From nobody Tue Nov 1 01:17:15 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F21012949F; Tue, 1 Nov 2016 01:17:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.397 X-Spam-Level: X-Spam-Status: No, score=-3.397 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5krRiPpO4BE9; Tue, 1 Nov 2016 01:17:12 -0700 (PDT) Received: from molamola.ripe.net (molamola.ripe.net [IPv6:2001:67c:2e8:11::c100:1371]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4630712949A; Tue, 1 Nov 2016 01:17:12 -0700 (PDT) Received: from titi.ripe.net ([193.0.23.11]) by molamola.ripe.net with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.84_2) (envelope-from ) id 1c1UFn-0009T3-3q; Tue, 01 Nov 2016 09:17:08 +0100 Received: from sslvpn.ripe.net ([193.0.20.230] helo=vpn-24.ripe.net) by titi.ripe.net with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.84_2) (envelope-from ) id 1c1UFm-0005a6-Up; Tue, 01 Nov 2016 09:17:06 +0100 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: text/plain; charset=utf-8 From: Tim Bruijnzeels In-Reply-To: Date: Tue, 1 Nov 2016 09:17:06 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <8E2E93F5-6184-4E58-8EF8-65C5D43E54A2@ripe.net> To: Sean Turner X-Mailer: Apple Mail (2.3124) X-ACL-Warn: Delaying message X-RIPE-Spam-Level: ----------- X-RIPE-Spam-Report: Spam Total Points: -11.9 points pts rule name description ---- ---------------------- ------------------------------------ -7.5 ALL_TRUSTED Passed through trusted hosts only via SMTP -2.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719c6a0d47894caac70f4af95ed07d833d5 Archived-At: Cc: "sidr-ads@ietf.org" , Chris Morrow , "sidr-chairs@ietf.org" , "sidr@ietf.org" Subject: Re: [sidr] WGLC - draft-ietf-sidr-rpki-validation-reconsidered - ends 10/25/2016 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Nov 2016 08:17:14 -0000 Hi Sean, > On 31 Oct 2016, at 20:06, Sean Turner wrote: >=20 > I didn=E2=80=99t compile it, but it looks right to me. And for what = it=E2=80=99s worth, you did exactly what I would have done by copying = the syntax into the mainbody in order to explain it, but imposing it = directly from 3779/6268 in the module. To be fair I took that module straight out of the thread between you and = Tom :) In any case thank you very much for looking at this. Tim >=20 > spt >=20 >> On Oct 26, 2016, at 11:32, Tim Bruijnzeels wrote: >>=20 >> Hi Sean, Tom, Russ, and all, >>=20 >> Sorry for bringing this up late. Technically past 25 October, and yes = I would like to see this go through as you might expect from an = author... >>=20 >> That said, can someone with good ASN.1-fu please have look at the = changes w.r.t. ASN.1 structure and OIDs? I tried to include all your = comments properly - but I would feel safer if one of you could confirm. >>=20 >> Thanks >> Tim >>=20 >>=20 >>> On 26 Oct 2016, at 05:13, Sriram, Kotikalapudi (Fed) = wrote: >>>=20 >>> I read the draft once again. I support publication. >>>=20 >>> Found a minor typo in the last paragraph on p.15 (can be dealt with = during RFC editor review process): >>> s/the loss of on IP address prefix from the VRS-IP/the loss of one = IP address prefix from the VRS-IP/ >>>=20 >>> Sriram >>>=20 >>> ________________________________________ >>> From: sidr on behalf of Chris Morrow = >>> Sent: Tuesday, October 11, 2016 10:08 AM >>> To: sidr@ietf.org; sidr-chairs@ietf.org; sidr-ads@ietf.org >>> Subject: [sidr] WGLC - draft-ietf-sidr-rpki-validation-reconsidered = - ends 10/25/2016 >>>=20 >>> Howdy WG folks! >>> The authors of: >>> draft-ietf-sidr-rpki-validation-reconsidered >>>=20 >>> believe they have addressed all inflight concerns/comments, the >>> request is to WGLC this, consider it's place in the world and if >>> appropriate pass this document along to the IESG for publication. >>>=20 >>> The abstract for this draft is: >>> "This document proposes an update to the certificate validation >>> procedure specified in RFC 6487 that reduces aspects of operational >>> fragility in the management of certificates in the RPKI, while >>> retaining essential security features." >>>=20 >>> Let's have a read through, consider and reply with your thoughts = please, >>> this WGLC is set to expire: 10/25/2016 - October 25, 2016. >>>=20 >>> thanks for reading/replying/thinking! >>> -chris >>> co-chair-persona >>>=20 >>> _______________________________________________ >>> sidr mailing list >>> sidr@ietf.org >>> https://www.ietf.org/mailman/listinfo/sidr >>=20 >=20 From nobody Wed Nov 2 08:34:01 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C434D129430; Wed, 2 Nov 2016 08:33:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.018 X-Spam-Level: X-Spam-Status: No, score=-16.018 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.497, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 11Wb1P760lsu; Wed, 2 Nov 2016 08:33:54 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CA0212969A; Wed, 2 Nov 2016 08:33:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=83733; q=dns/txt; s=iport; t=1478100833; x=1479310433; h=from:to:cc:subject:date:message-id:mime-version; bh=q2d8SMJhaff7SIFYPurU/UDAMvqhMbX2bD/Xw+THaIE=; b=b7tZuPLbz7PIx8eCIrj83jt/Hch1kft7t86z7heWk7bsXKa+bzoCMhpO Z96EfNnrOAxHH19X8tyGN7mUjLWZ6b5yQTmGyOfxc5JxzqghBaQyb/35b jGIp6Bd+Q6Pp0PFMMMPJZUJKu4Cn1YyfIlE0Sm5IQHBNzl3zbaQap33hK 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AUAQBJBhpY/5JdJa1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgnM5AQEBAQEfWIEDjTCrSIIHhiIcggg/FAECAQEBAQEBAWIdC4R?= =?us-ascii?q?oGgEICkwSAQY6AQkCBDAnBA6GAYJaj2qdNo0GAQEBAQEBAQECAQEBAQEBAQEBA?= =?us-ascii?q?R2GPYwgglwFjlGFboVeAYk7hn6BboRvgzuFcYckiXcBHjZnhReHFSuBAoEMAQE?= =?us-ascii?q?B?= X-IronPort-AV: E=Sophos;i="5.31,583,1473120000"; d="scan'208,217";a="170263001" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Nov 2016 15:33:51 +0000 Received: from XCH-ALN-001.cisco.com (xch-aln-001.cisco.com [173.36.7.11]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id uA2FXpYa012047 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 2 Nov 2016 15:33:51 GMT Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-ALN-001.cisco.com (173.36.7.11) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 2 Nov 2016 10:33:50 -0500 Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Wed, 2 Nov 2016 10:33:50 -0500 From: "Alvaro Retana (aretana)" To: "draft-ietf-sidr-bgpsec-protocol@ietf.org" Thread-Topic: AD Review of draft-ietf-sidr-bgpsec-protocol-18 Thread-Index: AQHSNR6CtOW/YAot7EOz/vffo+bn+w== Date: Wed, 2 Nov 2016 15:33:50 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.82.232.125] Content-Type: multipart/alternative; boundary="_000_D401650E13F93Aaretanaciscocom_" MIME-Version: 1.0 Archived-At: Cc: "sidr-chairs@ietf.org" , Matthias Waehlisch , "sidr@ietf.org" Subject: [sidr] AD Review of draft-ietf-sidr-bgpsec-protocol-18 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Nov 2016 15:33:58 -0000 --_000_D401650E13F93Aaretanaciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBhdXRob3JzOg0KDQpIaSEgIEZpcnN0IG9mIGFsbCwgdGhhbmsgeW91IGZvciB0YWtpbmcg b24gdGhlIGR1dGllcyBvZiBlZGl0aW5nIHRoaXMgZG9jdW1lbnQuDQoNCkkgaGF2ZSBzZXZlcmFs IGNvbW1lbnRzIChzZWUgYmVsb3cpLiAgRm9yIHRoZSBtb3N0IHBhcnQsIEkgdGhpbmsgdGhleSBz aG91bGQgYmUgZWFzeSB0byBzb2x2ZSBhcyBtYW55IGFyZSByZWxhdGVkIHRvIGNsYXJpZmljYXRp b25zLiAgTW9zdCBvZiB0aGUgY29tbWVudHMgSSBjbGFzc2lmaWVkIGFzIE1ham9yIGFyZSBkdWUg dG8gdGhlIHVzZSBvZiBOb3JtYXRpdmUgbGFuZ3VhZ2UuDQoNClRoZSBiaWdnZXN0IGNvbmNlcm4g SSBoYXZlIHdpdGggdGhpcyBkb2N1bWVudCBpcyB0aGUgbGFjayBvZiBhbiBPcGVyYXRpb25zIGFu ZCBNYW5hZ2VtZW50IENvbnNpZGVyYXRpb25zIFNlY3Rpb24g4oCTIHBsZWFzZSB0YWtlIGEgbG9v ayBhdCBSRkM1NzA2IChHdWlkZWxpbmVzIGZvciBDb25zaWRlcmluZyBPcGVyYXRpb25zIGFuZCBN YW5hZ2VtZW50IG9mIE5ldyBQcm90b2NvbHMgYW5kIFByb3RvY29sIEV4dGVuc2lvbnMpLiAgU29t ZSBvZiB0aGUgaW5mb3JtYXRpb24gc3VnZ2VzdGVkIHRoZXJlIGlzIHByZXNlbnQgaW4gZHJhZnQt aWV0Zi1zaWRyLWJncHNlYy1vcHMsIGFuZCAoaXJvbmljYWxseSkgaW4gdGhlIOKAnERlc2lnbiBh bmQgRGVwbG95bWVudCBDb25zaWRlcmF0aW9uc+KAnSBzZWN0aW9uIG9mIGRyYWZ0LWlldGYtc2lk ci1iZ3BzZWMtb3ZlcnZpZXcuICBIb3dldmVyLCBpbXBvcnRhbnQgaXRlbXMgc3VjaCBhcyBtaWdy YXRpb24gb3IgbWFuYWdlbWVudCBhcmUgbWlzc2luZy4gIEkgd291bGQgbGlrZSB0byBzZWUgYSB3 ZWxsIHRob3VnaHQgb3V0IE9wZXJhdGlvbnMgYW5kIE1hbmFnZW1lbnQgU2VjdGlvbiBpbiB0aGlz IGRvY3VtZW50IGJlZm9yZSBtb3ZpbmcgaXQgZm9yd2FyZC4gIE5vdGUgdGhhdCBJ4oCZbSBub3Qg c3VnZ2VzdGluZyB0aGF0IGEgWUFORyBtb2RlbCAoZm9yIGV4YW1wbGUpIGlzIHJlcXVpcmVkIHRv IG1vdmUgZm9yd2FyZCwgYnV0IEkgd291bGQgbGlrZSB0byBzZWUgY29uc2lkZXJhdGlvbnMgYWJv dXQgbWlncmF0aW9uLCBhbmQgdGhlIGltcGFjdCBvbiBuZXR3b3JrIG9wZXJhdGlvbnMsIHRvIG1l bnRpb24gdHdvIGl0ZW1zLCBhbGwgaW4gb25lIHBsYWNlIGluIHRoZSBkb2N1bWVudC4gIEkgd291 bGQgbGlrZSB0aGUgYXV0aG9ycy9DaGFpcnMvU2hlcGhlcmQvV0cgdG8gY29uc2lkZXIgZXZlbiBt ZXJnaW5nIGluIGRyYWZ0LWlldGYtc2lkci1iZ3BzZWMtb3BzIGFzIHRoZSBiYXNlIGZvciB0aGlz IG5ldyBzZWN0aW9uIChvciBhdCBsZWFzdCByZWZlcmVuY2UgaXQgcHJvbWluZW50bHkpLg0KDQpU aGFua3MhDQoNCkFsdmFyby4NCg0KDQoNCk1ham9yOg0KDQpNMS4gUmVnaXN0cnkgRGVmaW5pdGlv bnMNCg0KTTEuMS4gU2VjdGlvbiAyLjEuIChUaGUgQkdQc2VjIENhcGFiaWxpdHkpIGluY2x1ZGVz IGEgVmVyc2lvbiBmaWVsZCBhbmQgc29tZSBSZXNlcnZlZCBiaXRzLCBidXQgdGhlcmUgYXJlIG5v IElBTkEgcmVnaXN0cmllcyBkZWZpbmVkIGZvciBob3cgdG8gbWFuYWdlIHRoZXNlIHNwYWNlcy4g IFBsZWFzZSBkZWZpbmUgdGhlIHJlZ2lzdHJpZXMgYW5kIHRoZSBjb3JyZXNwb25kaW5nIHJlZ2lz dHJhdGlvbiBwcm9jZWR1cmVzLg0KDQpNMS4yLiBTZWN0aW9uIDMuMS4gKFNlY3VyZV9QYXRoKSBk ZWZpbmVzIHRoZSBGbGFncyBmaWVsZCBhbmQgYXNzaWducyB0aGUgZmlyc3QgYml0IChCVFcsIGlz IHRoYXQgdGhlIE1TQiBvciB0aGUgTFNCLCBwbGVhc2UgY2xhcmlmeSksIGJ1dCBkb2Vzbid0IHNl dCB1cCB0aGUgcmVnaXN0cnkgb3IgcmVnaXN0cmF0aW9uIHByb2NlZHVyZXMuDQoNCg0KDQpNMi4g RXJyb3IgSGFuZGxpbmcg4oCUIFNldmVyYWwgc2VjdGlvbnMgZG9uJ3QgaGF2ZSBwcm9wZXIgZXJy b3IgaGFuZGxpbmcgcHJvY2VkdXJlcyBzcGVjaWZpZWQuIChUaGlzIGlzIGEgbWFuYWdlbWVudCBp c3N1ZSB0aGF0IEkgdGhpbmsgaXMgdW5kZXJzcGVjaWZpZWQuKQ0KDQpNMi4xLiBTZWN0aW9uIDIu Mi4gKE5lZ290aWF0aW5nIEJHUHNlYyBTdXBwb3J0KSBkb2Vzbid0IGZ1bGx5IHNwZWNpZnkgdGhl IGVycm9yIGhhbmRsaW5nIGJlaGF2aW9yIG9mIHRoZSBDYXBhYmlsaXR5LCBhbmQgaXQgZmFpbHMg b3Blbi4NCg0KTTIuMS4xLiBXaGF0IHNob3VsZCB0aGUgYWN0aW9uIGJlIGlmIHRoZSBWZXJzaW9u IGlzIG5vdCAwPw0KDQpNMi4xLjIuICLigKZhIEJHUCBzcGVha2VyIE1VU1QgTk9UIGFkdmVydGlz ZSB0aGUgY2FwYWJpbGl0eSBvZiBCR1BzZWMgc3VwcG9ydCBmb3IgYSBwYXJ0aWN1bGFyIEFGSSB1 bmxlc3MgaXQgaGFzIGFsc28gYWR2ZXJ0aXNlZCB0aGUgbXVsdGlwcm90b2NvbCBleHRlbnNpb24g Y2FwYWJpbGl0eSBmb3IgdGhlIHNhbWUgQUZJIFtSRkM0NzYwXS4iICBXaGF0IHNob3VsZCBoYXBw ZW4gaWYgaXQgZG9lcyBhZHZlcnRpc2UgYW4gQUZJIHRoYXQgaXMgbm90IGNvdmVyZWQgYnkgdGhl IG11bHRpcHJvdG9jb2wgZXh0ZW5zaW9uIGNhcGFiaWxpdHk/ICAgT3IgaWYgdGhlIG11bHRpLXBy b3RvY29sIGNhcGFiaWxpdHkgaXMgbm90IGFkdmVydGlzZWQgYXQgYWxsPyAgVG8gY2xhcmlmeTog aWYgdGhlIG11bHRpLXByb3RvY29sIGNhcGFiaWxpdHkgaXMgbm90IGFkdmVydGlzZWQgdGhlbiBz dXBwb3J0IGZvciBCR1BzZWMgY2Fu4oCZdCBiZSBhZHZlcnRpc2VkIGVpdGhlciDigJMgZG9lcyB0 aGF0IG1lYW4gdGhhdCBhIEJHUCBzcGVha2VyIGNvbmZpZ3VyZWQgdG8gdXNlIEJHUHNlYyBtdXN0 IG5vdCB1c2UgaXQgaWYgbm90IG5lZ290aWF0ZWQ/ICBJIGtub3cgdGhlIGFuc3dlciBpcyDigJx5 ZXPigJ0sIGJ1dCBJ4oCZbSB0cnlpbmcgdG8gZ2V0IHRvIHRoZSBwb2ludCBvZiBwcm92aXNpb25p bmcgYW5kIGV4cGVjdGF0aW9ucyDigJMgd2h5IGNvbmZpZ3VyZSBCR1BzZWMgaWYgbm8gb25lIGlz IGV4cGVjdGVkIHRvIHN1cHBvcnQgaXQ/DQoNCk0yLjEuMy4gTWlzc2luZyB0aGUgZm91ci1ieXRl IEFTIGNhcGFiaWxpdHkgcmVzdWx0cyBpbiBCR1BzZWMgbm90IHdvcmtpbmcgKCJCR1BzZWMgaGFz IG5vdCBiZWVuIHN1Y2Nlc3NmdWxseSBuZWdvdGlhdGVkIiksIGJ1dCB0aGUgYWJpbGl0eSBvZiBl eGNoYW5naW5nIHJvdXRlcyBpcyBzdGlsbCB0aGVyZSwgbGVhdmluZyB0aGUgc3lzdGVtIGluIGEg ZmFpbCBvcGVuIHN0YXRlIGFuZCBwb3RlbnRpYWxseSBicmVha2luZyB0aGUgY2hhaW4gb2YgQVNO cy4gIFBlcnNvbmFsbHksIGl0IGRvZXNuJ3Qgc2VlbSBsaWtlIGEgZ29vZCByZXN1bHQg4oCUIHBs ZWFzZSBhdCBsZWFzdCBpbmNsdWRlIHNvbWUgdGV4dCBhYm91dCB0aGlzIGluIHRoZSBTZWN1cml0 eSBDb25zaWRlcmF0aW9ucyBzZWN0aW9uLg0KDQoNCk0yLjIuIFRoZSBkZWZpbml0aW9uIG9mIHRo ZSBCR1BzZWNfUGF0aCBBdHRyaWJ1dGUgKGFuZCBpdHMgZGV0YWlscykgZG9uJ3QgaGF2ZSBjbGVh ciBlcnJvciBoYW5kbGluZyBwcm9jZWR1cmVzIGRlZmluZWQgKFJGQzc2MDYpLiAgU2VjdGlvbiA0 LjMuIChQcm9jZXNzaW5nIEluc3RydWN0aW9ucyBmb3IgQ29uZmVkZXJhdGlvbiBNZW1iZXJzKSBk b2VzIHNheSB0aGlzOiAiKEFzIGRpc2N1c3NlZCBpbiBTZWN0aW9uIDUuMiwgYW55IGVycm9yIGlu IHRoZSBCR1BzZWNfUGF0aCBhdHRyaWJ1dGUgTVVTVCBiZSBoYW5kbGVkIHVzaW5nIHRoZSAidHJl YXQtYXMtd2l0aGRyYXciLCBhcHByb2FjaCBhcyBkZWZpbmVkIGluIFJGQyA3NjA2IFtSRkM3NjA2 XS4pIiAoaW5jbHVkaW5nIHRoZSBwYXJlbnRoZXNlcykuICBIb3dldmVyLCA1LDIgb25seSBzYXlz OiAiQkdQc2VjIHNwZWFrZXJzIE1VU1QgaGFuZGxlIHRoZXNlIGVycm9ycyB1c2luZyB0aGUgInRy ZWF0LWFzLXdpdGhkcmF3IiBhcHByb2FjaCBhcyBkZWZpbmVkIGluIFJGQyA3NjA2IFtSRkM3NjA2 XS4iICAgTm90ZTogInRoZXNlIGVycm9ycyIgaXMgbm90IHRoZSBzYW1lIGFzICJhbnkgZXJyb3Ii LiAgUGxlYXNlIGRpc2N1c3MgZXJyb3IgaGFuZGxpbmcgaW4gYSBtb3JlIHByb21pbmVudCBwbGFj ZS4gKEhpbnQ6IGl0IG1heSBmaXQgaW4gYSBmYXVsdCBtYW5hZ2VtZW50IGRpc2N1c3Npb24gaW4g dGhlIE9wZXJhdGlvbnMgYW5kIE1hbmFnZW1lbnQgU2VjdGlvbi4pDQoNCk0yLjIuMS4gVGhlcmUg YXJlIG11bHRpcGxlIHBsYWNlcyBpbiB0aGUgQkdQc2VjX1BhdGggQXR0cmlidXRlIHRoYXQgY291 bGQgZW5kIHVwIGluIGFuIGVycm9yLCBldmVyeXRoaW5nIGZyb20gc2V0dGluZyBiaXRzIGluIHRo ZSBGbGFncyBmaWVsZCB0byB3cm9uZyBMZW5ndGggZmllbGRzLiAgU2hvdWxkIGFsbCBlcnJvcnMg cmVzdWx0IGluIHRoZSBzYW1lIGJlaGF2aW9yPw0KDQoNCg0KTTMuIFNlY3Rpb24gNC4xLiAoR2Vu ZXJhbCBHdWlkYW5jZSk6ICJXaGVuIHByb3BhZ2F0aW5nIGEgcmVjZWl2ZWQgcm91dGUgYWR2ZXJ0 aXNlbWVudCB0byBhbiBpbnRlcm5hbCBwZWVyLCB0aGUgQkdQc2VjIHNwZWFrZXIgdHlwaWNhbGx5 IHBvcHVsYXRlcyB0aGUgQkdQc2VjX1BhdGggYXR0cmlidXRlIGJ5IGNvcHlpbmcgdGhlIEJHUHNl Y19QYXRoIGF0dHJpYnV0ZSBmcm9tIHRoZSByZWNlaXZlZCB1cGRhdGUgbWVzc2FnZS4gIFRoYXQg aXMsIHRoZSBCR1BzZWNfUGF0aCBhdHRyaWJ1dGUgaXMgY29waWVkIHZlcmJhdGlt4oCmLiBOb3Rl IHRoYXQgd2hlbiBhIEJHUHNlYyBzcGVha2VyIGNob29zZXMgdG8gZm9yd2FyZCBhIEJHUHNlYyB1 cGRhdGUgbWVzc2FnZSB0byBhbiBpQkdQIHBlZXIsIHRoZSBCR1BzZWMgYXR0cmlidXRlIFNIT1VM RCBOT1QgYmUgcmVtb3ZlZCwgdW5sZXNzIHRoZSBwZWVyIGRvZXNuJ3Qgc3VwcG9ydCBCR1BzZWMu IiAgVGhlIGZpcnN0IHBhcnQgb2YgdGhlIGd1aWRhbmNlIHNheXMgdGhhdCBhIG5ldyBCR1BzZWNf UGF0aCBhdHRyaWJ1dGUgaXMgY3JlYXRlZCBieSBjb3B5aW5nIHRoZSByZWNlaXZlZCBhdHRyaWJ1 dGUgKHdoaWNoIGlzIHRoZW4gcHJlc3VtYWJseSByZW1vdmVkKSwgYnV0IHRoZSBzZWNvbmQgcGFy dCBzYXlzIHRoYXQgdGhlIHJlY2VpdmVkIGF0dHJpYnV0ZSBTSE9VTEQgTk9UIGJlIHJlbW92ZWQu ICBQbGVhc2UgY2xhcmlmeSBzbyB0aGF0IHRoZXJlIGlzIGNvbnNpc3RlbmN5IC0tIEkgdW5kZXJz dGFuZCB0aGF0IHRoZSByZXN1bHQgaXMgdGhlIHNhbWUsIGJ1dCB0aGUgZGVzY3JpcHRpb24gaXMg bm90IGFuZCB3ZSBzaG91bGQgdHJ5IHRvIGF2b2lkIGNvbmZ1c2lvbi4gIFBhcnRzIG9mIFNlY3Rp b24gNC4yLiAoQ29uc3RydWN0aW5nIHRoZSBCR1BzZWNfUGF0aCBBdHRyaWJ1dGUpIGFsc28gdGFs ayBhYm91dCBhY3Rpb25zIGxpa2UgIuKApmFuZCB0aGVyZSBpcyBhbiBleGlzdGluZyBCR1BzZWNf UGF0aCBhdHRyaWJ1dGUsIHRoZW4gdGhlIEJHUHNlYyBzcGVha2VyIHByZXBlbmRzIGl0cyBuZXcg U2VjdXJlX1BhdGggU2VnbWVudCAocGxhY2VzIGluIGZpcnN0IHBvc2l0aW9uKSBvbnRvIHRoZSBl eGlzdGluZyBTZWN1cmVfUGF0aCIsIHdoaWNoIGhpbnQgYXQgcHJvcGFnYXRpbmcgYSByZWNlaXZl ZCBCR1BzZWNfUGF0aCBhdHRyaWJ1dGUgKGFuZCBub3QgY3JlYXRpbmcgYSBuZXcgb25lKS4NCg0K DQoNCk00LiBTZWN0aW9uIDQuMi4gKENvbnN0cnVjdGluZyB0aGUgQkdQc2VjX1BhdGggQXR0cmli dXRlKSBzYXlzIHRoYXQgIlRoZSBBUyBudW1iZXIgaW4gdGhpcyBTZWN1cmVfUGF0aCBzZWdtZW50 IE1VU1QgbWF0Y2ggdGhlIEFTIG51bWJlciBpbiB0aGUgQVMgbnVtYmVyIHJlc291cmNlIGV4dGVu c2lvbiBmaWVsZCBvZiB0aGUgUmVzb3VyY2UgUEtJIHJvdXRlciBjZXJ0aWZpY2F0ZShzKSB0aGF0 IHdpbGwgYmUgdXNlZCB0byB2ZXJpZnkgdGhlIGRpZ2l0YWwgc2lnbmF0dXJlKHMpIGNvbnN0cnVj dGVkIGJ5IHRoaXMgQkdQc2VjIHNwZWFrZXIgW0ktRC5pZXRmLXNpZHItYmdwc2VjLXBraS1wcm9m aWxlc10uIiAgSG93ZXZlciwgdGhlcmUgaXMgbm8gZXh0ZW5zaW9uIGZpZWxkIG9yIGNlcnRpZmlj YXRlIGluIEktRC5pZXRmLXNpZHItYmdwc2VjLXBraS1wcm9maWxlcyB3aXRoIHRoYXQgbmFtZS4g IFBsZWFzZSBiZSBwcmVjaXNlIHdpdGggdGhlIG5hbWVzLg0KDQoNCg0KTTUuIEluIDQuMjog4oCc QkdQc2VjIHNwZWFrZXJzIFNIT1VMRCBkcm9wIGluY29taW5nIHVwZGF0ZSBtZXNzYWdlcyB3aXRo IHBDb3VudCBzZXQgdG8gemVybyBpbiBjYXNlcyB3aGVyZSB0aGUgQkdQc2VjIHNwZWFrZXIgZG9l cyBub3QgZXhwZWN0IGl0cyBwZWVyIHRvIHNldCBwQ291bnQgdG8gemVyby7igJ0gIFRoaXMgdGV4 dCBzZWVtcyB0byBhc3N1bWUgc29tZSBraW5kIG9mIGNvbmZpZ3VyYXRpb24vcHJvdmlzaW9uaW5n LiAgTm90ZSB0aGF0IFNlY3Rpb24gNS4yLiAoVmFsaWRhdGlvbiBBbGdvcml0aG0pIGFsc28gaGFz IHNpbWlsYXIgdGV4dCBhYm91dCByZWNlaXZpbmcgYW4gVVBEQVRFIOKAnGZyb20gYSBwZWVyIHRo YXQgaXMgbm90IGV4cGVjdGVkIHRvIHNldCBwQ291bnQgZXF1YWwgdG8gemVyb+KAnS4NCg0KDQoN Ck02LiBJbiA0LjI6IOKAnElmIHRoZSByZWNlaXZlZCBCR1BzZWMgdXBkYXRlIG1lc3NhZ2UgY29u dGFpbnMgdHdvIFNpZ25hdHVyZV9CbG9ja3MgYW5kIHRoZSBCR1BzZWMgc3BlYWtlciBzdXBwb3J0 cyBib3RoIG9mIHRoZSBjb3JyZXNwb25kaW5nIGFsZ29yaXRobSBzdWl0ZXMsIHRoZW4gdGhlIG5l dyB1cGRhdGUgbWVzc2FnZSBnZW5lcmF0ZWQgYnkgdGhlIEJHUHNlYyBzcGVha2VyIFNIT1VMRCBp bmNsdWRlIGJvdGggb2YgdGhlIFNpZ25hdHVyZV9CbG9ja3Mu4oCdICBXaHkgaXMgdGhpcyDigJxT SE9VTETigJ0gbm90IGEg4oCcTVVTVOKAnT8gICBXaGVuL3doeSB3b3VsZCBhIHNwZWFrZXIgcmVt b3ZlIG9uZSBvciB0aGUgMj8gIElmIG9uZSBpcyByZW1vdmVkLCBzaG91bGQgdGhlcmUgYmUgYSBy ZXF1aXJlbWVudCB0aGF0IHRoZSBvbmUgdGhhdCB3YXMgdXNlZCB0byBzdWNjZXNzZnVsbHkgdmFs aWRhdGUgdGhlIHVwZGF0ZSBiZSBrZXB0PyAgTm90ZSB0aGF0IFNlY3Rpb24gNy4yIGxhdGVyIHRh bGtzIGFib3V0IHRoZSBwcm9ibGVtcyBvZiByZW1vdmluZyBzaWduYXR1cmVz4oCmDQoNCk02LjEu IE5vdGUgdGhhdCBsYXRlciBpbiB0aGlzIHNlY3Rpb24gdGhlIHRleHQgc2F5cyB0aGF0IOKAnGEg J1ZhbGlkJyBCR1BzZWMgdXBkYXRlIG1lc3NhZ2UgbWF5IGNvbnRhaW4gYSBTaWduYXR1cmVfQmxv Y2sgd2hpY2ggaXMgbm90IGRlZW1lZCAnVmFsaWQnIChlLmcuLCBjb250YWlucyBzaWduYXR1cmVz IHRoYXQgQkdQc2VjIGRvZXMgbm90IHN1Y2Nlc3NmdWxseSB2ZXJpZnkpLiAgTm9uZXRoZWxlc3Ms IHN1Y2ggU2lnbmF0dXJlX0Jsb2NrcyBNVVNUIE5PVCBiZSByZW1vdmVkLuKAnSAgIFRha2luZyB0 aGlzIOKAnE1VU1QgTk9U4oCdIGFsb25nIHdpdGggdGhlIOKAnFNIT1VMROKAnSBhYm92ZSwgdGhl IGRvb3IgaXMgb3BlbiB0byByZW1vdmUgdGhlIFNpZ25hdHVyZV9CbG9jayB1c2VkIHRvIHZlcmlm eSB0aGUgdmFsaWRpdHkgYW5kIGp1c3QgZm9yd2FyZCB0aGUgb25lIG5vdCB1c2VkICh3aGljaCBt YXkgaXRzZWxmIG5vdCBiZSB2YWxpZCkuDQoNCk02LjIuIFNlY3Rpb24gNS4yLiAoVmFsaWRhdGlv biBBbGdvcml0aG0pIG9wZW5zIHRoaXMgZG9vciBldmVuIG1vcmUgd2hlbiBzYXlpbmcgdGhhdCDi gJxJZiBhdCBsZWFzdCBvbmUgU2lnbmF0dXJlX0Jsb2NrIGlzIG1hcmtlZCBhcyAnVmFsaWQnLCB0 aGVuIHRoZSB2YWxpZGF0aW9uIGFsZ29yaXRobSB0ZXJtaW5hdGVzIGFuZCB0aGUgQkdQc2VjIHVw ZGF0ZSBtZXNzYWdlIGlzIGRlZW1lZCB0byBiZSAnVmFsaWQnLuKAnSAgVGhlIHRleHQgaGVyZSBk b2VzbuKAmXQgcmVxdWlyZSB0aGF0IGJvdGggU2lnbmF0dXJlX0Jsb2NrcyBiZSB2ZXJpZmllZCwg YnV0IGltcGxpZXMgdGhhdCBhcyBsb25nIGFzIHRoZSBmaXJzdCBvbmUgaXMgdmFsaWQgdGhlbiB0 aGUgc2Vjb25kIG9uZSBkb2VzbuKAmXQgcmVhbGx5IG5lZWQgdG8gYmUgdmVyaWZpZWQuICBJcyB0 aGF0IHRoZSBpbnRlbnQ/DQoNCg0KDQpNNy4gU2VjdGlvbiA1LiAoUHJvY2Vzc2luZyBhIFJlY2Vp dmVkIEJHUHNlYyBVcGRhdGUpIHRhbGtzIGFib3V0IOKAnGR1cGxpY2F0ZSB1cGRhdGUgbWVzc2Fn ZXPigJ0gKG9uZSB3aGVyZSDigJxpdCBkaWZmZXJzIGZyb20gdGhlIGZpcnN0IHVwZGF0ZSBtZXNz YWdlIG9ubHkgaW4gdGhlIFNpZ25hdHVyZSBmaWVsZHMgKHdpdGhpbiB0aGUgQkdQc2VjX1BhdGgg YXR0cmlidXRlKeKAnSkuDQoNCk03LjEuIOKAnFdpdGggcmVnYXJkcyB0byB0aGUgcHJvY2Vzc2lu ZyBvZiBkdXBsaWNhdGUgdXBkYXRlIG1lc3NhZ2VzLCBpZiB0aGUgZmlyc3QgdXBkYXRlIG1lc3Nh Z2UgaXMgdmFsaWQsIHRoZW4gYW4gaW1wbGVtZW50YXRpb24gU0hPVUxEIE5PVCBydW4gdGhlIHZh bGlkYXRpb24gcHJvY2VkdXJlIG9uIHRoZSBzZWNvbmQsIGR1cGxpY2F0ZSB1cGRhdGUgbWVzc2Fn ZSAoZXZlbiBpZiB0aGUgYml0cyBvZiB0aGUgc2lnbmF0dXJlIGZpZWxkIGFyZSBkaWZmZXJlbnQp LuKAnSAgRXZlbiB0aG91Z2ggYSBkaXNjdXNzaW9uIGFib3V0IG5vbi1kZXRlcm1pbmlzdGljIHNp Z25hdHVyZSBhbGdvcml0aG1zIHByZWNlZGVzIHRoaXMgdGV4dCwgdGhlIHZhbGlkYXRpb24gaXMg c3RpbGwgbm90IHJ1bi4gIEhvdyBjYW4gdGhlIHZhbGlkaXR5IG9mIHRoZSBQYXRoIGJlIGd1YXJh bnRlZWQgaW4gdGhpcyBjYXNlPyAgU2hvdWxkIHRoaXMgYmUgdGhlIGFjdGlvbiBmb3IgYWxsIGFs Z29yaXRobXMgb3Igb25seSBvbmVzIGtub3duIHRvIGJlIG5vbi1kZXRlcm1pbmlzdGljPw0KDQpN Ny4yLiByZmM0MjcxIChpbiBTZWN0aW9uIDkuIChVUERBVEUgTWVzc2FnZSBIYW5kbGluZykgdGFs a3MgYWJvdXQgdGhlIGltcGxpY2l0IHdpdGhkcmF3IG9mIGEgcm91dGUg4oCcaWYgdGhlIE5MUkkg b2YgdGhlIG5ldyByb3V0ZSBpcyBpZGVudGljYWwgdG8gdGhlIG9uZSB0aGUgcm91dGUgY3VycmVu dGx5IGhhcyBzdG9yZWTigKbigJ0uICBUaGUgc2FtZSBOTFJJIGNhc2Ugc2VlbXMgdG8gYmUgYSBw YXJ0aWN1bGFyIGNvbmRpdGlvbiBvZiB0aGUg4oCcZHVwbGljYXRlIHVwZGF0ZeKAnSBkZXNjcmli ZWQgaGVyZS4gIEl0IG1pZ2h0IGJlIGEgZ29vZCBpZGVhIHRvIG1lbnRpb24gdGhhdCBhIOKAnGR1 cGxpY2F0ZSB1cGRhdGXigJ0gcmVzdWx0cyBpbiB0aGUgaW1wbGljaXQgd2l0aGRyYXcgb2YgdGhl IG9yaWdpbmFsIHVwZGF0ZS4gIFdoYXQgaGFwcGVucyBpZiBhIHRoaXJkIGR1cGxpY2F0ZSByb3V0 ZSBpcyByZWNlaXZlZCAodGhlIGZpcnN0IG9uZSB3YXMgdmFsaWQsIHRoZSBzZWNvbmQgb25lIHdh cyBub3QgdmFsaWRhdGVkKSwgc2hvdWxkIGl0IGJlIHZhbGlkYXRlZD8NCg0KDQoNCk04LiBTZWN0 aW9uIDUuMS4gKE92ZXJ2aWV3IG9mIEJHUHNlYyBWYWxpZGF0aW9uKSBzYXlzIHRoYXQgIkJHUHNl YyBzcGVjaWZpZXMgbm8gY2hhbmdlcyB0byB0aGUgQkdQIGRlY2lzaW9uIHByb2Nlc3MuIiAgSG93 ZXZlciwgU2VjdGlvbiA1LiAoUHJvY2Vzc2luZyBhIFJlY2VpdmVkIEJHUHNlYyBVcGRhdGUpIGFs c28gc2F5cyB0aGF0ICJhIEJHUHNlYyBzcGVha2VyIE1VU1QgdXRpbGl6ZSB0aGUgQVMgcGF0aCBp bmZvcm1hdGlvbiBpbiB0aGUgQkdQc2VjX1BhdGggYXR0cmlidXRlIGluIGFsbCBjYXNlcyB3aGVy ZSBpdCB3b3VsZCBvdGhlcndpc2UgdXNlIHRoZSBBUyBwYXRoIGluZm9ybWF0aW9uIGluIHRoZSBB U19QQVRIIGF0dHJpYnV0ZS4iICBJJ20gYXNzdW1pbmcgdGhhdCB0aGUgRGVjaXNpb24gUHJvY2Vz cyBpcyBpbmNsdWRlZCBpbiAiYWxsIGNhc2VzIi4gIEV2ZW4gdGhvdWdoIDUuMSByZWZlcnMgdG8g dGhlIHVzZSB0aGUgdmFsaWRhdGlvbiBzdGF0ZSBpbiB0aGUgZGVjaXNpb24gcHJvY2VzcywgcGxl YXNlIG1ha2Ugc3VyZSB0aGF0IGl0IGlzIGNsZWFyIHRoYXQgdGhlIGRlY2lzaW9uIHByb2Nlc3Mg aXMgbW9kaWZpZWQgYnkgdGhlIHVzZSBvZiB0aGUgZGlmZmVyZW50IGF0dHJpYnV0ZS4NCg0KTTgu MS4gUGxlYXNlIHNwZWNpZmljYWxseSBpbmNsdWRlIGEgc2VjdGlvbiAob3IgdGV4dCBzb21ld2hl cmUpIGFib3V0IGhvdyB0aGUgaW5mb3JtYXRpb24gaW4gdGhlIEJHUHNlY19QYXRoIGF0dHJpYnV0 ZSBpcyB1c2VkIGluIHRoZSBEZWNpc2lvbiBQcm9jZXNzLiAgRm9yIGV4YW1wbGUsIGhvdyBzaG91 bGQgdGhlICJudW1iZXIgb2YgQVMgbnVtYmVycyIgaW4gdGhlIHBhdGggYmUgY2FsY3VsYXRlZCBm b3IgOS4xLjIuMi4gKEJyZWFraW5nIFRpZXMgKFBoYXNlIDIpKSBpbiByZmM0MjcxPyAgVGhlIHRl eHQgdGFsa3MgYWJvdXQgdGhlICJlZmZlY3RpdmUgbGVuZ3RoIiBiZWluZyB0aGUgc3VtIG9mIHRo ZSBwQ291bnQgdmFsdWVzLCBidXQgdGhlICJlZmZlY3RpdmUgbGVuZ3RoIiAoYXQgbGVhc3Qgd2l0 aCB0aGF0IG5hbWUpIGlzIG5vdCB3aGF0IGlzIHVzZWQgaW4gcmZjNDE3MiDigJQgcGxlYXNlIGJl IGNsZWFyIGFuZCBjb25zaXN0ZW50Lg0KDQpNOC4yLiBbbWlub3JdIFNlY3Rpb24gMy4gKFRoZSBC R1BzZWNfUGF0aCBBdHRyaWJ1dGUpIHJlYWRzOiAiVGhlIGluZm9ybWF0aW9uIGluIFNlY3VyZV9Q YXRoIGlzIHVzZWQgYnkgQkdQc2VjIHNwZWFrZXJzIGluIHRoZSBzYW1lIHdheSB0aGF0IGluZm9y bWF0aW9uIGZyb20gdGhlIEFTX1BBVEggaXMgdXNlZCBieSBub24tQkdQc2VjIHNwZWFrZXJzLiIg IFRoaXMgaXMgcHJldHR5IG11Y2ggdGhlIHNhbWUgaW5mb3JtYXRpb24gdGhhdCBpcyBpbiBTZWN0 aW9uIDUsIGJ1dCB3aXRoIG1vcmUgc3BlY2lmaWNpdHkuICBJdCB3b3VsZCBoZWxwIGlmIHRoZSBt b3JlIHNwZWNpZmljIGNhc2Ugd2FzIHRoZSBvbmUgbm9ybWF0aXZlbHkgY2FsbGVkIG91dC4NCg0K DQoNCk05LiBTZWN0aW9uIDUuMi4gKFZhbGlkYXRpb24gQWxnb3JpdGhtKS4gIFJGQzQyNzEgYWxz byBzcGVjaWZpZXMgYSBzZXJpZXMgb2YgdmFsaWRpdHkgY2hlY2tzIHdoZW4gYW4gVVBEQVRFIGlz IHJlY2VpdmVkIChTZWN0aW9uIDYuMykg4oCTIHNob3VsZCB0aGF0IGNoZWNrIGJlIHJ1biBiZWZv cmUgb3IgYWZ0ZXIgdGhlIGFsZ29yaXRobSBzcGVjaWZpZWQgaGVyZT8gIFRoZSBhbGdvcml0aG0g Zm9jdXNlcyBvbiB2ZXJpZnlpbmcgdGhlIHZhbGlkaXR5IG9mIHRoZSBCR1BzZWNfUGF0aCBhdHRy aWJ1dGUgKGFuZCBub3QgdGhlIHdob2xlIFVQREFURSksIHNvIEnigJltIGFzc3VtaW5nIGl0IHNo b3VsZCBiZSBleGVjdXRlZCBpbnN0ZWFkIG9mIGNoZWNraW5nIHRoZSBBU19QQVRILiAgUGxlYXNl IGluY2x1ZGUgc29tZSB0ZXh0IGFib3V0IHRoZSBpbnRlcmFjdGlvbi9jaGFuZ2VzLg0KDQpNOS4x LiAgU2VjdGlvbiA1LjIuIChWYWxpZGF0aW9uIEFsZ29yaXRobSk6IOKAnOKApnRoZW4gdGhlIEJH UHNlYyBzcGVha2VyIE1VU1QgdHJlYXQgdGhlIHVwZGF0ZSBtZXNzYWdlIGluIHRoZSBzYW1lIG1h bm5lciB0aGF0IHRoZSBCR1BzZWMgc3BlYWtlciB3b3VsZCB0cmVhdCBhbiAodW5zaWduZWQpIHVw ZGF0ZSBtZXNzYWdlIHRoYXQgYXJyaXZlZCB3aXRob3V0IGEgQkdQc2VjX1BhdGggYXR0cmlidXRl LuKAnSAgIFdoYXQgZXhhY3RseSBkb2VzIHRoaXMgbWVhbj8gIElmIHRoZSBCR1BzZWNfUGF0aCBh dHRyaWJ1dGUgaXMgbm90IHJlY2VpdmVkLCB0aGVuIHRoZSBBU19QQVRIIHNob3VsZCBiZSDigJMg ZG9lcyB0aGUgdGV4dCBpbXBseSB0aGF0IHRoZSBBU19QQVRIIHNob3VsZCBiZSByZWNvbnN0cnVj dGVkPyAgSSBndWVzcyBpdCBzaG91bGQgYmUgaWYgdGhlIHVwZGF0ZSBpcyB0byBiZSBwcm9wYWdh dGVkIOKAkyBidXQgdGhlIHF1ZXN0aW9uIGlzIHdoaWxlIHRoZSB1cGRhdGUgaXMgYmVpbmcgcHJv Y2Vzc2VkLCB3aGljaCBBUyBwYXRoIGluZm9ybWF0aW9uIGlzIHVzZWQsIHRoZSBvbmUgaW4gYSBy ZWNvbnN0cnVjdGVkIEFTX1BBVEggb3IgdGhlIG9uZSBpbiB0aGUgQkdQc2VjX1BhdGggd2hpbGUg YXNzdW1pbmcgdGhhdCBhbGwgdGhlIHNpZ25hdHVyZXMgYXJlIGNvcnJlY3Q/DQoNCg0KDQpNMTAu ICBJbiBTZWN0aW9uIDcuMi4gKE9uIHRoZSBSZW1vdmFsIG9mIEJHUHNlYyBTaWduYXR1cmVzKTog 4oCc4oCmdGhlIHByb3RvY29sIHNwZWNpZmllcyB0aGF0IGEgQkdQc2VjIHNwZWFrZXIgY2hvb3Np bmcgdG8gcHJvcGFnYXRlIHRoZSByb3V0ZSBhZHZlcnRpc2VtZW50IGluIHN1Y2ggYW4gdXBkYXRl IG1lc3NhZ2UgU0hPVUxEIGFkZCBpdHMgc2lnbmF0dXJlIHRvIGVhY2ggb2YgdGhlIFNpZ25hdHVy ZV9CbG9ja3Mu4oCdICAgSSBiZWxpZXZlIHRoZSByZWZlcmVuY2UgaXMgU2VjdGlvbiA0LjIgKHBs ZWFzZSBhZGQgaXQpLiAgSG93ZXZlciwgdGhhdCBTZWN0aW9uIGRvZXNu4oCZdCB1c2Ugbm9ybWF0 aXZlIGxhbmd1YWdlICjigJxGb3IgZWFjaCBTaWduYXR1cmVfQmxvY2sgY29ycmVzcG9uZGluZyB0 byBhbiBhbGdvcml0aG0gc3VpdGUgdGhhdCB0aGUgQkdQc2VjIHNwZWFrZXIgZG9lcyBzdXBwb3J0 LCB0aGUgQkdQc2VjIHNwZWFrZXIgYWRkcyBhIG5ldyBTaWduYXR1cmUgU2VnbWVudCB0byB0aGUg U2lnbmF0dXJlX0Jsb2NrLuKAnSkgICBJbiBhbnkgY2FzZSwgdGhlIOKAnFNIT1VMROKAnSBpbiA3 LjIgaXMgb3V0IG9mIHBsYWNlIGJlY2F1c2UgaXQgaXMgcmVmZXJlbmNpbmcgYSBmYWN0IChwb2lu dGluZyBhdCB0aGUgb3RoZXIgc2VjdGlvbikgYW5kIG5vdCBiZWluZyB1c2VkIG5vcm1hdGl2ZWx5 IOKAkyBpZiB5b3Ugd2FudCB0aGUg4oCcU0hPVUxE4oCdIHRvIGJlIG5vcm1hdGl2ZSwgdGhlbiBp dCBzaG91bGQgYmUgYmFjayBpbiA0LjIuDQoNCg0KTTExLiBUaGUgRmlndXJlcyAod2hpY2ggYXJl IG5vdCBudW1iZXJlZCkgaW4gNC4yLiAoQ29uc3RydWN0aW5nIHRoZSBCR1BzZWNfUGF0aCBBdHRy aWJ1dGUpIGFuZCA1LjIuIChWYWxpZGF0aW9uIEFsZ29yaXRobSkgcHJlc2VudCB0aGUgc2VxdWVu Y2Ugb2Ygb2N0ZXRzIHRvIGJlIGhhc2hlZC4gIEnigJltIGd1ZXNzaW5nIHRoYXQgdGhlIG9yZGVy IG9mIHRoZSBTaWduYXR1cmUgYW5kIFNlY3VyZV9QYXRoIFNlZ21lbnRzIG1heSBiZSBpbXBvcnRh bnQsIGlzIGl0PyAgVGhlIG9yZGVyIGluIHRoZSBGaWd1cmVzIGlzIG5vdCBjbGVhciB0byBtZSwg aWYgdGhlIG9yZGVyIGlzIGltcG9ydGFudCwgcGxlYXNlIGJlIGNsZWFyIGFib3V0IGl0OyBpZiBu b3QsIHBsZWFzZSBhbHNvIHNheSBzby4NCg0KDQoNCk0xMi4gVGhlIG1hbmRhdG9yeSBhZGRpdGlv biBvZiBTZWN1cmVfUGF0aCBhbmQgU2lnbmF0dXJlIHNlZ21lbnRzIGluIGEgQ29uZmVkZXJhdGlv biByZXN1bHRzIGluIHRoZSBpbmNvbnNpc3RlbnQgYXV0aG9yaXphdGlvbiBjaGFpbiBtZW50aW9u ZWQgaW4gU2VjdGlvbiA0LjMuIChQcm9jZXNzaW5nIEluc3RydWN0aW9ucyBmb3IgQ29uZmVkZXJh