAAZIPMA0GCSqGSIb3DQEBBQUAMHgxEzARBgoJkiaJk/IsZAEZFgNjb20xFjAUBgoJkiaJ k/IsZAEZFgZzcHJpbnQxEjAQBgoJkiaJk/IsZAEZFgJhZDE1MDMGA1UEAxMsU3ByaW50IE5leHRl bCBFbnRlcnByaXNlIElzc3VpbmcgMSBBdXRob3JpdHkwHhcNMDgwNTAxMTczNzE0WhcNMTEwNTAx MTczNzE0WjCBzzETMBEGCgmSJomT8ixkARkWA2NvbTEWMBQGCgmSJomT8ixkARkWBnNwcmludDES MBAGCgmSJomT8ixkARkWAmFkMRUwEwYDVQQLEwxEb21haW4gVXNlcnMxEDAOBgNVBAsTB01hbmFn ZWQxGzAZBgNVBAsTElN0YW5kYXJkLVRlY2huaWNhbDEbMBkGA1UEAxMSV2VzbGV5IEUgR2Vvcmdl IElWMSkwJwYJKoZIhvcNAQkBFhpXZXNsZXkuRS5HZW9yZ2VAc3ByaW50LmNvbTCBnzANBgkqhkiG 9w0BAQEFAAOBjQAwgYkCgYEArxfUh9TugEcsXY4OefFQTrGuaTRenLcZg0KCxZlTY7P9wMRCYd8p GJljwH1x4qn0Ejjyz+uX5UL8Biia13BSWRgiq7QYLKTZNKwEpBbeOf9lK/LrPsbFOgat/Zh/lPmx YzxeikU42X3KhyVSCmWdQhmWRu5kfUzsejaGWH9AyuUCAwEAAaOCA2EwggNdMAsGA1UdDwQEAwIF oDA2BgkqhkiG9w0BCQ8EKTAnMA0GCCqGSIb3DQMCAgE4MA0GCCqGSIb3DQMEAgE4MAcGBSsOAwIH MB0GA1UdDgQWBBTFSbrzJuajBSX9B63Y9r2TlgbU5DA8BgkrBgEEAYI3FQcELzAtBiUrBgEEAYI3 FQiBkugshNficv2LB4Xs/liCno8icYbjvkqEsfZAAgFkAgECMB8GA1UdIwQYMBaAFAGPJVAshjSb wX6QH9mINbU/rwuJMIIBXgYDVR0fBIIBVTCCAVEwggFNoIIBSaCCAUWGgeNsZGFwOi8vL0NOPVNw cmludCUyME5leHRlbCUyMEVudGVycHJpc2UlMjBJc3N1aW5nJTIwMSUyMEF1dGhvcml0eSxDTj1Q UEtJV0MwMSxDTj1DRFAsQ049UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049 Q29uZmlndXJhdGlvbixEQz1hZCxEQz1zcHJpbnQsREM9Y29tP2NlcnRpZmljYXRlUmV2b2NhdGlv bkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIYraHR0cDovL2NybC5z cHJpbnQuY29tL1BQS0lXQzAxL1BQS0lXQzAxLmNybIYwaHR0cDovL2NybC5jb3JwLnNwcmludC5j b20vUFBLSVdDMDEvUFBLSVdDMDEuY3JsMIGFBggrBgEFBQcBAQR5MHcwNwYIKwYBBQUHMAKGK2h0 dHA6Ly9jcmwuc3ByaW50LmNvbS9QUEtJV0MwMS9QUEtJV0MwMS5jcnQwPAYIKwYBBQUHMAKGMGh0 dHA6Ly9jcmwuY29ycC5zcHJpbnQuY29tL1BQS0lXQzAxL1BQS0lXQzAxLmNydDApBgNVHSUEIjAg BggrBgEFBQcDAgYIKwYBBQUHAwQGCisGAQQBgjcKAwQwNQYJKwYBBAGCNxUKBCgwJjAKBggrBgEF BQcDAjAKBggrBgEFBQcDBDAMBgorBgEEAYI3CgMEMEwGA1UdEQRFMEOgJQYKKwYBBAGCNxQCA6AX DBV3ZWcwMjIxQGFkLnNwcmludC5jb22BGldlc2xleS5FLkdlb3JnZUBzcHJpbnQuY29tMA0GCSqG SIb3DQEBBQUAA4IBAQBYdUj2FTmOVS0X2fF+OYWXu9QoS6JWB8exD8kBPWVh28UilosoFwpVs2Ux K+V9NE1SC4QXDfwcjyMMV6WfXfy1foT6YAOcLt1z91ALCbTPlr1mazbAnOL6AzoTnq5V+TjvJvdN IYROS6PJC/YU5+w/NannnhC1zNFOtmxZZcrz50uRU8Q4mgITpxcnJXKUtKNaFTEhhtnP+hMVXYW0 eUyG7xjDTCyqsO5jcyI0IKJkNW1NXaKjHfmlAAiL5HVNl7cYL5uce6orHQQPMTSGRmTKCNjx7Yaz EHAorZUGmCTuihdhPDq+tOhGrIDE4XuiDxj+OVU6JXM5nsiKTjU968o4MYIDLTCCAykCAQEwgYYw eDETMBEGCgmSJomT8ixkARkWA2NvbTEWMBQGCgmSJomT8ixkARkWBnNwcmludDESMBAGCgmSJomT 8ixkARkWAmFkMTUwMwYDVQQDEyxTcHJpbnQgTmV4dGVsIEVudGVycHJpc2UgSXNzdWluZyAxIEF1 dGhvcml0eQIKPBVXiQAAAAGSDzAJBgUrDgMCGgUAoIIB/DAYBgkqhkiG9w0BCQMxCwYJKoZIhvcN AQcBMBwGCSqGSIb3DQEJBTEPFw0xMDExMjkyMDE1MzVaMCMGCSqGSIb3DQEJBDEWBBRk8eWKaIEH rSzIBmwwRc+1HdXjmjBnBgkqhkiG9w0BCQ8xWjBYMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIA gDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDAHBgUrDgMCGjAKBggqhkiG 9w0CBTCBlwYJKwYBBAGCNxAEMYGJMIGGMHgxEzARBgoJkiaJk/IsZAEZFgNjb20xFjAUBgoJkiaJ k/IsZAEZFgZzcHJpbnQxEjAQBgoJkiaJk/IsZAEZFgJhZDE1MDMGA1UEAxMsU3ByaW50IE5leHRl bCBFbnRlcnByaXNlIElzc3VpbmcgMSBBdXRob3JpdHkCCjwVV4kAAAABkg8wgZkGCyqGSIb3DQEJ EAILMYGJoIGGMHgxEzARBgoJkiaJk/IsZAEZFgNjb20xFjAUBgoJkiaJk/IsZAEZFgZzcHJpbnQx EjAQBgoJkiaJk/IsZAEZFgJhZDE1MDMGA1UEAxMsU3ByaW50IE5leHRlbCBFbnRlcnByaXNlIElz c3VpbmcgMSBBdXRob3JpdHkCCjwVV4kAAAABkg8wDQYJKoZIhvcNAQEBBQAEgYBXMRup4aadwmNM gd/pebJ1HkZA+5mSsOLXsYdyavt4qFX9CbVWiGpTg8Y6GzOpm+rj+0rlYWGGU72VH0wIGbD4kSLI s1TZjAOBpNPosQ4nkgLrqBiIVFFa2lTHiLl+xR+9Pr1ATuokQ9u9pF8VjfYptFv1K5QRlFY90ex8 sA9pqwAAAAAAAA== ------=_NextPart_000_00EA_01CB8FD8.45ABDC70-- From Wesley.E.George@sprint.com Mon Nov 29 12:18:09 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9731B28C0F5 for ; Mon, 29 Nov 2010 12:18:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.73 X-Spam-Level: X-Spam-Status: No, score=-3.73 tagged_above=-999 required=5 tests=[AWL=-0.131, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3b+e5B+ydNat for ; Mon, 29 Nov 2010 12:18:08 -0800 (PST) Received: from AM1EHSOBE001.bigfish.com (am1ehsobe001.messaging.microsoft.com [213.199.154.204]) by core3.amsl.com (Postfix) with ESMTP id D841D28C0F7 for ; Mon, 29 Nov 2010 12:18:06 -0800 (PST) Received: from mail49-am1-R.bigfish.com (10.3.201.244) by AM1EHSOBE001.bigfish.com (10.3.204.21) with Microsoft SMTP Server id 14.1.225.8; Mon, 29 Nov 2010 20:19:16 +0000 Received: from mail49-am1 (localhost.localdomain [127.0.0.1]) by mail49-am1-R.bigfish.com (Postfix) with ESMTP id 