dGlvbiBNZW1iZXJzKTog4oCcRm9yIGEgc2lnbmF0dXJlIHByb2R1Y2VkIGJ5IGEgcGVlciBCR1Bz ZWMgc3BlYWtlciBvdXRzaWRlIG9mIGEgY29uZmVkZXJhdGlvbiwgdGhlIFRhcmdldCBBUyB3aWxs IGFsd2F5cyBiZSB0aGUgQVMgQ29uZmVkZXJhdGlvbiBJZGVudGlmaWVyICh0aGUgcHVibGljIEFT IG51bWJlciBvZiB0aGUgY29uZmVkZXJhdGlvbikgYXMgb3Bwb3NlZCB0byB0aGUgTWVtYmVyLUFT IE51bWJlci7igJ0gIEl0IHNlZW1zIHRvIG1lIHRoYXQgdGhpcyBkaXNjb250aW51aXR5IGluIHRo ZSBBU04gbGlzdCBicmVha3MgdGhlIOKAnGNyeXB0b2dyYXBoaWMgYXNzdXJhbmNlIHRoYXTigKZF dmVyeSBBUyBvbiB0aGUgcGF0aCBvZiBBU2VzIGxpc3RlZCBpbiB0aGUgdXBkYXRlIG1lc3NhZ2Ug aGFzIGV4cGxpY2l0bHkgYXV0aG9yaXplZCB0aGUgYWR2ZXJ0aXNlbWVudCBvZiB0aGUgcm91dGUg dG8gdGhlIHN1YnNlcXVlbnQgQVMgaW4gdGhlIHBhdGjigJ0gYmVjYXVzZSB0aGVyZSBpcyBubyB3 YXkgdG8gdmVyaWZ5IHRoYXQgdGhlIE1lbWJlci1BUyBpbiB0aGUgZmlyc3QgU2VjdXJlX1BhdGgg c2VnbWVudCBpcyBpbiBmYWN0IHRoZSBvbmUgcGVlcmluZyB3aXRoIHRoZSBleHRlcm5hbCBuZWln aGJvci4gIEkgcmVhbGl6ZSB0aGF0IHRoZSByaXNrIG1heSBiZSBtaW5pbWl6ZWQgYnkgYW4g4oCc aW50ZXJuYWwgdHJ1c3TigJ0gZmFjdG9yLCBidXQgSSB3b3VsZCBsaWtlIHRvIHNlZSBhIGRpc2N1 c3Npb24gYWJvdXQgdGhpcyBpc3N1ZSBpbiB0aGUgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMuDQoN Cg0KDQpNMTMuIFdoYXQgYWJvdXQgcmVwbGF5IGF0dGFja3M/ICBUaGVyZSBpcyBubyBtZW50aW9u IG9mIHRoZSByaXNrIG9yIHBvdGVudGlhbCBtaXRpZ2F0aW9uIGFueXdoZXJlLiAgUGxlYXNlIGlu Y2x1ZGUgaW4gdGhlIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHNlY3Rpb24uDQoNCg0KDQpNaW5v cjoNCg0KbTEuIFRoZSB1c2Ugb2YgU0tJLCBTdWJqZWN0IEtleSBJZGVudGlmaWVyIHdpdGhvdXQg YSBxdWFsaWZpZXIgKGZpZWxkLCBleHRlbnNpb24pIGlzIGNvbmZ1c2luZyBhdCB0aW1lcy4gICBQ bGVhc2UgZXhwYW5kIFNLSSBvbiBmaXJzdCB1c2UuICBBbiBleGFtcGxlOiAoZnJvbSAzLjIpIOKA nFRoZSBTdWJqZWN0IEtleSBJZGVudGlmaWVyIGNvbnRhaW5zIHRoZSB2YWx1ZSBpbiB0aGUgU3Vi amVjdCBLZXkgSWRlbnRpZmllciBleHRlbnNpb24gb2YgdGhlIFJQS0nigKbigJ0gIFRoZSBmaXJz dCBtZW50aW9uIHNob3VsZCBpbmNsdWRlIOKAnGZpZWxk4oCdLCBsaWtlIHNpbWlsYXIgdGV4dCBp biA0LjIuDQoNCg0KbTIuIFNlY3Rpb24gNC4gKEJHUHNlYyBVcGRhdGUgTWVzc2FnZXMpIHNheXM6 ICJBIEJHUHNlYyBzcGVha2VyIHRoYXQgaXMgbm90IGEgbWVtYmVyIG9mIHN1Y2ggYSBjb25mZWRl cmF0aW9uIE1VU1Qgc2V0IHRoZSBGbGFncyBmaWVsZCBvZiB0aGUgU2VjdXJlX1BhdGggU2VnbWVu dCB0byB6ZXJvIGluIGFsbCBCR1BzZWMgdXBkYXRlIG1lc3NhZ2VzIGl0IHNlbmRzLiIgIFdoaWxl IG9ubHkgb25lIGZsYWcgaXMgZGVmaW5lZCwgdGhlIGNvcnJlY3Qgc3RhdGVtZW50IGlzICLigKZz ZXQgdGhlIENvbmZlZF9TZWdtZW50IGZsYWfigKYiLg0KDQoNCm0zLiBTZWN0aW9uIDQuMS4gKEdl bmVyYWwgR3VpZGFuY2UpOiBzLyJBIEJHUHNlYyB1cGRhdGUgbWVzc2FnZSBNVVNUIGFkdmVydGlz ZSBhIHJvdXRlIHRvIG9ubHkgYSBzaW5nbGUgTkxSSS4iLyJBIEJHUHNlYyB1cGRhdGUgbWVzc2Fn ZSBNVVNUIGFkdmVydGlzZSBhIHJvdXRlIHRvIG9ubHkgYSBzaW5nbGUgcHJlZml4LiIgICBUaGlz IHNlY3Rpb24gY29udGFpbnMgb3RoZXIgcGxhY2VzIHdoZXJlIHRoZSBOTFJJIHRlcm0gaXMgbm90 IHVzZWQgY29ycmVjdGx5LiAgSW4gc2hvcnQsIHRoZSBOTFJJIGluIGEgQkdQIFVwZGF0ZSBjb250 YWlucyBvbmUgb3IgbW9yZSBwcmVmaXhlcyDigJQgc28gdGhlIHRleHQgc2hvdWxkIHRhbGsgYWJv dXQgYSBzaW5nbGUgcHJlZml4LCBub3QgYSBzaW5nbGUgTkxSSS4NCg0KDQptNC4gSW4gYmV0d2Vl biB0aGUgdGV4dCBhYm92ZSwgdGhlIGZvbGxvd2luZyBpcyB3cml0dGVuOiAiSG93ZXZlciwgaW4g dGhlIGNhc2UgdGhhdCB0aGUgQkdQc2VjIHNwZWFrZXIgaXMgcGVyZm9ybWluZyBhbiBBUyBNaWdy YXRpb24sIHRoZSBCR1BzZWMgc3BlYWtlciBtYXkgYWRkIGFuIGFkZGl0aW9uYWwgc2lnbmF0dXJl IG9uIGluZ3Jlc3MgYmVmb3JlIGNvcHlpbmcgdGhlIEJHUHNlY19QYXRoIGF0dHJpYnV0ZSAoc2Vl IFtJLUQuaWV0Zi1zaWRyLWFzLW1pZ3JhdGlvbl0gZm9yIG1vcmUgZGV0YWlscykuIiAgQmVjYXVz ZSBJLUQuaWV0Zi1zaWRyLWFzLW1pZ3JhdGlvbiBpcyBtYXJrZWQgYXMgVXBkYXRpbmcgdGhpcyBk b2N1bWVudCwgSSBzdWdnZXN0IHlvdSByZW1vdmUgdGhpcyB0ZXh0IChhbmQgdGhlIG9uZSBpbiA0 LjIpIC0tIG5vdGUgdGhhdCB0aGUgc3RhdGVtZW50cyBtYWRlIGluIHRoaXMgZG9jdW1lbnQgYXJl IG5vdCBub3JtYXRpdmUgYW55d2F5IGFuZCBJLUQuaWV0Zi1zaWRyLWFzLW1pZ3JhdGlvbiBjYW4g c3RhbmQgb24gaXRzIG93biBieSBjbGVhcmx5IHNwZWNpZnlpbmcgd2hhdCBpcyBuZWVkZWQgZm9y IEFTIE1pZ3JhdGlvbi4NCg0KDQptNS4gSW4gNC4yOiDigJxUbyBwcmV2ZW50IHVubmVjZXNzYXJ5 IHByb2Nlc3NpbmcgbG9hZOKApmEgQkdQc2VjIHNwZWFrZXIgU0hPVUxEIE5PVCBwcm9kdWNlIG11 bHRpcGxlIGNvbnNlY3V0aXZlDQpTZWN1cmVfUGF0aCBTZWdtZW50cyB3aXRoIHRoZSBzYW1lIEFT IG51bWJlci4gIFRoaXMgbWVhbnMgdGhhdCB0byBhY2hpZXZlIHRoZSBzZW1hbnRpY3Mgb2YgcHJl cGVuZGluZyB0aGUgc2FtZSBBUyBudW1iZXIgayB0aW1lcywgYSBCR1BzZWMgc3BlYWtlciBTSE9V TEQgcHJvZHVjZSBhIHNpbmdsZSBTZWN1cmVfUGF0aCBTZWdtZW50IOKAkyB3aXRoIHBDb3VudCBv ZiBrLi4u4oCdICBHaXZlbiBwQ291bnQsIEnigJltIHdvbmRlcmluZyB3aHkgdGhlc2UgU0hPVUxE cyBhcmUgbm90IE1VU1RzLCBlc3BlY2lhbGx5IGdpdmVuIHRoZSBleHBlY3RlZCBhZGRpdGlvbmFs IGxvYWQuDQoNCg0KbTYuIFNlY3Rpb24gNC4zLiAoUHJvY2Vzc2luZyBJbnN0cnVjdGlvbnMgZm9y IENvbmZlZGVyYXRpb24gTWVtYmVycykgZXhwbGFpbnMgdGhlIHByb2Nlc3Mgb2YgYWRkaW5nIFNl Y3VyZV9QYXRoIGFuZCBTaWduYXR1cmUgc2VnbWVudHMgdGhhdCBtYXkgb3IgbWF5IG5vdCBiZSB1 c2VkIGF0IGFsbCAoZ2l2ZW4gdGhhdCB0aGUgdmVyaWZpY2F0aW9uIGlzIG9wdGlvbmFsKSwgb25s eSB0byByZW1vdmUgdGhlbSBsYXRlci4gIFdoeSBpc27igJl0IHRoZSBwcm9jZXNzIG9mIGFkZGlu ZyBTZWN1cmVfUGF0aCBhbmQgU2lnbmF0dXJlIHNlZ21lbnRzIG9wdGlvbmFsIGl0c2VsZiAoaW5z dGVhZCBvZiBqdXN0IHRoZSB2YWxpZGF0aW9uKT8NCg0KDQptNy4gSW4gNC40LiAoUmVjb25zdHJ1 Y3RpbmcgdGhlIEFTX1BBVEggQXR0cmlidXRlKSwgd2hhdCBzaG91bGQgaGFwcGVuIGlmIHRoZSBD b25mZWRfU2VnbWVudCBmbGFnIGlzIHNldCB0byB6ZXJvIGFuZCB0aGUgbW9zdC1yZWNlbnRseSBh ZGRlZCBzZWdtZW50IGluIHRoZSBBU19QQVRIIGlzIG9mIHR5cGUgQVNfQ09ORkVEX1NFUVVFTkNF PyAgVGhlb3JldGljYWxseSB0aGlzIGNhbuKAmXQgb2NjdXIgYmVjYXVzZSBpdCBtZWFucyB0aGF0 IHNvbWVvbmUgYWNjZXB0ZWQgYW4gdXBkYXRlIHRoYXQgaXQgc2hvdWxkbuKAmXQgaGF2ZSwgYnV0 IHBsZWFzZSBpbmNsdWRlIHNvbWUgdGV4dCBhYm91dCB0aGlzIGNhc2UgYmVpbmcgYW4gZXJyb3Iu DQoNCg0KbTguIFNlY3Rpb24gNS4xLiAoT3ZlcnZpZXcgb2YgQkdQc2VjIFZhbGlkYXRpb24pOiDi gJxJdCBpcyBleHBlY3RlZCB0aGF0IEJHUCBwZWVycyB3aWxsIGdlbmVyYWxseSBwcmVmZXIgcm91 dGVzIHJlY2VpdmVkIHZpYSAnVmFsaWQnIEJHUHNlYyB1cGRhdGUgbWVzc2FnZXMgb3ZlciBib3Ro IHJvdXRlcyByZWNlaXZlZCB2aWEgJ05vdCBWYWxpZCcgQkdQc2VjIHVwZGF0ZSBtZXNzYWdlcyBh bmQgcm91dGVzIHJlY2VpdmVkIHZpYSB1cGRhdGUgbWVzc2FnZXMgdGhhdCBkbyBub3QgY29udGFp biB0aGUgQkdQc2VjX1BhdGggYXR0cmlidXRl4oCmKFNlZSBbSS1ELmlldGYtc2lkci1iZ3BzZWMt b3BzXeKApuKAnSAgSSByZWFkIHRoaXMgcGllY2Ugb2YgdGV4dCBhcyBzYXlpbmcgdGhhdCByb3V0 ZXMgaW4gTm90IFZhbGlkIHVwZGF0ZXMgYXJlIGV4cGVjdGVkIHRvIGJlIHVzZWQgKGV2ZW4gdGhv dWdoIHRoZXkgYXJlIG5vdCB2YWxpZCkuICBCZXNpZGVzIHRoZSBmYWN0IHRoYXQgSS1ELmlldGYt c2lkci1iZ3BzZWMtb3BzIGRvZXMgcmVjb21tZW5kIHVzaW5nIE5vdCBWYWxpZCBhbm5vdW5jZW1l bnRzIChpbiBTZWN0aW9uIDcpLCBhcmUgdGhlcmUgb3RoZXIgcmVhc29ucyBmb3IgdGhpcyBkb2N1 bWVudCB0byBleHBlY3QgdGhlaXIgdXNlPw0KDQoNCm05LiBTZWN0aW9uIDUuMSBjb250YWlucyB0 aGVzZSByZWZlcmVuY2VzOiDigJzigKZ0aGUgdHJ1c3RlZCBjYWNoZSBjb3VsZCBkZWxpdmVyIHRo ZSBuZWNlc3NhcnkgdmFsaWRpdHkgaW5mb3JtYXRpb24gdG8gdGhlIEJHUHNlYyBzcGVha2VyIHVz aW5nIHRoZSByb3V0ZXIga2V5IFBEVSBbSS1ELmlldGYtc2lkci1ydHIta2V5aW5nXSBmb3IgdGhl IFJQS0ktdG8tUm91dGVyIHByb3RvY29sIFtJLUQuaWV0Zi1zaWRyLXJwa2ktcnRyLXJmYzY4MTAt YmlzXS7igJ0gICBUaGUgcmVmZXJlbmNlIHRvIEktRC5pZXRmLXNpZHItcnRyLWtleWluZyBzZWVt cyB0byBiZSByZWxhdGVkIHRvIHRoZSDigJxyb3V0ZXIga2V5IFBEVeKAnSwgYnV0IHRoYXQgaXMg ZGVmaW5lZCBpbiBJLUQuaWV0Zi1zaWRyLXJwa2ktcnRyLXJmYzY4MTAtYmlzLCBzbyBpdCBsb29r cyBsaWtlIHRoZSBmaXJzdCByZWZlcmVuY2UgaXMgbm90IG5lZWRlZC4NCg0KDQptMTAuIEluIDUu MTog4oCcQXMgZGlzY3Vzc2VkIGluIFNlY3Rpb24gNCwgd2hlbiBhIEJHUHNlYyBzcGVha2VyIGNo b29zZXMgdG8gZm9yd2FyZOKApiwgaXQgU0hPVUxEIGJlIGZvcndhcmRlZCB3aXRoIGl0cyBCR1Bz ZWNfUGF0aCBhdHRyaWJ1dGXigKbigJ0gICBUaGF0IOKAnFNIT1VMROKAnSBpcyBwb2ludGluZyBh dCBhIGZhY3QsIG5vdCBhY3Rpbmcgbm9ybWF0aXZlbHkgaW4gdGhpcyBzZW50ZW5jZSBzbyBwbGVh c2UgY2hhbmdlIGl0IHRvIOKAnHNob3VsZOKAnS4NCg0KDQptMTEuIFNlY3Rpb24gNS4yLiAoVmFs aWRhdGlvbiBBbGdvcml0aG0pIG1lbnRpb25zIHRoaXMgY2hlY2s6IOKAmHVwZGF0ZS4uZnJvbSBh IHBlZXIgdGhhdCBpcyBub3QgYSBtZW1iZXIgb2YgdGhlIEJHUHNlYyBzcGVha2VyJ3MgQVMgY29u ZmVkZXJhdGlvbiwgY2hlY2sgdG8gZW5zdXJlIHRoYXQgbm9uZSBvZiB0aGUgU2VjdXJlX1BhdGgg c2VnbWVudHMgY29udGFpbiBhIEZsYWdzIGZpZWxkIHdpdGggdGhlIENvbmZlZF9TZXF1ZW5jZSBm bGFnIHNldCB0byBvbmUu4oCdICBJ4oCZbSBzdXJlIHRoYXQgdGhlIGNoZWNrIGZvciB0aGUgZmxh ZyBzZXQgaWYgdGhlIHBlZXIgaXMgYSBDb25mZWRlcmF0aW9uIHBlZXIgaXMgYWxzbyBuZWVkZWQs IGJ1dCBub3QgbWVudGlvbmVkIGluIHRoaXMgc2VjdGlvbiAod2hlcmUgdGhlIG5vcm1hdGl2ZSBN VVNUIGZvciB0aGUgdmFsaWRhdGlvbiBhbGdvcml0aG0pIGlzIHByZXNlbnQuICBTZWN0aW9uIDQu My4gKFByb2Nlc3NpbmcgSW5zdHJ1Y3Rpb25zIGZvciBDb25mZWRlcmF0aW9uIE1lbWJlcnMpIGRv ZXMgc2F5IHRoaXM6IOKAnOKApndoZW4gYSBjb25mZWRlcmF0aW9uIG1lbWJlciBydW5zIHRoZSBh bGdvcml0aG0gaW4gU2VjdGlvbiA1LjIsIHRoZSBjb25mZWRlcmF0aW9uIG1lbWJlciwgZHVyaW5n IHByb2Nlc3Npbmcgb2YgYSBTaWduYXR1cmUgU2VnbWVudCwgZmlyc3QgY2hlY2tzIHdoZXRoZXIg dGhlIENvbmZlZF9TZXF1ZW5jZSBmbGFnIGluIHRoZSBjb3JyZXNwb25kaW5nIFNlY3VyZV9QYXRo IHNlZ21lbnQgaXMgc2V0IHRvIG9uZS7igJ0gICBJIHdvdWxkIGxpa2UgdG8gc2VlIHRoZSBmdWxs IGFsZ29yaXRobSBzcGVjaWZpZWQgaW4gb25lIHBsYWNlIChldmVuIGlmLCBsaWtlIGluIFNlY3Rp b24gNC4zLCBwaWVjZXMgb2YgaXQgYXJlIGV4cGxhaW5lZCBlbHNld2hlcmUpLiAgQWxzbywgdGhl IHRleHQgaW4gNC4zIHNheXMgdGhhdCB0aGUgY2hlY2sgaXMgcGVyZm9ybWVkIOKAnGR1cmluZyBw cm9jZXNzaW5nIG9mIGEgU2lnbmF0dXJlIFNlZ21lbnTigJ0sIHdoaWNoIGlzIGZpbmUsIGJ1dCBw cm9iYWJseSBsYXRlIGluIHRoZSBwcm9jZXNzIChjb21wYXJlZCB0byB0aGUgdGV4dCBpbiA1LjIg dGhhdCBzZWVtcyB0byByZXF1aXJlIHRoZSBjaGVjayB3aGVuIHRoZSB1cGRhdGVzIGFyZSByZWNl aXZlZCkuDQoNCg0KbTEyLiBJbiBTZWN0aW9uIDcuNC4gKEFkZGl0aW9uYWwgU2VjdXJpdHkgQ29u c2lkZXJhdGlvbnMpLCBwbGVhc2UgYWRkIGEgcmVmZXJlbmNlIHRvIHBvaW50IGF0IOKAnGFwcHJv cHJpYXRlIHRyYW5zcG9ydCBzZWN1cml0eSBtZWNoYW5pc21zLuKAnSwgYW5kL29yIHBvaW50IGF0 IHRoZSBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyBmcm9tIHJmYzQyNzEuDQoNCg0KDQpOaXRzOg0K DQpuMS4gSW4gc2V2ZXJhbCBwbGFjZXMgdGhlIHRleHQgdXNlcyDigJx3ZeKAnSAoZm9yIGV4YW1w bGU6IOKAnHdlIGV4cGVjdOKApuKAnSkuICBJdOKAmXMganVzdCBhIG1hdHRlciBvZiBzdHlsZSwg YnV0IHVzaW5nIHRoZSB0aGlyZCBwZXJzb24gbWF5IGJlIG1vcmUgYXBwcm9wcmlhdGUgKGZvciBl eGFtcGxlOiDigJxpdCBpcyBleHBlY3RlZOKApuKAnSkuDQoNCm4yLiBUaGUgdXNlIG9mIOKAnFRh cmdldCBBUyBOdW1iZXLigJ0gaXMgaW5jb25zaXN0ZW50OiBzb21ldGltZXMgdGhlIOKAnG51bWJl cuKAnSBpcyBjYXBpdGFsaXplZCwgb3RoZXJzIGl0IGlzbuKAmXQsIGFuZCBzb21ldGltZXMgaXQg aXMgbm90IGV2ZW4gbWVudGlvbmVkLg0KDQpuMy4gSSBkb27igJl0IHRoaW5rIHdlIG5lZWQgU2Vj dGlvbiA2LjIuIChFeHRlbnNpYmlsaXR5IENvbnNpZGVyYXRpb25zKS4NCg== --_000_D401650E13F93Aaretanaciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <4E6B75F661351740B2234DDAA5ACA05D@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxuczptdj0iaHR0cDovL21hY1ZtbFNj aGVtYVVyaSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiPg0KPGhlYWQ+ DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hh cnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJUaXRsZSIgY29udGVudD0iIj4NCjxtZXRhIG5hbWU9 IktleXdvcmRzIiBjb250ZW50PSIiPg0KPG1ldGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJN aWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQgbWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9u dCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRo IjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHls ZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1h bA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIu MHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iO30NCmE6bGluaywgc3Bhbi5Nc29I eXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4 dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9s bG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbDsNCglmb250LWZhbWlseTpDYWxpYnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7DQoJ Zm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsO30NCnNwYW4uRW1haWxTdHls ZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ Y29sb3I6d2luZG93dGV4dDsNCglmb250LXdlaWdodDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3Jt YWw7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9u dC1mYW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0Ow0KCWZvbnQtd2VpZ2h0Om5vcm1h bDsNCglmb250LXN0eWxlOm5vcm1hbDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUt dHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseTpDYWxpYnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7 DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsO30NCnNwYW4uRW1haWxT dHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLWNvbXBvc2U7DQoJZm9udC1mYW1pbHk6 Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0Ow0KCWZvbnQtd2VpZ2h0Om5vcm1hbDsNCglmb250 LXN0eWxlOm5vcm1hbDt9DQpzcGFuLm1zb0lucw0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25s eTsNCgltc28tc3R5bGUtbmFtZToiIjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lOw0KCWNv bG9yOnRlYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7 DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAx MS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlv bjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+ PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjciLz4NCjwv eG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQg djpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiLz4NCjwvbzpzaGFw ZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRl IiBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiIHN0eWxlPSJ3b3Jk LXdyYXA6IGJyZWFrLXdvcmQ7LXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOy13ZWJraXQtbGluZS1i cmVhazogYWZ0ZXItd2hpdGUtc3BhY2UiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPkRlYXIgYXV0aG9yczo8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5IaSEmbmJzcDsgRmlyc3Qgb2YgYWxsLCB0 aGFuayB5b3UgZm9yIHRha2luZyBvbiB0aGUgZHV0aWVzIG9mIGVkaXRpbmcgdGhpcyBkb2N1bWVu dC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5JIGhh dmUgc2V2ZXJhbCBjb21tZW50cyAoc2VlIGJlbG93KS4mbmJzcDsgRm9yIHRoZSBtb3N0IHBhcnQs IEkgdGhpbmsgdGhleSBzaG91bGQgYmUgZWFzeSB0byBzb2x2ZSBhcyBtYW55IGFyZSByZWxhdGVk IHRvIGNsYXJpZmljYXRpb25zLiZuYnNwOyBNb3N0IG9mIHRoZSBjb21tZW50cyBJIGNsYXNzaWZp ZWQgYXMgTWFqb3INCiBhcmUgZHVlIHRvIHRoZSB1c2Ugb2YgTm9ybWF0aXZlIGxhbmd1YWdlLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPlRoZSBiaWdn ZXN0IGNvbmNlcm4gSSBoYXZlIHdpdGggdGhpcyBkb2N1bWVudCBpcyB0aGUgbGFjayBvZiBhbiBP cGVyYXRpb25zIGFuZCBNYW5hZ2VtZW50IENvbnNpZGVyYXRpb25zIFNlY3Rpb24g4oCTIHBsZWFz ZSB0YWtlIGEgbG9vayBhdCBSRkM1NzA2IChHdWlkZWxpbmVzIGZvciBDb25zaWRlcmluZw0KIE9w ZXJhdGlvbnMgYW5kIE1hbmFnZW1lbnQgb2YgTmV3IFByb3RvY29scyBhbmQgUHJvdG9jb2wgRXh0 ZW5zaW9ucykuJm5ic3A7IFNvbWUgb2YgdGhlIGluZm9ybWF0aW9uIHN1Z2dlc3RlZCB0aGVyZSBp cyBwcmVzZW50IGluIGRyYWZ0LWlldGYtc2lkci1iZ3BzZWMtb3BzLCBhbmQgKGlyb25pY2FsbHkp IGluIHRoZSDigJxEZXNpZ24gYW5kIERlcGxveW1lbnQgQ29uc2lkZXJhdGlvbnPigJ0gc2VjdGlv biBvZiBkcmFmdC1pZXRmLXNpZHItYmdwc2VjLW92ZXJ2aWV3LiZuYnNwOw0KIEhvd2V2ZXIsIGlt cG9ydGFudCBpdGVtcyBzdWNoIGFzIG1pZ3JhdGlvbiBvciBtYW5hZ2VtZW50IGFyZSBtaXNzaW5n LiZuYnNwOyBJIHdvdWxkIGxpa2UgdG8gc2VlIGEgd2VsbCB0aG91Z2h0IG91dCBPcGVyYXRpb25z IGFuZCBNYW5hZ2VtZW50IFNlY3Rpb24gaW4gdGhpcyBkb2N1bWVudCBiZWZvcmUgbW92aW5nIGl0 IGZvcndhcmQuJm5ic3A7IE5vdGUgdGhhdCBJ4oCZbSBub3Qgc3VnZ2VzdGluZyB0aGF0IGEgWUFO RyBtb2RlbCAoZm9yIGV4YW1wbGUpIGlzIHJlcXVpcmVkDQogdG8gbW92ZSBmb3J3YXJkLCBidXQg SSB3b3VsZCBsaWtlIHRvIHNlZSBjb25zaWRlcmF0aW9ucyBhYm91dCBtaWdyYXRpb24sIGFuZCB0 aGUgaW1wYWN0IG9uIG5ldHdvcmsgb3BlcmF0aW9ucywgdG8gbWVudGlvbiB0d28gaXRlbXMsIGFs bCBpbiBvbmUgcGxhY2UgaW4gdGhlIGRvY3VtZW50LiZuYnNwOyBJIHdvdWxkIGxpa2UgdGhlIGF1 dGhvcnMvQ2hhaXJzL1NoZXBoZXJkL1dHIHRvIGNvbnNpZGVyIGV2ZW4gbWVyZ2luZyBpbiBkcmFm dC1pZXRmLXNpZHItYmdwc2VjLW9wcw0KIGFzIHRoZSBiYXNlIGZvciB0aGlzIG5ldyBzZWN0aW9u IChvciBhdCBsZWFzdCByZWZlcmVuY2UgaXQgcHJvbWluZW50bHkpLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPlRoYW5rcyE8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5BbHZhcm8uPG86cD48L286cD48L3Nw YW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2si Pk1ham9yOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGli cmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPk0xLiBSZWdpc3RyeSBEZWZpbml0aW9uczxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6 YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmk7Y29sb3I6YmxhY2siPk0xLjEuIFNlY3Rpb24mbmJzcDsyLjEuIChUaGUgQkdQc2Vj IENhcGFiaWxpdHkpIGluY2x1ZGVzIGEgVmVyc2lvbiBmaWVsZCBhbmQgc29tZSBSZXNlcnZlZCBi aXRzLCBidXQgdGhlcmUgYXJlIG5vIElBTkEgcmVnaXN0cmllcyBkZWZpbmVkIGZvciBob3cgdG8g bWFuYWdlIHRoZXNlIHNwYWNlcy4gJm5ic3A7UGxlYXNlDQogZGVmaW5lIHRoZSByZWdpc3RyaWVz IGFuZCB0aGUgY29ycmVzcG9uZGluZyByZWdpc3RyYXRpb24gcHJvY2VkdXJlcy48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJp O2NvbG9yOmJsYWNrIj5NMS4yLiBTZWN0aW9uJm5ic3A7My4xLiAoU2VjdXJlX1BhdGgpIGRlZmlu ZXMgdGhlIEZsYWdzIGZpZWxkIGFuZCBhc3NpZ25zIHRoZSBmaXJzdCBiaXQgKEJUVywgaXMgdGhh dCB0aGUgTVNCIG9yIHRoZSBMU0IsIHBsZWFzZSBjbGFyaWZ5KSwgYnV0IGRvZXNuJ3Qgc2V0IHVw IHRoZSByZWdpc3RyeSBvciByZWdpc3RyYXRpb24NCiBwcm9jZWR1cmVzLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPk0yLiBFcnJvciBIYW5kbGluZyDigJQgU2V2ZXJhbCBz ZWN0aW9ucyBkb24ndCBoYXZlIHByb3BlciBlcnJvciBoYW5kbGluZyBwcm9jZWR1cmVzIHNwZWNp ZmllZC4gKFRoaXMgaXMgYSBtYW5hZ2VtZW50IGlzc3VlIHRoYXQgSSB0aGluayBpcyB1bmRlcnNw ZWNpZmllZC4pPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2Fs aWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+TTIuMS4gU2VjdGlvbiAyLjIuIChOZWdv dGlhdGluZyBCR1BzZWMgU3VwcG9ydCkgZG9lc24ndCBmdWxseSBzcGVjaWZ5IHRoZSBlcnJvciBo YW5kbGluZyBiZWhhdmlvciBvZiB0aGUgQ2FwYWJpbGl0eSwgYW5kIGl0IGZhaWxzIG9wZW4uPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpi bGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 Q2FsaWJyaTtjb2xvcjpibGFjayI+TTIuMS4xLiBXaGF0IHNob3VsZCB0aGUgYWN0aW9uIGJlIGlm IHRoZSBWZXJzaW9uIGlzIG5vdCAwPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPk0yLjEuMi4gJnF1 b3Q74oCmYSBCR1Agc3BlYWtlciBNVVNUIE5PVCBhZHZlcnRpc2UgdGhlIGNhcGFiaWxpdHkgb2Yg QkdQc2VjIHN1cHBvcnQgZm9yIGEgcGFydGljdWxhciBBRkkgdW5sZXNzIGl0IGhhcyBhbHNvIGFk dmVydGlzZWQgdGhlIG11bHRpcHJvdG9jb2wgZXh0ZW5zaW9uIGNhcGFiaWxpdHkgZm9yIHRoZQ0K IHNhbWUgQUZJIFtSRkM0NzYwXS4mcXVvdDsgJm5ic3A7V2hhdCBzaG91bGQgaGFwcGVuIGlmIGl0 IGRvZXMgYWR2ZXJ0aXNlIGFuIEFGSSB0aGF0IGlzIG5vdCBjb3ZlcmVkIGJ5IHRoZSBtdWx0aXBy b3RvY29sIGV4dGVuc2lvbiBjYXBhYmlsaXR5PyAmbmJzcDsgT3IgaWYgdGhlIG11bHRpLXByb3Rv Y29sIGNhcGFiaWxpdHkgaXMgbm90IGFkdmVydGlzZWQgYXQgYWxsPyZuYnNwOyBUbyBjbGFyaWZ5 OiBpZiB0aGUgbXVsdGktcHJvdG9jb2wgY2FwYWJpbGl0eSBpcyBub3QgYWR2ZXJ0aXNlZA0KIHRo ZW4gc3VwcG9ydCBmb3IgQkdQc2VjIGNhbuKAmXQgYmUgYWR2ZXJ0aXNlZCBlaXRoZXIg4oCTIGRv ZXMgdGhhdCBtZWFuIHRoYXQgYSBCR1Agc3BlYWtlciBjb25maWd1cmVkIHRvIHVzZSBCR1BzZWMg bXVzdCBub3QgdXNlIGl0IGlmIG5vdCBuZWdvdGlhdGVkPyZuYnNwOyBJIGtub3cgdGhlIGFuc3dl ciBpcyDigJx5ZXPigJ0sIGJ1dCBJ4oCZbSB0cnlpbmcgdG8gZ2V0IHRvIHRoZSBwb2ludCBvZiBw cm92aXNpb25pbmcgYW5kIGV4cGVjdGF0aW9ucyDigJMgd2h5IGNvbmZpZ3VyZQ0KIEJHUHNlYyBp ZiBubyBvbmUgaXMgZXhwZWN0ZWQgdG8gc3VwcG9ydCBpdD8gPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFj ayI+TTIuMS4zLiBNaXNzaW5nIHRoZSBmb3VyLWJ5dGUgQVMgY2FwYWJpbGl0eSByZXN1bHRzIGlu IEJHUHNlYyBub3Qgd29ya2luZyAoJnF1b3Q7QkdQc2VjIGhhcyBub3QgYmVlbiBzdWNjZXNzZnVs bHkgbmVnb3RpYXRlZCZxdW90OyksIGJ1dCB0aGUgYWJpbGl0eSBvZiBleGNoYW5naW5nIHJvdXRl cyBpcyBzdGlsbCB0aGVyZSwNCiBsZWF2aW5nIHRoZSBzeXN0ZW0gaW4gYSBmYWlsIG9wZW4gc3Rh dGUgYW5kIHBvdGVudGlhbGx5IGJyZWFraW5nIHRoZSBjaGFpbiBvZiBBU05zLiAmbmJzcDtQZXJz b25hbGx5LCBpdCBkb2Vzbid0IHNlZW0gbGlrZSBhIGdvb2QgcmVzdWx0IOKAlCBwbGVhc2UgYXQg bGVhc3QgaW5jbHVkZSBzb21lIHRleHQgYWJvdXQgdGhpcyBpbiB0aGUgU2VjdXJpdHkgQ29uc2lk ZXJhdGlvbnMgc2VjdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5N Mi4yLiBUaGUgZGVmaW5pdGlvbiBvZiB0aGUmbmJzcDtCR1BzZWNfUGF0aCBBdHRyaWJ1dGUgKGFu ZCBpdHMgZGV0YWlscykgZG9uJ3QgaGF2ZSBjbGVhciBlcnJvciBoYW5kbGluZyBwcm9jZWR1cmVz IGRlZmluZWQgKFJGQzc2MDYpLiAmbmJzcDtTZWN0aW9uJm5ic3A7NC4zLiAoUHJvY2Vzc2luZyBJ bnN0cnVjdGlvbnMgZm9yDQogQ29uZmVkZXJhdGlvbiBNZW1iZXJzKSBkb2VzIHNheSB0aGlzOiAm cXVvdDsoQXMgZGlzY3Vzc2VkIGluIFNlY3Rpb24gNS4yLCBhbnkgZXJyb3IgaW4gdGhlIEJHUHNl Y19QYXRoJm5ic3A7YXR0cmlidXRlIE1VU1QgYmUgaGFuZGxlZCB1c2luZyB0aGUgJnF1b3Q7dHJl YXQtYXMtd2l0aGRyYXcmcXVvdDssIGFwcHJvYWNoIGFzIGRlZmluZWQgaW4gUkZDIDc2MDYgW1JG Qzc2MDZdLikmcXVvdDsgKGluY2x1ZGluZyB0aGUgcGFyZW50aGVzZXMpLiAmbmJzcDtIb3dldmVy LCA1LDIgb25seSBzYXlzOiAmcXVvdDtCR1BzZWMNCiBzcGVha2VycyBNVVNUIGhhbmRsZSB0aGVz ZSBlcnJvcnMgdXNpbmcgdGhlICZxdW90O3RyZWF0LWFzLXdpdGhkcmF3JnF1b3Q7IGFwcHJvYWNo IGFzIGRlZmluZWQgaW4gUkZDIDc2MDYgW1JGQzc2MDZdLiZxdW90OyAmbmJzcDsgTm90ZTogJnF1 b3Q7dGhlc2UgZXJyb3JzJnF1b3Q7IGlzIG5vdCB0aGUgc2FtZSBhcyAmcXVvdDthbnkgZXJyb3Im cXVvdDsuICZuYnNwO1BsZWFzZSBkaXNjdXNzIGVycm9yIGhhbmRsaW5nIGluIGEgbW9yZSBwcm9t aW5lbnQgcGxhY2UuIChIaW50OiBpdCBtYXkgZml0IGluIGEgZmF1bHQgbWFuYWdlbWVudA0KIGRp c2N1c3Npb24gaW4gdGhlIE9wZXJhdGlvbnMgYW5kIE1hbmFnZW1lbnQgU2VjdGlvbi4pPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFj ayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2Fs aWJyaTtjb2xvcjpibGFjayI+TTIuMi4xLiBUaGVyZSBhcmUgbXVsdGlwbGUgcGxhY2VzIGluIHRo ZSBCR1BzZWNfUGF0aCBBdHRyaWJ1dGUgdGhhdCBjb3VsZCBlbmQgdXAgaW4gYW4gZXJyb3IsIGV2 ZXJ5dGhpbmcgZnJvbSBzZXR0aW5nIGJpdHMgaW4gdGhlIEZsYWdzIGZpZWxkIHRvIHdyb25nIExl bmd0aCBmaWVsZHMuICZuYnNwO1Nob3VsZA0KIGFsbCBlcnJvcnMgcmVzdWx0IGluIHRoZSBzYW1l IGJlaGF2aW9yPyAmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5NMy4gU2VjdGlvbiA0LjEuIChHZW5lcmFsIEd1aWRh bmNlKTogJnF1b3Q7V2hlbiBwcm9wYWdhdGluZyBhIHJlY2VpdmVkIHJvdXRlIGFkdmVydGlzZW1l bnQgdG8gYW4gaW50ZXJuYWwgcGVlciwgdGhlIEJHUHNlYyBzcGVha2VyIHR5cGljYWxseSBwb3B1 bGF0ZXMgdGhlIEJHUHNlY19QYXRoIGF0dHJpYnV0ZSBieQ0KIGNvcHlpbmcgdGhlIEJHUHNlY19Q YXRoIGF0dHJpYnV0ZSBmcm9tIHRoZSByZWNlaXZlZCB1cGRhdGUgbWVzc2FnZS4gJm5ic3A7VGhh dCBpcywgdGhlIEJHUHNlY19QYXRoIGF0dHJpYnV0ZSBpcyBjb3BpZWQgdmVyYmF0aW3igKYuIE5v dGUgdGhhdCB3aGVuIGEgQkdQc2VjIHNwZWFrZXIgY2hvb3NlcyB0byBmb3J3YXJkIGEgQkdQc2Vj IHVwZGF0ZSBtZXNzYWdlIHRvIGFuIGlCR1AgcGVlciwgdGhlIEJHUHNlYyBhdHRyaWJ1dGUgU0hP VUxEIE5PVCBiZSByZW1vdmVkLA0KIHVubGVzcyB0aGUgcGVlciBkb2Vzbid0IHN1cHBvcnQgQkdQ c2VjLiZxdW90OyAmbmJzcDtUaGUgZmlyc3QgcGFydCBvZiB0aGUgZ3VpZGFuY2Ugc2F5cyB0aGF0 IGEgbmV3IEJHUHNlY19QYXRoIGF0dHJpYnV0ZSBpcyBjcmVhdGVkIGJ5IGNvcHlpbmcgdGhlIHJl Y2VpdmVkIGF0dHJpYnV0ZSAod2hpY2ggaXMgdGhlbiBwcmVzdW1hYmx5IHJlbW92ZWQpLCBidXQg dGhlIHNlY29uZCBwYXJ0IHNheXMgdGhhdCB0aGUgcmVjZWl2ZWQgYXR0cmlidXRlIFNIT1VMRCBO T1QNCiBiZSByZW1vdmVkLiAmbmJzcDtQbGVhc2UgY2xhcmlmeSBzbyB0aGF0IHRoZXJlIGlzIGNv bnNpc3RlbmN5IC0tIEkgdW5kZXJzdGFuZCB0aGF0IHRoZSByZXN1bHQgaXMgdGhlIHNhbWUsIGJ1 dCB0aGUgZGVzY3JpcHRpb24gaXMgbm90IGFuZCB3ZSBzaG91bGQgdHJ5IHRvIGF2b2lkIGNvbmZ1 c2lvbi4gJm5ic3A7UGFydHMgb2YgU2VjdGlvbiA0LjIuIChDb25zdHJ1Y3RpbmcgdGhlIEJHUHNl Y19QYXRoIEF0dHJpYnV0ZSkgYWxzbyB0YWxrIGFib3V0IGFjdGlvbnMgbGlrZQ0KICZxdW90O+KA pmFuZCB0aGVyZSBpcyBhbiBleGlzdGluZyBCR1BzZWNfUGF0aCBhdHRyaWJ1dGUsIHRoZW4gdGhl IEJHUHNlYyBzcGVha2VyIHByZXBlbmRzIGl0cyBuZXcgU2VjdXJlX1BhdGggU2VnbWVudCAocGxh Y2VzIGluIGZpcnN0IHBvc2l0aW9uKSBvbnRvIHRoZSBleGlzdGluZyBTZWN1cmVfUGF0aCZxdW90 Oywgd2hpY2ggaGludCBhdCBwcm9wYWdhdGluZyBhIHJlY2VpdmVkIEJHUHNlY19QYXRoIGF0dHJp YnV0ZSAoYW5kIG5vdCBjcmVhdGluZyBhIG5ldyBvbmUpLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2si PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2si PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2si Pk00LiBTZWN0aW9uIDQuMi4gKENvbnN0cnVjdGluZyB0aGUgQkdQc2VjX1BhdGggQXR0cmlidXRl KSBzYXlzIHRoYXQgJnF1b3Q7VGhlIEFTIG51bWJlciBpbiB0aGlzIFNlY3VyZV9QYXRoIHNlZ21l bnQgTVVTVCBtYXRjaCB0aGUgQVMgbnVtYmVyIGluJm5ic3A7dGhlIEFTIG51bWJlciByZXNvdXJj ZSBleHRlbnNpb24gZmllbGQNCiBvZiB0aGUgUmVzb3VyY2UgUEtJIHJvdXRlciZuYnNwO2NlcnRp ZmljYXRlKHMpIHRoYXQgd2lsbCBiZSB1c2VkIHRvIHZlcmlmeSB0aGUgZGlnaXRhbCBzaWduYXR1 cmUocykmbmJzcDtjb25zdHJ1Y3RlZCBieSB0aGlzIEJHUHNlYyBzcGVha2VyJm5ic3A7W0ktRC5p ZXRmLXNpZHItYmdwc2VjLXBraS1wcm9maWxlc10uJnF1b3Q7ICZuYnNwO0hvd2V2ZXIsIHRoZXJl IGlzIG5vIGV4dGVuc2lvbiBmaWVsZCBvciBjZXJ0aWZpY2F0ZSBpbiZuYnNwO0ktRC5pZXRmLXNp ZHItYmdwc2VjLXBraS1wcm9maWxlcw0KIHdpdGgmbmJzcDt0aGF0IG5hbWUuICZuYnNwO1BsZWFz ZSBiZSBwcmVjaXNlIHdpdGggdGhlIG5hbWVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPk01LiBJ biA0LjI6IOKAnEJHUHNlYyBzcGVha2VycyBTSE9VTEQgZHJvcCBpbmNvbWluZyB1cGRhdGUgbWVz c2FnZXMgd2l0aCBwQ291bnQgc2V0IHRvIHplcm8gaW4gY2FzZXMgd2hlcmUgdGhlIEJHUHNlYyBz cGVha2VyIGRvZXMgbm90IGV4cGVjdCBpdHMgcGVlciB0byBzZXQgcENvdW50IHRvIHplcm8u4oCd Jm5ic3A7DQogVGhpcyB0ZXh0IHNlZW1zIHRvIGFzc3VtZSBzb21lIGtpbmQgb2YgY29uZmlndXJh dGlvbi9wcm92aXNpb25pbmcuJm5ic3A7IE5vdGUgdGhhdCBTZWN0aW9uIDUuMi4gKFZhbGlkYXRp b24gQWxnb3JpdGhtKSBhbHNvIGhhcyBzaW1pbGFyIHRleHQgYWJvdXQgcmVjZWl2aW5nIGFuIFVQ REFURSDigJxmcm9tIGEgcGVlciB0aGF0IGlzIG5vdCBleHBlY3RlZCB0byBzZXQgcENvdW50IGVx dWFsIHRvIHplcm/igJ0uICZuYnNwOyZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmk7Y29sb3I6YmxhY2siPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNhbGlicmk7Y29sb3I6YmxhY2siPk02LiBJbiA0LjI6IOKAnElmIHRoZSByZWNlaXZlZCBCR1Bz ZWMgdXBkYXRlIG1lc3NhZ2UgY29udGFpbnMgdHdvIFNpZ25hdHVyZV9CbG9ja3MgYW5kIHRoZSBC R1BzZWMgc3BlYWtlciBzdXBwb3J0cyBib3RoIG9mIHRoZSBjb3JyZXNwb25kaW5nIGFsZ29yaXRo bSBzdWl0ZXMsIHRoZW4gdGhlIG5ldyB1cGRhdGUNCiBtZXNzYWdlIGdlbmVyYXRlZCBieSB0aGUg QkdQc2VjIHNwZWFrZXIgU0hPVUxEIGluY2x1ZGUgYm90aCBvZiB0aGUgU2lnbmF0dXJlX0Jsb2Nr cy7igJ0mbmJzcDsgV2h5IGlzIHRoaXMg4oCcU0hPVUxE4oCdIG5vdCBhIOKAnE1VU1TigJ0/Jm5i c3A7Jm5ic3A7IFdoZW4vd2h5IHdvdWxkIGEgc3BlYWtlciByZW1vdmUgb25lIG9yIHRoZSAyPyZu YnNwOyBJZiBvbmUgaXMgcmVtb3ZlZCwgc2hvdWxkIHRoZXJlIGJlIGEgcmVxdWlyZW1lbnQgdGhh dCB0aGUgb25lIHRoYXQgd2FzIHVzZWQgdG8gc3VjY2Vzc2Z1bGx5DQogdmFsaWRhdGUgdGhlIHVw ZGF0ZSBiZSBrZXB0PyZuYnNwOyBOb3RlIHRoYXQgU2VjdGlvbiA3LjIgbGF0ZXIgdGFsa3MgYWJv dXQgdGhlIHByb2JsZW1zIG9mIHJlbW92aW5nIHNpZ25hdHVyZXPigKYNCjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPk02LjEuIE5vdGUgdGhhdCBsYXRl ciBpbiB0aGlzIHNlY3Rpb24gdGhlIHRleHQgc2F5cyB0aGF0IOKAnGEgJ1ZhbGlkJyBCR1BzZWMg dXBkYXRlIG1lc3NhZ2UgbWF5IGNvbnRhaW4gYSBTaWduYXR1cmVfQmxvY2sgd2hpY2ggaXMgbm90 IGRlZW1lZCAnVmFsaWQnIChlLmcuLCBjb250YWlucyBzaWduYXR1cmVzDQogdGhhdCBCR1BzZWMg ZG9lcyBub3Qgc3VjY2Vzc2Z1bGx5IHZlcmlmeSkuJm5ic3A7IE5vbmV0aGVsZXNzLCBzdWNoIFNp Z25hdHVyZV9CbG9ja3MgTVVTVCBOT1QgYmUgcmVtb3ZlZC7igJ0mbmJzcDsmbmJzcDsgVGFraW5n IHRoaXMg4oCcTVVTVCBOT1TigJ0gYWxvbmcgd2l0aCB0aGUg4oCcU0hPVUxE4oCdIGFib3ZlLCB0 aGUgZG9vciBpcyBvcGVuIHRvIHJlbW92ZSB0aGUgU2lnbmF0dXJlX0Jsb2NrIHVzZWQgdG8gdmVy aWZ5IHRoZSB2YWxpZGl0eSBhbmQganVzdCBmb3J3YXJkIHRoZSBvbmUNCiBub3QgdXNlZCAod2hp Y2ggbWF5IGl0c2VsZiBub3QgYmUgdmFsaWQpLiZuYnNwOyA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5NNi4yLiBTZWN0aW9uIDUuMi4gKFZhbGlkYXRp b24gQWxnb3JpdGhtKSBvcGVucyB0aGlzIGRvb3IgZXZlbiBtb3JlIHdoZW4gc2F5aW5nIHRoYXQg 4oCcSWYgYXQgbGVhc3Qgb25lIFNpZ25hdHVyZV9CbG9jayBpcyBtYXJrZWQgYXMgJ1ZhbGlkJywg dGhlbiB0aGUgdmFsaWRhdGlvbiBhbGdvcml0aG0gdGVybWluYXRlcw0KIGFuZCB0aGUgQkdQc2Vj IHVwZGF0ZSBtZXNzYWdlIGlzIGRlZW1lZCB0byBiZSAnVmFsaWQnLuKAnSZuYnNwOyBUaGUgdGV4 dCBoZXJlIGRvZXNu4oCZdCByZXF1aXJlIHRoYXQgYm90aCBTaWduYXR1cmVfQmxvY2tzIGJlIHZl cmlmaWVkLCBidXQgaW1wbGllcyB0aGF0IGFzIGxvbmcgYXMgdGhlIGZpcnN0IG9uZSBpcyB2YWxp ZCB0aGVuIHRoZSBzZWNvbmQgb25lIGRvZXNu4oCZdCByZWFsbHkgbmVlZCB0byBiZSB2ZXJpZmll ZC4mbmJzcDsgSXMgdGhhdCB0aGUgaW50ZW50PyZuYnNwOw0KPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFj ayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFj ayI+TTcuIFNlY3Rpb24gNS4gKFByb2Nlc3NpbmcgYSBSZWNlaXZlZCBCR1BzZWMgVXBkYXRlKSB0 YWxrcyBhYm91dCDigJxkdXBsaWNhdGUgdXBkYXRlIG1lc3NhZ2Vz4oCdIChvbmUgd2hlcmUg4oCc aXQgZGlmZmVycyBmcm9tIHRoZSBmaXJzdCB1cGRhdGUgbWVzc2FnZSBvbmx5IGluIHRoZSBTaWdu YXR1cmUgZmllbGRzDQogKHdpdGhpbiB0aGUgQkdQc2VjX1BhdGggYXR0cmlidXRlKeKAnSkuJm5i c3A7IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPk03 LjEuIOKAnFdpdGggcmVnYXJkcyB0byB0aGUgcHJvY2Vzc2luZyBvZiBkdXBsaWNhdGUgdXBkYXRl IG1lc3NhZ2VzLCBpZiB0aGUgZmlyc3QgdXBkYXRlIG1lc3NhZ2UgaXMgdmFsaWQsIHRoZW4gYW4g aW1wbGVtZW50YXRpb24gU0hPVUxEIE5PVCBydW4gdGhlIHZhbGlkYXRpb24gcHJvY2VkdXJlIG9u IHRoZQ0KIHNlY29uZCwgZHVwbGljYXRlIHVwZGF0ZSBtZXNzYWdlIChldmVuIGlmIHRoZSBiaXRz IG9mIHRoZSBzaWduYXR1cmUgZmllbGQgYXJlIGRpZmZlcmVudCku4oCdJm5ic3A7IEV2ZW4gdGhv dWdoIGEgZGlzY3Vzc2lvbiBhYm91dCBub24tZGV0ZXJtaW5pc3RpYyBzaWduYXR1cmUgYWxnb3Jp dGhtcyBwcmVjZWRlcyB0aGlzIHRleHQsIHRoZSB2YWxpZGF0aW9uIGlzIHN0aWxsIG5vdCBydW4u Jm5ic3A7IEhvdyBjYW4gdGhlIHZhbGlkaXR5IG9mIHRoZSBQYXRoIGJlIGd1YXJhbnRlZWQNCiBp biB0aGlzIGNhc2U/Jm5ic3A7IFNob3VsZCB0aGlzIGJlIHRoZSBhY3Rpb24gZm9yIGFsbCBhbGdv cml0aG1zIG9yIG9ubHkgb25lcyBrbm93biB0byBiZSBub24tZGV0ZXJtaW5pc3RpYz88bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5NNy4yLiByZmM0Mjcx IChpbiBTZWN0aW9uIDkuIChVUERBVEUgTWVzc2FnZSBIYW5kbGluZykgdGFsa3MgYWJvdXQgdGhl IGltcGxpY2l0IHdpdGhkcmF3IG9mIGEgcm91dGUg4oCcaWYgdGhlIE5MUkkgb2YgdGhlIG5ldyBy b3V0ZSBpcyBpZGVudGljYWwgdG8gdGhlIG9uZSB0aGUgcm91dGUgY3VycmVudGx5DQogaGFzIHN0 b3JlZOKApuKAnS4mbmJzcDsgVGhlIHNhbWUgTkxSSSBjYXNlIHNlZW1zIHRvIGJlIGEgcGFydGlj dWxhciBjb25kaXRpb24gb2YgdGhlIOKAnGR1cGxpY2F0ZSB1cGRhdGXigJ0gZGVzY3JpYmVkIGhl cmUuJm5ic3A7IEl0IG1pZ2h0IGJlIGEgZ29vZCBpZGVhIHRvIG1lbnRpb24gdGhhdCBhIOKAnGR1 cGxpY2F0ZSB1cGRhdGXigJ0gcmVzdWx0cyBpbiB0aGUgaW1wbGljaXQgd2l0aGRyYXcgb2YgdGhl IG9yaWdpbmFsIHVwZGF0ZS4mbmJzcDsgV2hhdCBoYXBwZW5zIGlmIGEgdGhpcmQgZHVwbGljYXRl DQogcm91dGUgaXMgcmVjZWl2ZWQgKHRoZSBmaXJzdCBvbmUgd2FzIHZhbGlkLCB0aGUgc2Vjb25k IG9uZSB3YXMgbm90IHZhbGlkYXRlZCksIHNob3VsZCBpdCBiZSB2YWxpZGF0ZWQ/PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+ TTguIFNlY3Rpb24mbmJzcDs1LjEuIChPdmVydmlldyBvZiBCR1BzZWMgVmFsaWRhdGlvbikgc2F5 cyB0aGF0ICZxdW90O0JHUHNlYyBzcGVjaWZpZXMgbm8gY2hhbmdlcyB0byB0aGUgQkdQIGRlY2lz aW9uIHByb2Nlc3MuJnF1b3Q7ICZuYnNwO0hvd2V2ZXIsIFNlY3Rpb24gNS4gKFByb2Nlc3Npbmcg YSBSZWNlaXZlZCBCR1BzZWMgVXBkYXRlKQ0KIGFsc28gc2F5cyB0aGF0ICZxdW90O2EgQkdQc2Vj IHNwZWFrZXIgTVVTVCB1dGlsaXplIHRoZSBBUyBwYXRoIGluZm9ybWF0aW9uIGluJm5ic3A7dGhl IEJHUHNlY19QYXRoIGF0dHJpYnV0ZSBpbiBhbGwgY2FzZXMgd2hlcmUgaXQgd291bGQgb3RoZXJ3 aXNlIHVzZSZuYnNwO3RoZSBBUyBwYXRoIGluZm9ybWF0aW9uIGluIHRoZSBBU19QQVRIIGF0dHJp YnV0ZS4mcXVvdDsgJm5ic3A7SSdtIGFzc3VtaW5nIHRoYXQgdGhlJm5ic3A7RGVjaXNpb24gUHJv Y2VzcyBpcyBpbmNsdWRlZCBpbiAmcXVvdDthbGwgY2FzZXMmcXVvdDsuDQogJm5ic3A7RXZlbiB0 aG91Z2ggNS4xIHJlZmVycyB0byB0aGUgdXNlJm5ic3A7dGhlIHZhbGlkYXRpb24gc3RhdGUgaW4g dGhlIGRlY2lzaW9uIHByb2Nlc3MsIHBsZWFzZSBtYWtlIHN1cmUgdGhhdCBpdCBpcyBjbGVhciB0 aGF0IHRoZSBkZWNpc2lvbiBwcm9jZXNzIGlzIG1vZGlmaWVkIGJ5IHRoZSB1c2Ugb2YgdGhlIGRp ZmZlcmVudCBhdHRyaWJ1dGUuJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+TTguMS4gUGxl YXNlIHNwZWNpZmljYWxseSZuYnNwO2luY2x1ZGUgYSBzZWN0aW9uIChvciB0ZXh0IHNvbWV3aGVy ZSkgYWJvdXQgaG93IHRoZSBpbmZvcm1hdGlvbiBpbiB0aGUgQkdQc2VjX1BhdGggYXR0cmlidXRl IGlzIHVzZWQgaW4gdGhlIERlY2lzaW9uIFByb2Nlc3MuICZuYnNwO0ZvciBleGFtcGxlLCBob3cg c2hvdWxkDQogdGhlICZxdW90O251bWJlciBvZiBBUyBudW1iZXJzJnF1b3Q7IGluIHRoZSBwYXRo IGJlIGNhbGN1bGF0ZWQgZm9yJm5ic3A7OS4xLjIuMi4gKEJyZWFraW5nIFRpZXMgKFBoYXNlIDIp KSZuYnNwO2luIHJmYzQyNzE/ICZuYnNwO1RoZSB0ZXh0IHRhbGtzIGFib3V0IHRoZSAmcXVvdDtl ZmZlY3RpdmUgbGVuZ3RoJnF1b3Q7IGJlaW5nIHRoZSBzdW0gb2YgdGhlIHBDb3VudCB2YWx1ZXMs IGJ1dCB0aGUgJnF1b3Q7ZWZmZWN0aXZlIGxlbmd0aCZxdW90OyAoYXQgbGVhc3Qgd2l0aCB0aGF0 IG5hbWUpIGlzIG5vdCB3aGF0IGlzIHVzZWQNCiBpbiByZmM0MTcyJm5ic3A74oCUJm5ic3A7cGxl YXNlIGJlIGNsZWFyIGFuZCBjb25zaXN0ZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPk04LjIu IFttaW5vcl0gU2VjdGlvbiZuYnNwOzMuIChUaGUgQkdQc2VjX1BhdGggQXR0cmlidXRlKSByZWFk czogJnF1b3Q7VGhlIGluZm9ybWF0aW9uIGluIFNlY3VyZV9QYXRoIGlzIHVzZWQgYnkgQkdQc2Vj IHNwZWFrZXJzIGluIHRoZSBzYW1lIHdheSB0aGF0IGluZm9ybWF0aW9uIGZyb20gdGhlIEFTX1BB VEggaXMgdXNlZA0KIGJ5IG5vbi1CR1BzZWMgc3BlYWtlcnMuJnF1b3Q7ICZuYnNwO1RoaXMgaXMg cHJldHR5IG11Y2ggdGhlIHNhbWUgaW5mb3JtYXRpb24gdGhhdCBpcyBpbiBTZWN0aW9uIDUsIGJ1 dCB3aXRoIG1vcmUgc3BlY2lmaWNpdHkuICZuYnNwO0l0IHdvdWxkIGhlbHAgaWYgdGhlIG1vcmUg c3BlY2lmaWMgY2FzZSB3YXMgdGhlIG9uZSBub3JtYXRpdmVseSBjYWxsZWQgb3V0LjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPk05LiBTZWN0aW9uIDUu Mi4gKFZhbGlkYXRpb24gQWxnb3JpdGhtKS4mbmJzcDsgUkZDNDI3MSBhbHNvIHNwZWNpZmllcyBh IHNlcmllcyBvZiB2YWxpZGl0eSBjaGVja3Mgd2hlbiBhbiBVUERBVEUgaXMgcmVjZWl2ZWQgKFNl Y3Rpb24gNi4zKSDigJMgc2hvdWxkIHRoYXQgY2hlY2sgYmUgcnVuIGJlZm9yZSBvciBhZnRlcg0K IHRoZSBhbGdvcml0aG0gc3BlY2lmaWVkIGhlcmU/Jm5ic3A7IFRoZSBhbGdvcml0aG0gZm9jdXNl cyBvbiB2ZXJpZnlpbmcgdGhlIHZhbGlkaXR5IG9mIHRoZSBCR1BzZWNfUGF0aCBhdHRyaWJ1dGUg KGFuZCBub3QgdGhlIHdob2xlIFVQREFURSksIHNvIEnigJltIGFzc3VtaW5nIGl0IHNob3VsZCBi ZSBleGVjdXRlZCBpbnN0ZWFkIG9mIGNoZWNraW5nIHRoZSBBU19QQVRILiZuYnNwOyBQbGVhc2Ug aW5jbHVkZSBzb21lIHRleHQgYWJvdXQgdGhlIGludGVyYWN0aW9uL2NoYW5nZXMuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+TTkuMS4mbmJzcDsgU2Vj dGlvbiA1LjIuIChWYWxpZGF0aW9uIEFsZ29yaXRobSk6IOKAnOKApnRoZW4gdGhlIEJHUHNlYyBz cGVha2VyIE1VU1QgdHJlYXQgdGhlIHVwZGF0ZSBtZXNzYWdlIGluIHRoZSBzYW1lIG1hbm5lciB0 aGF0IHRoZSBCR1BzZWMgc3BlYWtlciB3b3VsZCB0cmVhdCBhbiAodW5zaWduZWQpIHVwZGF0ZQ0K IG1lc3NhZ2UgdGhhdCBhcnJpdmVkIHdpdGhvdXQgYSBCR1BzZWNfUGF0aCBhdHRyaWJ1dGUu4oCd Jm5ic3A7Jm5ic3A7IFdoYXQgZXhhY3RseSBkb2VzIHRoaXMgbWVhbj8mbmJzcDsgSWYgdGhlIEJH UHNlY19QYXRoIGF0dHJpYnV0ZSBpcyBub3QgcmVjZWl2ZWQsIHRoZW4gdGhlIEFTX1BBVEggc2hv dWxkIGJlIOKAkyBkb2VzIHRoZSB0ZXh0IGltcGx5IHRoYXQgdGhlIEFTX1BBVEggc2hvdWxkIGJl IHJlY29uc3RydWN0ZWQ/Jm5ic3A7IEkgZ3Vlc3MgaXQgc2hvdWxkIGJlIGlmIHRoZSB1cGRhdGUN CiBpcyB0byBiZSBwcm9wYWdhdGVkIOKAkyBidXQgdGhlIHF1ZXN0aW9uIGlzIHdoaWxlIHRoZSB1 cGRhdGUgaXMgYmVpbmcgcHJvY2Vzc2VkLCB3aGljaCBBUyBwYXRoIGluZm9ybWF0aW9uIGlzIHVz ZWQsIHRoZSBvbmUgaW4gYSByZWNvbnN0cnVjdGVkIEFTX1BBVEggb3IgdGhlIG9uZSBpbiB0aGUg QkdQc2VjX1BhdGggd2hpbGUgYXNzdW1pbmcgdGhhdCBhbGwgdGhlIHNpZ25hdHVyZXMgYXJlIGNv cnJlY3Q/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aTtjb2xvcjpibGFjayI+TTEwLiZuYnNwOyBJbiBTZWN0aW9uIDcuMi4gKE9uIHRoZSBSZW1vdmFs IG9mIEJHUHNlYyBTaWduYXR1cmVzKTog4oCc4oCmdGhlIHByb3RvY29sIHNwZWNpZmllcyB0aGF0 IGEgQkdQc2VjIHNwZWFrZXIgY2hvb3NpbmcgdG8gcHJvcGFnYXRlIHRoZSByb3V0ZSBhZHZlcnRp c2VtZW50IGluIHN1Y2ggYW4gdXBkYXRlIG1lc3NhZ2UNCiBTSE9VTEQgYWRkIGl0cyBzaWduYXR1 cmUgdG8gZWFjaCBvZiB0aGUgU2lnbmF0dXJlX0Jsb2Nrcy7igJ0mbmJzcDsmbmJzcDsgSSBiZWxp ZXZlIHRoZSByZWZlcmVuY2UgaXMgU2VjdGlvbiA0LjIgKHBsZWFzZSBhZGQgaXQpLiZuYnNwOyBI b3dldmVyLCB0aGF0IFNlY3Rpb24gZG9lc27igJl0IHVzZSBub3JtYXRpdmUgbGFuZ3VhZ2UgKOKA nEZvciBlYWNoIFNpZ25hdHVyZV9CbG9jayBjb3JyZXNwb25kaW5nIHRvIGFuIGFsZ29yaXRobSBz dWl0ZSB0aGF0IHRoZSBCR1BzZWMgc3BlYWtlcg0KIGRvZXMgc3VwcG9ydCwgdGhlIEJHUHNlYyBz cGVha2VyIGFkZHMgYSBuZXcgU2lnbmF0dXJlIFNlZ21lbnQgdG8gdGhlIFNpZ25hdHVyZV9CbG9j ay7igJ0pJm5ic3A7Jm5ic3A7IEluIGFueSBjYXNlLCB0aGUg4oCcU0hPVUxE4oCdIGluIDcuMiBp cyBvdXQgb2YgcGxhY2UgYmVjYXVzZSBpdCBpcyByZWZlcmVuY2luZyBhIGZhY3QgKHBvaW50aW5n IGF0IHRoZSBvdGhlciBzZWN0aW9uKSBhbmQgbm90IGJlaW5nIHVzZWQgbm9ybWF0aXZlbHkg4oCT IGlmIHlvdSB3YW50IHRoZSDigJxTSE9VTETigJ0NCiB0byBiZSBub3JtYXRpdmUsIHRoZW4gaXQg c2hvdWxkIGJlIGJhY2sgaW4gNC4yLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGli cmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGli cmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGli cmk7Y29sb3I6YmxhY2siPk0xMS4gVGhlIEZpZ3VyZXMgKHdoaWNoIGFyZSBub3QgbnVtYmVyZWQp IGluIDQuMi4gKENvbnN0cnVjdGluZyB0aGUgQkdQc2VjX1BhdGggQXR0cmlidXRlKSBhbmQgNS4y LiAoVmFsaWRhdGlvbiBBbGdvcml0aG0pIHByZXNlbnQgdGhlIHNlcXVlbmNlIG9mIG9jdGV0cyB0 byBiZSBoYXNoZWQuJm5ic3A7IEnigJltDQogZ3Vlc3NpbmcgdGhhdCB0aGUgb3JkZXIgb2YgdGhl IFNpZ25hdHVyZSBhbmQgU2VjdXJlX1BhdGggU2VnbWVudHMgbWF5IGJlIGltcG9ydGFudCwgaXMg aXQ/Jm5ic3A7IFRoZSBvcmRlciBpbiB0aGUgRmlndXJlcyBpcyBub3QgY2xlYXIgdG8gbWUsIGlm IHRoZSBvcmRlciBpcyBpbXBvcnRhbnQsIHBsZWFzZSBiZSBjbGVhciBhYm91dCBpdDsgaWYgbm90 LCBwbGVhc2UgYWxzbyBzYXkgc28uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJy aTtjb2xvcjpibGFjayI+TTEyLiBUaGUgbWFuZGF0b3J5IGFkZGl0aW9uIG9mIFNlY3VyZV9QYXRo IGFuZCBTaWduYXR1cmUgc2VnbWVudHMgaW4gYSBDb25mZWRlcmF0aW9uIHJlc3VsdHMgaW4gdGhl IGluY29uc2lzdGVudCBhdXRob3JpemF0aW9uIGNoYWluIG1lbnRpb25lZCBpbiBTZWN0aW9uIDQu My4gKFByb2Nlc3NpbmcgSW5zdHJ1Y3Rpb25zDQogZm9yIENvbmZlZGVyYXRpb24gTWVtYmVycyk6 IOKAnEZvciBhIHNpZ25hdHVyZSBwcm9kdWNlZCBieSBhIHBlZXIgQkdQc2VjIHNwZWFrZXIgb3V0 c2lkZSBvZiBhIGNvbmZlZGVyYXRpb24sIHRoZSBUYXJnZXQgQVMgd2lsbCBhbHdheXMgYmUgdGhl IEFTIENvbmZlZGVyYXRpb24gSWRlbnRpZmllciAodGhlIHB1YmxpYyBBUyBudW1iZXIgb2YgdGhl IGNvbmZlZGVyYXRpb24pIGFzIG9wcG9zZWQgdG8gdGhlIE1lbWJlci1BUyBOdW1iZXIu4oCdJm5i c3A7IEl0IHNlZW1zDQogdG8gbWUgdGhhdCB0aGlzIGRpc2NvbnRpbnVpdHkgaW4gdGhlIEFTTiBs aXN0IGJyZWFrcyB0aGUg4oCcY3J5cHRvZ3JhcGhpYyBhc3N1cmFuY2UgdGhhdOKApkV2ZXJ5IEFT IG9uIHRoZSBwYXRoIG9mIEFTZXMgbGlzdGVkIGluIHRoZSB1cGRhdGUgbWVzc2FnZSBoYXMgZXhw bGljaXRseSBhdXRob3JpemVkIHRoZSBhZHZlcnRpc2VtZW50IG9mIHRoZSByb3V0ZSB0byB0aGUg c3Vic2VxdWVudCBBUyBpbiB0aGUgcGF0aOKAnSBiZWNhdXNlIHRoZXJlIGlzIG5vDQogd2F5IHRv IHZlcmlmeSB0aGF0IHRoZSBNZW1iZXItQVMgaW4gdGhlIGZpcnN0IFNlY3VyZV9QYXRoIHNlZ21l bnQgaXMgaW4gZmFjdCB0aGUgb25lIHBlZXJpbmcgd2l0aCB0aGUgZXh0ZXJuYWwgbmVpZ2hib3Iu Jm5ic3A7IEkgcmVhbGl6ZSB0aGF0IHRoZSByaXNrIG1heSBiZSBtaW5pbWl6ZWQgYnkgYW4g4oCc aW50ZXJuYWwgdHJ1c3TigJ0gZmFjdG9yLCBidXQgSSB3b3VsZCBsaWtlIHRvIHNlZSBhIGRpc2N1 c3Npb24gYWJvdXQgdGhpcyBpc3N1ZSBpbiB0aGUgU2VjdXJpdHkNCiBDb25zaWRlcmF0aW9ucy48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5NMTMuIFdo YXQgYWJvdXQgcmVwbGF5IGF0dGFja3M/Jm5ic3A7IFRoZXJlIGlzIG5vIG1lbnRpb24gb2YgdGhl IHJpc2sgb3IgcG90ZW50aWFsIG1pdGlnYXRpb24gYW55d2hlcmUuJm5ic3A7IFBsZWFzZSBpbmNs dWRlIGluIHRoZSBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyBzZWN0aW9uLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29s b3I6YmxhY2siPk1pbm9yOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPm0xLiBUaGUgdXNlIG9mIFNLSSwgU3ViamVjdCBLZXkg SWRlbnRpZmllciB3aXRob3V0IGEgcXVhbGlmaWVyIChmaWVsZCwgZXh0ZW5zaW9uKSBpcyBjb25m dXNpbmcgYXQgdGltZXMuJm5ic3A7Jm5ic3A7IFBsZWFzZSBleHBhbmQgU0tJIG9uIGZpcnN0IHVz ZS4mbmJzcDsgQW4gZXhhbXBsZTogKGZyb20gMy4yKSDigJxUaGUgU3ViamVjdA0KIEtleSBJZGVu dGlmaWVyIGNvbnRhaW5zIHRoZSB2YWx1ZSBpbiB0aGUgU3ViamVjdCBLZXkgSWRlbnRpZmllciBl eHRlbnNpb24gb2YgdGhlIFJQS0nigKbigJ0mbmJzcDsgVGhlIGZpcnN0IG1lbnRpb24gc2hvdWxk IGluY2x1ZGUg4oCcZmllbGTigJ0sIGxpa2Ugc2ltaWxhciB0ZXh0IGluIDQuMi48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5tMi4gU2VjdGlvbiA0LiAo QkdQc2VjIFVwZGF0ZSBNZXNzYWdlcykgc2F5czogJnF1b3Q7QSBCR1BzZWMgc3BlYWtlciB0aGF0 Jm5ic3A7aXMgbm90IGEgbWVtYmVyIG9mIHN1Y2ggYSBjb25mZWRlcmF0aW9uIE1VU1Qgc2V0IHRo ZSBGbGFncyBmaWVsZCBvZiZuYnNwO3RoZSBTZWN1cmVfUGF0aCBTZWdtZW50IHRvIHplcm8gaW4g YWxsDQogQkdQc2VjIHVwZGF0ZSBtZXNzYWdlcyBpdCZuYnNwO3NlbmRzLiZxdW90OyAmbmJzcDtX aGlsZSBvbmx5IG9uZSZuYnNwO2ZsYWcgaXMgZGVmaW5lZCwgdGhlIGNvcnJlY3QmbmJzcDtzdGF0 ZW1lbnQgaXMgJnF1b3Q74oCmc2V0IHRoZSZuYnNwO0NvbmZlZF9TZWdtZW50IGZsYWfigKYmcXVv dDsuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtj b2xvcjpibGFjayI+bTMuIFNlY3Rpb24gNC4xLiAoR2VuZXJhbCBHdWlkYW5jZSk6IHMvJnF1b3Q7 QSBCR1BzZWMgdXBkYXRlIG1lc3NhZ2UgTVVTVCBhZHZlcnRpc2UgYSByb3V0ZSB0byBvbmx5IGEg c2luZ2xlIE5MUkkuJnF1b3Q7LyZxdW90O0EgQkdQc2VjIHVwZGF0ZSBtZXNzYWdlIE1VU1QgYWR2 ZXJ0aXNlIGEgcm91dGUgdG8gb25seSBhIHNpbmdsZQ0KIHByZWZpeC4mcXVvdDsgJm5ic3A7IFRo aXMgc2VjdGlvbiBjb250YWlucyBvdGhlciBwbGFjZXMgd2hlcmUgdGhlIE5MUkkmbmJzcDt0ZXJt IGlzIG5vdCB1c2VkIGNvcnJlY3RseS4gJm5ic3A7SW4gc2hvcnQsIHRoZSBOTFJJIGluIGEgQkdQ IFVwZGF0ZSBjb250YWlucyBvbmUgb3IgbW9yZSBwcmVmaXhlcyZuYnNwO+KAlCZuYnNwO3NvIHRo ZSB0ZXh0IHNob3VsZCB0YWxrIGFib3V0IGEgc2luZ2xlIHByZWZpeCwgbm90IGEgc2luZ2xlIE5M UkkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtj b2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+bTQuIEluIGJldHdlZW4g dGhlIHRleHQgYWJvdmUsIHRoZSBmb2xsb3dpbmcgaXMgd3JpdHRlbjogJnF1b3Q7SG93ZXZlciwg aW4gdGhlIGNhc2UgdGhhdCB0aGUgQkdQc2VjIHNwZWFrZXIgaXMgcGVyZm9ybWluZyBhbiBBUyBN aWdyYXRpb24sIHRoZSBCR1BzZWMgc3BlYWtlciBtYXkgYWRkIGFuIGFkZGl0aW9uYWwNCiBzaWdu YXR1cmUgb24gaW5ncmVzcyBiZWZvcmUgY29weWluZyB0aGUgQkdQc2VjX1BhdGggYXR0cmlidXRl IChzZWUgW0ktRC5pZXRmLXNpZHItYXMtbWlncmF0aW9uXSBmb3IgbW9yZSBkZXRhaWxzKS4mcXVv dDsgJm5ic3A7QmVjYXVzZSZuYnNwO0ktRC5pZXRmLXNpZHItYXMtbWlncmF0aW9uIGlzIG1hcmtl ZCBhcyBVcGRhdGluZyB0aGlzIGRvY3VtZW50LCBJIHN1Z2dlc3QgeW91IHJlbW92ZSB0aGlzIHRl eHQgKGFuZCB0aGUgb25lIGluIDQuMikgLS0gbm90ZSB0aGF0IHRoZQ0KIHN0YXRlbWVudHMgbWFk ZSBpbiB0aGlzIGRvY3VtZW50IGFyZSBub3Qgbm9ybWF0aXZlIGFueXdheSBhbmQmbmJzcDtJLUQu aWV0Zi1zaWRyLWFzLW1pZ3JhdGlvbiBjYW4gc3RhbmQgb24gaXRzIG93biBieSBjbGVhcmx5IHNw ZWNpZnlpbmcgd2hhdCBpcyBuZWVkZWQgZm9yIEFTIE1pZ3JhdGlvbi48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5tNS4gSW4g NC4yOiDigJxUbyBwcmV2ZW50IHVubmVjZXNzYXJ5IHByb2Nlc3NpbmcgbG9hZOKApmEgQkdQc2Vj IHNwZWFrZXIgU0hPVUxEIE5PVCBwcm9kdWNlIG11bHRpcGxlIGNvbnNlY3V0aXZlPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xvcjpibGFjayI+U2VjdXJlX1BhdGggU2Vn bWVudHMgd2l0aCB0aGUgc2FtZSBBUyBudW1iZXIuJm5ic3A7IFRoaXMgbWVhbnMgdGhhdCB0byBh Y2hpZXZlIHRoZSBzZW1hbnRpY3Mgb2YgcHJlcGVuZGluZyB0aGUgc2FtZSBBUyBudW1iZXIgayB0 aW1lcywgYSBCR1BzZWMgc3BlYWtlciBTSE9VTEQgcHJvZHVjZSBhIHNpbmdsZSBTZWN1cmVfUGF0 aA0KIFNlZ21lbnQg4oCTIHdpdGggcENvdW50IG9mIGsuLi7igJ0mbmJzcDsgR2l2ZW4gcENvdW50 LCBJ4oCZbSB3b25kZXJpbmcgd2h5IHRoZXNlIFNIT1VMRHMgYXJlIG5vdCBNVVNUcywgZXNwZWNp YWxseSBnaXZlbiB0aGUgZXhwZWN0ZWQgYWRkaXRpb25hbCBsb2FkLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPm02LiBTZWN0aW9uIDQuMy4gKFByb2Nl c3NpbmcgSW5zdHJ1Y3Rpb25zIGZvciBDb25mZWRlcmF0aW9uIE1lbWJlcnMpIGV4cGxhaW5zIHRo ZSBwcm9jZXNzIG9mIGFkZGluZyBTZWN1cmVfUGF0aCBhbmQgU2lnbmF0dXJlIHNlZ21lbnRzIHRo YXQgbWF5IG9yIG1heSBub3QgYmUgdXNlZCBhdCBhbGwgKGdpdmVuDQogdGhhdCB0aGUgdmVyaWZp Y2F0aW9uIGlzIG9wdGlvbmFsKSwgb25seSB0byByZW1vdmUgdGhlbSBsYXRlci4mbmJzcDsgV2h5 IGlzbuKAmXQgdGhlIHByb2Nlc3Mgb2YgYWRkaW5nIFNlY3VyZV9QYXRoIGFuZCBTaWduYXR1cmUg c2VnbWVudHMgb3B0aW9uYWwgaXRzZWxmIChpbnN0ZWFkIG9mIGp1c3QgdGhlIHZhbGlkYXRpb24p PyZuYnNwOyZuYnNwOw0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xv cjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xv cjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaTtjb2xv cjpibGFjayI+bTcuIEluIDQuNC4gKFJlY29uc3RydWN0aW5nIHRoZSBBU19QQVRIIEF0dHJpYnV0 ZSksIHdoYXQgc2hvdWxkIGhhcHBlbiBpZiB0aGUgQ29uZmVkX1NlZ21lbnQgZmxhZyBpcyBzZXQg dG8gemVybyBhbmQgdGhlIG1vc3QtcmVjZW50bHkgYWRkZWQgc2VnbWVudCBpbiB0aGUgQVNfUEFU SCBpcyBvZiB0eXBlDQogQVNfQ09ORkVEX1NFUVVFTkNFPyZuYnNwOyBUaGVvcmV0aWNhbGx5IHRo aXMgY2Fu4oCZdCBvY2N1ciBiZWNhdXNlIGl0IG1lYW5zIHRoYXQgc29tZW9uZSBhY2NlcHRlZCBh biB1cGRhdGUgdGhhdCBpdCBzaG91bGRu4oCZdCBoYXZlLCBidXQgcGxlYXNlIGluY2x1ZGUgc29t ZSB0ZXh0IGFib3V0IHRoaXMgY2FzZSBiZWluZyBhbiBlcnJvci48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5tOC4gU2VjdGlvbiA1LjEuIChPdmVydmll dyBvZiBCR1BzZWMgVmFsaWRhdGlvbik6IOKAnEl0IGlzIGV4cGVjdGVkIHRoYXQgQkdQIHBlZXJz IHdpbGwgZ2VuZXJhbGx5IHByZWZlciByb3V0ZXMgcmVjZWl2ZWQgdmlhICdWYWxpZCcgQkdQc2Vj IHVwZGF0ZSBtZXNzYWdlcyBvdmVyIGJvdGggcm91dGVzIHJlY2VpdmVkDQogdmlhICdOb3QgVmFs aWQnIEJHUHNlYyB1cGRhdGUgbWVzc2FnZXMgYW5kIHJvdXRlcyByZWNlaXZlZCB2aWEgdXBkYXRl IG1lc3NhZ2VzIHRoYXQgZG8gbm90IGNvbnRhaW4gdGhlIEJHUHNlY19QYXRoIGF0dHJpYnV0ZeKA pihTZWUgW0ktRC5pZXRmLXNpZHItYmdwc2VjLW9wc13igKbigJ0mbmJzcDsgSSByZWFkIHRoaXMg cGllY2Ugb2YgdGV4dCBhcyBzYXlpbmcgdGhhdCByb3V0ZXMgaW4gTm90IFZhbGlkIHVwZGF0ZXMg YXJlIGV4cGVjdGVkIHRvIGJlIHVzZWQgKGV2ZW4NCiB0aG91Z2ggdGhleSBhcmUgbm90IHZhbGlk KS4mbmJzcDsgQmVzaWRlcyB0aGUgZmFjdCB0aGF0IEktRC5pZXRmLXNpZHItYmdwc2VjLW9wcyBk b2VzIHJlY29tbWVuZCB1c2luZyBOb3QgVmFsaWQgYW5ub3VuY2VtZW50cyAoaW4gU2VjdGlvbiA3 KSwgYXJlIHRoZXJlIG90aGVyIHJlYXNvbnMgZm9yIHRoaXMgZG9jdW1lbnQgdG8gZXhwZWN0IHRo ZWlyIHVzZT88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNr Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNr Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxp YnJpO2NvbG9yOmJsYWNrIj5tOS4gU2VjdGlvbiA1LjEgY29udGFpbnMgdGhlc2UgcmVmZXJlbmNl czog4oCc4oCmdGhlIHRydXN0ZWQgY2FjaGUgY291bGQgZGVsaXZlciB0aGUgbmVjZXNzYXJ5IHZh bGlkaXR5IGluZm9ybWF0aW9uIHRvIHRoZSBCR1BzZWMgc3BlYWtlciB1c2luZyB0aGUgcm91dGVy IGtleSBQRFUgW0ktRC5pZXRmLXNpZHItcnRyLWtleWluZ10NCiBmb3IgdGhlIFJQS0ktdG8tUm91 dGVyIHByb3RvY29sIFtJLUQuaWV0Zi1zaWRyLXJwa2ktcnRyLXJmYzY4MTAtYmlzXS7igJ0mbmJz cDsmbmJzcDsgVGhlIHJlZmVyZW5jZSB0byBJLUQuaWV0Zi1zaWRyLXJ0ci1rZXlpbmcgc2VlbXMg dG8gYmUgcmVsYXRlZCB0byB0aGUg4oCccm91dGVyIGtleSBQRFXigJ0sIGJ1dCB0aGF0IGlzIGRl ZmluZWQgaW4gSS1ELmlldGYtc2lkci1ycGtpLXJ0ci1yZmM2ODEwLWJpcywgc28gaXQgbG9va3Mg bGlrZSB0aGUgZmlyc3QgcmVmZXJlbmNlDQogaXMgbm90IG5lZWRlZC48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5tMTAuIEluIDUuMTog4oCcQXMgZGlz Y3Vzc2VkIGluIFNlY3Rpb24gNCwgd2hlbiBhIEJHUHNlYyBzcGVha2VyIGNob29zZXMgdG8gZm9y d2FyZOKApiwgaXQgU0hPVUxEIGJlIGZvcndhcmRlZCB3aXRoIGl0cyBCR1BzZWNfUGF0aCBhdHRy aWJ1dGXigKbigJ0mbmJzcDsmbmJzcDsgVGhhdCDigJxTSE9VTETigJ0gaXMgcG9pbnRpbmcgYXQg YQ0KIGZhY3QsIG5vdCBhY3Rpbmcgbm9ybWF0aXZlbHkgaW4gdGhpcyBzZW50ZW5jZSBzbyBwbGVh c2UgY2hhbmdlIGl0IHRvIOKAnHNob3VsZOKAnS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5tMTEuIFNlY3Rpb24gNS4yLiAoVmFsaWRhdGlvbiBBbGdv cml0aG0pIG1lbnRpb25zIHRoaXMgY2hlY2s6IOKAmHVwZGF0ZS4uZnJvbSBhIHBlZXIgdGhhdCBp cyBub3QgYSBtZW1iZXIgb2YgdGhlIEJHUHNlYyBzcGVha2VyJ3MgQVMgY29uZmVkZXJhdGlvbiwg Y2hlY2sgdG8gZW5zdXJlIHRoYXQgbm9uZSBvZg0KIHRoZSBTZWN1cmVfUGF0aCBzZWdtZW50cyBj b250YWluIGEgRmxhZ3MgZmllbGQgd2l0aCB0aGUgQ29uZmVkX1NlcXVlbmNlIGZsYWcgc2V0IHRv IG9uZS7igJ0mbmJzcDsgSeKAmW0gc3VyZSB0aGF0IHRoZSBjaGVjayBmb3IgdGhlIGZsYWcgc2V0 IGlmIHRoZSBwZWVyIGlzIGEgQ29uZmVkZXJhdGlvbiBwZWVyIGlzIGFsc28gbmVlZGVkLCBidXQg bm90IG1lbnRpb25lZCBpbiB0aGlzIHNlY3Rpb24gKHdoZXJlIHRoZSBub3JtYXRpdmUgTVVTVCBm b3IgdGhlIHZhbGlkYXRpb24NCiBhbGdvcml0aG0pIGlzIHByZXNlbnQuJm5ic3A7IFNlY3Rpb24g NC4zLiAoUHJvY2Vzc2luZyBJbnN0cnVjdGlvbnMgZm9yIENvbmZlZGVyYXRpb24gTWVtYmVycykg ZG9lcyBzYXkgdGhpczog4oCc4oCmd2hlbiBhIGNvbmZlZGVyYXRpb24gbWVtYmVyIHJ1bnMgdGhl IGFsZ29yaXRobSBpbiBTZWN0aW9uIDUuMiwgdGhlIGNvbmZlZGVyYXRpb24gbWVtYmVyLCBkdXJp bmcgcHJvY2Vzc2luZyBvZiBhIFNpZ25hdHVyZSBTZWdtZW50LCBmaXJzdCBjaGVja3Mgd2hldGhl cg0KIHRoZSBDb25mZWRfU2VxdWVuY2UgZmxhZyBpbiB0aGUgY29ycmVzcG9uZGluZyBTZWN1cmVf UGF0aCBzZWdtZW50IGlzIHNldCB0byBvbmUu4oCdJm5ic3A7Jm5ic3A7IEkgd291bGQgbGlrZSB0 byBzZWUgdGhlIGZ1bGwgYWxnb3JpdGhtIHNwZWNpZmllZCBpbiBvbmUgcGxhY2UgKGV2ZW4gaWYs IGxpa2UgaW4gU2VjdGlvbiA0LjMsIHBpZWNlcyBvZiBpdCBhcmUgZXhwbGFpbmVkIGVsc2V3aGVy ZSkuJm5ic3A7IEFsc28sIHRoZSB0ZXh0IGluIDQuMyBzYXlzIHRoYXQgdGhlIGNoZWNrDQogaXMg cGVyZm9ybWVkIOKAnGR1cmluZyBwcm9jZXNzaW5nIG9mIGEgU2lnbmF0dXJlIFNlZ21lbnTigJ0s IHdoaWNoIGlzIGZpbmUsIGJ1dCBwcm9iYWJseSBsYXRlIGluIHRoZSBwcm9jZXNzIChjb21wYXJl ZCB0byB0aGUgdGV4dCBpbiA1LjIgdGhhdCBzZWVtcyB0byByZXF1aXJlIHRoZSBjaGVjayB3aGVu IHRoZSB1cGRhdGVzIGFyZSByZWNlaXZlZCkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 Q2FsaWJyaTtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 Q2FsaWJyaTtjb2xvcjpibGFjayI+bTEyLiBJbiBTZWN0aW9uIDcuNC4gKEFkZGl0aW9uYWwgU2Vj dXJpdHkgQ29uc2lkZXJhdGlvbnMpLCBwbGVhc2UgYWRkIGEgcmVmZXJlbmNlIHRvIHBvaW50IGF0 IOKAnGFwcHJvcHJpYXRlIHRyYW5zcG9ydCBzZWN1cml0eSBtZWNoYW5pc21zLuKAnSwgYW5kL29y IHBvaW50IGF0IHRoZSBTZWN1cml0eSBDb25zaWRlcmF0aW9ucw0KIGZyb20gcmZjNDI3MS48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpO2NvbG9yOmJsYWNrIj5OaXRzOjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPm4xLiBJbiBzZXZl cmFsIHBsYWNlcyB0aGUgdGV4dCB1c2VzIOKAnHdl4oCdIChmb3IgZXhhbXBsZTog4oCcd2UgZXhw ZWN04oCm4oCdKS4mbmJzcDsgSXTigJlzIGp1c3QgYSBtYXR0ZXIgb2Ygc3R5bGUsIGJ1dCB1c2lu ZyB0aGUgdGhpcmQgcGVyc29uIG1heSBiZSBtb3JlIGFwcHJvcHJpYXRlIChmb3IgZXhhbXBsZTog 4oCcaXQgaXMgZXhwZWN0ZWTigKbigJ0pLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNh bGlicmk7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNh bGlicmk7Y29sb3I6YmxhY2siPm4yLiBUaGUgdXNlIG9mIOKAnFRhcmdldCBBUyBOdW1iZXLigJ0g aXMgaW5jb25zaXN0ZW50OiBzb21ldGltZXMgdGhlIOKAnG51bWJlcuKAnSBpcyBjYXBpdGFsaXpl ZCwgb3RoZXJzIGl0IGlzbuKAmXQsIGFuZCBzb21ldGltZXMgaXQgaXMgbm90IGV2ZW4gbWVudGlv bmVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmk7Y29sb3I6YmxhY2siPm4z LiBJIGRvbuKAmXQgdGhpbmsgd2UgbmVlZCBTZWN0aW9uIDYuMi4gKEV4dGVuc2liaWxpdHkgQ29u c2lkZXJhdGlvbnMpLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jv ZHk+DQo8L2h0bWw+DQo= --_000_D401650E13F93Aaretanaciscocom_-- From nobody Wed Nov 2 08:35:26 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A36A129699; Wed, 2 Nov 2016 08:35:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.017 X-Spam-Level: X-Spam-Status: No, score=-16.017 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bWncUD8Gt_wA; Wed, 2 Nov 2016 08:35:20 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53918129430; Wed, 2 Nov 2016 08:35:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=33292; q=dns/txt; s=iport; t=1478100920; x=1479310520; h=from:to:cc:subject:date:message-id:mime-version; bh=737bmepz2SsqYT+7Ukk+Ac/CUQdrrqK6+lTXxREfCLU=; b=dr7CW5fteX8ndGAMEucFhNMtUHHMhzOEjA39LWb+tEEwWYWRJ7YSsZcD b72oIbPSV8Y1Va3+49M7LbckAZxanCtzA0B75aBmzkyLujoI6RsfPEhlI GPyGnODLZTZdJ5VmMhE6DqF8DvpZxYbl3S5uAakkh508nwck/qeh2vbWG E=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BtAQDIBhpY/5xdJa1dGgEBAQECAQEBA?= =?us-ascii?q?QgBAQEBgnM5AQEBAQEfWIEDjTCrSIIHKIV6HIIIPxQBAgEBAQEBAQFiHQuEaCM?= =?us-ascii?q?KQwkSAQY6CgIEMCcEDhkHiDsOA49anTaNBgEBAQEBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?RcFhj2BfQiBS4U2gxotgi8FlD+FXgGGMooHgW6Eb4kskRsBHjZnhReHFSuBAoE?= =?us-ascii?q?MAQEB?