8C0FB18503FA; Mon, 29 Nov 2010 20:19:16 +0000 (UTC) X-SpamScore: -40 X-BigFish: VS-40(zz542N1432N9371Pzz1202hzz8275dh1033ILz2fh2a8h691h668h67dh34h61h) X-Spam-TCS-SCL: 0:0 X-Forefront-Antispam-Report: KIP:(null); UIP:(null); IPVD:NLI; H:pdaasdm1.corp.sprint.com; RD:smtpda1.sprint.com; EFVD:NLI Received: from mail49-am1 (localhost.localdomain [127.0.0.1]) by mail49-am1 (MessageSwitch) id 1291061956158346_11968; Mon, 29 Nov 2010 20:19:16 +0000 (UTC) Received: from AM1EHSMHS011.bigfish.com (unknown [10.3.201.248]) by mail49-am1.bigfish.com (Postfix) with ESMTP id 1A3D18C0050; Mon, 29 Nov 2010 20:19:16 +0000 (UTC) Received: from pdaasdm1.corp.sprint.com (144.229.32.56) by AM1EHSMHS011.bigfish.com (10.3.207.111) with Microsoft SMTP Server (TLS) id 14.1.225.8; Mon, 29 Nov 2010 20:19:10 +0000 Received: from PLSWEH03.ad.sprint.com (PLSWEH03.corp.sprint.com [144.226.242.132]) by pdaasdm1.corp.sprint.com (Sentrion-MTA-4.0.5/Sentrion-MTA-4.0.5) with ESMTP id oATK5TVB021322 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 29 Nov 2010 14:06:34 -0600 Received: from PLSWM12A.ad.sprint.com ([fe80::dd81:e8a1:cd6b:78f]) by PLSWEH03.ad.sprint.com ([fe80::a470:17cb:6a7f:3a52%15]) with mapi id 14.01.0255.000; Mon, 29 Nov 2010 14:18:35 -0600 From: "George, Wes E [NTK]" To: Sandra Murphy , "sidr@ietf.org" Thread-Topic: [sidr] WG Adoption for draft-rgaglian-sidr-algorithm-agility-00 Thread-Index: AQHLht17OBL1qVPNLEaIvaARyL3N/ZOI8fNw Date: Mon, 29 Nov 2010 20:18:34 +0000 Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E0358EB@PLSWM12A.ad.sprint.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.153.203.37] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_00EE_01CB8FD8.AF6AEFC0" MIME-Version: 1.0 X-OriginatorOrg: sprint.com Subject: Re: [sidr] WG Adoption for draft-rgaglian-sidr-algorithm-agility-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Nov 2010 20:18:09 -0000 ------=_NextPart_000_00EE_01CB8FD8.AF6AEFC0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I support adoption of this doc, missed it in the list Wes George > -----Original Message----- > From: sidr-bounces@ietf.org [mailto:sidr-bounces@ietf.org] On Behalf Of > Sandra Murphy > Sent: Thursday, November 18, 2010 12:00 AM > To: sidr@ietf.org > Subject: [sidr] WG Adoption for draft-rgaglian-sidr-algorithm-agility- > 00 > > > Steve Kent has requested that the working group adopt the draft > draft-rgaglian-sidr-algorithm-agility-00.txt, Algorithm Agility > Procedure for RPKI, as a work item. > > It is available at > http://tools.ietf.org/html/draft-rgaglian-sidr-algorithm-agility-00. > > Recall that active support for adoption is necessary for the wg chairs > to judge acceptance as a working group work item, so silence works > against adoption. The wg chairs also want to know who would be > willing to work on the draft. > > Please respond to the list, giving your recommendation for or against > adoption of the draft as a wg work item as well as your intention to > work on the draft if adopted. The call for adoption will end in two > weeks on Wed 1 Dec 2010 AOE. > > --Sandy, speaking with wg chair helmet on > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr ------=_NextPart_000_00EE_01CB8FD8.AF6AEFC0 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIXHjCCBPYw ggPeoAMCAQICChTCbVgAAAAAAAUwDQYJKoZIhvcNAQEFBQAwcTEbMBkGA1UECxMSQ29weXJpZ2h0 IChjKSAyMDA3MRYwFAYDVQQLEw1TcHJpbnQgTmV4dGVsMTowOAYDVQQDEzFTcHJpbnQgTmV4dGVs IEVudGVycHJpc2UgSW50ZXJtZWRpYXRlIDEgQXV0aG9yaXR5MB4XDTA3MDcxNzE5NDIxNloXDTE1 MDcxNzE5NTIxNloweDETMBEGCgmSJomT8ixkARkWA2NvbTEWMBQGCgmSJomT8ixkARkWBnNwcmlu dDESMBAGCgmSJomT8ixkARkWAmFkMTUwMwYDVQQDEyxTcHJpbnQgTmV4dGVsIEVudGVycHJpc2Ug SXNzdWluZyAxIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL95aoB4 LLMFIOaq8WTtWyNCb7m5xoKdM6oJKXsCx8k8GATPtiX7VPXKMjRNv+jMZXKF9U6RA4wjSKiKMOYg 48ioSpanTxp+7p6+00Nr/eEtjsY+21rDQbANaqFGfkRFv4m59jM53j+mEXIDybTttcQN/CdSvI0d XOD3KxQTPaG+h9uqZmkrdlk/rwvGbKhqmsl2BApItCDlUWt4rbv0GYQR4GP0w6c7e5prJBh89PEq y+NDtv14YqYl5zOBST4IoHX77uS9gZXqglhtpYKDfESgrgcMldsfKyjrOwiRlT7o8ez1iOyCULkp RcGLSe3wxZxx82bPEYjSWJf56V21FV0CAwEAAaOCAYcwggGDMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFAGPJVAshjSbwX6QH9mINbU/rwuJMAsGA1UdDwQEAwIBhjAQBgkrBgEEAYI3FQEEAwIB ADAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAfBgNVHSMEGDAWgBRRAcgiA5nZbiss2II5eNyr GXZEcTBuBgNVHR8EZzBlMGOgYaBfhjBodHRwOi8vY3JsLmNvcnAuc3ByaW50LmNvbS9QUEtJV0Iw