= X-IronPort-AV: E=Sophos;i="5.31,583,1473120000"; d="scan'208,217";a="164813576" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Nov 2016 15:35:18 +0000 Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by rcdn-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id uA2FZIng005828 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 2 Nov 2016 15:35:19 GMT Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 2 Nov 2016 10:35:18 -0500 Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Wed, 2 Nov 2016 10:35:18 -0500 From: "Alvaro Retana (aretana)" To: "draft-ietf-sidr-bgpsec-ops@ietf.org" Thread-Topic: AD Review of draft-ietf-sidr-bgpsec-ops-10 Thread-Index: AQHSNR62bJsPySrh80ivtkDVsKGkYA== Date: Wed, 2 Nov 2016 15:35:18 +0000 Message-ID: <1FBAD3F8-5387-47A3-9988-A49A3133490A@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.82.232.125] Content-Type: multipart/alternative; boundary="_000_1FBAD3F8538747A39988A49A3133490Aciscocom_" MIME-Version: 1.0 Archived-At: Cc: Chris Morrow , "sidr-chairs@ietf.org" , "sidr@ietf.org" Subject: [sidr] AD Review of draft-ietf-sidr-bgpsec-ops-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Nov 2016 15:35:24 -0000 --_000_1FBAD3F8538747A39988A49A3133490Aciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmFuZHk6DQoNCkhpISAgVGhhbmtzIGZvciB3b3JraW5nIG9uIHRoaXMgZG9jdW1lbnQhDQoNCkkg aGF2ZSB0d28gaXNzdWVzIEkgd2FudCB0byBoaWdobGlnaHQgdXBmcm9udCwgYW5kIHRoZW4gc29t ZSBjb21tZW50cyAoYmVsb3cpLiAgSSB3b3VsZCBsaWtlIHRvIHNlZSB0aGVzZSB0d28gaXNzdWVz IGFkZHJlc3NlZCwgYWxvbmcgd2l0aCB0aGUgTWFqb3IgY29tbWVudHMgYmVsb3csIGJlZm9yZSBt b3ZpbmcgdGhlIGRvY3VtZW50IGZvcndhcmQuDQoNClRoZXNlIHR3byB1cGZyb250IGlzc3VlcyBh cmUgcHJvYmFibHkgbW9yZSBxdWVzdGlvbnMgZm9yIHRoZSBDaGFpcnMvU2hlcGhlcmQuDQoNCjEu IFdoeSBpcyB0aGlzIGRvY3VtZW50IGEgQkNQPyAgQSBCQ1AgaXMgYSBkb2N1bWVudCB0aGF0IGRl c2NyaWJlcyDigJx0aGUgY29tbXVuaXR5J3MgYmVzdCBjdXJyZW50IHRoaW5raW5n4oCmb24gd2hh dCBpcyBiZWxpZXZlZCB0byBiZSB0aGUgYmVzdCB3YXkgdG8gcGVyZm9ybSBzb21lIG9wZXJhdGlv bnPigJ0gW3JmYzIwMjZdLiAgVGhpcyBkb2N1bWVudCBtZWV0cyB0aGF0IGJhciBvZiB0aGUgZGVz Y3JpcHRpb24sIGJ1dCB0aGVyZSBpcyBjbGVhcmx5IG5vdCBhIGxvdCBvZiBwcmFjdGljZSBiZWhp bmQgdGhlIGNvbnNpZGVyYXRpb25zIOKAkyB3aGljaCBJIHRoaW5rIGlzIHJlZmxlY3RlZCBpbiB0 aGUgbGFjayBvZiBzaWduaWZpY2FudCBjb21tZW50cyBmcm9tIHRoZSBXRy4gIEkgd291bGQgcHJl ZmVyIGlmIHRoaXMgZG9jdW1lbnQgYXMgSW5mb3JtYXRpb25hbCwgcGVuZGluZyBzb21lIGFjdHVh bCBleHBlcmllbmNlLiAgQnV0IEnigJlsbCBzZXR0bGUgZm9yIGEgZ29vZCBleHBsYW5hdGlvbiAo dG8gYmUgYWxzbyBpbmNsdWRlZCBpbiB0aGUgU2hlcGhlcmTigJlzIHdyaXRlLXVwKSBvZiB3aHkg QkNQLg0KDQoyLiBUaGlzIGRvY3VtZW50LCBhcyBhIGNvbXBhbmlvbiBvZiBkcmFmdC1pZXRmLXNp ZHItYmdwc2VjLXByb3RvY29sLCBpcyB0aGUgb25seSBwbGFjZSB3aGVyZSBPcGVyYXRpb25hbCAo b3IgTWFuYWdlbWVudCkgQ29uc2lkZXJhdGlvbnMgYXJlIGRpc2N1c3NlZC4gIEhvd2V2ZXIsIGlt cG9ydGFudCBpdGVtcyByZWNvbW1lbmRlZCBpbiBSRkM1NzA2IChHdWlkZWxpbmVzIGZvciBDb25z aWRlcmluZyBPcGVyYXRpb25zIGFuZCBNYW5hZ2VtZW50IG9mIE5ldyBQcm90b2NvbHMgYW5kIFBy b3RvY29sIEV4dGVuc2lvbnMpLCBzdWNoIGFzIG1pZ3JhdGlvbiBvciBmYXVsdCBtYW5hZ2VtZW50 IGFyZSBub3QgY292ZXJlZCBhbnl3aGVyZS4gIEdpdmVuIHRoZSB0b25lIGFuZCBjdXJyZW50IGNv bnRlbnQgb2YgdGhpcyBkb2N1bWVudCwgSSBkb27igJl0IHRoaW5rIGV4dGVuZGluZyBpdCBpcyB0 aGUgd2F5IGZvcndhcmQgLS0gc28sIGluIG15IHJldmlldyBvZiBkcmFmdC1pZXRmLXNpZHItYmdw c2VjLXByb3RvY29sIFsxXSwgSSBhc2tlZCB0aGUgYXV0aG9ycyB0byBpbmNsdWRlIGFuIE9wZXJh dGlvbnMgYW5kIE1hbmFnZW1lbnQgU2VjdGlvbiB0aGVyZSBhbmQgdG8gY29uc2lkZXIgdXNpbmcg dGhpcyBkb2N1bWVudCBhcyB0aGUgYmFzZS4gIE1lcmdpbmcgdGhpcyBkb2N1bWVudCBpbnRvIGRy YWZ0LWlldGYtc2lkci1iZ3BzZWMtcHJvdG9jb2wgaXMgYW4gYWN0aW9uIHRoYXQgdGhlIFdHL2F1 dGhvcnMvQ2hhaXJzL1NoZXBoZXJkcyBzaG91bGQgY29uc2lkZXIuICBXaGlsZSB0aGF0IGlzIG15 IHByZWZlcnJlZCBzb2x1dGlvbiwgSSB3aWxsIG1vdmUgZm9yd2FyZCB3aXRoIHB1YmxpY2F0aW9u IG9mIHRoaXMgZG9jdW1lbnQgaWYgdGhhdCBpcyB0aGUgY29uc2Vuc3VzLg0KDQpUaGFua3MhDQoN CkFsdmFyby4NCg0KWzFdIGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJjaC9tc2cvc2lk ci9VT1NmSTRkcnJGdm5PNzI3MWl2VTNqOVJGbTQNCg0KDQpNYWpvcjoNCk0xLiBJbiBTZWN0aW9u IDUsIHlvdSB3cm90ZTog4oCcQXMgdGhleSBhcmUgbm90IGZvcm1hbGx5IHZlcmlmaWFibGUsIGFu IGVCR1AgbGlzdGVuZXIgU0hPVUxEIE5PVCBzdHJvbmdseSB0cnVzdCB1bnNpZ25lZCBzZWN1cml0 eSBtYXJraW5ncyBzdWNoIGFzIGNvbW11bml0aWVzIHJlY2VpdmVkIGFjcm9zcyBhIHRydXN0IGJv dW5kYXJ5LuKAnSAgQWZ0ZXIgcmVhZGluZyB0aGlzIHBpZWNlIG9mIHRleHQgc2V2ZXJhbCB0aW1l cywgSSB0aGluayBJIHBpY2tlZCB1cCBvbiB0aGUgc3VidGxlIG1lc3NhZ2U6IGRvbuKAmXQgdHJ1 c3QgdW5zaWduZWQgKnNlY3VyaXR5IG1hcmtpbmdzKiAtLSB2cyB3aGF0IEkgZ290IGZyb20gdGhl IGZpcnN0IG4tMSByZWFkaW5nczogZG9u4oCZdCB0cnVzdCBjb21tdW5pdGllcy4gIEkgdGhpbmsg dGhhdCB0aGlzIHBhcmFncmFwaCB3b3VsZCBncmVhdGx5IGJlbmVmaXQgZnJvbSBtb3JlIGRldGFp bHMgb3IgYW4gZXhhbXBsZSByZWxhdGVkIHRvIHNlY3VyaXR5IG1hcmtpbmdzLg0KDQpNMi4gSW4g U2VjdGlvbiA3LiAoUm91dGluZyBQb2xpY3kpOiDigJxBcyBCR1BzZWMgd2lsbCBiZSByb2xsZWQg b3V0IG92ZXLigKZhIGxvbmcgdGltZS4gIEhlbmNlIGEgbm9ybWFsIG9wZXJhdG9yJ3MgcG9saWN5 IFNIT1VMRCBOT1QgYmUgb3Zlcmx5IHN0cmljdCwgcGVyaGFwcyBwcmVmZXJyaW5nIFZhbGlkIHBh dGhzIGFuZCBnaXZpbmcgdmVyeSBsb3cgcHJlZmVyZW5jZSwgYnV0IHN0aWxsIHVzaW5nLCBOb3Qg VmFsaWQgcGF0aHMu4oCdICBUaGlzIHJlY29tbWVuZGF0aW9uIGNvbmNlcm5zIG1lIGJlY2F1c2Ug 4oCcTm90IFZhbGlk4oCdIHRhbGtzIGRpcmVjdGx5IHRvIHRoZSBmYWN0IHRoYXQgdGhlIGFubm91 bmNlbWVudCBpcywgd2VsbCwgbm90IHZhbGlkIOKAkyB2cyBqdXN0IHVuYWJsZSB0byBiZSB2ZXJp ZmllZCAoYmVjYXVzZSB0aGVyZeKAmXMgbm8gQkdQc2VjX1BhdGggIGF0dHJpYnV0ZSwgZm9yIGV4 YW1wbGUpLiAgVGhlIG5leHQgc2VudGVuY2UgaXMgYSByZWZsZWN0aW9uIG9mIG15IGNvbmNlcm46 IOKAnE9wZXJhdG9ycyBzaG91bGQgYmUgYXdhcmUgdGhhdCBhY2NlcHRpbmcgTm90IFZhbGlkIGFu bm91bmNlbWVudHPigKZ3aWxsIG9mdGVuIGJlIHRoZSBlcXVpdmFsZW50IG9mIHRyZWF0aW5nIHRo ZW0gYXMgZnVsbHkgVmFsaWQu4oCdICBJLUQuc2lkci1iZ3BzZWMtcHJvdG9jb2wgc3VnZ2VzdHMg dGhlIHNhbWUgdGhpbmcgKGluIDUuMSwgcG9pbnRpbmcgdG8gdGhpcyBkb2N1bWVudCkuICBJIGFt IGxlZnQgd2l0aCB0aGUgcXVlc3Rpb246IHdoeSB2YWxpZGF0ZSBhdCBhbGwgaWYgdGhlIEJDUCBy ZWNvbW1lbmRhdGlvbiBpcyB0byB1c2UgYWxsIGFubm91bmNlbWVudHMgbm8gbWF0dGVyIHRoZSBz dGF0ZT8gIEkgb2J2aW91c2x5IHJlYWxpemUgdGhhdCBpdCBpcyBzdGlsbCBlYXJseSBkYXlzIOKA kyBtYXliZSBpdCBpcyB0b28gZWFybHkgZm9yIGEgQkNQIGRvY3VtZW50IGlmIHRoZSDigJxwcmFj dGljZeKAnSBpcyBub3QgdGhlcmUgeWV04oCmDQoNCk0zLiBBbHNvIGluIFNlY3Rpb24gNzog4oCc 4oCmc2lnbmVkIHBhdGhzIHRoYXQgYXJlIE5vdCBWYWxpZCBhbmQgeWV0IHByb3BhZ2F0ZWTigKZT SE9VTEQgaGF2ZSB0aGVpciBzaWduYXR1cmVzIGtlcHQgaW50YWN04oCm4oCdICBTZWN0aW9uIDQu Mi4gKENvbnN0cnVjdGluZyB0aGUgQkdQc2VjX1BhdGggQXR0cmlidXRlKSBvZiBkcmFmdC1pZXRm LXNpZHItYmdwc2VjLXByb3RvY29sIHNheXM6IOKAnGEgU2lnbmF0dXJlX0Jsb2NrIHdoaWNoIGlz IG5vdCBkZWVtZWQgJ1ZhbGlkJ+KApnN1Y2ggU2lnbmF0dXJlX0Jsb2NrcyBNVVNUIE5PVCBiZSBy ZW1vdmVkLuKAnSAgVGhlIOKAnFNIT1VMROKAnSBpbiB0aGlzIGRvY3VtZW50IGlzIGF0IG9kZHMg d2l0aCB0aGUg4oCcTVVTVCBOT1TigJ0gaW4gdGhlIEJHUFNlYyBzcGVjOyBwbGVhc2Ugcy9TSE9V TEQvTVVTVCwgb3IgKGV2ZW4gYmV0dGVyKSBzL1NIT1VMRC9zaG91bGQuDQoNCk00LiBTdGlsbCBp biBTZWN0aW9uIDc6IOKAnFRvIHByZXZlbnQgZXhwb3N1cmUgb2YgdGhlIGludGVybmFscyBvZiBC R1AgQ29uZmVkZXJhdGlvbnMgW1JGQzUwNjVdLCBhIEJHUHNlYyBzcGVha2VyIHdoaWNoIGlzIGEg TWVtYmVyLUFTIG9mIGEgQ29uZmVkZXJhdGlvbiBNVVNUIE5PVCBzaWduIHVwZGF0ZXMgc2VudCB0 byBhbm90aGVyIE1lbWJlci1BUyBvZiB0aGUgc2FtZSBDb25mZWRlcmF0aW9uLuKAnSAgVGhpcyBp cyBhbm90aGVyIGNhc2Ugd2hlcmUgdGhlIEJHUFNlYyBzcGVjIHNheXMgc29tZXRoaW5nIGRpZmZl cmVudDogU2VjdGlvbiA0LjMuIChQcm9jZXNzaW5nIEluc3RydWN0aW9ucyBmb3IgQ29uZmVkZXJh dGlvbiBNZW1iZXJzKSBwcmVzZW50cyBhIG1hbmRhdG9yeSBtZWNoYW5pc20gdGhhdCBpbmNsdWRl cyBzaWduaW5nLCBidXQgbm90IG5lY2Vzc2FyaWx5IHZhbGlkYXRpbmcuICBCVFcsIGlmIHRoZSB1 cGRhdGVzIGFyZSBub3Qgc2lnbmVkLCB0aGVuIHRoZSBzaWduZWQgcGF0aCB3b3VsZCBiZSBicm9r ZW4sIGV2ZW4gaWYgYWxsIHRoZSByb3V0ZXJzIGluIHRoZSBwYXRoIHN1cHBvcnQgQkdQU2VjLCBy aWdodD8gIElzIHRoYXQgdGhlIHJlY29tbWVuZGF0aW9uPw0KDQpNNS4gSW4gU2VjdGlvbiA4OiDi gJzigKZyb3V0ZXJzJyBjbG9ja3MgTVVTVCBiZSBjb3JyZWN04oCm4oCdICBXaGF0IGRvZXMgdGhp cyBtZWFuPyAgQ29ycmVjdCB3aXRoIHJlc3BlY3QgdG8gd2hhdD8gIExhdGVyICgyIHBhcmFncmFw aHMpIHlvdSBkbyBtZW50aW9uIFJGQzU5MDUsIHNob3VsZCB0aGF0IGJlIHRoZSByZWZlcmVuY2Ug aGVyZT8gIE1heWJlIG1ha2UgdGhlIGNsb2NrIHRvcGljIG9uZSBwYXJhZ3JhcGggdG8gYXZvaWQg Y29uZnVzaW9uLg0KDQoNClJlZmVyZW5jZXM6DQpSMS4gVGhlIHJlZmVyZW5jZSB0byBCR1BzZWMg c2hvdWxkIGJlIGRyYWZ0LWlldGYtc2lkci1iZ3BzZWMtcHJvdG9jb2wgKGFuZCBub3QgSS1ELmll dGYtc2lkci1iZ3BzZWMtb3ZlcnZpZXcpLiAgSSB0aGluayBpdCBpcyBvayB0byByZWZlcmVuY2Ug SS1ELmlldGYtc2lkci1iZ3BzZWMtb3ZlcnZpZXcgaW4gdGhlIFN1Z2dlc3RlZCBSZWFkaW5nIGFz IGFuIEluZm9ybWF0aXZlIHJlZmVyZW5jZS4gIFNpbWlsYXJseSwgcmZjNjQ4MCwgcmZjNjQ4MSBh bmQgcmZjNjQ4MiBzaG91bGQgYmUgbWFkZSBJbmZvcm1hdGl2ZSBhcyB3ZWxsLg0KDQpSMi4gU2Vj dGlvbiA3OiDigJxUaGlzIGltcGxpZXMgdGhhdCB0aGUgcm91dGUgc2VydmVyIGNyZWF0ZXMgc2ln bmF0dXJlcyBwZXIgY2xpZW50IGluY2x1ZGluZyBpdHMgb3duIEFTIGluIHRoZSBCR1BzZWNfUGF0 aCBhbmQgdGhlIHRhcmdldCBBU2VzLCBzZWUgMi4yLjIgb2YgW0ktRC5pZXRmLWlkci1peC1iZ3At cm91dGUtc2VydmVyXS7igJ0gIEkgdGhpbmsgdGhpcyByZWZlcmVuY2UgaXMgbm90IGNvcnJlY3Qg YmVjYXVzZSBJLUQuaWV0Zi1pZHItaXgtYmdwLXJvdXRlLXNlcnZlciBkb2VzbuKAmXQgc2F5IGFu eXRoaW5nIGFib3V0IEJHUFNlYy4gIFRoYXQgc2VjdGlvbiBkb2VzIHNheSB0aGUgb3Bwb3NpdGU6 IOKAnHRoZSByb3V0ZSBzZXJ2ZXIgU0hPVUxEIE5PVCBwcmVwZW5kIGl0cyBvd24gQVMgbnVtYmVy IHRvIHRoZSBBU19QQVRIIHNlZ21lbnQgbm9yIG1vZGlmeSB0aGUgQVNfUEFUSCBzZWdtZW50IGlu IGFueSBvdGhlciB3YXnigJ0uICBNYXliZSBwb2ludCBhdCA0LjIgb2YgZHJhZnQtaWV0Zi1zaWRy LWJncHNlYy1wcm90b2NvbCBpbnN0ZWFkLg0KDQpSMy4gUkZDNjgxMSBzaG91bGQgYmUgYSBOb3Jt YXRpdmUgcmVmZXJlbmNlLg0KDQoNCk1pbm9yOg0KbTEuIFRoZSBJUHY0IGV4YW1wbGVzIGluIFNl Y3Rpb24gNyBzaG91bGQgdXNlIGFkZHJlc3NlZCBmcm9tIHJmYzY4OTAuDQoNCm0yLiBJbiBTZWN0 aW9uIDc6IOKAnFRoZXJlZm9yZSwgdW5sZXNzIGxvY2FsIHBvbGljeSBlbnN1cmVzIG90aGVyd2lz ZSwgYSBzaWduZWQgcGF0aCBsZWFybmVkIHZpYSBpQkdQIE1BWSBiZSBOb3QgVmFsaWQu4oCdICBU aGF0IOKAnE1BWeKAnSBpcyBub3Qgbm9ybWF0aXZlIGluIHRoaXMgY29udGV4dCwgYnV0IGl0IGlz IHN0YXRpbmcgYSBmYWN0OiBzL01BWS9tYXkuDQoNCm0zLiBBbHNvIGluIFNlY3Rpb24gNzog4oCc SWYgaXQgaXMga25vd24gdGhhdCBhIEJHUHNlYyBuZWlnaGJvciBpcyBub3QgYSB0cmFuc3BhcmVu dCByb3V0ZSBzZXJ2ZXIsIGFuZCB0aGUgcm91dGVyIHByb3ZpZGVzIGEga25vYiB0byBkaXNhbGxv dyBhIHJlY2VpdmVkIHBDb3VudCAocHJlcGVuZCBjb3VudCwgemVybyBmb3IgdHJhbnNwYXJlbnQg cm91dGUgc2VydmVycykgb2YgemVybywgdGhhdCBrbm9iIFNIT1VMRCBiZSBhcHBsaWVkLuKAnSAg VGhlcmUgYXJlIG90aGVyIGNhc2VzIHdoZW4gcENvdW50IDAgaXMgb2ssIGRyYWZ0LWlldGYtc2lk ci1hcy1taWdyYXRpb24gZm9yIGV4YW1wbGUuICBJIGtub3cgdGhhdCDigJxTSE9VTETigJ0gYWxs b3dzIG90aGVyIGNhc2VzLCBidXQgbWF5YmUgd29ya2luZyBpbiB0aGUgcm91dGVyIHNlcnZlciBh cyBhbiBleGFtcGxlIG1pZ2h0IGJlIGFuIGltcHJvdmVtZW50Lg0KDQptNC4gU2VjdGlvbiA5LiAo U2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMpOiDigJxUaGUgbWFqb3Igc2VjdXJpdHkgY29uc2lkZXJh dGlvbnMgZm9yIHRoZSBCR1BzZWMgcHJvdG9jb2wgYXJlIGRlc2NyaWJlZCBpbiBbSS1ELmlldGYt c2lkci1iZ3BzZWMtcHJvdG9jb2xdLuKAnSAgQXJlIHRoZXJlIG90aGVyIHNlY3VyaXR5IGNvbnNp ZGVyYXRpb25zIG5vdCBtZW50aW9uZWQgdGhlcmU/DQoNCg0KDQpOaXRzOg0KbjEuIEludHJvZHVj dGlvbjog4oCc4oCmb3JpZ2luIHZhbGlkYXRpb27igKZ3aWxsIG9jY3VyIG92ZXIgdGhlIG5leHQg dHdvIHRvIHRocmVlIHllYXJzIGFuZCB0aGF0IEJHUHNlYyB3aWxsIHN0YXJ0IHRvIGRlcGxveSB3 ZWxsIGFmdGVyIHRoYXQu4oCdICBSZWNvbW1lbmRhdGlvbjogYXZvaWQgc3BlY2lmaWMgdGltZWZy YW1lcywgYmUgYSBsaXR0bGUgdmFndWVyIChzaG9ydC9tZWRpdW0vbG9uZyB0ZXJtKS4gIEkgbm90 aWNlZCB0aGF0IHRoZSBmaXJzdCB2ZXJzaW9uIG9mIGRyYWZ0LXltYmstYmdwc2VjLW9wcyBhbHNv IG1lbnRpb25lZCDigJx0d28gdG8gZml2ZSB5ZWFyc+KAnSAoaW4gMjAxMSEpLg0KDQpuMi4gcy8g Y2xpZW50IGNvbmUsIGkuZS4gYW4gUlIgY2xpZW50IG9yIHRoZSB0cmFuc2l0aXZlIGNsb3N1cmUg b2YgdGhlaXIgY3VzdG9tZXJzJyBjdXN0b21lcnMnIGN1c3RvbWVycycgZXRjLi8gY2xpZW50IGNv bmUsIGkuZS4gYW4gUlIgY2xpZW50IG9yIHJlYWNoYWJsZSB0cmFuc2l0aXZlbHkgdGhyb3VnaCBv bmUgb2YgdGhlbS4NCg0KbjMuIOKAnEFzIHRoZSB2YXN0IG1ham9yaXR5ICg4NCUpIG9mIEFTcyBh cmUgc3R1YnMsIGFuZCB0aGV5IGFubm91bmNlIHRoZSBtYWpvcml0eSBvZiBwcmVmaXhlc+KApuKA nSBBIHJlZmVyZW5jZSB3b3VsZCBiZSBuaWNlLg0KDQpuNC4g4oCcQmVjYXVzZSBvZiBwb3NzaWJs ZSBSUEtJIHZlcnNpb24gc2tld+KApuKAnSAgSSBndWVzcyB5b3UgbWVhbiBsYWNrIG9mIHN5bmPi gKYNCg0KbjUuIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zLiAgUGxlYXNlIHdyaXRlIHNvbWV0aGlu ZyBhbG9uZyB0aGUgbGluZXMgb2Y6IOKAnFRoaXMgZG9jdW1lbnQgZGVzY3JpYmVzIG9wZXJhdGlv bmFsIGNvbnNpZGVyYXRpb25zIGZvciB0aGUgZGVwbG95bWVudCBvZiBCR1BzZWMuICBUaGUgc2Vj dXJpdHkgY29uc2lkZXJhdGlvbnMgZm9yIEJHUHNlYyBhcmXigKbigJ0NCg== --_000_1FBAD3F8538747A39988A49A3133490Aciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxuczptdj0iaHR0cDovL21hY1ZtbFNj aGVtYVVyaSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiPg0KPGhlYWQ+ DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hh cnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJUaXRsZSIgY29udGVudD0iIj4NCjxtZXRhIG5hbWU9 IktleXdvcmRzIiBjb250ZW50PSIiPg0KPG1ldGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJN aWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQgbWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9u dCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRo IjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHls ZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1h bA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIu MHB0Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRp b246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2 Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6 MGluOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxl ZnQ6LjVpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglm b250LWZhbWlseTpDYWxpYnJpO30NCnNwYW4uRW1haWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBl OnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDsNCglm b250LXdlaWdodDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0Kc3Bhbi5FbWFpbFN0eWxl MTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtY29tcG9zZTsNCglmb250LWZhbWlseTpDYWxp YnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5 bGU6bm9ybWFsO30NCnNwYW4ubXNvSW5zDQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0K CW1zby1zdHlsZS1uYW1lOiIiOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7DQoJY29sb3I6 dGVhbDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglm b250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KQHBhZ2UgV29yZFNlY3Rp b24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBp bjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVm aW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjIwMjgyOTMzNzI7DQoJbXNvLWxp c3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjk3MjA0MjI2MiA2NzY5ODcw MyA2NzY5ODcxMyA2NzY5ODcxNSA2NzY5ODcwMyA2NzY5ODcxMyA2NzY5ODcxNSA2NzY5ODcwMyA2 NzY5ODcxMyA2NzY5ODcxNTt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLXRhYi1zdG9w Om5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEt bG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4w cHQ7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3Qg bDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCkBsaXN0IGww OmxldmVsNw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsOA0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluO30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1s b3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBp bjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1z byA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNyIv Pg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxh eW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIvPg0KPC9v OnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgYmdjb2xvcj0i d2hpdGUiIGxhbmc9IkVOLVVTIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2 IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPlJhbmR5OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+SGkhJm5ic3A7IFRoYW5rcyBmb3Igd29ya2luZyBvbiB0aGlzIGRvY3VtZW50 ITxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+SSBoYXZlIHR3byBp c3N1ZXMgSSB3YW50IHRvIGhpZ2hsaWdodCB1cGZyb250LCBhbmQgdGhlbiBzb21lIGNvbW1lbnRz IChiZWxvdykuJm5ic3A7IEkgd291bGQgbGlrZSB0byBzZWUgdGhlc2UgdHdvIGlzc3VlcyBhZGRy ZXNzZWQsIGFsb25nIHdpdGggdGhlIE1ham9yIGNvbW1lbnRzIGJlbG93LCBiZWZvcmUgbW92aW5n IHRoZSBkb2N1bWVudCBmb3J3YXJkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+VGhlc2UgdHdvIHVwZnJvbnQgaXNzdWVzIGFyZSBwcm9iYWJseSBtb3JlIHF1ZXN0 aW9ucyBmb3IgdGhlIENoYWlycy9TaGVwaGVyZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPjEuIFdoeSBpcyB0aGlzIGRvY3VtZW50IGEgQkNQPyZuYnNwOyBBIEJD UCBpcyBhIGRvY3VtZW50IHRoYXQgZGVzY3JpYmVzIOKAnHRoZSBjb21tdW5pdHkncyBiZXN0IGN1 cnJlbnQgdGhpbmtpbmfigKZvbiB3aGF0IGlzIGJlbGlldmVkIHRvIGJlIHRoZSBiZXN0IHdheSB0 byBwZXJmb3JtIHNvbWUgb3BlcmF0aW9uc+KAnSBbcmZjMjAyNl0uJm5ic3A7IFRoaXMgZG9jdW1l bnQgbWVldHMNCiB0aGF0IGJhciBvZiB0aGUgZGVzY3JpcHRpb24sIGJ1dCB0aGVyZSBpcyBjbGVh cmx5IG5vdCBhIGxvdCBvZiBwcmFjdGljZSBiZWhpbmQgdGhlIGNvbnNpZGVyYXRpb25zIOKAkyB3 aGljaCBJIHRoaW5rIGlzIHJlZmxlY3RlZCBpbiB0aGUgbGFjayBvZiBzaWduaWZpY2FudCBjb21t ZW50cyBmcm9tIHRoZSBXRy4mbmJzcDsgSSB3b3VsZCBwcmVmZXIgaWYgdGhpcyBkb2N1bWVudCBh cyBJbmZvcm1hdGlvbmFsLCBwZW5kaW5nIHNvbWUgYWN0dWFsIGV4cGVyaWVuY2UuJm5ic3A7DQog QnV0IEnigJlsbCBzZXR0bGUgZm9yIGEgZ29vZCBleHBsYW5hdGlvbiAodG8gYmUgYWxzbyBpbmNs dWRlZCBpbiB0aGUgU2hlcGhlcmTigJlzIHdyaXRlLXVwKSBvZiB3aHkgQkNQLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Mi4gVGhpcyBkb2N1bWVudCwgYXMgYSBj b21wYW5pb24gb2YgZHJhZnQtaWV0Zi1zaWRyLWJncHNlYy1wcm90b2NvbCwgaXMgdGhlIG9ubHkg cGxhY2Ugd2hlcmUgT3BlcmF0aW9uYWwgKG9yIE1hbmFnZW1lbnQpIENvbnNpZGVyYXRpb25zIGFy ZSBkaXNjdXNzZWQuJm5ic3A7IEhvd2V2ZXIsIGltcG9ydGFudCBpdGVtcyByZWNvbW1lbmRlZCBp biBSRkM1NzA2IChHdWlkZWxpbmVzDQogZm9yIENvbnNpZGVyaW5nIE9wZXJhdGlvbnMgYW5kIE1h bmFnZW1lbnQgb2YgTmV3IFByb3RvY29scyBhbmQgUHJvdG9jb2wgRXh0ZW5zaW9ucyksIHN1Y2gg YXMgbWlncmF0aW9uIG9yIGZhdWx0IG1hbmFnZW1lbnQgYXJlIG5vdCBjb3ZlcmVkIGFueXdoZXJl LiZuYnNwOyBHaXZlbiB0aGUgdG9uZSBhbmQgY3VycmVudCBjb250ZW50IG9mIHRoaXMgZG9jdW1l bnQsIEkgZG9u4oCZdCB0aGluayBleHRlbmRpbmcgaXQgaXMgdGhlIHdheSBmb3J3YXJkIC0tIHNv LA0KIGluIG15IHJldmlldyBvZiBkcmFmdC1pZXRmLXNpZHItYmdwc2VjLXByb3RvY29sIFsxXSwg SSBhc2tlZCB0aGUgYXV0aG9ycyB0byBpbmNsdWRlIGFuIE9wZXJhdGlvbnMgYW5kIE1hbmFnZW1l bnQgU2VjdGlvbiB0aGVyZSBhbmQgdG8gY29uc2lkZXIgdXNpbmcgdGhpcyBkb2N1bWVudCBhcyB0 aGUgYmFzZS4mbmJzcDsgTWVyZ2luZyB0aGlzIGRvY3VtZW50IGludG8gZHJhZnQtaWV0Zi1zaWRy LWJncHNlYy1wcm90b2NvbCBpcyBhbiBhY3Rpb24gdGhhdCB0aGUNCiBXRy9hdXRob3JzL0NoYWly cy9TaGVwaGVyZHMgc2hvdWxkIGNvbnNpZGVyLiZuYnNwOyBXaGlsZSB0aGF0IGlzIG15IHByZWZl cnJlZCBzb2x1dGlvbiwgSSB3aWxsIG1vdmUgZm9yd2FyZCB3aXRoIHB1YmxpY2F0aW9uIG9mIHRo aXMgZG9jdW1lbnQgaWYgdGhhdCBpcyB0aGUgY29uc2Vuc3VzLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhhbmtzITxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+QWx2YXJvLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+WzFdIDxhIGhyZWY9Imh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcvYXJj aC9tc2cvc2lkci9VT1NmSTRkcnJGdm5PNzI3MWl2VTNqOVJGbTQiPg0KaHR0cHM6Ly9tYWlsYXJj aGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9zaWRyL1VPU2ZJNGRyckZ2bk83MjcxaXZVM2o5UkZtNDwv YT4gPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+TWFqb3I6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPk0xLiBJbiBTZWN0aW9uIDUs IHlvdSB3cm90ZTog4oCcQXMgdGhleSBhcmUgbm90IGZvcm1hbGx5IHZlcmlmaWFibGUsIGFuIGVC R1AgbGlzdGVuZXIgU0hPVUxEIE5PVCBzdHJvbmdseSB0cnVzdCB1bnNpZ25lZCBzZWN1cml0eSBt YXJraW5ncyBzdWNoIGFzIGNvbW11bml0aWVzIHJlY2VpdmVkIGFjcm9zcyBhIHRydXN0IGJvdW5k YXJ5LuKAnSZuYnNwOyBBZnRlciByZWFkaW5nDQogdGhpcyBwaWVjZSBvZiB0ZXh0IHNldmVyYWwg dGltZXMsIEkgdGhpbmsgSSBwaWNrZWQgdXAgb24gdGhlIHN1YnRsZSBtZXNzYWdlOiBkb27igJl0 IHRydXN0IHVuc2lnbmVkICo8Yj5zZWN1cml0eSBtYXJraW5nczwvYj4qIC0tIHZzIHdoYXQgSSBn b3QgZnJvbSB0aGUgZmlyc3Qgbi0xIHJlYWRpbmdzOiBkb27igJl0IHRydXN0IGNvbW11bml0aWVz LiZuYnNwOyBJIHRoaW5rIHRoYXQgdGhpcyBwYXJhZ3JhcGggd291bGQgZ3JlYXRseSBiZW5lZml0 IGZyb20gbW9yZQ0KIGRldGFpbHMgb3IgYW4gZXhhbXBsZSByZWxhdGVkIHRvIHNlY3VyaXR5IG1h cmtpbmdzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+TTIuIElu IFNlY3Rpb24gNy4gKFJvdXRpbmcgUG9saWN5KTog4oCcQXMgQkdQc2VjIHdpbGwgYmUgcm9sbGVk IG91dCBvdmVy4oCmYSBsb25nIHRpbWUuJm5ic3A7IEhlbmNlIGEgbm9ybWFsIG9wZXJhdG9yJ3Mg cG9saWN5IFNIT1VMRCBOT1QgYmUgb3Zlcmx5IHN0cmljdCwgcGVyaGFwcyBwcmVmZXJyaW5nIFZh bGlkIHBhdGhzIGFuZCBnaXZpbmcgdmVyeSBsb3cgcHJlZmVyZW5jZSwNCiBidXQgc3RpbGwgdXNp bmcsIE5vdCBWYWxpZCBwYXRocy7igJ0mbmJzcDsgVGhpcyByZWNvbW1lbmRhdGlvbiBjb25jZXJu cyBtZSBiZWNhdXNlIOKAnE5vdCBWYWxpZOKAnSB0YWxrcyBkaXJlY3RseSB0byB0aGUgZmFjdCB0 aGF0IHRoZSBhbm5vdW5jZW1lbnQgaXMsIHdlbGwsIG5vdCB2YWxpZCDigJMgdnMganVzdCB1bmFi bGUgdG8gYmUgdmVyaWZpZWQgKGJlY2F1c2UgdGhlcmXigJlzIG5vIEJHUHNlY19QYXRoJm5ic3A7 IGF0dHJpYnV0ZSwgZm9yIGV4YW1wbGUpLiZuYnNwOyBUaGUgbmV4dA0KIHNlbnRlbmNlIGlzIGEg cmVmbGVjdGlvbiBvZiBteSBjb25jZXJuOiDigJxPcGVyYXRvcnMgc2hvdWxkIGJlIGF3YXJlIHRo YXQgYWNjZXB0aW5nIE5vdCBWYWxpZCBhbm5vdW5jZW1lbnRz4oCmd2lsbCBvZnRlbiBiZSB0aGUg ZXF1aXZhbGVudCBvZiB0cmVhdGluZyB0aGVtIGFzIGZ1bGx5IFZhbGlkLuKAnSZuYnNwOyBJLUQu c2lkci1iZ3BzZWMtcHJvdG9jb2wgc3VnZ2VzdHMgdGhlIHNhbWUgdGhpbmcgKGluIDUuMSwgcG9p bnRpbmcgdG8gdGhpcyBkb2N1bWVudCkuJm5ic3A7DQogSSBhbSBsZWZ0IHdpdGggdGhlIHF1ZXN0 aW9uOiB3aHkgdmFsaWRhdGUgYXQgYWxsIGlmIHRoZSBCQ1AgcmVjb21tZW5kYXRpb24gaXMgdG8g dXNlIGFsbCBhbm5vdW5jZW1lbnRzIG5vIG1hdHRlciB0aGUgc3RhdGU/ICZuYnNwO0kgb2J2aW91 c2x5IHJlYWxpemUgdGhhdCBpdCBpcyBzdGlsbCBlYXJseSBkYXlzIOKAkyBtYXliZSBpdCBpcyB0 b28gZWFybHkgZm9yIGEgQkNQIGRvY3VtZW50IGlmIHRoZSDigJxwcmFjdGljZeKAnSBpcyBub3Qg dGhlcmUgeWV04oCmPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5N My4gQWxzbyBpbiBTZWN0aW9uIDc6IOKAnOKApnNpZ25lZCBwYXRocyB0aGF0IGFyZSBOb3QgVmFs aWQgYW5kIHlldCBwcm9wYWdhdGVk4oCmU0hPVUxEIGhhdmUgdGhlaXIgc2lnbmF0dXJlcyBrZXB0 IGludGFjdOKApuKAnSZuYnNwOyBTZWN0aW9uIDQuMi4gKENvbnN0cnVjdGluZyB0aGUgQkdQc2Vj X1BhdGggQXR0cmlidXRlKSBvZiBkcmFmdC1pZXRmLXNpZHItYmdwc2VjLXByb3RvY29sDQogc2F5 czog4oCcYSBTaWduYXR1cmVfQmxvY2sgd2hpY2ggaXMgbm90IGRlZW1lZCAnVmFsaWQn4oCmc3Vj aCBTaWduYXR1cmVfQmxvY2tzIE1VU1QgTk9UIGJlIHJlbW92ZWQu4oCdJm5ic3A7IFRoZSDigJxT SE9VTETigJ0gaW4gdGhpcyBkb2N1bWVudCBpcyBhdCBvZGRzIHdpdGggdGhlIOKAnE1VU1QgTk9U 4oCdIGluIHRoZSBCR1BTZWMgc3BlYzsgcGxlYXNlIHMvU0hPVUxEL01VU1QsIG9yIChldmVuIGJl dHRlcikgcy9TSE9VTEQvc2hvdWxkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+TTQuIFN0aWxsIGluIFNlY3Rpb24gNzog4oCcVG8gcHJldmVudCBleHBvc3VyZSBv ZiB0aGUgaW50ZXJuYWxzIG9mIEJHUCBDb25mZWRlcmF0aW9ucyBbUkZDNTA2NV0sIGEgQkdQc2Vj IHNwZWFrZXIgd2hpY2ggaXMgYSBNZW1iZXItQVMgb2YgYSBDb25mZWRlcmF0aW9uIE1VU1QgTk9U IHNpZ24gdXBkYXRlcyBzZW50IHRvIGFub3RoZXIgTWVtYmVyLUFTIG9mIHRoZQ0KIHNhbWUgQ29u ZmVkZXJhdGlvbi7igJ0mbmJzcDsgVGhpcyBpcyBhbm90aGVyIGNhc2Ugd2hlcmUgdGhlIEJHUFNl YyBzcGVjIHNheXMgc29tZXRoaW5nIGRpZmZlcmVudDogU2VjdGlvbiA0LjMuIChQcm9jZXNzaW5n IEluc3RydWN0aW9ucyBmb3IgQ29uZmVkZXJhdGlvbiBNZW1iZXJzKSBwcmVzZW50cyBhIG1hbmRh dG9yeSBtZWNoYW5pc20gdGhhdCBpbmNsdWRlcyBzaWduaW5nLCBidXQgbm90IG5lY2Vzc2FyaWx5 IHZhbGlkYXRpbmcuJm5ic3A7IEJUVywgaWYgdGhlIHVwZGF0ZXMNCiBhcmUgbm90IHNpZ25lZCwg dGhlbiB0aGUgc2lnbmVkIHBhdGggd291bGQgYmUgYnJva2VuLCBldmVuIGlmIGFsbCB0aGUgcm91 dGVycyBpbiB0aGUgcGF0aCBzdXBwb3J0IEJHUFNlYywgcmlnaHQ/Jm5ic3A7IElzIHRoYXQgdGhl IHJlY29tbWVuZGF0aW9uPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+TTUuIEluIFNlY3Rpb24gODog4oCc4oCmcm91dGVycycgY2xvY2tzIE1VU1QgYmUgY29ycmVj dOKApuKAnSZuYnNwOyBXaGF0IGRvZXMgdGhpcyBtZWFuPyZuYnNwOyBDb3JyZWN0IHdpdGggcmVz cGVjdCB0byB3aGF0PyZuYnNwOyBMYXRlciAoMiBwYXJhZ3JhcGhzKSB5b3UgZG8gbWVudGlvbiBS RkM1OTA1LCBzaG91bGQgdGhhdCBiZSB0aGUgcmVmZXJlbmNlIGhlcmU/Jm5ic3A7IE1heWJlIG1h a2UgdGhlIGNsb2NrDQogdG9waWMgb25lIHBhcmFncmFwaCB0byBhdm9pZCBjb25mdXNpb24uPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+UmVmZXJlbmNlczo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+UjEuIFRoZSByZWZlcmVuY2Ug dG8gQkdQc2VjIHNob3VsZCBiZSBkcmFmdC1pZXRmLXNpZHItYmdwc2VjLXByb3RvY29sIChhbmQg bm90IEktRC5pZXRmLXNpZHItYmdwc2VjLW92ZXJ2aWV3KS4mbmJzcDsgSSB0aGluayBpdCBpcyBv ayB0byByZWZlcmVuY2UgSS1ELmlldGYtc2lkci1iZ3BzZWMtb3ZlcnZpZXcgaW4gdGhlIFN1Z2dl c3RlZCBSZWFkaW5nIGFzIGFuIEluZm9ybWF0aXZlDQogcmVmZXJlbmNlLiZuYnNwOyBTaW1pbGFy bHksIHJmYzY0ODAsIHJmYzY0ODEgYW5kIHJmYzY0ODIgc2hvdWxkIGJlIG1hZGUgSW5mb3JtYXRp dmUgYXMgd2VsbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlIy LiBTZWN0aW9uIDc6IOKAnFRoaXMgaW1wbGllcyB0aGF0IHRoZSByb3V0ZSBzZXJ2ZXIgY3JlYXRl cyBzaWduYXR1cmVzIHBlciBjbGllbnQgaW5jbHVkaW5nIGl0cyBvd24gQVMgaW4gdGhlIEJHUHNl Y19QYXRoIGFuZCB0aGUgdGFyZ2V0IEFTZXMsIHNlZSAyLjIuMiBvZiBbSS1ELmlldGYtaWRyLWl4 LWJncC1yb3V0ZS1zZXJ2ZXJdLuKAnSZuYnNwOyBJIHRoaW5rIHRoaXMNCiByZWZlcmVuY2UgaXMg bm90IGNvcnJlY3QgYmVjYXVzZSBJLUQuaWV0Zi1pZHItaXgtYmdwLXJvdXRlLXNlcnZlciBkb2Vz buKAmXQgc2F5IGFueXRoaW5nIGFib3V0IEJHUFNlYy4mbmJzcDsgVGhhdCBzZWN0aW9uIGRvZXMg c2F5IHRoZSBvcHBvc2l0ZTog4oCcdGhlIHJvdXRlIHNlcnZlciBTSE9VTEQgTk9UIHByZXBlbmQg aXRzIG93biBBUyBudW1iZXIgdG8gdGhlIEFTX1BBVEggc2VnbWVudCBub3IgbW9kaWZ5IHRoZSBB U19QQVRIIHNlZ21lbnQgaW4gYW55IG90aGVyDQogd2F54oCdLiZuYnNwOyBNYXliZSBwb2ludCBh dCA0LjIgb2YgZHJhZnQtaWV0Zi1zaWRyLWJncHNlYy1wcm90b2NvbCBpbnN0ZWFkLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+UjMuIFJGQzY4MTEgc2hvdWxkIGJl IGEgTm9ybWF0aXZlIHJlZmVyZW5jZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5NaW5vcjo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+bTEuIFRoZSBJUHY0IGV4YW1wbGVzIGluIFNlY3Rpb24gNyBzaG91bGQgdXNlIGFkZHJlc3Nl ZCBmcm9tIHJmYzY4OTAuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij5tMi4gSW4gU2VjdGlvbiA3OiDigJxUaGVyZWZvcmUsIHVubGVzcyBsb2NhbCBwb2xpY3kgZW5z dXJlcyBvdGhlcndpc2UsIGEgc2lnbmVkIHBhdGggbGVhcm5lZCB2aWEgaUJHUCBNQVkgYmUgTm90 IFZhbGlkLuKAnSZuYnNwOyBUaGF0IOKAnE1BWeKAnSBpcyBub3Qgbm9ybWF0aXZlIGluIHRoaXMg Y29udGV4dCwgYnV0IGl0IGlzIHN0YXRpbmcgYSBmYWN0OiBzL01BWS9tYXkuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5tMy4gQWxzbyBpbiBTZWN0aW9uIDc6IOKA nElmIGl0IGlzIGtub3duIHRoYXQgYSBCR1BzZWMgbmVpZ2hib3IgaXMgbm90IGEgdHJhbnNwYXJl bnQgcm91dGUgc2VydmVyLCBhbmQgdGhlIHJvdXRlciBwcm92aWRlcyBhIGtub2IgdG8gZGlzYWxs b3cgYSByZWNlaXZlZCBwQ291bnQgKHByZXBlbmQgY291bnQsIHplcm8gZm9yIHRyYW5zcGFyZW50 IHJvdXRlIHNlcnZlcnMpDQogb2YgemVybywgdGhhdCBrbm9iIFNIT1VMRCBiZSBhcHBsaWVkLuKA nSZuYnNwOyBUaGVyZSBhcmUgb3RoZXIgY2FzZXMgd2hlbiBwQ291bnQgMCBpcyBvaywgZHJhZnQt aWV0Zi1zaWRyLWFzLW1pZ3JhdGlvbiBmb3IgZXhhbXBsZS4mbmJzcDsgSSBrbm93IHRoYXQg4oCc U0hPVUxE4oCdIGFsbG93cyBvdGhlciBjYXNlcywgYnV0IG1heWJlIHdvcmtpbmcgaW4gdGhlIHJv dXRlciBzZXJ2ZXIgYXMgYW4gZXhhbXBsZSBtaWdodCBiZSBhbiBpbXByb3ZlbWVudC48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPm00LiBTZWN0aW9uIDkuIChTZWN1 cml0eSBDb25zaWRlcmF0aW9ucyk6IOKAnFRoZSBtYWpvciBzZWN1cml0eSBjb25zaWRlcmF0aW9u cyBmb3IgdGhlIEJHUHNlYyBwcm90b2NvbCBhcmUgZGVzY3JpYmVkIGluIFtJLUQuaWV0Zi1zaWRy LWJncHNlYy1wcm90b2NvbF0u4oCdJm5ic3A7IEFyZSB0aGVyZSBvdGhlciBzZWN1cml0eSBjb25z aWRlcmF0aW9ucyBub3QgbWVudGlvbmVkDQogdGhlcmU/PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPk5pdHM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPm4xLiBJbnRyb2R1Y3Rpb246IOKA nOKApm9yaWdpbiB2YWxpZGF0aW9u4oCmd2lsbCBvY2N1ciBvdmVyIHRoZSBuZXh0IHR3byB0byB0 aHJlZSB5ZWFycyBhbmQgdGhhdCBCR1BzZWMgd2lsbCBzdGFydCB0byBkZXBsb3kgd2VsbCBhZnRl ciB0aGF0LuKAnSZuYnNwOyBSZWNvbW1lbmRhdGlvbjogYXZvaWQgc3BlY2lmaWMgdGltZWZyYW1l cywgYmUgYSBsaXR0bGUgdmFndWVyIChzaG9ydC9tZWRpdW0vbG9uZw0KIHRlcm0pLiZuYnNwOyBJ IG5vdGljZWQgdGhhdCB0aGUgZmlyc3QgdmVyc2lvbiBvZiBkcmFmdC15bWJrLWJncHNlYy1vcHMg YWxzbyBtZW50aW9uZWQg4oCcdHdvIHRvIGZpdmUgeWVhcnPigJ0gKGluIDIwMTEhKS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPm4yLiBzLzwvc3Bhbj4gPHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPg0KY2xpZW50IGNvbmUsIGkuZS4gYW4gUlIgY2xpZW50 IG9yIHRoZSB0cmFuc2l0aXZlIGNsb3N1cmUgb2YgdGhlaXIgY3VzdG9tZXJzJyBjdXN0b21lcnMn IGN1c3RvbWVycycgZXRjLi88L3NwYW4+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+ Y2xpZW50IGNvbmUsIGkuZS4gYW4gUlIgY2xpZW50IG9yIHJlYWNoYWJsZSB0cmFuc2l0aXZlbHkg dGhyb3VnaCBvbmUgb2YgdGhlbS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPm4zLiDigJxBcyB0aGUgdmFzdCBtYWpvcml0eSAoODQlKSBvZiBBU3MgYXJlIHN0dWJz LCBhbmQgdGhleSBhbm5vdW5jZSB0aGUgbWFqb3JpdHkgb2YgcHJlZml4ZXPigKbigJ0gQSByZWZl cmVuY2Ugd291bGQgYmUgbmljZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPm40LiDigJxCZWNhdXNlIG9mIHBvc3NpYmxlIFJQS0kgdmVyc2lvbiBza2V34oCm4oCd Jm5ic3A7IEkgZ3Vlc3MgeW91IG1lYW4gbGFjayBvZiBzeW5j4oCmPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5uNS4gU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMuJm5i c3A7IFBsZWFzZSB3cml0ZSBzb21ldGhpbmcgYWxvbmcgdGhlIGxpbmVzIG9mOiDigJxUaGlzIGRv Y3VtZW50IGRlc2NyaWJlcyBvcGVyYXRpb25hbCBjb25zaWRlcmF0aW9ucyBmb3IgdGhlIGRlcGxv eW1lbnQgb2YgQkdQc2VjLiZuYnNwOyBUaGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgZm9yIEJH UHNlYyBhcmXigKbigJ08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwv aHRtbD4NCg== --_000_1FBAD3F8538747A39988A49A3133490Aciscocom_-- From nobody Fri Nov 4 05:33:16 2016 Return-Path: X-Original-To: sidr@ietf.org Delivered-To: sidr@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 37F1A129474; Fri, 4 Nov 2016 05:33:15 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.37.0 Auto-Submitted: auto-generated Precedence: bulk Sender: Message-ID: <147826279518.17052.16527150668247251691.idtracker@ietfa.amsl.com> Date: Fri, 04 Nov 2016 05:33:15 -0700 Archived-At: Cc: draft-ietf-sidr-bgpsec-algs@ietf.org, sandy@tislabs.com, sidr-chairs@ietf.org, sidr@ietf.org Subject: [sidr] Last Call: (BGPsec Algorithms, Key Formats, & Signature Formats) to Proposed Standard X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Reply-To: ietf@ietf.org List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Nov 2016 12:33:15 -0000 The IESG has received a request from the Secure Inter-Domain Routing WG (sidr) to consider the following document: - 'BGPsec Algorithms, Key Formats, & Signature Formats' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2016-11-28. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document specifies the algorithms, algorithm parameters, asymmetric key formats, asymmetric key size and signature format used in BGPsec (Border Gateway Protocol Security). This document updates the Profile for Algorithms and Key Sizes for Use in the Resource Public Key Infrastructure (ID.sidr-rfc6485bis). The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-sidr-bgpsec-algs/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-sidr-bgpsec-algs/ballot/ The following IPR Declarations may be related to this I-D: https://datatracker.ietf.org/ipr/1965/ https://datatracker.ietf.org/ipr/1967/ The document contains these normative downward references. See RFC 3967 for additional information: rfc6090: Fundamental Elliptic Curve Cryptography Algorithms (Informational - IETF stream) rfc2986: PKCS #10: Certification Request Syntax Specification Version 1.7 (Informational - Legacy stream) Note that both of these references may already be listed in the acceptable Downref Registry. (https://trac.tools.ietf.org/group/iesg/trac/wiki/DownrefRegistry) Also, the document contains these non-RFC normative references: [DSS] National Institute of Standards and Technology (NIST), U.S. Department of Commerce, "Digital Signature Standard", FIPS Publication 186-4, July 2013. [SHS] National Institute of Standards and Technology (NIST), U.S. Department of Commerce, "Secure Hash Standard", FIPS Publication 180-4, August 2015. From nobody Mon Nov 7 15:26:47 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33FCF1294AC; Mon, 7 Nov 2016 15:26:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.499 X-Spam-Level: X-Spam-Status: No, score=-1.499 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C_AdBt0BWlN8; Mon, 7 Nov 2016 15:26:44 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.kvm02.ops-netman.net [IPv6:2606:700:e:550:5c82:28ff:fe25:4960]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3135129BF1; Mon, 7 Nov 2016 15:26:37 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id 1E6C14023B; Mon, 7 Nov 2016 23:26:36 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (unknown [104.133.2.87]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id EA8805C398F2; Mon, 7 Nov 2016 23:26:34 +0000 (UTC) Date: Mon, 07 Nov 2016 15:26:33 -0800 Message-ID: From: Chris Morrow To: sidr@ietf.org, sidr-chairs@ietf.org User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: [sidr] Agenda Upload X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Nov 2016 23:26:46 -0000 Draft Agenda was uploaded moments ago. I'm sure I missed something(s) I'm also sure I signed Tim up for at least 2 things he wasn't prepared for (and may not be required) it's a draft :) -chris From nobody Mon Nov 7 21:26:35 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E83931294C5 for ; Mon, 7 Nov 2016 21:26:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.398 X-Spam-Level: X-Spam-Status: No, score=-8.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tKBfoMnUPR6G for ; Mon, 7 Nov 2016 21:26:33 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1105E120726 for ; Mon, 7 Nov 2016 21:26:33 -0800 (PST) Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1c3yvW-0006Yn-PP; Tue, 08 Nov 2016 05:26:31 +0000 Date: Tue, 08 Nov 2016 14:26:28 +0900 Message-ID: From: Randy Bush To: Chris Morrow In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: sidr wg list Subject: Re: [sidr] Agenda Upload X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Nov 2016 05:26:34 -0000 i stil think we should be doing some rigorous interoperability testing, inter CA, caches and routers, routers applying origin validation, ... yes, we should be doing this in sidrops, but we all know that it will be populated by the usual suspects, barring voter suppression. so it would be nice to discuss this next week, irresptive of the air cover and hats. randy, already in seoul noc From nobody Mon Nov 7 21:28:50 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED5BD129505 for ; Mon, 7 Nov 2016 21:28:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.398 X-Spam-Level: X-Spam-Status: No, score=-8.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Al43n_MsNriD for ; Mon, 7 Nov 2016 21:28:47 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6008C1293D9 for ; Mon, 7 Nov 2016 21:28:47 -0800 (PST) Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1c3yxi-0006ZN-2E; Tue, 08 Nov 2016 05:28:46 +0000 Date: Tue, 08 Nov 2016 14:28:42 +0900 Message-ID: From: Randy Bush To: Alvaro Retana In-Reply-To: <1FBAD3F8-5387-47A3-9988-A49A3133490A@cisco.com> References: <1FBAD3F8-5387-47A3-9988-A49A3133490A@cisco.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: sidr wg list Subject: Re: [sidr] AD Review of draft-ietf-sidr-bgpsec-ops-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Nov 2016 05:28:49 -0000 alvaro, thanks for the best review this has had in a while. i am not ignoring you; and may even get a version out for next week. but no promises, as i suspect you folk will think that having a solid ietf network next week is more important :) randy From nobody Mon Nov 7 23:47:05 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EAE8129515 for ; Mon, 7 Nov 2016 23:47:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id biOnLBM2vMJR for ; Mon, 7 Nov 2016 23:47:03 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.kvm02.ops-netman.net [IPv6:2606:700:e:550:5c82:28ff:fe25:4960]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0042A1293FB for ; Mon, 7 Nov 2016 23:47:02 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id B1B6140201; Tue, 8 Nov 2016 07:47:01 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (75-149-33-126-SFBA.hfc.comcastbusiness.net [75.149.33.126]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 700F35DCCEC9; Tue, 8 Nov 2016 07:47:00 +0000 (UTC) Date: Mon, 07 Nov 2016 23:46:58 -0800 Message-ID: From: Chris Morrow To: Randy Bush In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: Chris Morrow , sidr wg list Subject: Re: [sidr] Agenda Upload X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Nov 2016 07:47:05 -0000 At Tue, 08 Nov 2016 14:26:28 +0900, Randy Bush wrote: > > i stil think we should be doing some rigorous interoperability testing, > inter CA, caches and routers, routers applying origin validation, ... > > yes, we should be doing this in sidrops, but we all know that it will be > populated by the usual suspects, barring voter suppression. so it would > be nice to discuss this next week, irresptive of the air cover and hats. I can add an item to the agenda I'm happy to discuss. -chris > > randy, already in seoul noc From nobody Tue Nov 8 01:22:42 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73283129BE5; Tue, 8 Nov 2016 01:22:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.397 X-Spam-Level: X-Spam-Status: No, score=-8.397 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ni3X69pVKXFv; Tue, 8 Nov 2016 01:22:39 -0800 (PST) Received: from molamola.ripe.net (molamola.ripe.net [IPv6:2001:67c:2e8:11::c100:1371]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FD23129B9C; Tue, 8 Nov 2016 01:22:39 -0800 (PST) Received: from nene.ripe.net ([193.0.23.10]) by molamola.ripe.net with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.84_2) (envelope-from ) id 1c42bz-0009Q8-6T; Tue, 08 Nov 2016 10:22:36 +0100 Received: from sslvpn.ripe.net ([193.0.20.230] helo=vpn-63.ripe.net) by nene.ripe.net with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.84_2) (envelope-from ) id 1c42by-000881-W4; Tue, 08 Nov 2016 10:22:35 +0100 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: text/plain; charset=us-ascii From: Tim Bruijnzeels In-Reply-To: Date: Tue, 8 Nov 2016 10:22:34 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Chris Morrow X-Mailer: Apple Mail (2.3124) X-ACL-Warn: Delaying message X-RIPE-Spam-Level: ---------- X-RIPE-Spam-Report: Spam Total Points: -10.4 points pts rule name description ---- ---------------------- ------------------------------------ -7.5 ALL_TRUSTED Passed through trusted hosts only via SMTP -2.9 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40% [score: 0.3053] X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719e37d16a57599201f41c4fed79ba3df0e Archived-At: Cc: sidr-chairs@ietf.org, sidr@ietf.org Subject: Re: [sidr] Agenda Upload X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Nov 2016 09:22:40 -0000 Hi Chris, > On 08 Nov 2016, at 00:26, Chris Morrow wrote: >=20 > Draft Agenda was uploaded moments ago. >=20 > I'm sure I missed something(s) >=20 > I'm also sure I signed Tim up for at least 2 things he wasn't prepared > for (and may not be required) I see one item with my name, and two others that might have my name = implied.=20 As far as I am concerned I don't need to talk about any of them. But if = the WG feels differently I am happy to - then I would like a bit more = guidance though on what to address exactly. Quoting below: > 3- RRDP/HTTPS - Tim Bruijnzeels 15 min The document went through last call and was sent to the IESG on 26 = October. If the WG feels it's useful to give an overview of this work = once more then I can certainly do so - but I expect it's not needed and = it's better to use face to face time for other things. Of course I would = be more than happy to discuss this work in person as well. > 4- Updates to ROA/BGPSEC Router Cert Profiles 20 min I am confused by this item. Is this because of the updates to these = documents we included in reconsidered, which is #6? > 6- Validation Reconsidered mish/mash 10 min We went through last call, and then I indicated I would be more = confident if people reviewed the ASN.1 and OID changes. Sean Turner did = a quick check - thanks :) I want to be really careful here and not take = a seat on the chair, but.. it seems to me that unclarities and concerns = were addressed. If not, then I am of course willing to talk about this once more, but = would ask the WG to be specific about which aspect should be = re-discussed or presented. > it's a draft :) no worries, appreciated. One other thing that I may want to discuss is the future of = tree-validation. Not so much the content, but the idea of having (a) = document(s) in this WG (or SIDR-OPS in future) that describes a specific = implementation. There are two issues: 1) implementation is a moving = target, so we will need updates in future, 2) the implementation is not = generic (would individual submission be more appropriate? WG feedback = was very valuable). We recently uploaded a version that reflects our 2.23 validator = implementation. We indicated that we want to go for last-call on this as = soon as possible (I understand that IETF process will mean this will = probably be after Seoul). And we indicated that for future updates we = plan to document small changes just as notes in the README/RELEASE NOTES = of the code, but that we would seek to document more substantial changes = through the IETF again in future. My questions to the WG would be: =3D Does the proposal make sense to you? =3D Do you agree that these documents can be WG documents? - We value the feedback - We include the feedback in the document - currently in security = considerations - But the content of the document reflects actual implementation, = not desired implementation. =3D Is there a useful parallel to IETF documents describing other = open-source implementations? ..or -- I have a preference for having RFCs for this, because I think = the review will be more thorough and independent, but -- we can also = just discuss this in the WG, but not as an IETF document, and then just = include the documents with our validator releases instead? Cheers Tim >=20 > -chris >=20 > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From nobody Tue Nov 8 01:23:34 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CFEE1294C9 for ; Tue, 8 Nov 2016 01:23:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.397 X-Spam-Level: X-Spam-Status: No, score=-8.397 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vD7n5xigwbV3 for ; Tue, 8 Nov 2016 01:23:32 -0800 (PST) Received: from molamola.ripe.net (molamola.ripe.net [IPv6:2001:67c:2e8:11::c100:1371]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2365E129448 for ; Tue, 8 Nov 2016 01:23:32 -0800 (PST) Received: from nene.ripe.net ([193.0.23.10]) by molamola.ripe.net with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.84_2) (envelope-from ) id 1c42cr-0009Qy-2A; Tue, 08 Nov 2016 10:23:29 +0100 Received: from sslvpn.ripe.net ([193.0.20.230] helo=vpn-63.ripe.net) by nene.ripe.net with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.84_2) (envelope-from ) id 1c42cq-000881-S3; Tue, 08 Nov 2016 10:23:28 +0100 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: text/plain; charset=us-ascii From: Tim Bruijnzeels In-Reply-To: Date: Tue, 8 Nov 2016 10:23:28 +0100 Content-Transfer-Encoding: 7bit Message-Id: <6D91ED38-005A-4F0F-95B8-D3EEF19DC95D@ripe.net> References: To: Chris Morrow X-Mailer: Apple Mail (2.3124) X-ACL-Warn: Delaying message X-RIPE-Spam-Level: ------------ X-RIPE-Spam-Report: Spam Total Points: -12.3 points pts rule name description ---- ---------------------- ------------------------------------ -7.5 ALL_TRUSTED Passed through trusted hosts only via SMTP -2.9 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-RIPE-Signature: 784d7acfe6559f2a0b602ec6519a0719c30db935ec2f79710fe48fba95932177 Archived-At: Cc: sidr wg list Subject: Re: [sidr] Agenda Upload X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Nov 2016 09:23:33 -0000 > On 08 Nov 2016, at 08:46, Chris Morrow wrote: > > At Tue, 08 Nov 2016 14:26:28 +0900, > Randy Bush wrote: >> >> i stil think we should be doing some rigorous interoperability testing, >> inter CA, caches and routers, routers applying origin validation, ... >> >> yes, we should be doing this in sidrops, but we all know that it will be >> populated by the usual suspects, barring voter suppression. so it would >> be nice to discuss this next week, irresptive of the air cover and hats. > > I can add an item to the agenda I'm happy to discuss. > +1 I agree this would be useful to discuss. > -chris > >> >> randy, already in seoul noc > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From nobody Tue Nov 8 06:46:44 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 892C7129CD3 for ; Tue, 8 Nov 2016 06:46:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.45 X-Spam-Level: X-Spam-Status: No, score=-2.45 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6RpXetPqrjiE for ; Tue, 8 Nov 2016 06:46:42 -0800 (PST) Received: from mail-qk0-x234.google.com (mail-qk0-x234.google.com [IPv6:2607:f8b0:400d:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A2F0129CD2 for ; Tue, 8 Nov 2016 06:46:40 -0800 (PST) Received: by mail-qk0-x234.google.com with SMTP id n21so108141458qka.3 for ; Tue, 08 Nov 2016 06:46:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version; bh=kXfiPPLsDr/RCZoXdtdTJNQZdIYSsDUVF4S+KX43cRI=; b=MKmbhI9LNrKXyGGEq+BsdfVQ0WooMoO0YA5HuTJ9V2CFOuJm297/u4tWr9yIKZEId/ 99X63qws/i8pk11+e6z6c1qQG7z2adDoHGpeWpDDMDAKW7MhYot0cyVHCbFqTB3XwtxW SuTsmEsNBJ3Pp0JC8zgUvI9J/gmrs88b05wsspnv3teBEWEc/t8Q91XoXhyKaDStB8Ig +O44xJJFtaw/gf/yRlr9kkG/2qKHVGLFv5jlnPTooT3fmTfLAkSkpgFrWsuA2uLYd10f OJL3uPR3MdNkUY/FWz71ApBvdujHrhtAbTl1rRFtUsnw/jWtYPjiFOYcoLdBiMG/Dxer /fMQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version; bh=kXfiPPLsDr/RCZoXdtdTJNQZdIYSsDUVF4S+KX43cRI=; b=VOduVRyX5MDxPq+9ZP52eB3wZ8aqwuu8ypfvgn/mz/Kh86xX0YFQ51hxXkiypn9dHy JICKoZtGlUIGotv1tV25ySU/FbLMbaSaZnadh628c8DEsm28NG3zeIx6rFe/inPqFRjJ DuP2IoX9dBXGa2z34/olISwy8VYPbzhKtdRcTKTtpFEXyBDjAABke9i+fEeAOLVI+bPT 4liPAU3bHkMRzBBl72caH002aX9Sf+sXIrsb4ZFK9Lw4Gh9Ieo76Zc6B17etzpmdchOj ++f/OQswO7tHExrbVVQ+QI9KWDxIAtnfqiRts0Uyf8pim2ju5WAp9E4wKnOZiCLx81Bx 0Xhw== X-Gm-Message-State: ABUngvdY2EjyPl4qp/n4XxCWiZaUFKXWo/+iixPEtpKbndalwo3wVNp2Z8+Elv00OpI0Fg== X-Received: by 10.55.200.27 with SMTP id c27mr11999997qkj.276.1478616399255; Tue, 08 Nov 2016 06:46:39 -0800 (PST) Received: from [200.7.87.47] ([2001:13c7:7001:7000:d953:6378:481e:fe7f]) by smtp.gmail.com with ESMTPSA id p19sm19537622qte.23.2016.11.08.06.46.37 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 08 Nov 2016 06:46:38 -0800 (PST) From: "Carlos M. Martinez" To: "Tim Bruijnzeels" Date: Tue, 08 Nov 2016 11:46:35 -0300 Message-ID: In-Reply-To: <6D91ED38-005A-4F0F-95B8-D3EEF19DC95D@ripe.net> References: <6D91ED38-005A-4F0F-95B8-D3EEF19DC95D@ripe.net> MIME-Version: 1.0 X-Mailer: MailMate (1.9.5r5263) Archived-At: Cc: Chris Morrow , sidr wg list Subject: Re: [sidr] Agenda Upload X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Nov 2016 14:46:43 -0000 Same here. An interesting and relevant topic. On 8 Nov 2016, at 6:23, Tim Bruijnzeels wrote: > >> On 08 Nov 2016, at 08:46, Chris Morrow wrote: >> >> At Tue, 08 Nov 2016 14:26:28 +0900, >> Randy Bush wrote: >>> >>> i stil think we should be doing some rigorous interoperability testing, >>> inter CA, caches and routers, routers applying origin validation, ... >>> >>> yes, we should be doing this in sidrops, but we all know that it will be >>> populated by the usual suspects, barring voter suppression. so it would >>> be nice to discuss this next week, irresptive of the air cover and hats. >> >> I can add an item to the agenda I'm happy to discuss. >> > > +1 I agree this would be useful to discuss. > >> -chris >> >>> >>> randy, already in seoul noc >> >> _______________________________________________ >> sidr mailing list >> sidr@ietf.org >> https://www.ietf.org/mailman/listinfo/sidr > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From nobody Tue Nov 8 11:23:15 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 802DF129CAD; Tue, 8 Nov 2016 11:23:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id McziaS28smQD; Tue, 8 Nov 2016 11:23:10 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.ops-netman.net [192.110.255.59]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 72D68129687; Tue, 8 Nov 2016 11:23:10 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id 234D040320; Tue, 8 Nov 2016 19:23:08 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (unknown [104.133.2.87]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 802336374FCA; Tue, 8 Nov 2016 19:23:07 +0000 (UTC) Date: Tue, 08 Nov 2016 11:23:06 -0800 Message-ID: From: Chris Morrow To: Tim Bruijnzeels In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: Chris Morrow , sidr-chairs@ietf.org, sidr@ietf.org Subject: Re: [sidr] Agenda Upload X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Nov 2016 19:23:12 -0000 At Tue, 8 Nov 2016 10:22:34 +0100, Tim Bruijnzeels wrote: > > Hi Chris, > > > On 08 Nov 2016, at 00:26, Chris Morrow wrote: > > > > Draft Agenda was uploaded moments ago. > > > > I'm sure I missed something(s) > > > > I'm also sure I signed Tim up for at least 2 things he wasn't prepared > > for (and may not be required) > > I see one item with my name, and two others that might have my name implied. noting that i said: 'draft agenda' :) > > As far as I am concerned I don't need to talk about any of them. But I'm happy to yield time back to the randy-proposed-content, it's also interesting to me. > if the WG feels differently I am happy to - then I would like a bit > more guidance though on what to address exactly. Quoting below: > > > 3- RRDP/HTTPS - Tim Bruijnzeels 15 min > > The document went through last call and was sent to the IESG on 26 > October. If the WG feels it's useful to give an overview of this > work once more then I can certainly do so - but I expect it's not > needed and it's better to use face to face time for other things. Of > course I would be more than happy to discuss this work in person as > well. > > > 4- Updates to ROA/BGPSEC Router Cert Profiles 20 min > > I am confused by this item. Is this because of the updates to these > documents we included in reconsidered, which is #6? > > > 6- Validation Reconsidered mish/mash 10 min > > We went through last call, and then I indicated I would be more > confident if people reviewed the ASN.1 and OID changes. Sean Turner > did a quick check - thanks :) I want to be really careful here and > not take a seat on the chair, but.. it seems to me that unclarities > and concerns were addressed. > excellent. (I agree things seem settled) > If not, then I am of course willing to talk about this once more, > but would ask the WG to be specific about which aspect should be > re-discussed or presented. > let's skip your bits then and concentrate on the newly proposed interop discussion. > > it's a draft :) > > no worries, appreciated. > > One other thing that I may want to discuss is the future of > tree-validation. Not so much the content, but the idea of having (a) > document(s) in this WG (or SIDR-OPS in future) that describes a > specific implementation. There are two issues: 1) implementation is > a moving target, so we will need updates in future, 2) the > implementation is not generic (would individual submission be more > appropriate? WG feedback was very valuable). > happy to add this to the 'draft agenda'. > We recently uploaded a version that reflects our 2.23 validator > implementation. We indicated that we want to go for last-call on > this as soon as possible (I understand that IETF process will mean > this will probably be after Seoul). And we indicated that for future > updates we plan to document small changes just as notes in the > README/RELEASE NOTES of the code, but that we would seek to document > more substantial changes through the IETF again in future. > > My questions to the WG would be: = Does the proposal make sense to > you? = Do you agree that these documents can be WG documents? - We > value the feedback - We include the feedback in the document - > currently in security considerations - BUT the content of the > document reflects actual implementation, not desired implementation. > = Is there a useful parallel to IETF documents describing other > open-source implementations? > > ..or -- I have a preference for having RFCs for this, because I > think the review will be more thorough and independent, but -- we > can also just discuss this in the WG, but not as an IETF document, > and then just include the documents with our validator releases > instead? > > this bit does sound like good topic for the meeting discusion. let's add this to the 'draft agenda' as well. (as i say above) > > Cheers > Tim > > > > > > > -chris > > > > _______________________________________________ > > sidr mailing list > > sidr@ietf.org > > https://www.ietf.org/mailman/listinfo/sidr From nobody Tue Nov 8 19:05:32 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19286127071 for ; Tue, 8 Nov 2016 19:05:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LBTEMYNNNddu for ; Tue, 8 Nov 2016 19:05:27 -0800 (PST) Received: from gw1.turbomail.org (gw1.turbomail.org [159.8.83.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C463A128874 for ; Tue, 8 Nov 2016 19:05:26 -0800 (PST) X-TM-DID: 8baf5c91328d0cbccbb90acaccf771b6 Content-Type: text/plain; charset=gb2312 Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\)) From: Declan Ma In-Reply-To: Date: Wed, 9 Nov 2016 11:00:56 +0800 Content-Transfer-Encoding: quoted-printable Message-Id: <6B4E22DC-C422-48A5-AA2C-5596DF2DAEA4@zdns.cn> References: To: Randy Bush X-Mailer: Apple Mail (2.3251) Archived-At: Cc: Chris Morrow , sidr wg list Subject: Re: [sidr] Agenda Upload X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Nov 2016 03:05:30 -0000 +1. Intriguing!=20 I was considering how inter-chche works.=20 Di > =D4=DA 2016=C4=EA11=D4=C28=C8=D5=A3=AC13:26=A3=ACRandy Bush = =D0=B4=B5=C0=A3=BA >=20 > i stil think we should be doing some rigorous interoperability = testing, > inter CA, caches and routers, routers applying origin validation, ... >=20 > yes, we should be doing this in sidrops, but we all know that it will = be > populated by the usual suspects, barring voter suppression. so it = would > be nice to discuss this next week, irresptive of the air cover and = hats. >=20 > randy, already in seoul noc >=20 > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From nobody Wed Nov 9 12:57:29 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B4A91298C2 for ; Wed, 9 Nov 2016 12:57:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xPs2JBse5BHC for ; Wed, 9 Nov 2016 12:57:26 -0800 (PST) Received: from mail-qk0-x234.google.com (mail-qk0-x234.google.com [IPv6:2607:f8b0:400d:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B22DF1298C1 for ; Wed, 9 Nov 2016 12:57:26 -0800 (PST) Received: by mail-qk0-x234.google.com with SMTP id x190so270125836qkb.0 for ; Wed, 09 Nov 2016 12:57:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=ZRivcfJhMnVJpBcTG3H/55KaAvp+6X1bbbUGQOkiIXM=; b=U0glsbLEkKQp1r32tO3HiHC+KGeDf4nIOabdg/WqJ0migSetyUjFSKmAp2u0+6Qbfw pHL1SehBkHTakr2AukUNJx+vqZ2yv4v9qyeujCK2W/O4tDLuyVE/xp3PE/uBScwUlmLB nn+IFf0NMceEREgyN/hw/6Q+teub1g4FcYW7nlEqgRoxaDj38j81oyUek4S/dz/2axJH l7atmg4G8N77yXcA3MHPxfDNG0FiDbbSldTW0pVC9+/RetfE5HoYL9PsZEVBgXyVo4aI 2692PhQWjEDD6vbpXLpOs2x8/ahf3O4nMEZ40sdRz3Qce5YFwocVv6Ugo5WTxENlRnBi H96A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=ZRivcfJhMnVJpBcTG3H/55KaAvp+6X1bbbUGQOkiIXM=; b=l4vIHTBTXSp+LMe4hmER+2XY2r9JjPuuwc7uVYrxmJeaSCBNLp0xLtpMfZeB9M1wsV 640R75onTAbIHZ0qfOvYngs58KVkljfHsGP9Wyydqv8gYZ9U9pkBluTKGXMKN3QZu+o1 C97BYPDDsWW4RZPjCQLhYFnv+EMEd9HZagtkZC0X55ou0fSSt7KF5BCQf/LZ0XlP9Omb R6nFupG9HDKCQQbdxzMInCJlRksFEOtKm0peGABtjc4owHqXCbFY30TDgpdoMVrn7ojG 7UGlFlhNj+qAy0rywthGHCZ9gdZxVhEfN2CLKv/cw7/DPQIQM+rXZwOJ5xcDvL6RtX/G oj9g== X-Gm-Message-State: ABUngvfH4kDvAIxW5+wURAzyTz1zd1a0zaQDyYWDBzotiHW6jqftevrN9TjCBt5dBB2EjfebpME6ZlpbuB2+8g== X-Received: by 10.55.52.7 with SMTP id b7mr1845563qka.223.1478725045859; Wed, 09 Nov 2016 12:57:25 -0800 (PST) MIME-Version: 1.0 Sender: christopher.morrow@gmail.com Received: by 10.140.107.195 with HTTP; Wed, 9 Nov 2016 12:57:25 -0800 (PST) In-Reply-To: <6B4E22DC-C422-48A5-AA2C-5596DF2DAEA4@zdns.cn> References: <6B4E22DC-C422-48A5-AA2C-5596DF2DAEA4@zdns.cn> From: Christopher Morrow Date: Wed, 9 Nov 2016 12:57:25 -0800 X-Google-Sender-Auth: -gyQzPr01POTLPY7O2WgGpZ2L0M Message-ID: To: Declan Ma Content-Type: multipart/alternative; boundary=001a114778e21459100540e481f2 Archived-At: Cc: Chris Morrow , sidr wg list Subject: Re: [sidr] Agenda Upload X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Nov 2016 20:57:28 -0000 --001a114778e21459100540e481f2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable FYI: Draft Agenda updated, happy to accept changes still :) On Tue, Nov 8, 2016 at 7:00 PM, Declan Ma wrote: > +1. > > Intriguing! > > I was considering how inter-chche works. > > Di > > > =E5=9C=A8 2016=E5=B9=B411=E6=9C=888=E6=97=A5=EF=BC=8C13:26=EF=BC=8CRand= y Bush =E5=86=99=E9=81=93=EF=BC=9A > > > > i stil think we should be doing some rigorous interoperability testing, > > inter CA, caches and routers, routers applying origin validation, ... > > > > yes, we should be doing this in sidrops, but we all know that it will b= e > > populated by the usual suspects, barring voter suppression. so it woul= d > > be nice to discuss this next week, irresptive of the air cover and hats= . > > > > randy, already in seoul noc > > > > _______________________________________________ > > sidr mailing list > > sidr@ietf.org > > https://www.ietf.org/mailman/listinfo/sidr > > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr > --001a114778e21459100540e481f2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