MS9QUEtJV0IwMS5jcmyGK2h0dHA6Ly9jcmwuc3ByaW50LmNvbS9QUEtJV0IwMS9QUEtJV0IwMS5j cmwwgYUGCCsGAQUFBwEBBHkwdzA8BggrBgEFBQcwAoYwaHR0cDovL2NybC5jb3JwLnNwcmludC5j b20vUFBLSVdCMDEvUFBLSVdCMDEuY3J0MDcGCCsGAQUFBzAChitodHRwOi8vY3JsLnNwcmludC5j b20vUFBLSVdCMDEvUFBLSVdCMDEuY3J0MA0GCSqGSIb3DQEBBQUAA4IBAQCpeKWuin6cpun45r8E cmaxzwvYsNiZhC3iTS6sMIbUaSZZM7N0+UavCDZX04/9xlFUQNchlMezJDDlrM2EZyEZ2gDZDN65 22gWd8sJHyi5M8yruC42PHGePBdV8sY0EEB2dxuMsV+jQ1uBThyv1Oo8F38FjEuodYIlYuOWVxPY sDiWNAJ0K0wq+EzxHgxuYO3Afg6pc4TlmHH9ZkWhNC6Lb1MzQjlp+a0FUWAljzZe/QeYbZEINsHx swoQIO0/Uyg9ZUTK3K3mGWmWVdrPjYk3UJCfjOU3qLqIM5J17St7wd1o9Q9UDDJowUKgIZVXH6oY obBGb7rBuyi/SEG5pNHGMIIFkzCCA3ugAwIBAgIQRmQhybpKpLtIEeJdHD7ivzANBgkqhkiG9w0B AQUFADBcMRswGQYDVQQLExJDb3B5cmlnaHQgKGMpIDIwMDcxFjAUBgNVBAsTDVNwcmludCBOZXh0 ZWwxJTAjBgNVBAMTHFNwcmludCBOZXh0ZWwgUm9vdCBBdXRob3JpdHkwHhcNMDcwNTIyMTYyODI1 WhcNMjcwNTIyMTYzNTUyWjBcMRswGQYDVQQLExJDb3B5cmlnaHQgKGMpIDIwMDcxFjAUBgNVBAsT DVNwcmludCBOZXh0ZWwxJTAjBgNVBAMTHFNwcmludCBOZXh0ZWwgUm9vdCBBdXRob3JpdHkwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCXnrAnWxH9Pnu51vYiwtYe6Q6hcRrIZr84JcW+ 9ze9zfu5pE3+PcsMzk6q5roX7LnwU/omHSUlKCMpnu2D78I5+VsA+U3in/2T0qN3VEdo2jvO8WZH 7KPwVGqYsbJBPk1cNYiRSKG2CRxsdWTDFpn2ri5/rsfWd7U8ZrNPMlFG17kVKJpb5E3e4d4PP7E9 /snxYnG0PCgT8kTe6SVTLIR0nlWZ6J+MvqGiWu21yd5BNFNFzfTitSgDkGtQZ17HbjmXCBkv3ULr 7jM19TAt5ZFjVewmvJPIKZT9/9+7KT6QaQVe/Ao7Xc9tFKgaEBwMCxLRPLHsxEi4oCgr/0N7wyIe CoZropYeM3fxkFIRqa7hGSNQ0HLC51o/LpljxhrNjkoILnyL48mgevqdsER8jz7hlITqy3rHcyCM HLmlt0YlKEYTTr9REXNnoUXNBkvJQPJgyl44xdaUzm3n8ydPtO4Cl0grRouQ4CJ3fQ2Hfi90zYhc vs3hPI4YgccdUv9l2X++lRnazRME7FSGPd9RQh5eerR3bSWBukYo5KwgMGxyIU/hpraYHI38bbiA PZmmpZ8vFk6iP2zVXHTkH+PqatzYGNdSkHLYQG5NM3GZlrE3khygDpfBuNo/VFtzIXAqNfWPJq7y QM7AkGwbN5Y9uOalzh74O+Ej+nQUhVCuaZ46NQIDAQABo1EwTzALBgNVHQ8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAdBgNVHQ4EFgQU6o073JNr96Z42jmfdFu4WxRjgs0wEAYJKwYBBAGCNxUBBAMC AQAwDQYJKoZIhvcNAQEFBQADggIBAHIdGEzkUTJjPn1vyv/vL944OZ8hoVd6anmS1OMR+vRn9L5i fdfmos332+Y+TGGB74lLeMp6lsP1tRd9TgMhB2DvcShCoEpyX8lNdiVczo4cKkZ5zSbaQzlK8Cfr necuMFiFEk2Hi+T790l7DKSz4NbKfZGokZIx15grgrKlGK5ZQuTjfudKfguAXqFasFuxsLX4tcT1 2W2dcBjHdQxJy9LbwDJK39cgOuJlHj+VhwR07ZwS8by5JCm5JbOOrv40uyEWc1mnY6E8Jptq6iyf wpItMr1gAJ1bVkaKjHXfyEqb0OPgu5sbne9mSIJQlwxiiHYHIB4OJXY5bczKpb2OAyyb9jmF/jC6 LMBhl7SmM81ftBiD1HQctqirilaUTlKNtIaZN7dZBFltnQyqSZE6GtQ+xOgojNGyceE/MI9asIFJ jGVXYgUUX15Ri7OajEF+0E3DliTN2VZ2ECmdsuvGyz4AC+pWl8jZLPWUNsGfTgSR1S1+5iIRb6ia yAkpKanTWNTPOPbTGbcetg5oXuKaPywcr6znRysmh1e+spAviXR/o5wv5NyApPix5sxV4urovGJ5 cVu07fw8UPMI0/25cJ4P+owxoRMRMWuEO7K1AF0GuCPr84v0d+CZLb3FqoK3DNJBLTvqGPA8VnAZ ukt2co0Mcw8raOlCypTSGnYoWz0JMIIF2jCCA8KgAwIBAgIKYSGdxgAAAAAAAzANBgkqhkiG9w0B AQUFADBcMRswGQYDVQQLExJDb3B5cmlnaHQgKGMpIDIwMDcxFjAUBgNVBAsTDVNwcmludCBOZXh0 ZWwxJTAjBgNVBAMTHFNwcmludCBOZXh0ZWwgUm9vdCBBdXRob3JpdHkwHhcNMDcwNTIyMTk1MjQw WhcNMjAwNTIyMjAwMjQwWjBxMRswGQYDVQQLExJDb3B5cmlnaHQgKGMpIDIwMDcxFjAUBgNVBAsT DVNwcmludCBOZXh0ZWwxOjA4BgNVBAMTMVNwcmludCBOZXh0ZWwgRW50ZXJwcmlzZSBJbnRlcm1l ZGlhdGUgMSBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5IX+RYNn IeUe+BkJ5VfMppHbxZlrSzd831LTblSkdTXQyi8+5A1p1ZObUSzm5mIW352SxStOtGvfSRTKcLg4 HBiZyArS+pQ8QvnXxdY70kzqfrN4+urXrHCol1y9LuUxfSShM0ZsFkC3DEtFj4zC0wi9I71Cb+8V 0rhVx6iTFCHo/KrDJJm/7twjmN39ZxaXZJFV+ofLEd+7wZijHuVlsKy6597etMor3CkeuwcMdp+1 lm/YAWZqmUY98LKKxKIet59OSDJPXP7L2nBJfwkkt6z4ibWQU1j4OJ1cZE5e/STDOXOR9by9FMh9 kDIAKyG/tGaHsxfrMY5miX8MywPlAgMBAAGjggGHMIIBgzAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud DgQWBBRRAcgiA5nZbiss2II5eNyrGXZEcTALBgNVHQ8EBAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAw GQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwHwYDVR0jBBgwFoAU6o073JNr96Z42jmfdFu4WxRj gs0wbgYDVR0fBGcwZTBjoGGgX4YwaHR0cDovL2NybC5jb3JwLnNwcmludC5jb20vUFBLSVdBMDEv UFBLSVdBMDEuY3JshitodHRwOi8vY3JsLnNwcmludC5jb20vUFBLSVdBMDEvUFBLSVdBMDEuY3Js MIGFBggrBgEFBQcBAQR5MHcwPAYIKwYBBQUHMAKGMGh0dHA6Ly9jcmwuY29ycC5zcHJpbnQuY29t L1BQS0lXQTAxL1BQS0lXQTAxLmNydDA3BggrBgEFBQcwAoYraHR0cDovL2NybC5zcHJpbnQuY29t L1BQS0lXQTAxL1BQS0lXQTAxLmNydDANBgkqhkiG9w0BAQUFAAOCAgEAPnhPbwWBkx8lJuBkvFQZ +ndd5xT2WonpdzuqC1B7br4auN7RzovHVmC40RUrZfxf0mkNX9awG4naZaVjQzoMG0ijE8YEz/+X JxOadLsXiatSjljJWSuRp4w6cc9yH2Vc3wkCjSYYhawD6kBVV/j10CWLJVfQ5gLw2OXa/k8jSxoZ 7eyPinEM4bkJOJTNkwPW99MiKwua/qFWeoshPy0w1KlT6mgEQM65mZfIwZ16/AiWcAg1QKgr6YYY kzFu1M7cNEUhhohonAm/XPpsadSBIHKiQrW2rgWW56d5iDoUtoYXPaRZ7b/LaxqtuDrChaCYtYHA