FYI: Draft Agenda updated, happy to accept changes still := )

On Tue, No= v 8, 2016 at 7:00 PM, Declan Ma <madi@zdns.cn> wrote:
+1.

Intriguing!

I was considering how inter-chche works.

Di

> =E5=9C=A8 2016=E5=B9=B411=E6=9C=888=E6=97=A5=EF=BC=8C13:26=EF=BC=8CRan= dy Bush <randy@psg.com> =E5=86= =99=E9=81=93=EF=BC=9A
>
> i stil think we should be doing some rigorous interoperability testing= ,
> inter CA, caches and routers, routers applying origin validation, ...<= br> >
> yes, we should be doing this in sidrops, but we all know that it will = be
> populated by the usual suspects, barring voter suppression.=C2=A0 so i= t would
> be nice to discuss this next week, irresptive of the air cover and hat= s.
>
> randy, already in seoul noc
>
> _______________________________________________
> sidr mailing list
> sidr@ietf.org
> https://www.ietf.org/mailman/listinfo/sidr

_______________________________________________
sidr mailing list
sidr@ietf.org
https://www.ietf.org/mailman/listinfo/sidr

--001a114778e21459100540e481f2-- From nobody Thu Nov 10 16:22:31 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BAC8129638; Thu, 10 Nov 2016 16:22:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k4AD7L9qoelm; Thu, 10 Nov 2016 16:22:28 -0800 (PST) Received: from gcc01-dm2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0104.outbound.protection.outlook.com [23.103.201.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B0E4129626; Thu, 10 Nov 2016 16:22:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=VXlbJzNd09C8sSYsQ5bMG7LT/nGh3nMY6nidra1MNgk=; b=BiVJn0xx/oFyr1MzM5WjKMSHadnxPhVpDWixTE9Z9zlsG49jhFTD1HVFdRq9xi6IA0H3/vARWIUqD3h91dyatSwwKTnJeS+kUPctfLFriWKwPxCu0EyLPfZ1o3YiqLDXPzwOTIXvcKgnMdhBDO8bck59UM4ztysG/Sw+cC2Vk1g= Received: from DM2PR09MB0446.namprd09.prod.outlook.com (10.161.252.145) by DM2PR09MB0448.namprd09.prod.outlook.com (10.161.252.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.707.6; Fri, 11 Nov 2016 00:22:23 +0000 Received: from DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) by DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) with mapi id 15.01.0707.013; Fri, 11 Nov 2016 00:22:23 +0000 From: "Sriram, Kotikalapudi (Fed)" To: "Alvaro Retana (aretana)" , "draft-ietf-sidr-bgpsec-protocol@ietf.org" Thread-Topic: AD Review of draft-ietf-sidr-bgpsec-protocol-18 Thread-Index: AQHSNR6CtOW/YAot7EOz/vffo+bn+6DS9YiZ Date: Fri, 11 Nov 2016 00:22:23 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=kotikalapudi.sriram@nist.gov; x-originating-ip: [129.6.219.183] x-microsoft-exchange-diagnostics: 1; DM2PR09MB0448; 7:z4kl1+lmQHQoY/VxwwaG4aYquDC7Q54FtoVi5/zO80+YrnwPa9BtNVLPCLLU+EaNOW8rBAvWRSKC55Fa5vEmFz8pqzIlK1QBLByAktDohgnxGgIrmG3j6wDIHdFdG40N2hUIlCVN1D6hxD8lEl3oSquXxi+MMpC5PHqfKkRz8XuVw27nON/yWk8SU9Z8SC7gWPPsDWQ7iThrnS4d3G451gnaCpVHuUj3+dncEvR6wvpck8ueOZIzC2uGbNTFIeGSe+LUNi5tSDuivNKWxSWPXK6lzcssRjeXQ92hzGRfNZoGTXw6mL8YluNXtQC12qhTI70boq6ru6q1JgwicJ2rxgtPCN4FJiLVTMGQzYDVX/8= x-ms-office365-filtering-correlation-id: 671bb01b-2bec-4d2a-17c9-08d409c8cef7 x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:DM2PR09MB0448; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:DM2PR09MB0448; BCL:0; PCL:0; RULEID:; SRVR:DM2PR09MB0448; x-forefront-prvs: 012349AD1C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(189002)(199003)(7846002)(33656002)(92566002)(6116002)(77096005)(5660300001)(3846002)(2900100001)(102836003)(8936002)(586003)(2501003)(345774005)(2906002)(101416001)(50986999)(76576001)(76176999)(99286002)(54356999)(5001770100001)(74316002)(9686002)(106356001)(305945005)(4326007)(97736004)(106116001)(7696004)(87936001)(2950100002)(3660700001)(7736002)(122556002)(189998001)(230783001)(66066001)(86362001)(68736007)(3280700002)(81156014)(81166006)(8676002)(105586002)(229853002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR09MB0448; H:DM2PR09MB0446.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Nov 2016 00:22:23.5140 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR09MB0448 Archived-At: Cc: "sidr-chairs@ietf.org" , Matthias Waehlisch , "sidr@ietf.org" Subject: Re: [sidr] AD Review of draft-ietf-sidr-bgpsec-protocol-18 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Nov 2016 00:22:30 -0000 Hi Alvaro, Thank you for the review and the excellent set of comments. We (editors/authors) will consider all you comments=20 and respond / make changes in the document soon. >The biggest concern I have with this document is the lack of an=20 >Operations and Management Considerations Section =96 It would be nice if we can discuss this suggestion in particular in Seoul n= ext week. Sriram From nobody Sat Nov 12 00:31:27 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 730B31296B3; Sat, 12 Nov 2016 00:31:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WjeFaN59-hPB; Sat, 12 Nov 2016 00:31:24 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.ops-netman.net [192.110.255.59]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40E5D1294F5; Sat, 12 Nov 2016 00:31:24 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id F2B773FEF6; Sat, 12 Nov 2016 08:31:21 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (dhcp-8572.meeting.ietf.org [31.133.133.114]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 1037B7EA67F3; Sat, 12 Nov 2016 08:31:20 +0000 (UTC) Date: Sat, 12 Nov 2016 00:31:18 -0800 Message-ID: From: Chris Morrow To: sidr@ietf.org, sidr-chairs@ietf.org User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: [sidr] Meeting Slides X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Nov 2016 08:31:25 -0000 howdy sidr folks, as oer usual meeting-prep, our meeting is Thursday, if you are presenting I expect to have your slides by no later than wed evening 9pm (2100 local)... in PDF format. If you send 'not pdf' format, i'll convert them ... that is guaranteed to not end well for you :) it behooves you to send pdf. thanks! and see you at the meeting :) -chris From nobody Sat Nov 12 22:40:27 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 503611296BC; Sat, 12 Nov 2016 22:40:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.017 X-Spam-Level: X-Spam-Status: No, score=-16.017 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vEoXx7EIuTiT; Sat, 12 Nov 2016 22:40:23 -0800 (PST) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7BCD129621; Sat, 12 Nov 2016 22:40:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11952; q=dns/txt; s=iport; t=1479019223; x=1480228823; h=from:to:cc:subject:date:message-id:mime-version; bh=0/QtHB3zXNH440MS9AVKpfAG9fn8rYg2XIKnnzJ84K0=; b=SlcqxnxRMqELxoWI026vINjwChmQ0lECV5+WP3VnDLV9vF3nRoO4wRUn JAfMeB3/zWSkMWx9q7zBQ8YhpZiQbFAj5FhP/FhEWREZFmXnDxQNW8rcE slMKBI+VzGBxK81jqNmIzYsaodmEiBNnJ+lrjQV/n3ONcp4tosjR9TOk+ A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B0AQA2CihY/5hdJa1cGgEBAQECAQEBA?= =?us-ascii?q?QgBAQEBgnM+AQEBAQEfWIEHjTemTIUcggeGIxyBcj8UAQIBAQEBAQEBYh0LhGg?= =?us-ascii?q?jVhIBSgIEMCcEDhmITa8VgikvixQBAQEBAQEBAQEBAQEBAQEBAQEBAQEchjyBf?= =?us-ascii?q?YopLYIwBZRZhWgBkFyBb4R2iTuRTQEeN4EDhTaGdyuBA4EMAQEB?= X-IronPort-AV: E=Sophos;i="5.31,631,1473120000"; d="scan'208,217";a="347837193" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 13 Nov 2016 06:40:22 +0000 Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id uAD6eMbf003094 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 13 Nov 2016 06:40:22 GMT Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Sun, 13 Nov 2016 00:40:22 -0600 Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Sun, 13 Nov 2016 00:40:21 -0600 From: "Alvaro Retana (aretana)" To: "draft-ietf-sidr-origin-validation-signaling@ietf.org" Thread-Topic: AD Review of sidr-origin-validation-signaling-09 Thread-Index: AQHSPXjONv4V5/cl2U+lT6vbr4sK2w== Date: Sun, 13 Nov 2016 06:40:21 +0000 Message-ID: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.70.230.45] Content-Type: multipart/alternative; boundary="_000_88A45E79880B4F829FAA80C05627A49Fciscocom_" MIME-Version: 1.0 Archived-At: Cc: "Sandra L. Murphy" , "sidr-chairs@ietf.org" , "sidr@ietf.org" Subject: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Nov 2016 06:40:25 -0000 --_000_88A45E79880B4F829FAA80C05627A49Fciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RGVhciBhdXRob3JzOg0KDQpIaSENCg0KSSBoYXZlIGEgY291cGxlIG9mIGNvbW1lbnRzIGFib3V0 IHRoaXMgZG9jdW1lbnQgKGJlbG93KS4gIEkgYW0gZ29pbmcgdG8gc3RhcnQgdGhlIElFVEYgTGFz dCBDYWxsLCBhbmQgc2NoZWR1bGUgaXQgaW4gdGhlIG5leHQgSUVTRyBUZWxlY2hhdCwgd2l0aCB0 aGUgZXhwZWN0YXRpb24gdGhhdCBteSBjb21tZW50cyB3aWxsIGJlIGFkZHJlc3NlZCBiZWZvcmUg dGhlbi4NCg0KVGhhbmtzIQ0KDQpBbHZhcm8uDQoNCg0KQzEuIFRoZSByZWZlcmVuY2UgdG8gcmZj NzYwNyBzaG91bGQgYmUgSW5mb3JtYXRpdmUuDQoNCkMyLiBbTWFqb3JdIFNlY3VyaXR5IENvbnNp ZGVyYXRpb25zLiAgSSB0aGluayB0aGF0IHRoZXJlIGlzIG9uZSBjb25zaWRlcmF0aW9uIHRoYXQg c2hvdWxkIGJlIG1lbnRpb25lZCBpbiB0aGlzIHNlY3Rpb246ICBHaXZlbiB0aGF0IHRoZSBsYXJn ZXN0IHZhbHVlIGlzIHByZWZlcnJlZCAoMiA9IGludmFsaWQpLCB0aGVyZSBpcyBhbiBhdHRhY2sg dmVjdG9yIHdoZXJlIGEgcm91dGVyIGluIHRoZSBwYXRoICh5ZXMsIGV2ZW4gYW4gaW50ZXJuYWwg cm91dGVyKSBjYW4gaW5qZWN0IGEgY29tbXVuaXR5IGluZGljYXRpbmcgdGhhdCB0aGUgcm91dGUg aXMgaW52YWxpZDsgdGhlIGNvbW11bml0aWVzIGFyZSBub3QgcHJvdGVjdGVkLiAgVGhpcyBhY3Rp b24gY291bGQgcmVzdWx0IGluIGluY29uc2lzdGVudCByb3V0aW5nIG9yIGluIGV2ZW4gYSBEb1Mu ICBJIGtub3cgdGhlIGRvY3VtZW50IGlzIG5vdCBleHBsaWNpdCBhYm91dCB3aGF0IHRvIGRvIHdp dGggdGhlIHZhbGlkYXRpb24gc3RhdGUgKHdoaWNoIGlzIG9rKSwgYnV0IHRoZSBjbGVhciBpbnRl bnRpb24gKGZyb20gcmZjNjgxMSBhbmQgcmZjNzExNSkgaXMgdGhhdCBpdCB3aWxsIGJlIHVzZWQg dG8gbWFrZSByb3V0aW5nIGRlY2lzaW9ucy4gIFBsZWFzZSBhZGQgc29tZSB0ZXh0IGFib3V0IHRo aXMgcG90ZW50aWFsIGlzc3VlLg0K --_000_88A45E79880B4F829FAA80C05627A49Fciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <1A6F8104D7C78E47BAC0E3B5F83B9B72@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eTpDYWxpYnJpO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDsNCglmb250LXdlaWdodDpub3JtYWw7 DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0Kc3Bhbi5tc29JbnMNCgl7bXNvLXN0eWxlLXR5cGU6ZXhw b3J0LW9ubHk7DQoJbXNvLXN0eWxlLW5hbWU6IiI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGlu ZTsNCgljb2xvcjp0ZWFsO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9y dC1vbmx5Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3Np emU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYu V29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMg Ki8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjE7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJ bXNvLWxpc3QtdGVtcGxhdGUtaWRzOjEgMSAtMSAtMSAtMSAtMSAtMSAtMSAtMSAtMTt9DQpAbGlz dCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0OiYjODIyNjs7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZl bDINCgl7bXNvLWxldmVsLXN0YXJ0LWF0OjA7DQoJbXNvLWxldmVsLXRleHQ6IiI7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1h cmdpbi1sZWZ0OjBpbjsNCgl0ZXh0LWluZGVudDowaW47fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21z by1sZXZlbC1zdGFydC1hdDowOw0KCW1zby1sZXZlbC10ZXh0OiIiOw0KCW1zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVm dDowaW47DQoJdGV4dC1pbmRlbnQ6MGluO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwt c3RhcnQtYXQ6MDsNCgltc28tbGV2ZWwtdGV4dDoiIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MGluOw0K CXRleHQtaW5kZW50OjBpbjt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLXN0YXJ0LWF0 OjA7DQoJbXNvLWxldmVsLXRleHQ6IiI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjBpbjsNCgl0ZXh0LWlu ZGVudDowaW47fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1zdGFydC1hdDowOw0KCW1z by1sZXZlbC10ZXh0OiIiOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDowaW47DQoJdGV4dC1pbmRlbnQ6MGlu O30NCkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtc3RhcnQtYXQ6MDsNCgltc28tbGV2ZWwt dGV4dDoiIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MGluOw0KCXRleHQtaW5kZW50OjBpbjt9DQpAbGlz dCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLXN0YXJ0LWF0OjA7DQoJbXNvLWxldmVsLXRleHQ6IiI7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCW1hcmdpbi1sZWZ0OjBpbjsNCgl0ZXh0LWluZGVudDowaW47fQ0KQGxpc3QgbDA6bGV2 ZWw5DQoJe21zby1sZXZlbC1zdGFydC1hdDowOw0KCW1zby1sZXZlbC10ZXh0OiIiOw0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCglt YXJnaW4tbGVmdDowaW47DQoJdGV4dC1pbmRlbnQ6MGluO30NCkBsaXN0IGwxDQoJe21zby1saXN0 LWlkOjI7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjIg MTAxIC0xIC0xIC0xIC0xIC0xIC0xIC0xIC0xO30NCkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6JiM4MjI2OzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsMg0KCXttc28tbGV2ZWwtc3RhcnQt YXQ6MDsNCgltc28tbGV2ZWwtdGV4dDoiIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MGluOw0KCXRleHQt aW5kZW50OjBpbjt9DQpAbGlzdCBsMTpsZXZlbDMNCgl7bXNvLWxldmVsLXN0YXJ0LWF0OjA7DQoJ bXNvLWxldmVsLXRleHQ6IiI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjBpbjsNCgl0ZXh0LWluZGVudDow aW47fQ0KQGxpc3QgbDE6bGV2ZWw0DQoJe21zby1sZXZlbC1zdGFydC1hdDowOw0KCW1zby1sZXZl bC10ZXh0OiIiOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDowaW47DQoJdGV4dC1pbmRlbnQ6MGluO30NCkBs aXN0IGwxOmxldmVsNQ0KCXttc28tbGV2ZWwtc3RhcnQtYXQ6MDsNCgltc28tbGV2ZWwtdGV4dDoi IjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MGluOw0KCXRleHQtaW5kZW50OjBpbjt9DQpAbGlzdCBsMTps ZXZlbDYNCgl7bXNvLWxldmVsLXN0YXJ0LWF0OjA7DQoJbXNvLWxldmVsLXRleHQ6IiI7DQoJbXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CW1hcmdpbi1sZWZ0OjBpbjsNCgl0ZXh0LWluZGVudDowaW47fQ0KQGxpc3QgbDE6bGV2ZWw3DQoJ e21zby1sZXZlbC1zdGFydC1hdDowOw0KCW1zby1sZXZlbC10ZXh0OiIiOw0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4t bGVmdDowaW47DQoJdGV4dC1pbmRlbnQ6MGluO30NCkBsaXN0IGwxOmxldmVsOA0KCXttc28tbGV2 ZWwtc3RhcnQtYXQ6MDsNCgltc28tbGV2ZWwtdGV4dDoiIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MGlu Ow0KCXRleHQtaW5kZW50OjBpbjt9DQpAbGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVsLXN0YXJ0 LWF0OjA7DQoJbXNvLWxldmVsLXRleHQ6IiI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjBpbjsNCgl0ZXh0 LWluZGVudDowaW47fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJv dHRvbTowaW47fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGJnY29sb3I9IndoaXRlIiBs YW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWF1dG9zcGFj ZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjojMzUzNTM1Ij5EZWFy IGF1dGhvcnM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9InRleHQtYXV0b3NwYWNlOm5vbmUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Nv bG9yOiMzNTM1MzUiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJ0ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtjb2xvcjojMzUzNTM1Ij5IaSE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1hdXRvc3BhY2U6bm9uZSI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Y29sb3I6IzM1MzUzNSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtYXV0b3NwYWNlOm5vbmUiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOiMzNTM1MzUiPkkgaGF2ZSBhIGNvdXBsZSBv ZiBjb21tZW50cyBhYm91dCB0aGlzIGRvY3VtZW50IChiZWxvdykuJm5ic3A7IEkgYW0gZ29pbmcg dG8gc3RhcnQgdGhlIElFVEYgTGFzdCBDYWxsLCBhbmQgc2NoZWR1bGUgaXQgaW4gdGhlIG5leHQg SUVTRyBUZWxlY2hhdCwgd2l0aCB0aGUgZXhwZWN0YXRpb24gdGhhdA0KIG15IGNvbW1lbnRzIHdp bGwgYmUgYWRkcmVzc2VkIGJlZm9yZSB0aGVuLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtjb2xvcjojMzUzNTM1Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1hdXRvc3BhY2U6bm9uZSI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6IzM1MzUzNSI+VGhhbmtzITxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWF1dG9zcGFj ZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjojMzUzNTM1Ij48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4 dC1hdXRvc3BhY2U6bm9uZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6IzM1 MzUzNSI+QWx2YXJvLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJ0ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtjb2xvcjojMzUzNTM1Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0idGV4dC1hdXRvc3BhY2U6bm9uZSI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Y29sb3I6IzM1MzUzNSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtYXV0b3NwYWNlOm5vbmUiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOiMzNTM1MzUiPkMxLiBUaGUgcmVmZXJlbmNlIHRv IHJmYzc2MDcgc2hvdWxkIGJlIEluZm9ybWF0aXZlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjojMzUzNTM1Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1hdXRvc3BhY2U6bm9uZSI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6IzM1MzUzNSI+QzIuIFtNYWpvcl0g U2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMuJm5ic3A7IEkgdGhpbmsgdGhhdCB0aGVyZSBpcyBvbmUg Y29uc2lkZXJhdGlvbiB0aGF0IHNob3VsZCBiZSBtZW50aW9uZWQgaW4gdGhpcyBzZWN0aW9uOiZu YnNwOyBHaXZlbiB0aGF0IHRoZSBsYXJnZXN0IHZhbHVlIGlzIHByZWZlcnJlZA0KICgyID0gaW52 YWxpZCksIHRoZXJlIGlzIGFuIGF0dGFjayB2ZWN0b3Igd2hlcmUgYSByb3V0ZXIgaW4gdGhlIHBh dGggKHllcywgZXZlbiBhbiBpbnRlcm5hbCByb3V0ZXIpIGNhbiBpbmplY3QgYSBjb21tdW5pdHkg aW5kaWNhdGluZyB0aGF0IHRoZSByb3V0ZSBpcyBpbnZhbGlkOyB0aGUgY29tbXVuaXRpZXMgYXJl IG5vdCBwcm90ZWN0ZWQuJm5ic3A7IFRoaXMgYWN0aW9uIGNvdWxkIHJlc3VsdCBpbiBpbmNvbnNp c3RlbnQgcm91dGluZyBvciBpbiBldmVuDQogYSBEb1MuJm5ic3A7IEkga25vdyB0aGUgZG9jdW1l bnQgaXMgbm90IGV4cGxpY2l0IGFib3V0IHdoYXQgdG8gZG8gd2l0aCB0aGUgdmFsaWRhdGlvbiBz dGF0ZSAod2hpY2ggaXMgb2spLCBidXQgdGhlIGNsZWFyIGludGVudGlvbiAoZnJvbSByZmM2ODEx IGFuZCByZmM3MTE1KSBpcyB0aGF0IGl0IHdpbGwgYmUgdXNlZCB0byBtYWtlIHJvdXRpbmcgZGVj aXNpb25zLiZuYnNwOyBQbGVhc2UgYWRkIHNvbWUgdGV4dCBhYm91dCB0aGlzIHBvdGVudGlhbCBp c3N1ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_88A45E79880B4F829FAA80C05627A49Fciscocom_-- From nobody Sat Nov 12 23:25:44 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8EA51296D3 for ; Sat, 12 Nov 2016 23:25:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.398 X-Spam-Level: X-Spam-Status: No, score=-8.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e58g0mQLFD06 for ; Sat, 12 Nov 2016 23:25:39 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6E5B1296D1 for ; Sat, 12 Nov 2016 23:25:39 -0800 (PST) Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1c5pAY-0006TB-EQ; Sun, 13 Nov 2016 07:25:38 +0000 Date: Sun, 13 Nov 2016 16:25:36 +0900 Message-ID: From: Randy Bush To: Alvaro Retana In-Reply-To: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: sidr wg list Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Nov 2016 07:25:43 -0000 > C1. The reference to rfc7607 should be Informative. > > C2. [Major] Security Considerations. I think that there is one > consideration that should be mentioned in this section: Given that the > largest value is preferred (2 = invalid), there is an attack vector > where a router in the path (yes, even an internal router) can inject a > community indicating that the route is invalid; the communities are > not protected. This action could result in inconsistent routing or in > even a DoS. I know the document is not explicit about what to do with > the validation state (which is ok), but the clear intention (from > rfc6811 and rfc7115) is that it will be used to make routing > decisions. Please add some text about this potential issue. would you prefer a revision soon, or wait for other iesg comments? randhy From nobody Sun Nov 13 00:18:41 2016 Return-Path: X-Original-To: sidr@ietf.org Delivered-To: sidr@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B13312957A; Sun, 13 Nov 2016 00:18:28 -0800 (PST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.37.1 Auto-Submitted: auto-generated Precedence: bulk Sender: Message-ID: <147902510813.5586.14221427472516764194.idtracker@ietfa.amsl.com> Date: Sun, 13 Nov 2016 00:18:28 -0800 Archived-At: Cc: sidr-chairs@ietf.org, sandy@tislabs.com, draft-ietf-sidr-origin-validation-signaling@ietf.org, sidr@ietf.org Subject: [sidr] Last Call: (BGP Prefix Origin Validation State Extended Community) to Proposed Standard X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Reply-To: ietf@ietf.org List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Nov 2016 08:18:28 -0000 The IESG has received a request from the Secure Inter-Domain Routing WG (sidr) to consider the following document: - 'BGP Prefix Origin Validation State Extended Community' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2016-12-07. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document defines a new BGP opaque extended community to carry the origination AS validation state inside an autonomous system. IBGP speakers that receive this validation state can configure local policies allowing it to influence their decision process. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-sidr-origin-validation-signaling/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-sidr-origin-validation-signaling/ballot/ No IPR declarations have been submitted directly on this I-D. From nobody Sun Nov 13 14:21:14 2016 Return-Path: X-Original-To: sidr@ietf.org Delivered-To: sidr@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 880BB129513; Sun, 13 Nov 2016 14:21:12 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.37.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <147907567255.5521.14302588450276585673.idtracker@ietfa.amsl.com> Date: Sun, 13 Nov 2016 14:21:12 -0800 Archived-At: Cc: sidr@ietf.org Subject: [sidr] I-D Action: draft-ietf-sidr-bgpsec-algs-16.