iD8LwynwNqNG1L541S/nfAoyQcSmYgx2mo2b23ZsYI6LIEDeAOFtlLOZN/cUeSYACO60y75j1aj1 j9mbfSTA9VfOyayfgVOadeNHdse6zM8pRQ4AJt1yC7mNPkmkON9k+16IqOMXgwa+M4derUwRy+tt QUOZe7iMtI7dgf8hsFteMSrXKkjNth0x2mEdGU8777WRCd4hFEKkGkJ2xTYGXDf8S6tmZM+OQ+Xt gBvxZWMnehlUiycJtDdNazacLowHaRND8C7L6zcFlyeAkCOHoYxcUK7hm5FMfYrr2KZDFcakrjIy AxYyTa/LlKv+spIBjxA+QOKJUYfrM8b+csCvy8vGhihP1EaxSv2J0xEwggarMIIFk6ADAgECAgo8 FVeJAAAAAZIPMA0GCSqGSIb3DQEBBQUAMHgxEzARBgoJkiaJk/IsZAEZFgNjb20xFjAUBgoJkiaJ k/IsZAEZFgZzcHJpbnQxEjAQBgoJkiaJk/IsZAEZFgJhZDE1MDMGA1UEAxMsU3ByaW50IE5leHRl bCBFbnRlcnByaXNlIElzc3VpbmcgMSBBdXRob3JpdHkwHhcNMDgwNTAxMTczNzE0WhcNMTEwNTAx MTczNzE0WjCBzzETMBEGCgmSJomT8ixkARkWA2NvbTEWMBQGCgmSJomT8ixkARkWBnNwcmludDES MBAGCgmSJomT8ixkARkWAmFkMRUwEwYDVQQLEwxEb21haW4gVXNlcnMxEDAOBgNVBAsTB01hbmFn ZWQxGzAZBgNVBAsTElN0YW5kYXJkLVRlY2huaWNhbDEbMBkGA1UEAxMSV2VzbGV5IEUgR2Vvcmdl IElWMSkwJwYJKoZIhvcNAQkBFhpXZXNsZXkuRS5HZW9yZ2VAc3ByaW50LmNvbTCBnzANBgkqhkiG 9w0BAQEFAAOBjQAwgYkCgYEArxfUh9TugEcsXY4OefFQTrGuaTRenLcZg0KCxZlTY7P9wMRCYd8p GJljwH1x4qn0Ejjyz+uX5UL8Biia13BSWRgiq7QYLKTZNKwEpBbeOf9lK/LrPsbFOgat/Zh/lPmx YzxeikU42X3KhyVSCmWdQhmWRu5kfUzsejaGWH9AyuUCAwEAAaOCA2EwggNdMAsGA1UdDwQEAwIF oDA2BgkqhkiG9w0BCQ8EKTAnMA0GCCqGSIb3DQMCAgE4MA0GCCqGSIb3DQMEAgE4MAcGBSsOAwIH MB0GA1UdDgQWBBTFSbrzJuajBSX9B63Y9r2TlgbU5DA8BgkrBgEEAYI3FQcELzAtBiUrBgEEAYI3 FQiBkugshNficv2LB4Xs/liCno8icYbjvkqEsfZAAgFkAgECMB8GA1UdIwQYMBaAFAGPJVAshjSb wX6QH9mINbU/rwuJMIIBXgYDVR0fBIIBVTCCAVEwggFNoIIBSaCCAUWGgeNsZGFwOi8vL0NOPVNw cmludCUyME5leHRlbCUyMEVudGVycHJpc2UlMjBJc3N1aW5nJTIwMSUyMEF1dGhvcml0eSxDTj1Q UEtJV0MwMSxDTj1DRFAsQ049UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049 Q29uZmlndXJhdGlvbixEQz1hZCxEQz1zcHJpbnQsREM9Y29tP2NlcnRpZmljYXRlUmV2b2NhdGlv bkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludIYraHR0cDovL2NybC5z cHJpbnQuY29tL1BQS0lXQzAxL1BQS0lXQzAxLmNybIYwaHR0cDovL2NybC5jb3JwLnNwcmludC5j b20vUFBLSVdDMDEvUFBLSVdDMDEuY3JsMIGFBggrBgEFBQcBAQR5MHcwNwYIKwYBBQUHMAKGK2h0 dHA6Ly9jcmwuc3ByaW50LmNvbS9QUEtJV0MwMS9QUEtJV0MwMS5jcnQwPAYIKwYBBQUHMAKGMGh0 dHA6Ly9jcmwuY29ycC5zcHJpbnQuY29tL1BQS0lXQzAxL1BQS0lXQzAxLmNydDApBgNVHSUEIjAg BggrBgEFBQcDAgYIKwYBBQUHAwQGCisGAQQBgjcKAwQwNQYJKwYBBAGCNxUKBCgwJjAKBggrBgEF BQcDAjAKBggrBgEFBQcDBDAMBgorBgEEAYI3CgMEMEwGA1UdEQRFMEOgJQYKKwYBBAGCNxQCA6AX DBV3ZWcwMjIxQGFkLnNwcmludC5jb22BGldlc2xleS5FLkdlb3JnZUBzcHJpbnQuY29tMA0GCSqG SIb3DQEBBQUAA4IBAQBYdUj2FTmOVS0X2fF+OYWXu9QoS6JWB8exD8kBPWVh28UilosoFwpVs2Ux K+V9NE1SC4QXDfwcjyMMV6WfXfy1foT6YAOcLt1z91ALCbTPlr1mazbAnOL6AzoTnq5V+TjvJvdN IYROS6PJC/YU5+w/NannnhC1zNFOtmxZZcrz50uRU8Q4mgITpxcnJXKUtKNaFTEhhtnP+hMVXYW0 eUyG7xjDTCyqsO5jcyI0IKJkNW1NXaKjHfmlAAiL5HVNl7cYL5uce6orHQQPMTSGRmTKCNjx7Yaz EHAorZUGmCTuihdhPDq+tOhGrIDE4XuiDxj+OVU6JXM5nsiKTjU968o4MYIDLTCCAykCAQEwgYYw eDETMBEGCgmSJomT8ixkARkWA2NvbTEWMBQGCgmSJomT8ixkARkWBnNwcmludDESMBAGCgmSJomT 8ixkARkWAmFkMTUwMwYDVQQDEyxTcHJpbnQgTmV4dGVsIEVudGVycHJpc2UgSXNzdWluZyAxIEF1 dGhvcml0eQIKPBVXiQAAAAGSDzAJBgUrDgMCGgUAoIIB/DAYBgkqhkiG9w0BCQMxCwYJKoZIhvcN AQcBMBwGCSqGSIb3DQEJBTEPFw0xMDExMjkyMDE4MzJaMCMGCSqGSIb3DQEJBDEWBBRuuWflZmEW 9cocWj4i4H9renHtDjBnBgkqhkiG9w0BCQ8xWjBYMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIA gDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDAHBgUrDgMCGjAKBggqhkiG 9w0CBTCBlwYJKwYBBAGCNxAEMYGJMIGGMHgxEzARBgoJkiaJk/IsZAEZFgNjb20xFjAUBgoJkiaJ k/IsZAEZFgZzcHJpbnQxEjAQBgoJkiaJk/IsZAEZFgJhZDE1MDMGA1UEAxMsU3ByaW50IE5leHRl bCBFbnRlcnByaXNlIElzc3VpbmcgMSBBdXRob3JpdHkCCjwVV4kAAAABkg8wgZkGCyqGSIb3DQEJ EAILMYGJoIGGMHgxEzARBgoJkiaJk/IsZAEZFgNjb20xFjAUBgoJkiaJk/IsZAEZFgZzcHJpbnQx EjAQBgoJkiaJk/IsZAEZFgJhZDE1MDMGA1UEAxMsU3ByaW50IE5leHRlbCBFbnRlcnByaXNlIElz c3VpbmcgMSBBdXRob3JpdHkCCjwVV4kAAAABkg8wDQYJKoZIhvcNAQEBBQAEgYBZCr8mvX6bAnIz Lw27vqPzPXO0ina7vja6HfW23HOZb+bUE+rnDxA5WHlHAXnqKzjoBe1PUxmhmPYCe8h0g+89xmaO 6Wxt7rxPfPeDqT+9KyqD0ZZQIUcYOq65D5PJFwHEv5JFyu3tuudD+CB2r677UWVnieTdKSLTNMwG CVRb4wAAAAAAAA== ------=_NextPart_000_00EE_01CB8FD8.AF6AEFC0-- From achi@bbn.com Mon Nov 29 13:22:25 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1978E3A6BDB for ; Mon, 29 Nov 2010 13:22:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.562 X-Spam-Level: X-Spam-Status: No, score=-2.562 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g9u68jPVJhSO for ; Mon, 29 Nov 2010 13:22:23 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by core3.amsl.com (Postfix) with ESMTP id B0DB53A6A6E for ; Mon, 29 Nov 2010 13:22:23 -0800 (PST) Received: from dhcp89-089-231.bbn.com ([128.89.89.231]:50505 helo=[127.0.0.1]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PNBC9-000L11-D2; Mon, 29 Nov 2010 16:23:33 -0500 Message-ID: <4CF41A43.5040403@bbn.com> Date: Mon, 29 Nov 2010 16:25:23 -0500 From: Andrew Chi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Sandra Murphy References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr@ietf.org Subject: Re: [sidr] WG Adoption for draft-rgaglian-sidr-algorithm-agility-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Nov 2010 21:22:25 -0000 On 11/17/2010 11:59 PM, Sandra Murphy wrote: > > Steve Kent has requested that the working group adopt the draft > draft-rgaglian-sidr-algorithm-agility-00.txt, Algorithm Agility > Procedure for RPKI, as a work item. > Support. From Internet-Drafts@ietf.org Mon Nov 29 14:30:03 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1406E28C119; Mon, 29 Nov 2010 14:30:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.421 X-Spam-Level: X-Spam-Status: No, score=-102.421 tagged_above=-999 required=5 tests=[AWL=0.178, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dxuX66f3Xsvq; Mon, 29 Nov 2010 14:30:02 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 20F3E28C118; Mon, 29 Nov 2010 14:30:02 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 3.09 Message-ID: <20101129223002.2050.16588.idtracker@localhost> Date: Mon, 29 Nov 2010 14:30:02 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D Action:draft-ietf-sidr-ltamgmt-00.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Nov 2010 22:30:03 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : Local Trust Anchor Management for the Resource Public Key Infrastructure Author(s) : S. Kent, M. Reynolds Filename : draft-ietf-sidr-ltamgmt-00.txt Pages : 28 Date : 2010-11-09 This document describes a facility to enable a relying party (RP) to manage trust anchors (TAs) in the context of the Resource Public Key Infrastructure (RPKI). It is common to allow an RP to import TA material in the form of self-signed certificates. The facility described in this document allows an RP to impose constraints on such TAs. Because this mechanism is designed to operate in the RPKI context, the relevant constraints are the RFC 3779 extensions that bind address spaces and/or autonomous system (AS) numbers to entities. The primary motivation for this facility is to enable an RP to ensure that resource allocation information that it has acquired via some trusted channel is not overridden by the information acquired from the RPKI repository system or by the putative TAs that the RP imports. Specifically, the mechanism allows an RP to specify a set of bindings between public key identifiers and RFC 3779 extension data and will override any conflicting bindings expressed via the putative TAs and the certificates downloaded from the RPKI repository system. Although this mechanism is designed for local use by an RP, an entity that is accorded administrative control over a set of RPs may use this mechanism to convey its view of the RPKI to a set of RPs within its jurisdiction. The means by which this latter use case is effected is outside the scope of this document. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-ltamgmt-00.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-ltamgmt-00.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-29142808.I-D@ietf.org> --NextPart-- From achi@bbn.com Mon Nov 29 14:45:04 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4C47128C15F for ; Mon, 29 Nov 2010 14:45:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.566 X-Spam-Level: X-Spam-Status: No, score=-2.566 tagged_above=-999 required=5 tests=[AWL=0.033, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XwbVqTNqUOZa for ; Mon, 29 Nov 2010 14:45:03 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id 1788828C0CE for ; Mon, 29 Nov 2010 14:45:03 -0800 (PST) Received: from dhcp89-089-231.bbn.com ([128.89.89.231]:50624 helo=[127.0.0.1]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PNCU9-0000Rv-1i; Mon, 29 Nov 2010 17:46:13 -0500 Message-ID: <4CF42DA0.7030102@bbn.com> Date: Mon, 29 Nov 2010 17:48:00 -0500 From: Andrew Chi User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Tim Bruijnzeels References: <4CE4F46A.3020806@ripe.net> In-Reply-To: <4CE4F46A.3020806@ripe.