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Nov 2016 22:21:12 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing of the IETF. Title : BGPsec Algorithms, Key Formats, & Signature Formats Author : Sean Turner Filename : draft-ietf-sidr-bgpsec-algs-16.txt Pages : 7 Date : 2016-11-13 Abstract: This document specifies the algorithms, algorithm parameters, asymmetric key formats, asymmetric key size and signature format used in BGPsec (Border Gateway Protocol Security). This document updates the Profile for Algorithms and Key Sizes for Use in the Resource Public Key Infrastructure (RFC 7935). The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sidr-bgpsec-algs/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-sidr-bgpsec-algs-16 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-sidr-bgpsec-algs-16 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Nov 13 14:22:49 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C370129552 for ; Sun, 13 Nov 2016 14:22:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id urHzume8QxRV for ; Sun, 13 Nov 2016 14:22:45 -0800 (PST) Received: from mail-it0-x235.google.com (mail-it0-x235.google.com [IPv6:2607:f8b0:4001:c0b::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FFE3129513 for ; Sun, 13 Nov 2016 14:22:45 -0800 (PST) Received: by mail-it0-x235.google.com with SMTP id u205so77434178itc.0 for ; Sun, 13 Nov 2016 14:22:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; h=mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=D/qf9xsui7GZMzFgfdOH7mF8ZxWs4Pc2O3iIDH0gBLE=; b=CE/BSRSpVX+L7hAfycnsCltoRhcp6TshcPPIAZdu1Geb5Ru6al7BIvdxlEXr+7bLgW DF7emiv8g4eu1oV8ReuPDeTdgokSlUZsWG2bXZ8IHa4YIH74G88uvEjtPAoq+NvvZsTX ++/UypIWqanOasAjO4D8iMLTBRicJ8hlhYru0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to; bh=D/qf9xsui7GZMzFgfdOH7mF8ZxWs4Pc2O3iIDH0gBLE=; b=b+svo1U1pK94RPojy+uuqVAg1Jq5cuY/jvuAeNcd3gToPO4lXjCqGybi8eBkqDzQPY Oe7LtfGnxmSTVZG2PI+z4YrxRoH1w6gtmtZOA0CAkIkCv8OmAratgryPBz970aoCYB31 u4GEONVoe75CuZvIT2ra1Eijq4dAWmVkPWwWdWwuLe5OsPgYttsopcDa0ribF0GpFKz4 0FjAOw3oJDC1v1C1jK/9OGpq1Sv7jFs1geZg7IKGNfYjJGMbXD64y6JFeB4Ei4HCC21k uzzU76UQ4wPC3Fn9nKvfNKuUxp/CPrjufnxg8hFCaB1HpQstAfVunl4LEAow5lCAPgMM YDTA== X-Gm-Message-State: ABUngvdyxULPNetBBgKlEXyjAhlTFQ6EqKaEHrSFTvbiMlzjgdEbIGySF+AWzf0hNCtOuA== X-Received: by 10.202.182.6 with SMTP id g6mr6772356oif.85.1479075764888; Sun, 13 Nov 2016 14:22:44 -0800 (PST) Received: from [5.5.33.10] (vpn.snozzages.com. [204.42.252.17]) by smtp.gmail.com with ESMTPSA id z5sm392267otd.35.2016.11.13.14.22.43 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 13 Nov 2016 14:22:44 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Sean Turner In-Reply-To: <147907567255.5521.14302588450276585673.idtracker@ietfa.amsl.com> Date: Mon, 14 Nov 2016 07:22:40 +0900 Content-Transfer-Encoding: quoted-printable Message-Id: <3A4130D7-BCD9-4A44-96F1-008E9E260731@sn3rd.com> References: <147907567255.5521.14302588450276585673.idtracker@ietfa.amsl.com> To: sidr wg list X-Mailer: Apple Mail (2.3124) Archived-At: Subject: Re: [sidr] I-D Action: draft-ietf-sidr-bgpsec-algs-16.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Nov 2016 22:22:47 -0000 This version addresses AD review comments. Most were related to the = wording in the IANA considerations section. spt > On Nov 14, 2016, at 07:21, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the Secure Inter-Domain Routing of the = IETF. >=20 > Title : BGPsec Algorithms, Key Formats, & Signature = Formats > Author : Sean Turner > Filename : draft-ietf-sidr-bgpsec-algs-16.txt > Pages : 7 > Date : 2016-11-13 >=20 > Abstract: > This document specifies the algorithms, algorithm parameters, > asymmetric key formats, asymmetric key size and signature format = used > in BGPsec (Border Gateway Protocol Security). This document updates > the Profile for Algorithms and Key Sizes for Use in the Resource > Public Key Infrastructure (RFC 7935). >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-sidr-bgpsec-algs/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-sidr-bgpsec-algs-16 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-sidr-bgpsec-algs-16 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From nobody Sun Nov 13 15:48:17 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C246129699 for ; Sun, 13 Nov 2016 15:48:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -16.017 X-Spam-Level: X-Spam-Status: No, score=-16.017 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fX87dJsWgUcV for ; Sun, 13 Nov 2016 15:48:14 -0800 (PST) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1AC6312968E for ; Sun, 13 Nov 2016 15:48:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10264; q=dns/txt; s=iport; t=1479080888; x=1480290488; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=/qt3PsmafaYrGBbXAQA2jSDL2MlnBMoMrqOCC1xgDbM=; b=ZKdy9WTgy2nJCMH4lfmaXndkTAz3PyBkBOKlasoSsFtEinPR+KbLFWi4 +Bcph60s0wtQ+ESdj8s/m7uNkOcLE0swVXH+I+a/gMWOk1SMcaoNwUThi FMmSe16Rsl04h1gz1+uaIDRs02wsf1RHTEoawp/iRieWlsZNFpF25AVwJ Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DPAQCu+ihY/5RdJa1cGgEBAQECAQEBA?= =?us-ascii?q?QgBAQEBgnM+AQEBAQEfWIEAB403pkyFHIIHhiMCGoFyPxQBAgEBAQEBAQFiKIR?= =?us-ascii?q?iAQEEI1YQAgEIPwMCAgIwFBECBA4FFIhNry+CKS+LFAEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBARyGPIF9gl2HTC2CMAWUWYVoAZBcgW+Edok7kU0BHjeBA4U2coUIK4E?= =?us-ascii?q?DgQwBAQE?= X-IronPort-AV: E=Sophos;i="5.31,487,1473120000"; d="scan'208,217";a="348013791" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 13 Nov 2016 23:48:07 +0000 Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id uADNm7uE012960 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 13 Nov 2016 23:48:07 GMT Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Sun, 13 Nov 2016 17:48:06 -0600 Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Sun, 13 Nov 2016 17:48:06 -0600 From: "Alvaro Retana (aretana)" To: Randy Bush Thread-Topic: AD Review of sidr-origin-validation-signaling-09 Thread-Index: AQHSPXjONv4V5/cl2U+lT6vbr4sK26DW5+QAgAGpXoA= Date: Sun, 13 Nov 2016 23:48:06 +0000 Message-ID: <85CA93EA-0B8E-438F-9C36-84982F1143E2@cisco.com> References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.70.231.147] Content-Type: multipart/alternative; boundary="_000_85CA93EA0B8E438F9C3684982F1143E2ciscocom_" MIME-Version: 1.0 Archived-At: Cc: sidr wg list Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Nov 2016 23:48:16 -0000 --_000_85CA93EA0B8E438F9C3684982F1143E2ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RWl0aGVyIHdheSBpcyBmaW5lLiAgVGhlIGRvY3VtZW50IGlzIHNjaGVkdWxlZCBmb3IgdGhlIFRl bGVjaGF0IG9uIERlYy8xNS4gSSBleHBlY3QgbWF5YmUgYSBjb3VwbGUgb2YgZGlyZWN0b3JhdGUg cmV2aWV3cyBiZWZvcmUgdGhhdCDigJMgaWYgdGhleSBjb21lIGluIGJ5IERlYy85IGFuZCB5b3Ug aGF2ZSB0aW1lIHRvIHBkYXRlLCB0aGVuIHBsZWFzZSBkby4gIE90aGVyd2lzZSwgbGV04oCZcyB3 YWl0IGZvciB0aGUgSUVTRyB0byBjb21tZW50Lg0KDQpUaGFua3MhDQoNCkFsdmFyby4NCg0KT24g MTEvMTMvMTYsIDQ6MjUgUE0sICJSYW5keSBCdXNoIiA8cmFuZHlAcHNnLmNvbTxtYWlsdG86cmFu ZHlAcHNnLmNvbT4+IHdyb3RlOg0KDQpDMS4gVGhlIHJlZmVyZW5jZSB0byByZmM3NjA3IHNob3Vs ZCBiZSBJbmZvcm1hdGl2ZS4NCkMyLiBbTWFqb3JdIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zLiAg SSB0aGluayB0aGF0IHRoZXJlIGlzIG9uZQ0KY29uc2lkZXJhdGlvbiB0aGF0IHNob3VsZCBiZSBt ZW50aW9uZWQgaW4gdGhpcyBzZWN0aW9uOiBHaXZlbiB0aGF0IHRoZQ0KbGFyZ2VzdCB2YWx1ZSBp cyBwcmVmZXJyZWQgKDIgPSBpbnZhbGlkKSwgdGhlcmUgaXMgYW4gYXR0YWNrIHZlY3Rvcg0Kd2hl cmUgYSByb3V0ZXIgaW4gdGhlIHBhdGggKHllcywgZXZlbiBhbiBpbnRlcm5hbCByb3V0ZXIpIGNh biBpbmplY3QgYQ0KY29tbXVuaXR5IGluZGljYXRpbmcgdGhhdCB0aGUgcm91dGUgaXMgaW52YWxp ZDsgdGhlIGNvbW11bml0aWVzIGFyZQ0Kbm90IHByb3RlY3RlZC4gIFRoaXMgYWN0aW9uIGNvdWxk IHJlc3VsdCBpbiBpbmNvbnNpc3RlbnQgcm91dGluZyBvciBpbg0KZXZlbiBhIERvUy4gIEkga25v dyB0aGUgZG9jdW1lbnQgaXMgbm90IGV4cGxpY2l0IGFib3V0IHdoYXQgdG8gZG8gd2l0aA0KdGhl IHZhbGlkYXRpb24gc3RhdGUgKHdoaWNoIGlzIG9rKSwgYnV0IHRoZSBjbGVhciBpbnRlbnRpb24g KGZyb20NCnJmYzY4MTEgYW5kIHJmYzcxMTUpIGlzIHRoYXQgaXQgd2lsbCBiZSB1c2VkIHRvIG1h a2Ugcm91dGluZw0KZGVjaXNpb25zLiAgUGxlYXNlIGFkZCBzb21lIHRleHQgYWJvdXQgdGhpcyBw b3RlbnRpYWwgaXNzdWUuDQoNCndvdWxkIHlvdSBwcmVmZXIgYSByZXZpc2lvbiBzb29uLCBvciB3 YWl0IGZvciBvdGhlciBpZXNnIGNvbW1lbnRzPw0KDQpyYW5kaHkNCg0K --_000_85CA93EA0B8E438F9C3684982F1143E2ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <687BA60DE1799340AF94327E5D35AB59@emea.cisco.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iO30NCmE6bGluaywgc3Bhbi5Nc29IeXBl cmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNv cmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRp b246dW5kZXJsaW5lO30NCnNwYW4uYXBwbGUtc3R5bGUtc3Bhbg0KCXttc28tc3R5bGUtbmFtZTph cHBsZS1zdHlsZS1zcGFuO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDsN Cglmb250LXdlaWdodDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0Kc3Bhbi5tc29JbnMN Cgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJbXNvLXN0eWxlLW5hbWU6IiI7DQoJdGV4 dC1kZWNvcmF0aW9uOnVuZGVybGluZTsNCgljb2xvcjp0ZWFsO30NCi5Nc29DaHBEZWZhdWx0DQoJ e21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2Ug V29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAx LjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0t Pjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSJ3aGl0ZSIgbGFuZz0iRU4tVVMiIGxp bms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OkNhbGlicmkiPkVpdGhlciB3YXkgaXMgZmluZS4mbmJzcDsgVGhlIGRvY3VtZW50IGlzIHNj aGVkdWxlZCBmb3IgdGhlIFRlbGVjaGF0IG9uIERlYy8xNS4gSSBleHBlY3QgbWF5YmUgYSBjb3Vw bGUgb2YgZGlyZWN0b3JhdGUgcmV2aWV3cyBiZWZvcmUgdGhhdCDigJMgaWYgdGhleSBjb21lIGlu IGJ5IERlYy85IGFuZCB5b3UgaGF2ZSB0aW1lIHRvIHBkYXRlLA0KIHRoZW4gcGxlYXNlIGRvLiZu YnNwOyBPdGhlcndpc2UsIGxldOKAmXMgd2FpdCBmb3IgdGhlIElFU0cgdG8gY29tbWVudC48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpDYWxpYnJpIj5UaGFua3MhPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6Q2FsaWJyaSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q2FsaWJyaSI+ QWx2YXJvLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXIt bGVmdDpzb2xpZCAjQjVDNERGIDQuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQ7bWFyZ2lu LWxlZnQ6My43NXB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPk9uIDExLzEzLzE2LCA0OjI1IFBNLCAmcXVvdDtSYW5k eSBCdXNoJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86cmFuZHlAcHNnLmNvbSI+cmFuZHlAcHNn LmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXIt bGVmdDpzb2xpZCAjQjVDNERGIDQuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQ7bWFyZ2lu LWxlZnQ6My43NXB0O21hcmdpbi1yaWdodDowaW4iIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJVVElP Tl9CTE9DS1FVT1RFIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+QzEuIFRo ZSByZWZlcmVuY2UgdG8gcmZjNzYwNyBzaG91bGQgYmUgSW5mb3JtYXRpdmUuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPkMy LiBbTWFqb3JdIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zLiZuYnNwOyZuYnNwO0kgdGhpbmsgdGhh dCB0aGVyZSBpcyBvbmU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTpDb25zb2xhcztjb2xvcjpibGFjayI+Y29uc2lkZXJhdGlvbiB0aGF0IHNob3VsZCBiZSBtZW50 aW9uZWQgaW4gdGhpcyBzZWN0aW9uOiBHaXZlbiB0aGF0IHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj5sYXJnZXN0IHZh bHVlIGlzIHByZWZlcnJlZCAoMiA9IGludmFsaWQpLCB0aGVyZSBpcyBhbiBhdHRhY2sgdmVjdG9y PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29s b3I6YmxhY2siPndoZXJlIGEgcm91dGVyIGluIHRoZSBwYXRoICh5ZXMsIGV2ZW4gYW4gaW50ZXJu YWwgcm91dGVyKSBjYW4gaW5qZWN0IGE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+Y29tbXVuaXR5IGluZGljYXRpbmcgdGhh dCB0aGUgcm91dGUgaXMgaW52YWxpZDsgdGhlIGNvbW11bml0aWVzIGFyZTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj5ub3Qg cHJvdGVjdGVkLiZuYnNwOyZuYnNwO1RoaXMgYWN0aW9uIGNvdWxkIHJlc3VsdCBpbiBpbmNvbnNp c3RlbnQgcm91dGluZyBvciBpbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj5ldmVuIGEgRG9TLiZuYnNwOyZuYnNwO0kga25v dyB0aGUgZG9jdW1lbnQgaXMgbm90IGV4cGxpY2l0IGFib3V0IHdoYXQgdG8gZG8gd2l0aDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJs YWNrIj50aGUgdmFsaWRhdGlvbiBzdGF0ZSAod2hpY2ggaXMgb2spLCBidXQgdGhlIGNsZWFyIGlu dGVudGlvbiAoZnJvbTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj5yZmM2ODExIGFuZCByZmM3MTE1KSBpcyB0aGF0IGl0IHdp bGwgYmUgdXNlZCB0byBtYWtlIHJvdXRpbmc8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+ZGVjaXNpb25zLiZuYnNwOyZuYnNw O1BsZWFzZSBhZGQgc29tZSB0ZXh0IGFib3V0IHRoaXMgcG90ZW50aWFsIGlzc3VlLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+d291bGQgeW91IHByZWZlciBhIHJldmlz aW9uIHNvb24sIG9yIHdhaXQgZm9yIG90aGVyIGllc2cgY29tbWVudHM/PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2Nv bG9yOmJsYWNrIj5yYW5kaHk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_85CA93EA0B8E438F9C3684982F1143E2ciscocom_-- From nobody Sun Nov 13 21:33:44 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D7E4A127077; Sun, 13 Nov 2016 21:33:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id psnk_mNOVgDa; Sun, 13 Nov 2016 21:33:39 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.kvm02.ops-netman.net [IPv6:2606:700:e:550:5c82:28ff:fe25:4960]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C85F1295B9; Sun, 13 Nov 2016 21:33:35 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id DAA603FDD0; Mon, 14 Nov 2016 05:33:34 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (dhcp-8572.meeting.ietf.org [31.133.133.114]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 08A598249EF3; Mon, 14 Nov 2016 05:33:32 +0000 (UTC) Date: Sun, 13 Nov 2016 21:33:30 -0800 Message-ID: From: Chris Morrow To: "Alvaro Retana (aretana)" In-Reply-To: <1FBAD3F8-5387-47A3-9988-A49A3133490A@cisco.com> References: <1FBAD3F8-5387-47A3-9988-A49A3133490A@cisco.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=BIG5 Content-Transfer-Encoding: base64 Archived-At: Cc: Chris Morrow , "sidr-chairs@ietf.org" , "draft-ietf-sidr-bgpsec-ops@ietf.org" , "sidr@ietf.org" Subject: Re: [sidr] AD Review of draft-ietf-sidr-bgpsec-ops-10 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Nov 2016 05:33:42 -0000 DQppIHRoaW5rIHRoZSBwbGFuIGlzIHRvIHNoaWZ0IHRoZSAtb3BzIGRvY3VtZW50ICh0aGlzIG9u ZSkgdG8gdGhlDQpzaWRyb3BzIGdyb3VwLi4uSSBtZWFudCB0byBhc2sgYWJvdXQ6ICJob3cgZG8g d2UgZG8gdGhhdD8iIEknbGwgZG8NCnRoYXQgaW4gcGVyc29uIHRvbmlnaHQuDQoNCkF0IFdlZCwg MiBOb3YgMjAxNiAxNTozNToxOCArMDAwMCwNCiJBbHZhcm8gUmV0YW5hIChhcmV0YW5hKSIgPGFy ZXRhbmFAY2lzY28uY29tPiB3cm90ZToNCj4gDQo+IFJhbmR5Og0KPiANCj4gSGkhICBUaGFua3Mg Zm9yIHdvcmtpbmcgb24gdGhpcyBkb2N1bWVudCENCj4gDQo+IEkgaGF2ZSB0d28gaXNzdWVzIEkg d2FudCB0byBoaWdobGlnaHQgdXBmcm9udCwgYW5kIHRoZW4gc29tZSBjb21tZW50cw0KPiAoYmVs b3cpLiAgSSB3b3VsZCBsaWtlIHRvIHNlZSB0aGVzZSB0d28gaXNzdWVzIGFkZHJlc3NlZCwgYWxv bmcgd2l0aA0KPiB0aGUgTWFqb3IgY29tbWVudHMgYmVsb3csIGJlZm9yZSBtb3ZpbmcgdGhlIGRv Y3VtZW50IGZvcndhcmQuDQo+IA0KPiBUaGVzZSB0d28gdXBmcm9udCBpc3N1ZXMgYXJlIHByb2Jh Ymx5IG1vcmUgcXVlc3Rpb25zIGZvciB0aGUNCj4gQ2hhaXJzL1NoZXBoZXJkLg0KPiANCj4gMS4g V2h5IGlzIHRoaXMgZG9jdW1lbnQgYSBCQ1A/ICBBIEJDUCBpcyBhIGRvY3VtZW50IHRoYXQgZGVz Y3JpYmVzDQo+ICAgIKGndGhlIGNvbW11bml0eSdzIGJlc3QgY3VycmVudCB0aGlua2luZ6FLb24g d2hhdCBpcyBiZWxpZXZlZCB0byBiZQ0KPiAgICB0aGUgYmVzdCB3YXkgdG8gcGVyZm9ybSBzb21l IG9wZXJhdGlvbnOhqCBbcmZjMjAyNl0uICBUaGlzIGRvY3VtZW50DQo+ICAgIG1lZXRzIHRoYXQg YmFyIG9mIHRoZSBkZXNjcmlwdGlvbiwgYnV0IHRoZXJlIGlzIGNsZWFybHkgbm90IGEgbG90DQo+ ICAgIG9mIHByYWN0aWNlIGJlaGluZCB0aGUgY29uc2lkZXJhdGlvbnMgoVYgd2hpY2ggSSB0aGlu ayBpcyByZWZsZWN0ZWQNCj4gICAgaW4gdGhlIGxhY2sgb2Ygc2lnbmlmaWNhbnQgY29tbWVudHMg ZnJvbSB0aGUgV0cuICBJIHdvdWxkIHByZWZlciBpZg0KPiAgICB0aGlzIGRvY3VtZW50IGFzIElu Zm9ybWF0aW9uYWwsIHBlbmRpbmcgc29tZSBhY3R1YWwgZXhwZXJpZW5jZS4NCj4gICAgQnV0IEmh pmxsIHNldHRsZSBmb3IgYSBnb29kIGV4cGxhbmF0aW9uICh0byBiZSBhbHNvIGluY2x1ZGVkIGlu IHRoZQ0KPiAgICBTaGVwaGVyZKGmcyB3cml0ZS11cCkgb2Ygd2h5IEJDUC4NCg0KaSB0aGluayB0 aGUgaW50ZW50IG9mIHRoaXMgZG9jdW1lbnQgaXMgdG8gd3JpdGUgZG93biAoZG9jdW1lbnQpIHRo ZQ0KaW50ZWRlZCAnYmVzdCBwcmFjdGljZXMnIGZvciBydW5uaW5nIGJncHNlYyBlbmFibGVkIG5l dHdvcmtzLg0KDQp2aWV3ZWQgaW4gdGhhdCBsaWdodCwgdGhlcmUgYXJlbid0IGFueSBvZiB0aGVz ZSB0aGluZ3Mgb3V0IHRoZXJlDQp0b2RheSwgYnV0IGFzIGEgcGxhY2UgdG8gc3RhcnQgbG9va2lu ZyBhbmQgcGxhbm5pbmcgZm9yIGRlcGxveW1lbnQNCm9wZXJhdGlvbnMgZm9sayAobWUpIHdhbnQg c29tZSBndWlkYW5jZSBvbiB3aGF0IHRoaW5nc3RvIGV4cGVjdC9kby9maXgNCmFzIHdlIHJvbGwg b3V0Lg0KDQppIHRoaW5rIGJjcCBmaXRzIGZvciB0aGF0Li4uIG11Y2ggbGlrZSBiY3AgMTcuIEkg aGF2ZSB1cGRhdGVkIHRoZQ0Kc2hlcGhlcmRzIGRvYyB0byByZWZsZWN0IHRoZSBhYm92ZSBwYXJh Z3JhcGgncyBpbnRlbnQvaWRlYXMuDQoNCj4gMi4gVGhpcyBkb2N1bWVudCwgYXMgYSBjb21wYW5p b24gb2YgZHJhZnQtaWV0Zi1zaWRyLWJncHNlYy1wcm90b2NvbCwNCj4gICAgaXMgdGhlIG9ubHkg cGxhY2Ugd2hlcmUgT3BlcmF0aW9uYWwgKG9yIE1hbmFnZW1lbnQpIENvbnNpZGVyYXRpb25zDQo+ ICAgIGFyZSBkaXNjdXNzZWQuICBIb3dldmVyLCBpbXBvcnRhbnQgaXRlbXMgcmVjb21tZW5kZWQg aW4gUkZDNTcwNg0KPiAgICAoR3VpZGVsaW5lcyBmb3IgQ29uc2lkZXJpbmcgT3BlcmF0aW9ucyBh bmQgTWFuYWdlbWVudCBvZiBOZXcNCj4gICAgUHJvdG9jb2xzIGFuZCBQcm90b2NvbCBFeHRlbnNp b25zKSwgc3VjaCBhcyBtaWdyYXRpb24gb3IgZmF1bHQNCj4gICAgbWFuYWdlbWVudCBhcmUgbm90 IGNvdmVyZWQgYW55d2hlcmUuICBHaXZlbiB0aGUgdG9uZSBhbmQgY3VycmVudA0KDQpJZGVhbGx5 IHRoZSBtaWdyYXRpb24gaXMgY292ZXJlZCBpbiB0aGUgcHJvdG9jb2wgZG9jdW1lbnQsIEkgc2Vl IGl0DQpvbmx5IHRhbGsgYWJvdXQgYXMgbWlncmF0aW9ucyAoYnVzaW5lc3MgZXZlbnRzKSwgd2hp Y2ggc2VlbXMNCm9rLg0KDQpNaWdyYXRpb25zIG9mIGtleXMgb3IgYWxnb3JpdGhtcyBhcmUgY292 ZXJlZCBpbiBvdGhlciBkb2N1bWVudHMgYW5kDQptZW50aW9uZWQgaW4gdGhpcyBkb2N1bWVudC4g d2hpY2ggbWlncmF0aW9ucyBhcmUgeW91IHJlZmVycmluZyB0bz8NCg0KPiAgICBjb250ZW50IG9m IHRoaXMgZG9jdW1lbnQsIEkgZG9uoaZ0IHRoaW5rIGV4dGVuZGluZyBpdCBpcyB0aGUgd2F5DQo+ ICAgIGZvcndhcmQgLS0gc28sIGluIG15IHJldmlldyBvZiBkcmFmdC1pZXRmLXNpZHItYmdwc2Vj LXByb3RvY29sIFsxXSwNCj4gICAgSSBhc2tlZCB0aGUgYXV0aG9ycyB0byBpbmNsdWRlIGFuIE9w ZXJhdGlvbnMgYW5kIE1hbmFnZW1lbnQgU2VjdGlvbg0KPiAgICB0aGVyZSBhbmQgdG8gY29uc2lk ZXIgdXNpbmcgdGhpcyBkb2N1bWVudCBhcyB0aGUgYmFzZS4gIE1lcmdpbmcNCg0KSSdtIG5vdCBz dXJlIEknZCBzdGljayBtb3JlIGludG8gdGhlIHByb3RvY29sIGRvY3VtZW50IHRob3VnaCwNCmVz cGVjaWFsbHkgdGhpbmdzIHdoaWNoIGRvbid0IGV4cGxpY2l0bHkgZGVzY3JpYmUgdGhlIHByb3Rv Y29sDQppdHNlbGYuIEkgdGhpbmsga2VlcGluZyB0aGUgcHJvdG9jb2wgZGVzY3JpcHRpb24vZGVz aWduIGluIG9uZQ0KZG9jdW1lbnQgYW5kIHRoZSBvcGVyYXRpb25zIG9mIHRoZSBzeXN0ZW0gaW4g YSBzZXBlcmF0ZSBkb2N1bWVudCBpc24ndA0KdW5yZWFzb25hYmxlLg0KDQpJIGV4cGVjdCB0aGUg c2V0IG9mIG9wcyBkb2N1bWVudHMgdG8gY2hhbmdlL2V2b2x2ZSBvdmVyIHRpbWUsIEknZCBoYXRl DQp0byAtYmlzIHRoZSBwcm90b2NvbCBmb3Igb3BlcmF0aW9uYWwgd29yayBsYXRlci4NCg0KPiAg ICB0aGlzIGRvY3VtZW50IGludG8gZHJhZnQtaWV0Zi1zaWRyLWJncHNlYy1wcm90b2NvbCBpcyBh biBhY3Rpb24NCj4gICAgdGhhdCB0aGUgV0cvYXV0aG9ycy9DaGFpcnMvU2hlcGhlcmRzIHNob3Vs ZCBjb25zaWRlci4gIFdoaWxlIHRoYXQNCj4gICAgaXMgbXkgcHJlZmVycmVkIHNvbHV0aW9uLCBJ IHdpbGwgbW92ZSBmb3J3YXJkIHdpdGggcHVibGljYXRpb24gb2YNCj4gICAgdGhpcyBkb2N1bWVu dCBpZiB0aGF0IGlzIHRoZSBjb25zZW5zdXMuDQo+IA0KPiBUaGFua3MhDQo+IA0KPiBBbHZhcm8u DQo+IA0KPiBbMV0NCj4gaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9zaWRy L1VPU2ZJNGRyckZ2bk83MjcxaXZVM2o5UkZtNA0KPiANCj4gDQo+IE1ham9yOg0KPiBNMS4gSW4g U2VjdGlvbiA1LCB5b3Ugd3JvdGU6IKGnQXMgdGhleSBhcmUgbm90IGZvcm1hbGx5IHZlcmlmaWFi bGUsIGFuIGVCR1AgbGlzdGVuZXIgU0hPVUxEIE5PVCBzdHJvbmdseSB0cnVzdCB1bnNpZ25lZCBz ZWN1cml0eSBtYXJraW5ncyBzdWNoIGFzIGNvbW11bml0aWVzIHJlY2VpdmVkIGFjcm9zcyBhIHRy dXN0IGJvdW5kYXJ5LqGoICBBZnRlciByZWFkaW5nIHRoaXMgcGllY2Ugb2YgdGV4dCBzZXZlcmFs IHRpbWVzLCBJIHRoaW5rIEkgcGlja2VkIHVwIG9uIHRoZSBzdWJ0bGUgbWVzc2FnZTogZG9uoaZ0 IHRydXN0IHVuc2lnbmVkICpzZWN1cml0eSBtYXJraW5ncyogLS0gdnMgd2hhdCBJIGdvdCBmcm9t IHRoZSBmaXJzdCBuLTEgcmVhZGluZ3M6IGRvbqGmdCB0cnVzdCBjb21tdW5pdGllcy4gIEkgdGhp bmsgdGhhdCB0aGlzIHBhcmFncmFwaCB3b3VsZCBncmVhdGx5IGJlbmVmaXQgZnJvbSBtb3JlIGRl dGFpbHMgb3IgYW4gZXhhbXBsZSByZWxhdGVkIHRvIHNlY3VyaXR5IG1hcmtpbmdzLg0KPiANCj4g TTIuIEluIFNlY3Rpb24gNy4gKFJvdXRpbmcgUG9saWN5KTogoadBcyBCR1BzZWMgd2lsbCBiZSBy b2xsZWQgb3V0IG92ZXKhS2EgbG9uZyB0aW1lLiAgSGVuY2UgYSBub3JtYWwgb3BlcmF0b3IncyBw b2xpY3kgU0hPVUxEIE5PVCBiZSBvdmVybHkgc3RyaWN0LCBwZXJoYXBzIHByZWZlcnJpbmcgVmFs aWQgcGF0aHMgYW5kIGdpdmluZyB2ZXJ5IGxvdyBwcmVmZXJlbmNlLCBidXQgc3RpbGwgdXNpbmcs IE5vdCBWYWxpZCBwYXRocy6hqCAgVGhpcyByZWNvbW1lbmRhdGlvbiBjb25jZXJucyBtZSBiZWNh dXNlIKGnTm90IFZhbGlkoaggdGFsa3MgZGlyZWN0bHkgdG8gdGhlIGZhY3QgdGhhdCB0aGUgYW5u b3VuY2VtZW50IGlzLCB3ZWxsLCBub3QgdmFsaWQgoVYgdnMganVzdCB1bmFibGUgdG8gYmUgdmVy aWZpZWQgKGJlY2F1c2UgdGhlcmWhpnMgbm8gQkdQc2VjX1BhdGggIGF0dHJpYnV0ZSwgZm9yIGV4 YW1wbGUpLiAgVGhlIG5leHQgc2VudGVuY2UgaXMgYSByZWZsZWN0aW9uIG9mIG15IGNvbmNlcm46 IKGnT3BlcmF0b3JzIHNob3VsZCBiZSBhd2FyZSB0aGF0IGFjY2VwdGluZyBOb3QgVmFsaWQgYW5u b3VuY2VtZW50c6FLd2lsbCBvZnRlbiBiZSB0aGUgZXF1aXZhbGVudCBvZiB0cmVhdGluZyB0aGVt IGFzIGZ1bGx5IFZhbGlkLqGoICBJLUQuc2lkci1iZ3BzZWMtcHJvdG9jb2wgc3VnZ2VzdHMgdGhl IHNhbWUgdGhpbmcgKGluIDUuMSwgcG9pbnRpbmcgdG8gdGhpcyBkb2N1bWVudCkuICBJIGFtIGxl ZnQgd2l0aCB0aGUgcXVlc3Rpb246IHdoeSB2YWxpZGF0ZSBhdCBhbGwgaWYgdGhlIEJDUCByZWNv bW1lbmRhdGlvbiBpcyB0byB1c2UgYWxsIGFubm91bmNlbWVudHMgbm8gbWF0dGVyIHRoZSBzdGF0 ZT8gIEkgb2J2aW91c2x5IHJlYWxpemUgdGhhdCBpdCBpcyBzdGlsbCBlYXJseSBkYXlzIKFWIG1h eWJlIGl0IGlzIHRvbyBlYXJseSBmb3IgYSBCQ1AgZG9jdW1lbnQgaWYgdGhlIKGncHJhY3RpY2Wh qCBpcyBub3QgdGhlcmUgeWV0oUsNCj4gDQo+IE0zLiBBbHNvIGluIFNlY3Rpb24gNzogoaehS3Np Z25lZCBwYXRocyB0aGF0IGFyZSBOb3QgVmFsaWQgYW5kIHlldCBwcm9wYWdhdGVkoUtTSE9VTEQg aGF2ZSB0aGVpciBzaWduYXR1cmVzIGtlcHQgaW50YWN0oUuhqCAgU2VjdGlvbiA0LjIuIChDb25z dHJ1Y3RpbmcgdGhlIEJHUHNlY19QYXRoIEF0dHJpYnV0ZSkgb2YgZHJhZnQtaWV0Zi1zaWRyLWJn cHNlYy1wcm90b2NvbCBzYXlzOiChp2EgU2lnbmF0dXJlX0Jsb2NrIHdoaWNoIGlzIG5vdCBkZWVt ZWQgJ1ZhbGlkJ6FLc3VjaCBTaWduYXR1cmVfQmxvY2tzIE1VU1QgTk9UIGJlIHJlbW92ZWQuoagg IFRoZSChp1NIT1VMRKGoIGluIHRoaXMgZG9jdW1lbnQgaXMgYXQgb2RkcyB3aXRoIHRoZSChp01V U1QgTk9UoaggaW4gdGhlIEJHUFNlYyBzcGVjOyBwbGVhc2Ugcy9TSE9VTEQvTVVTVCwgb3IgKGV2 ZW4gYmV0dGVyKSBzL1NIT1VMRC9zaG91bGQuDQo+IA0KPiBNNC4gU3RpbGwgaW4gU2VjdGlvbiA3 OiChp1RvIHByZXZlbnQgZXhwb3N1cmUgb2YgdGhlIGludGVybmFscyBvZiBCR1AgQ29uZmVkZXJh dGlvbnMgW1JGQzUwNjVdLCBhIEJHUHNlYyBzcGVha2VyIHdoaWNoIGlzIGEgTWVtYmVyLUFTIG9m IGEgQ29uZmVkZXJhdGlvbiBNVVNUIE5PVCBzaWduIHVwZGF0ZXMgc2VudCB0byBhbm90aGVyIE1l bWJlci1BUyBvZiB0aGUgc2FtZSBDb25mZWRlcmF0aW9uLqGoICBUaGlzIGlzIGFub3RoZXIgY2Fz ZSB3aGVyZSB0aGUgQkdQU2VjIHNwZWMgc2F5cyBzb21ldGhpbmcgZGlmZmVyZW50OiBTZWN0aW9u IDQuMy4gKFByb2Nlc3NpbmcgSW5zdHJ1Y3Rpb25zIGZvciBDb25mZWRlcmF0aW9uIE1lbWJlcnMp IHByZXNlbnRzIGEgbWFuZGF0b3J5IG1lY2hhbmlzbSB0aGF0IGluY2x1ZGVzIHNpZ25pbmcsIGJ1 dCBub3QgbmVjZXNzYXJpbHkgdmFsaWRhdGluZy4gIEJUVywgaWYgdGhlIHVwZGF0ZXMgYXJlIG5v dCBzaWduZWQsIHRoZW4gdGhlIHNpZ25lZCBwYXRoIHdvdWxkIGJlIGJyb2tlbiwgZXZlbiBpZiBh bGwgdGhlIHJvdXRlcnMgaW4gdGhlIHBhdGggc3VwcG9ydCBCR1BTZWMsIHJpZ2h0PyAgSXMgdGhh dCB0aGUgcmVjb21tZW5kYXRpb24/DQo+IA0KPiBNNS4gSW4gU2VjdGlvbiA4OiChp6FLcm91dGVy cycgY2xvY2tzIE1VU1QgYmUgY29ycmVjdKFLoaggIFdoYXQgZG9lcyB0aGlzIG1lYW4/ICBDb3Jy ZWN0IHdpdGggcmVzcGVjdCB0byB3aGF0PyAgTGF0ZXIgKDIgcGFyYWdyYXBocykgeW91IGRvIG1l bnRpb24gUkZDNTkwNSwgc2hvdWxkIHRoYXQgYmUgdGhlIHJlZmVyZW5jZSBoZXJlPyAgTWF5YmUg bWFrZSB0aGUgY2xvY2sgdG9waWMgb25lIHBhcmFncmFwaCB0byBhdm9pZCBjb25mdXNpb24uDQo+ IA0KPiANCj4gUmVmZXJlbmNlczoNCj4gUjEuIFRoZSByZWZlcmVuY2UgdG8gQkdQc2VjIHNob3Vs ZCBiZSBkcmFmdC1pZXRmLXNpZHItYmdwc2VjLXByb3RvY29sIChhbmQgbm90IEktRC5pZXRmLXNp ZHItYmdwc2VjLW92ZXJ2aWV3KS4gIEkgdGhpbmsgaXQgaXMgb2sgdG8gcmVmZXJlbmNlIEktRC5p ZXRmLXNpZHItYmdwc2VjLW92ZXJ2aWV3IGluIHRoZSBTdWdnZXN0ZWQgUmVhZGluZyBhcyBhbiBJ bmZvcm1hdGl2ZSByZWZlcmVuY2UuICBTaW1pbGFybHksIHJmYzY0ODAsIHJmYzY0ODEgYW5kIHJm YzY0ODIgc2hvdWxkIGJlIG1hZGUgSW5mb3JtYXRpdmUgYXMgd2VsbC4NCj4gDQo+IFIyLiBTZWN0 aW9uIDc6IKGnVGhpcyBpbXBsaWVzIHRoYXQgdGhlIHJvdXRlIHNlcnZlciBjcmVhdGVzIHNpZ25h dHVyZXMgcGVyIGNsaWVudCBpbmNsdWRpbmcgaXRzIG93biBBUyBpbiB0aGUgQkdQc2VjX1BhdGgg YW5kIHRoZSB0YXJnZXQgQVNlcywgc2VlIDIuMi4yIG9mIFtJLUQuaWV0Zi1pZHItaXgtYmdwLXJv dXRlLXNlcnZlcl0uoaggIEkgdGhpbmsgdGhpcyByZWZlcmVuY2UgaXMgbm90IGNvcnJlY3QgYmVj YXVzZSBJLUQuaWV0Zi1pZHItaXgtYmdwLXJvdXRlLXNlcnZlciBkb2VzbqGmdCBzYXkgYW55dGhp bmcgYWJvdXQgQkdQU2VjLiAgVGhhdCBzZWN0aW9uIGRvZXMgc2F5IHRoZSBvcHBvc2l0ZTogoad0 aGUgcm91dGUgc2VydmVyIFNIT1VMRCBOT1QgcHJlcGVuZCBpdHMgb3duIEFTIG51bWJlciB0byB0 aGUgQVNfUEFUSCBzZWdtZW50IG5vciBtb2RpZnkgdGhlIEFTX1BBVEggc2VnbWVudCBpbiBhbnkg b3RoZXIgd2F5oaguICBNYXliZSBwb2ludCBhdCA0LjIgb2YgZHJhZnQtaWV0Zi1zaWRyLWJncHNl Yy1wcm90b2NvbCBpbnN0ZWFkLg0KPiANCj4gUjMuIFJGQzY4MTEgc2hvdWxkIGJlIGEgTm9ybWF0 aXZlIHJlZmVyZW5jZS4NCj4gDQo+IA0KPiBNaW5vcjoNCj4gbTEuIFRoZSBJUHY0IGV4YW1wbGVz IGluIFNlY3Rpb24gNyBzaG91bGQgdXNlIGFkZHJlc3NlZCBmcm9tIHJmYzY4OTAuDQo+IA0KPiBt Mi4gSW4gU2VjdGlvbiA3OiChp1RoZXJlZm9yZSwgdW5sZXNzIGxvY2FsIHBvbGljeSBlbnN1cmVz IG90aGVyd2lzZSwgYSBzaWduZWQgcGF0aCBsZWFybmVkIHZpYSBpQkdQIE1BWSBiZSBOb3QgVmFs aWQuoaggIFRoYXQgoadNQVmhqCBpcyBub3Qgbm9ybWF0aXZlIGluIHRoaXMgY29udGV4dCwgYnV0 IGl0IGlzIHN0YXRpbmcgYSBmYWN0OiBzL01BWS9tYXkuDQo+IA0KPiBtMy4gQWxzbyBpbiBTZWN0 aW9uIDc6IKGnSWYgaXQgaXMga25vd24gdGhhdCBhIEJHUHNlYyBuZWlnaGJvciBpcyBub3QgYSB0 cmFuc3BhcmVudCByb3V0ZSBzZXJ2ZXIsIGFuZCB0aGUgcm91dGVyIHByb3ZpZGVzIGEga25vYiB0 byBkaXNhbGxvdyBhIHJlY2VpdmVkIHBDb3VudCAocHJlcGVuZCBjb3VudCwgemVybyBmb3IgdHJh bnNwYXJlbnQgcm91dGUgc2VydmVycykgb2YgemVybywgdGhhdCBrbm9iIFNIT1VMRCBiZSBhcHBs aWVkLqGoICBUaGVyZSBhcmUgb3RoZXIgY2FzZXMgd2hlbiBwQ291bnQgMCBpcyBvaywgZHJhZnQt aWV0Zi1zaWRyLWFzLW1pZ3JhdGlvbiBmb3IgZXhhbXBsZS4gIEkga25vdyB0aGF0IKGnU0hPVUxE oaggYWxsb3dzIG90aGVyIGNhc2VzLCBidXQgbWF5YmUgd29ya2luZyBpbiB0aGUgcm91dGVyIHNl cnZlciBhcyBhbiBleGFtcGxlIG1pZ2h0IGJlIGFuIGltcHJvdmVtZW50Lg0KPiANCj4gbTQuIFNl Y3Rpb24gOS4gKFNlY3VyaXR5IENvbnNpZGVyYXRpb25zKTogoadUaGUgbWFqb3Igc2VjdXJpdHkg Y29uc2lkZXJhdGlvbnMgZm9yIHRoZSBCR1BzZWMgcHJvdG9jb2wgYXJlIGRlc2NyaWJlZCBpbiBb SS1ELmlldGYtc2lkci1iZ3BzZWMtcHJvdG9jb2xdLqGoICBBcmUgdGhlcmUgb3RoZXIgc2VjdXJp dHkgY29uc2lkZXJhdGlvbnMgbm90IG1lbnRpb25lZCB0aGVyZT8NCj4gDQo+IA0KPiANCj4gTml0 czoNCj4gbjEuIEludHJvZHVjdGlvbjogoaehS29yaWdpbiB2YWxpZGF0aW9uoUt3aWxsIG9jY3Vy IG92ZXIgdGhlIG5leHQgdHdvIHRvIHRocmVlIHllYXJzIGFuZCB0aGF0IEJHUHNlYyB3aWxsIHN0 YXJ0IHRvIGRlcGxveSB3ZWxsIGFmdGVyIHRoYXQuoaggIFJlY29tbWVuZGF0aW9uOiBhdm9pZCBz cGVjaWZpYyB0aW1lZnJhbWVzLCBiZSBhIGxpdHRsZSB2YWd1ZXIgKHNob3J0L21lZGl1bS9sb25n IHRlcm0pLiAgSSBub3RpY2VkIHRoYXQgdGhlIGZpcnN0IHZlcnNpb24gb2YgZHJhZnQteW1iay1i Z3BzZWMtb3BzIGFsc28gbWVudGlvbmVkIKGndHdvIHRvIGZpdmUgeWVhcnOhqCAoaW4gMjAxMSEp Lg0KPiANCj4gbjIuIHMvIGNsaWVudCBjb25lLCBpLmUuIGFuIFJSIGNsaWVudCBvciB0aGUgdHJh bnNpdGl2ZSBjbG9zdXJlIG9mIHRoZWlyIGN1c3RvbWVycycgY3VzdG9tZXJzJyBjdXN0b21lcnMn IGV0Yy4vIGNsaWVudCBjb25lLCBpLmUuIGFuIFJSIGNsaWVudCBvciByZWFjaGFibGUgdHJhbnNp dGl2ZWx5IHRocm91Z2ggb25lIG9mIHRoZW0uDQo+IA0KPiBuMy4goadBcyB0aGUgdmFzdCBtYWpv cml0eSAoODQlKSBvZiBBU3MgYXJlIHN0dWJzLCBhbmQgdGhleSBhbm5vdW5jZSB0aGUgbWFqb3Jp dHkgb2YgcHJlZml4ZXOhS6GoIEEgcmVmZXJlbmNlIHdvdWxkIGJlIG5pY2UuDQo+IA0KPiBuNC4g oadCZWNhdXNlIG9mIHBvc3NpYmxlIFJQS0kgdmVyc2lvbiBza2V3oUuhqCAgSSBndWVzcyB5b3Ug bWVhbiBsYWNrIG9mIHN5bmOhSw0KPiANCj4gbjUuIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zLiAg UGxlYXNlIHdyaXRlIHNvbWV0aGluZyBhbG9uZyB0aGUgbGluZXMgb2Y6IKGnVGhpcyBkb2N1bWVu dCBkZXNjcmliZXMgb3BlcmF0aW9uYWwgY29uc2lkZXJhdGlvbnMgZm9yIHRoZSBkZXBsb3ltZW50 IG9mIEJHUHNlYy4gIFRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBmb3IgQkdQc2VjIGFyZaFL oagNCg== From nobody Sun Nov 13 22:43:56 