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: sidr@ietf.org Subject: Re: [sidr] upcoming wg calls X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Nov 2010 22:45:04 -0000 On 11/18/2010 4:39 AM, Tim Bruijnzeels wrote: >> Call for WGLC, I support: >> >> draft-ietf-sidr-roa-format > > One very minor nit: I think it would be desirable to have a normative > naming scheme similar to the one used for manifests as defined in the > repos-struct document; using the extension .roa. > We'll also need to add a ghostbusters extension to repos-struct. I agree with Tim, and also agree it's minor. From terry.manderson@icann.org Mon Nov 29 17:06:54 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A711528C0E0 for ; Mon, 29 Nov 2010 17:06:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GpWeShJaq50f for ; Mon, 29 Nov 2010 17:06:52 -0800 (PST) Received: from EXPFE100-2.exc.icann.org (expfe100-2.exc.icann.org [64.78.22.237]) by core3.amsl.com (Postfix) with ESMTP id 256183A6C52 for ; Mon, 29 Nov 2010 17:06:52 -0800 (PST) Received: from EXVPMBX100-1.exc.icann.org ([64.78.22.232]) by EXPFE100-2.exc.icann.org ([64.78.22.237]) with mapi; Mon, 29 Nov 2010 17:08:02 -0800 From: Terry Manderson To: Sandra Murphy , sidr Date: Mon, 29 Nov 2010 17:08:01 -0800 Thread-Topic: [sidr] upcoming wg calls Thread-Index: AcuG3L4OZjH30rkvSBi/jqAiyHt9iwJTkpmq Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [sidr] upcoming wg calls X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Nov 2010 01:06:55 -0000 I support the last call of the following WG documents. (Insomnia well and truly cured.) draft-ietf-sidr-roa-format-09 draft-ietf-sidr-rpki-rtr-02 draft-ietf-sidr-keyroll-04 draft-ietf-sidr-res-certs-20 draft-ietf-sidr-repos-struct-06 draft-ietf-sidr-rescerts-provisioning-09 draft-ietf-sidr-rpki-algs-04 draft-ietf-sidr-rpki-manifests-09 draft-ietf-sidr-roa-validation-10 draft-ietf-sidr-pfx-validate-00 And I support the adoption of the following 3 items, I am willing to review= . draft-rgaglian-sidr-algorithm-agility-00 draft-ymbk-ghostbusters-01 draft-ymbk-rpki-origin-ops-00 Cheers Terry On 18/11/10 2:54 PM, "Sandra Murphy" wrote: > Before during and after the meeting, there were many requests for last > calls and wg adoption. I'm pretty sure that I've captured them all, and = I > list them below. As soon as I send this message I'm going to start > sending the calls to the list. >=20 From pmohapat@cisco.com Tue Nov 30 09:55:13 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0926928C0F0 for ; Tue, 30 Nov 2010 09:55:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s7bzf7lACPJ4 for ; Tue, 30 Nov 2010 09:55:12 -0800 (PST) Received: from sj-iport-2.cisco.com (sj-iport-2.cisco.com [171.71.176.71]) by core3.amsl.com (Postfix) with ESMTP id 2862D3A6C8F for ; Tue, 30 Nov 2010 09:55:12 -0800 (PST) Authentication-Results: sj-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AvsEAPfJ9EyrR7H+/2dsb2JhbACjE3GobptahUcEhFyGBoMP X-IronPort-AV: E=Sophos;i="4.59,281,1288569600"; d="scan'208";a="294551333" Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-2.cisco.com with ESMTP; 30 Nov 2010 17:56:23 +0000 Received: from [10.21.89.156] (sjc-vpn5-412.cisco.com [10.21.89.156]) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id oAUHuKsC011702; Tue, 30 Nov 2010 17:56:21 GMT Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Pradosh Mohapatra In-Reply-To: Date: Tue, 30 Nov 2010 09:59:25 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <228B462E-228F-41FD-A72A-8C754D37BF3E@cisco.com> References: To: Geoff Huston X-Mailer: Apple Mail (2.1081) Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Nov 2010 17:55:13 -0000 Hi Geoff, > Section 5. Routing Policy >=20 > Announcements with invalid origins MAY be used, but SHOULD be less > preferred than those with valid or unknown. >=20 >=20 > Here I agree with the sentiment in terms of the relativity to valid or = unknown, but I am worried about the MAY statement here, and I would like = the document to explain this further. >=20 > For example, a simple reading of the document leads one to believe = that all announcements MAY still be accepted according to the routing = policy selection allowed in section 5, yet if that were the case then = the ability of origin validation to "deal with inadvertent = mis-advertisement" is questionable. >=20 > I would prefer the document to look at the implication of _why_ a = party MAY accept a route that the origination validation framework is = leading to a local judgement that the route is invalid. i.e. is it = because of missing information in the relying party's local cache, which = may bne resolved over time? Is is due to potential circularity of = dependence, where parts of the RPKI distributed repository lie behind = routes that can only be judged as valid using certs and ROAs found in = that repository?=20 I am afraid that any attempt to enumerate the cases where an invalid = route MAY be accepted will be incomplete! Rather, could we add a = statement to the effect that accepting invalid routes is a pure local = matter and should be done with utmost care? >=20 > I would also like to see the security considerations section include a = statement to the effect that if a party were to use routes that have an = invalid validity state then the ability to detect and filter certain = forms of mis-advertisement would in effect be negated. Ack. > Back to the wordsmithing and consistency comment, the terminology of = unvalidatable origins and unknown origin is used in different sentences = - it would be better to use consistent terminology. Ack. > It would also be good if the terminology of validity state is = consistent - are we talking about "announcements" or "routes"? Are we = talking about "valid origin" or "routes that are validated by the RPKI = ROA framework"? Ack. >=20 > So close, but not quite ready for shipping yet in my opinion. >=20 > (My apologies - I should've commented earlier on this, but its only a = WGLC that leads to these reviews happening for me.) No worries, thanks for these. Will be reflected in the next version. - Pradosh= From pmohapat@cisco.com Tue Nov 30 09:58:45 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E67AF28C130 for ; Tue, 30 Nov 2010 09:58:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qSUgLMy3PC7u for ; Tue, 30 Nov 2010 09:58:45 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 44F3E28C106 for ; Tue, 30 Nov 2010 09:58:45 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AvsEADLK9EyrR7Ht/2dsb2JhbACjE3GoZ5tahUcEhFyGBoMP X-IronPort-AV: E=Sophos;i="4.59,281,1288569600"; d="scan'208";a="628332986" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-6.cisco.com with ESMTP; 30 Nov 2010 17:59:53 +0000 Received: from [10.21.89.156] (sjc-vpn5-412.cisco.com [10.21.89.156]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id oAUHxpFp007077; Tue, 30 Nov 2010 17:59:52 GMT Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Pradosh Mohapatra In-Reply-To: Date: Tue, 30 Nov 2010 10:02:57 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: "Sriram, Kotikalapudi" X-Mailer: Apple Mail (2.1081) Cc: "sidr@ietf.org wg" Subject: Re: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Nov 2010 17:58:46 -0000 Hi Sriram, > The document does not yet reflect the consensus > generated at the Beijing meeting on treating > updates with AS_SET as having indeterminable origin AS. >=20 > Quoting the document: > ** Begin quote: > //origin_as is NONE if the AS_PATH begins with a non-trivial > //AS_SET and has no [AS4_]AGGREGATOR attribute. > ... > ... > 4. Route Aggregation >=20 > When an UPDATE message carries AGGREGATOR attribute,=20 > the "UPDATE origin AS number" is set to the value encoded in=20 > the AGGREGATOR instead of being derived from the AS_PATH attribute. > ** End quote. >=20 > The above quoted statements in the document contradict said consensus. Sorry, I haven't quite followed the WG list and the last IETF happenings = due to PTO; so wasn't aware this is the consensus now. I will look = around and do the necessary edits for the next revision of the document. Thanks, - Pradosh= From Internet-Drafts@ietf.org Tue Nov 30 13:15:04 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 955173A6C14; Tue, 30 Nov 2010 13:15:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.427 X-Spam-Level: X-Spam-Status: No, score=-102.427 tagged_above=-999 required=5 tests=[AWL=0.172, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BPDOGIGYKTxG; Tue, 30 Nov 2010 13:15:02 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 48B0F3A6C39; Tue, 30 Nov 2010 13:15:02 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 3.09 Message-ID: <20101130211502.22708.23455.idtracker@localhost> Date: Tue, 30 Nov 2010 13:15:02 -0800 Cc: sidr@ietf.org Subject: [sidr] I-D ACTION:draft-ietf-sidr-origin-validation-signaling-00.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Nov 2010 21:15:05 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing Working Group of the IETF. Title : BGP Prefix Origin Validation State Extended Community Author(s) : P. Mohapatra, K. Patel, J. Scudder, D. Ward, R. Bush Filename : draft-ietf-sidr-origin-validation-signaling-00.txt Pages : 7 Date : 2010-11-30 As part of the origination AS validation process, it can be desirable to automatically consider the validation state of routes in the BGP decision process. The purpose of this document is to provide a specification for doing so. The document also defines a new BGP opaque extended community to carry the validation state inside an autonomous system to influence the decision process of the IBGP speakers. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sidr-origin-validation-signaling-00.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-sidr-origin-validation-signaling-00.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-30131155.I-D@ietf.org> --NextPart-- From gih@apnic.net Tue Nov 30 20:00:47 2010 Return-Path: X-Original-To: sidr@core3.amsl.com Delivered-To: sidr@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DDD743A6C59 for ; Tue, 30 Nov 2010 20:00:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.437 X-Spam-Level: X-Spam-Status: No, score=-100.437 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9uvlaXq8U3Td for ; Tue, 30 Nov 2010 20:00:47 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by core3.amsl.com (Postfix) with ESMTP id 46FDA3A6CCF for ; Tue, 30 Nov 2010 20:00:45 -0800 (PST) Received: from matrix-proxy1.apnic.net (unknown [202.12.29.113]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 7B2B2B6823; Wed, 1 Dec 2010 13:57:43 +1000 (EST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: <228B462E-228F-41FD-A72A-8C754D37BF3E@cisco.com> Date: Wed, 1 Dec 2010 15:01:50 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <228B462E-228F-41FD-A72A-8C754D37BF3E@cisco.com> To: Pradosh Mohapatra X-Mailer: Apple Mail (2.1082) Cc: sidr@ietf.org Subject: Re: [sidr] WGLC for draft-ietf-sidr-pfx-validate-00 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Dec 2010 04:00:48 -0000 Firstly, I must note that there are a whole ot of use of "may" as = distinct from the normative "MAY" in this document, "should" as distinct = from the normative "SHOULD", etc. As thisd is a document intended for a = Standards Track, the document needs to be strict about its use of the = normative forms of the requirements language as noted in section 1.1 of = the document e.g.: " An AS _may_ originate more than one prefix set. Thus, multiple = prefix sets in the database _may_ contain the same origin AS(es). On 01/12/2010, at 4:59 AM, Pradosh Mohapatra wrote: > Hi Geoff, >=20 >> Section 5. Routing Policy >>=20 >> Announcements with invalid origins MAY be used, but SHOULD be less >> preferred than those with valid or unknown. >>=20 >>=20 >> Here I agree with the sentiment in terms of the relativity to valid = or unknown, but I am worried about the MAY statement here, and I would = like the document to explain this further. >>=20 >> For example, a simple reading of the document leads one to believe = that all announcements MAY still be accepted according to the routing = policy selection allowed in section 5, yet if that were the case then = the ability of origin validation to "deal with inadvertent = mis-advertisement" is questionable. >>=20 >> I would prefer the document to look at the implication of _why_ a = party MAY accept a route that the origination validation framework is = leading to a local judgement that the route is invalid. i.e. is it = because of missing information in the relying party's local cache, which = may bne resolved over time? Is is due to potential circularity of = dependence, where parts of the RPKI distributed repository lie behind = routes that can only be judged as valid using certs and ROAs found in = that repository?=20 >=20 > I am afraid that any attempt to enumerate the cases where an invalid = route MAY be accepted will be incomplete! Rather, could we add a = statement to the effect that accepting invalid routes is a pure local = matter and should be done with utmost care? works for me Geoff