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 162D4129459 for ; Sun, 13 Nov 2016 22:43:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 076_3c5v51MM for ; Sun, 13 Nov 2016 22:43:54 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.ops-netman.net [192.110.255.59]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13747129420 for ; Sun, 13 Nov 2016 22:43:53 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id 914B93FEF3 for ; Mon, 14 Nov 2016 06:43:52 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (dhcp-8572.meeting.ietf.org [31.133.133.114]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id A8092826357C for ; Mon, 14 Nov 2016 06:43:51 +0000 (UTC) Date: Sun, 13 Nov 2016 22:43:48 -0800 Message-ID: From: Chris Morrow To: sidr@ietf.org User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: [sidr] Jabber scribe + Notes Taker X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Nov 2016 06:43:55 -0000 Howdy folks, Before the meeting start :) Are there folk willing to volunteer 'now' for the event 'then'? :) we'll need both before start. -chris From nobody Sun Nov 13 23:02:58 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD192129573 for ; Sun, 13 Nov 2016 23:02:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L5mw0WviovMa for ; Sun, 13 Nov 2016 23:02:55 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.ops-netman.net [192.110.255.59]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F16F129415 for ; Sun, 13 Nov 2016 23:02:54 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id DCDAA3FF13 for ; Mon, 14 Nov 2016 07:02:53 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (dhcp-8572.meeting.ietf.org [31.133.133.114]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 1D36582698CE for ; Mon, 14 Nov 2016 07:02:52 +0000 (UTC) Date: Sun, 13 Nov 2016 23:02:50 -0800 Message-ID: From: Chris Morrow To: sidr@ietf.org User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: [sidr] Jabber scribe + Notes Taker X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Nov 2016 07:02:56 -0000 Howdy folks, Before the meeting start :) Are there folk willing to volunteer 'now' for the event 'then'? :) we'll need both before start. -chris From nobody Wed Nov 16 01:40:44 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D61BD1296B3; Wed, 16 Nov 2016 01:40:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rUKXS8XMgLhl; Wed, 16 Nov 2016 01:40:40 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.kvm02.ops-netman.net [IPv6:2606:700:e:550:5c82:28ff:fe25:4960]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E2E51296A5; Wed, 16 Nov 2016 01:40:40 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id 9C98940053; Wed, 16 Nov 2016 09:40:37 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (dhcp-8572.meeting.ietf.org [31.133.133.114]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id CC5711E7154; Wed, 16 Nov 2016 09:40:35 +0000 (UTC) Date: Wed, 16 Nov 2016 18:40:32 +0900 Message-ID: From: Chris Morrow To: sidr@ietf.org,sidr-chairs@ietf.org User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: [sidr] Slides Slides Slides ... nom nom nom! X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Nov 2016 09:40:43 -0000 If your name is Joel or Randy ... you are either not planning to present slides, or you are going to get them to -chairs 'soon' (like in the next 2.5 hrs). thanks! -chris From nobody Wed Nov 16 23:47:01 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73D8E1295E7 for ; Wed, 16 Nov 2016 23:46:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3HdalG6nawHM for ; Wed, 16 Nov 2016 23:46:58 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.ops-netman.net [192.110.255.59]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54DB31294C7 for ; Wed, 16 Nov 2016 23:46:58 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id 2409A40097 for ; Thu, 17 Nov 2016 07:46:56 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (dhcp-8572.meeting.ietf.org [31.133.133.114]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 4A7EA37FDAA for ; Thu, 17 Nov 2016 07:46:55 +0000 (UTC) Date: Thu, 17 Nov 2016 16:46:52 +0900 Message-ID: From: Chris Morrow To: sidr@ietf.org User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: [sidr] Minutes from the meeting X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Nov 2016 07:46:59 -0000 Sidr folks: Are posted, all errors are the note taker's fault (me). If you see problems/corrections/additions I'll take diffs ... thanks! -chris From nobody Sun Nov 27 06:30:47 2016 Return-Path: X-Original-To: sidr@ietf.org Delivered-To: sidr@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0075312957F; Sun, 27 Nov 2016 06:30:47 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.38.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <148025704699.23643.3735116704566029996.idtracker@ietfa.amsl.com> Date: Sun, 27 Nov 2016 06:30:46 -0800 Archived-At: Cc: sidr@ietf.org Subject: [sidr] I-D Action: draft-ietf-sidr-bgpsec-protocol-19.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Nov 2016 14:30:47 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing of the IETF. Title : BGPsec Protocol Specification Authors : Matthew Lepinski Kotikalapudi Sriram Filename : draft-ietf-sidr-bgpsec-protocol-19.txt Pages : 40 Date : 2016-11-27 Abstract: This document describes BGPsec, an extension to the Border Gateway Protocol (BGP) that provides security for the path of autonomous systems through which a BGP update message passes. BGPsec is implemented via an optional non-transitive BGP path attribute that carries a digital signature produced by each autonomous system that propagates the update message. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sidr-bgpsec-protocol/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-sidr-bgpsec-protocol-19 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-sidr-bgpsec-protocol-19 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Nov 27 06:53:23 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46112129581; Sun, 27 Nov 2016 06:53:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9j_Sx3U08HwW; Sun, 27 Nov 2016 06:53:19 -0800 (PST) Received: from gcc01-dm2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0124.outbound.protection.outlook.com [23.103.201.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 144871294F4; Sun, 27 Nov 2016 06:53:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=njnWmfmTzQ1j9q3ryPD+Z9hs3NEnIBAyF59ZdrEzktU=; b=J+0lb3xDB7W/K+Kc2sPhi/LSXmixoLljH4n+mBWyCk+4DiF753RxuGolIYOw46IElGstZGw8Qi7Z0wWqE7f6XBQ+w2eflNrDzHOipbJ5Fy1Qn5ioGx4ods0sqLMWGHMvVQ9bmcnoSUTqNL/ikEGTibdwQzZEO66fpbSQG2FgG70= Received: from DM2PR09MB0446.namprd09.prod.outlook.com (10.161.252.145) by DM2PR09MB0448.namprd09.prod.outlook.com (10.161.252.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.747.13; Sun, 27 Nov 2016 14:53:17 +0000 Received: from DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) by DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) with mapi id 15.01.0747.015; Sun, 27 Nov 2016 14:53:17 +0000 From: "Sriram, Kotikalapudi (Fed)" To: sidr wg list Thread-Topic: New Version Notification for draft-ietf-sidr-bgpsec-protocol-19.txt Thread-Index: AQHSSLrZCLzIfGJNf02uiGYKhEAikqDs5f/h Date: Sun, 27 Nov 2016 14:53:17 +0000 Message-ID: References: <148025704714.23643.17809122257545306465.idtracker@ietfa.amsl.com> In-Reply-To: <148025704714.23643.17809122257545306465.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=kotikalapudi.sriram@nist.gov; x-originating-ip: [129.6.218.53] x-ms-office365-filtering-correlation-id: c9618fd6-0586-4da5-5154-08d416d51f6d x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:DM2PR09MB0448; x-microsoft-exchange-diagnostics: 1; DM2PR09MB0448; 7:QQwi7ftfO90Spk9io+TwbCzkXIapDK5zrH1ckJtYufL5hNWVICunlglNRTMAEsecrqKQLftaD24I+BCOyxFob1jlxfWyO4jizOHCfyccEj6aNGj8fIxM/krXWLyfnTvYH1NOipdWdTnlkBhXCZ0pca77ygQS6I9HHcAVKlZ5MhbbFfAYoJddi1HSOhRTGlLQiM/zO56Hgw8FKVmMWWVCG7t6rAMT1ow1oLqIruQFoaKKJ9i3buA6QIIkFReuXNJ3Jn8dAW3wiL/Zul0KcTM2gnVFDCNbNPAFCocj90a0xNoHgYr2cWgkwHtT7aJCmgXnfeQ+3P8SzA4x36cIs5vU/WQyi3ky2jXwFZeMOFCUnfBpT5vLVAGlEV+9ASFz6+x6xASprgXMmVDj5mHds4Wc6IT5TdDewJ5D5w7Y5YVc646Kqe418zz/98s+mgrhqwkiLN/rT+wpxyK5OnUFdKu8RA== x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6060326)(6040361)(6045199)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(6041248)(6061324)(20161123560025)(20161123555025)(20161123564025)(20161123562025)(6072148); SRVR:DM2PR09MB0448; BCL:0; PCL:0; RULEID:; SRVR:DM2PR09MB0448; x-forefront-prvs: 0139052FDB x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(2473002)(189002)(377424004)(199003)(377454003)(74316002)(77096006)(8676002)(230783001)(81156014)(106356001)(122556002)(2950100002)(99286002)(105586002)(7736002)(86362001)(3900700001)(110136003)(106116001)(6916009)(97736004)(101416001)(5660300001)(3660700001)(7696004)(15650500001)(305945005)(450100001)(7846002)(50986999)(54356999)(76176999)(66066001)(4001150100001)(3280700002)(81166006)(229853002)(39410400001)(2906002)(4326007)(39450400002)(33656002)(39380400001)(39400400001)(102836003)(6116002)(92566002)(189998001)(76576001)(68736007)(38730400001)(9686002)(8936002)(6506003)(2900100001)(3846002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR09MB0448; H:DM2PR09MB0446.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Nov 2016 14:53:17.4413 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR09MB0448 Archived-At: Cc: "sidr-chairs@ietf.org" Subject: [sidr] Fw: New Version Notification for draft-ietf-sidr-bgpsec-protocol-19.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Nov 2016 14:53:21 -0000 This new version of the BGPsec specification draft incorporates Alvaro's (R= outing AD) comments.=20 Another email follows that provides responses to the comments and=20 clarifies how each of the comments were incorporated in the revision. =20 Sriram ________________________________________ From: internet-drafts@ietf.org Sent: Sunday, November 27, 2016 9:30 AM To: Matthew Lepinski; Sriram, Kotikalapudi (Fed) Subject: New Version Notification for draft-ietf-sidr-bgpsec-protocol-19.tx= t A new version of I-D, draft-ietf-sidr-bgpsec-protocol-19.txt has been successfully submitted by Kotikalapudi Sriram and posted to the IETF repository. Name: draft-ietf-sidr-bgpsec-protocol Revision: 19 Title: BGPsec Protocol Specification Document date: 2016-11-27 Group: sidr Pages: 40 URL: https://www.ietf.org/internet-drafts/draft-ietf-sidr-bgpsec= -protocol-19.txt Status: https://datatracker.ietf.org/doc/draft-ietf-sidr-bgpsec-pro= tocol/ Htmlized: https://tools.ietf.org/html/draft-ietf-sidr-bgpsec-protocol= -19 Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-sidr-bgpsec-= protocol-19 Abstract: This document describes BGPsec, an extension to the Border Gateway Protocol (BGP) that provides security for the path of autonomous systems through which a BGP update message passes. BGPsec is implemented via an optional non-transitive BGP path attribute that carries a digital signature produced by each autonomous system that propagates the update message. Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Sun Nov 27 07:22:11 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7ACCC1294FA; Sun, 27 Nov 2016 07:22:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jlz3B9swxYak; Sun, 27 Nov 2016 07:22:06 -0800 (PST) Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0116.outbound.protection.outlook.com [23.103.200.116]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95973129458; Sun, 27 Nov 2016 07:22:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=/H+U5pMH0iQwjPVS6Omyvdhz4tAlPlxbxEW1YGhpgk0=; b=YIDSlxuDfFhGdFLAqIizlYMMG5yvAga0y3GJ52QEgEdnYTFXjwu4I8dY3HScrQyP/jK9BdFmOWt5vrjyTbZhZ+OS1wpumIdDlLTINzEUQ1wbAO0rvCPS3X9tLqRju6jmCEyukW7mtew2ZwBlF5qhd3PjjEN0dYOOvW/jr6HCwKo= Received: from DM2PR09MB0446.namprd09.prod.outlook.com (10.161.252.145) by DM2PR09MB0445.namprd09.prod.outlook.com (10.161.252.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.747.13; Sun, 27 Nov 2016 15:22:04 +0000 Received: from DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) by DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) with mapi id 15.01.0747.015; Sun, 27 Nov 2016 15:22:03 +0000 From: "Sriram, Kotikalapudi (Fed)" To: "Alvaro Retana (aretana)" , "draft-ietf-sidr-bgpsec-protocol@ietf.org" Thread-Topic: AD Review of draft-ietf-sidr-bgpsec-protocol-18 Thread-Index: AQHSNR6CtOW/YAot7EOz/vffo+bn+6DtE+nU Date: Sun, 27 Nov 2016 15:22:03 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=kotikalapudi.sriram@nist.gov; x-originating-ip: [129.6.218.53] x-ms-office365-filtering-correlation-id: 111e5fdf-762c-46d4-0f8d-08d416d9245b x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:DM2PR09MB0445; x-microsoft-exchange-diagnostics: 1; DM2PR09MB0445; 7:UdV/HLNbw5vZb6ArraoFNSvwlQNjWshJKHsj3jS0Vb1HNZvmE5Y/sEHr5QTd03flPvLP2s4rY2yPdHM+eAyUidVyb6yhx0lHWdq78mKhWP43adcP2gtxbSSEpRqc6/CrE3+l3gJVKBwCFk1cszUGSvtYgYzsm58skU+yD0G/WsbdPzw7chidxWr8Dd/ScC0YlcNqsK/yaXMwwb+tSm619GPr1ZiQDJYKkTlxYXU8nW00fcS7uJUcIHzs8gUAUsKobiAPQafYHlvP5gM+lIrMwZ6+8Ru7fD0MDMD/jH/VPPTNfLGqaryWQJ+hRLGH0dsjSK9VUq90wUp+mcUxTFpJLUStdRLduEQi61Y5XtklFQM5RP8VUN3jlaXPilz1BlspYRfpIJLJFEVI+qVATB5b6t778wz446vltNBDmhtBB+mQbkDLknGLywo45sWm8NvE1dzSK8gjLVZagGvoxMcKGg== x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415395)(6060326)(6040361)(6045199)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(6041248)(6061324)(20161123560025)(20161123555025)(20161123564025)(20161123562025); SRVR:DM2PR09MB0445; BCL:0; PCL:0; RULEID:; SRVR:DM2PR09MB0445; x-forefront-prvs: 0139052FDB x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(189002)(45984002)(66654002)(9686002)(33656002)(105586002)(76576001)(8936002)(8676002)(81156014)(106356001)(68736007)(5890100001)(5660300001)(7696004)(101416001)(97736004)(92566002)(50986999)(99936001)(76176999)(54356999)(189998001)(81166006)(99286002)(2501003)(4326007)(2906002)(2900100001)(2950100002)(5001770100001)(122556002)(86362001)(229853002)(6506003)(106116001)(305945005)(6116002)(3280700002)(39400400001)(39410400001)(38730400001)(74316002)(3846002)(102836003)(77096006)(7846002)(7736002)(39380400001)(39450400002)(66066001)(3660700001)(230783001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR09MB0445; H:DM2PR09MB0446.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/mixed; boundary="_002_DM2PR09MB0446AD92D6F8149E41E0DE1E848B0DM2PR09MB0446namp_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Nov 2016 15:22:03.7892 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR09MB0445 Archived-At: Cc: "sidr-chairs@ietf.org" , Matthias Waehlisch , "sidr@ietf.org" Subject: Re: [sidr] AD Review of draft-ietf-sidr-bgpsec-protocol-18 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Nov 2016 15:22:08 -0000 --_002_DM2PR09MB0446AD92D6F8149E41E0DE1E848B0DM2PR09MB0446namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Alvaro, Thank you very much for this thorough and detailed set of comments.=20 They greatly help improve the clarity, accuracy, and presentation in the do= cument.=20 I have worked with each of the comments and incorporated changes accordingl= y=20 in the document. Please see version-19 that was just submitted. =20 Many thanks to Sean Turner for his help with the updated IANA consideration= s section.=20 My responses to your individual comments are included in the attached pdf=20 and are marked with [Sriram] and in blue. Let me know if the pdf opens OK for you.=20 Also, please let me know if I missed anything.=20 Regards, Sriram --_002_DM2PR09MB0446AD92D6F8149E41E0DE1E848B0DM2PR09MB0446namp_ Content-Type: application/pdf; name="SIDR_BGPsec.pdf" Content-Description: SIDR_BGPsec.pdf Content-Disposition: attachment; filename="SIDR_BGPsec.pdf"; size=188328; creation-date="Sun, 27 Nov 2016 15:21:05 GMT"; modification-date="Sun, 27 Nov 2016 15:21:05 GMT" Content-Transfer-Encoding: base64 JVBERi0xLjUNCiW1tbW1DQoxIDAgb2JqDQo8PC9UeXBlL0NhdGFsb2cvUGFnZXMgMiAwIFIvTGFu Zyhlbi1VUykgPj4NCmVuZG9iag0KMiAwIG9iag0KPDwvVHlwZS9QYWdlcy9Db3VudCAxMS9LaWRz WyAzIDAgUiAxOCAwIFIgMjAgMCBSIDIyIDAgUiAyNCAwIFIgMjYgMCBSIDI4IDAgUiAzMCAwIFIg MzIgMCBSIDM0IDAgUiAzNiAwIFJdID4+DQplbmRvYmoNCjMgMCBvYmoNCjw8L1R5cGUvUGFnZS9Q YXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwvRXh0R1N0YXRlPDwvR1M0IDQgMCBSL0dTOCA4IDAgUj4+ L0ZvbnQ8PC9GMSA2IDAgUi9GMiA5IDAgUi9GMyAxMSAwIFIvRjQgMTYgMCBSPj4vUHJvY1NldFsv UERGL1RleHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldID4+L01lZGlhQm94WyAwIDAgNjEyIDc5Ml0g L0NvbnRlbnRzIDUgMCBSL0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZp Y2VSR0I+Pi9UYWJzL1M+Pg0KZW5kb2JqDQo0IDAgb2JqDQo8PC9UeXBlL0V4dEdTdGF0ZS9CTS9O b3JtYWwvY2EgMT4+DQplbmRvYmoNCjUgMCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5n dGggNDA4Nz4+DQpzdHJlYW0NCnicvVxbb+O2En4PkP/A82YXCVckRV0OigBpdrNNgV4ToA+7fVBk OVbjOKmkxCf//swMJUq+KKsmVLbori1LmuFwONeP/PD50mc35eGBYDeHB6HHdeSzIJZcMx++xZrJ kGvPZ0V2eDD/7vDgn8MDj3v4JxaSeSyAv8NY0u9/fsdWhwc/XB0efDgXTAgOz13N8d0e/CdYKLkn fRZ6MQ8idnUHr8JfeMQKIP7h82VErDQX//h8ePBl8uNUTXI2/Ytd/XR48Ane/fvbmIgUj71eJjZp ny6nevI0PfYnSXE/DSdH7tgQQnM1kI1/Pfrf26kMYy6iZi6F4kq6nMogkvj6l9m/WiQrkOMtmx6r yTOI8X56rCePMK9sGhvxZgVex693+BV/Sxdsfo9fiqmQE1bB7wtUhdKhLkjP5zIeNopqcY/8Ezd2 ADdTH7hyx4+veayG8eNSDH7EfT2MLEylP5nh3M2yKsmX2WwqlEtmlBfwMBzGTDkVYpJVOC+oOzQt c5ZOI/iojSrdTYNJtqpKzq6mxxImS4C2PeON7KZA1rNkKrxJtXymtyyy5QMMkOV4kV7wMO1O+hO+ jhS5WmR4z1vWZqB56HfWpu/UzAZBxKPgGxJMl0mRw4CrZxzrEUoxSdPHAgadpChdEssRS1YzkCh7 KDK8WGZw3wruqZIKpZrT0lhNnSqClKCVYtgwcjQwyDzOijsOtM+9eBgHLgeuAx4MHPgM9Zk0M328 A70HVefsgqFmorVMnnBiQGHDyRruCo0m32Z4dVYb4HVeLRhdSfBHsLtmHW2YXaPz6f3UrChaGUAL 6ZSNcmxKoFFyLbkaT8e15r4cohzA+nEwKXBx0/CKBBd/1UoiNeZBGQuHhh2VHAaXpuSy4JEZXKSX 3TicbIgDUMe+PRB2DEQEvPYq/TIBc+VwoUke6GGydLq+NRfhv5hCRoa+1cY9uu+QuzjmUgzjjjM0 ir859IHC40INI740TqwkTWYlysF8dMiOhrhxoILU4RwZhsYtuGMkCrgYOCnHLsnGA8cPHzxfhrRE RexwCnxPcW+gRlSLpCLDDrqQlOzvxxK+gnErH6+nIjS2O68quAOCN2ccai/ieqBF5qzHWShyeaN5 C1/w+Fsx5c/kCdEHPDdxZVUnMC5TD6HAL0ZDWCK7H4N0UKmqe4csAG2Q9iCpuBy57w8c+ZfJpTFu K3b1WOAUoEsuKC8Ed8wWGLlSDmDj9jUpN7n2BYNgkBwFZmoYxqOfpxin4/YvTn8B937KKNil92IY W+YY0WRFUuWb142BBS7SKqeIAq9ylws9UDwK/4WqUuIMYTku8AfrEYnZrHS4vMFbxwOXkENxaEgC 1ECysDZ23F5jWODNKuqUtPzIqWGRZPteZo/Mia0cFA6FFEMIGQzkgiIp1Pz8KZ89wudk6dKoAQfD +HBqUGBWh1Hdn8A4ZCWKsGrx7hKIUc2HkU2KzGkFLaRqzWDVS5ePdQEpmzkuYemBfFwj8aW162uH XISmfvfO0y9DU78bNP22fgeKAH7MZZogfB6JYWzcmaL6LRXwZui2pXXbXy6BxSIv4O+E7vsL3VpT ZaDKHJWarkGVgknGXTpfHytyr5m/2tHA/+AROo5GBU4djQe/fKsm9BvKbAkpIQmXIqAlle0qrAMZ y+c0kvXJ5g1h7XaFbRSHK07oiAfBMOIuxxyIwWPO51SQE3XiVZYYgYLOJ6vnagE2MaBik0Mtltrj Ur+7TKQ2ZaRRyHZWmA5wcY4VyulQ8fAb3P+R3SRFnU+UTnuCHg5tCAtvEaCMuei2d1XkNMvWfsDl tyoAl2jd8yKhcMydAEH31DAG3iJAoBKE42mgiHikBpSCI1MKPt7zx6V1jzEBG8DUm2Tqh+BE4tFk 6scCK3iGfeKbGP5IvjApWPJoYg/T4iUL/d/XyVBi2UoHWzJUqJA9TLxFaqDpkRot2qhrEdsMEyLj Pw4RGT7H8lYPNZfQDwNlGZ8QpGMvyO8cy1YFFmWjpmWdLJdHFCNUFisRbhUM2LzpcBeMmq5UybrN VzUMgVF/bzVVI/RBA48H8TvITQIFKfoIobtFSVS56cy14stAWlTTqOr2nN9pFuUlm92jwFJa5E3m /8qAa9/69j3NtXYmn876BsOh4tHq4b6CUErsMHzBtlrHZfaE7dAiWbKUlFBv1FBKwkF8neD9Jucw DahrTLJlk2RHk69Tl0GuD4/qviE4rSxIrCy8ByHqBPcQOkfd7S5/6oNiAn83rX8osaXDHqixXVRH 1PO5YHWOQRYFrAKVi8vFfQOzWlJSfW2wLC0KoDTNj6pBa1Hdmz5Rv/GpTiLxdlOAv5tudk1er/Mi RmUfTeel4t7uIsWqmCmiL7eBAa0MsOxf42XmeUq9AdUpt6McHGq4wLKu7GPYafUwpIxqdELS80jD 9xP6uZEzesagMe3Gl7EGg7Frdy7ot2VSlmZeMkRpsKREfTe9vL9tqQ8CPQLANPgB409qPFfjXjsw A1xPjyXZwJqdX2yHhV5kylimSfS0r7BSK7VCRG08XqCGKFK1I9Fl0lQXcJgJYVocuj2EsGJYu594 jyDCbvLpfHWrSHK5q1pXLqOhKOKh10vKZRQpQLy9hLCKnd/U0U5WWhBkatuSKa6PrFix2qGjwjZK GhrY10aQZK3ZZqBkKq4l3uu3y2KJF5P0trM2khX79YEatnv6pg1GLO402JMGZWVJvd5tKARTivEU K+jkv+0knJEffbljfFm3i1Fg9vIr1UTtM99hwMOoh8PvPRX6Jw77W4jm6xGGS5cEOWEk+whhL38T 9oReIrnNwNqxxBS8rTLfW+h5Qt0+9sf5mQalDfGSBx8CeoMJXz9jc8rM5JJSiaxEZZ8b8CAhIs8a P9Gd9Rx/spnYrxhHIJMvLYS91lFLrNx2lDhwq8Vac7XP876wIqMN15etG3n/ZrH59HtVJwbG/Cxx nNMWY7r35mN7N0HIP6HU/oczmTVo4jI3j9Syc5pAKPDCIuwTicu2mIwxe34HQgq0R/URuryHqTTT iipN1YIG47sBqyS9nxvBO8SvBZjJ9vC2E0u1drJ8vGnguCVG4tkMYT2EL6zZ3UZlNWsJsWQjOgRE pOw3TUVWUiZBAPlWpGxWJHNcQw5RqgjhCmQfMy7LwD4W6foI5Vk1d9lc87h4jzEFaGD7CBnTXjgk B6Fv/B7DihSXvcO6JiclzL6WMktdItl9XNtuB7gv4JEi5KHqIfS9J8KPJ8ca/o3iEwX/xJ4HZudE iO+BmvKEJ+GWwBPi9ESbSyr8dHKMt+qP8NQZvsHcoj+eCLwuPPNYcI7/01vPQnpEhef4ivbxMDgR QU0pPq2vn9Ij4hPdGsJT+hOxCNROAvMLskkv0B7dDO9RvQzjc379XBRbnmDg2rAW4jd9cmxuOont C4Eny68npBGW3/m55sLQMgTOkAWSHz5tRlmL2D5FPyt9boYFBPaaZEnWfzSTjBuG4t2FnNHWjm3H 0nGAZJgd22UPUdA9HDm1y4qC//2EcgP7cGmbdfQCPafGWXLRP6fujXOECLp3GFckEEfbQ+i6TiFG MM6Kot3RxydFwLXqI3Tf7Kc2ERx9NEq6dtkbgABCij4enParJHmidyCkMTHsIfSjLUquMQXuCPho ayNrW7msEqzsVIhmv0MUPQTa6YIl1Pq2+7CpvoQ5bGd/p21C2hfvzxz3bI5t3IAgxz2aG8Addbtt dsK9xhaENQbwSqB/66PvsjoCqStWR8YnpDwEf/QQMqg2s6+0bSUt81uXZlm/MNJu4R5bVJktbiZs jbnicgnJonX77Yb9Ji+rL2NORt875cvNtk5TtfkZrzb6LrRZO3WZ5DJL7WOIV81X2HujtbV3GciY FvNoywBRSrt9xNnUFnnrPZPsOpvb2mRhGoGmp1jb6ranTvaiqYatqQJcoFxc2m5lLN1+7l2aVEXI dbeE9qYrEAvKuIcQBMu+plC7Dt4xwhYmHcEwOm6C7lOTB5jw3fPkOUTbP5igvA70KVfA9ENuvM1m Jxja/6ApwcD0AP7xO6mHzVVMDqPtHfsyGUwH5NbrgTviLDytmfdpaBF8lGGbfQGzqpOjCZsaYXK1 kYzJyA7FpHNnREx49f1nQUO4vq/Od+q0D3M1uA0SNBQi0caxxV5veiIjsjJjLUiJe0P21L6yfxDG nhemcbnRbSZn1cZMW6XoNSw+gxq6bpAxZMUu2Lqp2m6Y5QzbqmaTVJnZcyzSjb4EWbu2ldGpW+Nm 0utm93xNLNwKEzb64Uddw+mwkqhjRAr2SBN7xZshT5JWtt65p/PSzH1Iq3O0uQ99DBS3uUV+zPEl dsaKW1tyrzsIlMJ1ZsLIdVdP7Jkc7b101/oe7LaNzOrHE3CN9tAMez/5TuquJGlmHJjxBzPqczkB UO2dUxB4KPqk5FJ5IDuR6l0IQZ6s+wjVkdMLq3TRAySQkH/LeLTznGQg8PU7sTO2xSw69gMweLbA GIj26MB3GMPlAi3Kw4IsB7WS8bY/PxMKqcVWpM2Yu90z1HgDMVu1WUVW3OQYYtmuGqgjWsgimTss 1CgNUUDcN26XZwjgjhHdR8htAV2FASIG3mFQIUE/egg5L9KoOEDg0DuMK4653zuu0Yo0PqRb/eJ0 OD7ElUa9grTOpyQYlbFG16Y0YGKGue3kdsCIfY046fs8GjGs8kMe7wYC5M5Ms5qCnR0AxtdJ40EL llCIgFvmqnY3PQ0yK7JVmmHWk2NwtX0c2F2dHwmwfS73c1Iw8sLI6uPK3CJqYx/3b/VQfQ00x8Xs Sq+tePXtO/lyiXZmY8Oowy1FEdahB/HhsvIiPNzXOIjsOaHbl8u2CpivbhAKY7GTCIhJaMcVOmaD XbUlPRPat9uCZ2i1884NyZI1GEJ6ftZAfdOMlsTmkY4PdFKmKRyQe59hoAn++5Kg4fd1qrKEBbi2 wAPj9zc3PNBhdBRnFHmJJ9A1HLqTcqNkXtiWl/qkfMHukDMMpKuvU5T4kcv59hS2BQZysgXnQ+Nl pg23lbIVxexrtNzbNamwyRjA+jmspMRYzx3E+68P2U6iOBgcGO3D2zXpUZO/unOSvofgs0HDAkOM 50t2YTQ25kWPkaemjPg81d3TT10rsohVW2Pq47WRZ269GPlDSO6bSWkPuUzMeY+ULraFAvodT+Ix a3v3ZLZVFyrmtK3j62GDNAcHpZU9DqgdKK0BTpCzUxTBrMapbZm8IisfNtU0wz0QbEUqaE7Psucs ZoUxhTtHS8ADj43hwkQHzMaGuXR5DEyjBJGHHutl+ZQPWZrPsTqdElP15G4fmvo65nwGBmELK66p ZbHB25sT7z10GhkEeBDNMEi6kD42OcbC5iNES0U7vDSHIpev3Ei5F5CPpiroo/gGcDXkXVEw3p57 IejQjG2GN0/fhpXpcu8C+Fsd9VF+y6G+sdljOpI2RXj4we4Cqje6tOdlu9y97Ake9xF+jaT+DyQ3 zg8NCmVuZHN0cmVhbQ0KZW5kb2JqDQo2IDAgb2JqDQo8PC9UeXBlL0ZvbnQvU3VidHlwZS9UcnVl VHlwZS9OYW1lL0YxL0Jhc2VGb250L0FCQ0RFRStDYWxpYnJpL0VuY29kaW5nL1dpbkFuc2lFbmNv ZGluZy9Gb250RGVzY3JpcHRvciA3IDAgUi9GaXJzdENoYXIgMzIvTGFzdENoYXIgMTIyL1dpZHRo cyA0MiAwIFI+Pg0KZW5kb2JqDQo3IDAgb2JqDQo8PC9UeXBlL0ZvbnREZXNjcmlwdG9yL0ZvbnRO YW1lL0FCQ0RFRStDYWxpYnJpL0ZsYWdzIDMyL0l0YWxpY0FuZ2xlIDAvQXNjZW50IDc1MC9EZXNj ZW50IC0yNTAvQ2FwSGVpZ2h0IDc1MC9BdmdXaWR0aCA1MjEvTWF4V2lkdGggMTc0My9Gb250V2Vp Z2h0IDQwMC9YSGVpZ2h0IDI1MC9TdGVtViA1Mi9Gb250QkJveFsgLTUwMyAtMjUwIDEyNDAgNzUw XSAvRm9udEZpbGUyIDQwIDAgUj4+DQplbmRvYmoNCjggMCBvYmoNCjw8L1R5cGUvRXh0R1N0YXRl L0JNL05vcm1hbC9DQSAxPj4NCmVuZG9iag0KOSAwIG9iag0KPDwvVHlwZS9Gb250L1N1YnR5cGUv VHJ1ZVR5cGUvTmFtZS9GMi9CYXNlRm9udC9UaW1lc05ld1JvbWFuUFNNVC9FbmNvZGluZy9XaW5B bnNpRW5jb2RpbmcvRm9udERlc2NyaXB0b3IgMTAgMCBSL0ZpcnN0Q2hhciAzMi9MYXN0Q2hhciAz Mi9XaWR0aHMgNDMgMCBSPj4NCmVuZG9iag0KMTAgMCBvYmoNCjw8L1R5cGUvRm9udERlc2NyaXB0 b3IvRm9udE5hbWUvVGltZXNOZXdSb21hblBTTVQvRmxhZ3MgMzIvSXRhbGljQW5nbGUgMC9Bc2Nl bnQgODkxL0Rlc2NlbnQgLTIxNi9DYXBIZWlnaHQgNjkzL0F2Z1dpZHRoIDQwMS9NYXhXaWR0aCAy NTY4L0ZvbnRXZWlnaHQgNDAwL1hIZWlnaHQgMjUwL0xlYWRpbmcgNDIvU3RlbVYgNDAvRm9udEJC b3hbIC01NjggLTIxNiAyMDAwIDY5M10gPj4NCmVuZG9iag0KMTEgMCBvYmoNCjw8L1R5cGUvRm9u dC9TdWJ0eXBlL1R5cGUwL0Jhc2VGb250L0FCQ0RFRStDYWxpYnJpL0VuY29kaW5nL0lkZW50aXR5 LUgvRGVzY2VuZGFudEZvbnRzIDEyIDAgUi9Ub1VuaWNvZGUgMzkgMCBSPj4NCmVuZG9iag0KMTIg MCBvYmoNClsgMTMgMCBSXSANCmVuZG9iag0KMTMgMCBvYmoNCjw8L0Jhc2VGb250L0FCQ0RFRStD YWxpYnJpL1N1YnR5cGUvQ0lERm9udFR5cGUyL1R5cGUvRm9udC9DSURUb0dJRE1hcC9JZGVudGl0 eS9EVyAxMDAwL0NJRFN5c3RlbUluZm8gMTQgMCBSL0ZvbnREZXNjcmlwdG9yIDE1IDAgUi9XIDQx IDAgUj4+DQplbmRvYmoNCjE0IDAgb2JqDQo8PC9PcmRlcmluZyhJZGVudGl0eSkgL1JlZ2lzdHJ5 KEFkb2JlKSAvU3VwcGxlbWVudCAwPj4NCmVuZG9iag0KMTUgMCBvYmoNCjw8L1R5cGUvRm9udERl c2NyaXB0b3IvRm9udE5hbWUvQUJDREVFK0NhbGlicmkvRmxhZ3MgMzIvSXRhbGljQW5nbGUgMC9B c2NlbnQgNzUwL0Rlc2NlbnQgLTI1MC9DYXBIZWlnaHQgNzUwL0F2Z1dpZHRoIDUyMS9NYXhXaWR0 aCAxNzQzL0ZvbnRXZWlnaHQgNDAwL1hIZWlnaHQgMjUwL1N0ZW1WIDUyL0ZvbnRCQm94WyAtNTAz IC0yNTAgMTI0MCA3NTBdIC9Gb250RmlsZTIgNDAgMCBSPj4NCmVuZG9iag0KMTYgMCBvYmoNCjw8 L1R5cGUvRm9udC9TdWJ0eXBlL1RydWVUeXBlL05hbWUvRjQvQmFzZUZvbnQvQUJDREVFK0NvdXJp ZXJOZXdQU01UL0VuY29kaW5nL1dpbkFuc2lFbmNvZGluZy9Gb250RGVzY3JpcHRvciAxNyAwIFIv Rmlyc3RDaGFyIDMyL0xhc3RDaGFyIDMyL1dpZHRocyA0NCAwIFI+Pg0KZW5kb2JqDQoxNyAwIG9i ag0KPDwvVHlwZS9Gb250RGVzY3JpcHRvci9Gb250TmFtZS9BQkNERUUrQ291cmllck5ld1BTTVQv RmxhZ3MgMzIvSXRhbGljQW5nbGUgMC9Bc2NlbnQgODMzL0Rlc2NlbnQgLTE4OC9DYXBIZWlnaHQg NjEzL0F2Z1dpZHRoIDYwMC9NYXhXaWR0aCA3NDQvRm9udFdlaWdodCA0MDAvWEhlaWdodCAyNTAv U3RlbVYgNjAvRm9udEJCb3hbIC0xMjIgLTE4OCA2MjMgNjEzXSAvRm9udEZpbGUyIDQ1IDAgUj4+ DQplbmRvYmoNCjE4IDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8 L0V4dEdTdGF0ZTw8L0dTNCA0IDAgUi9HUzggOCAwIFI+Pi9Gb250PDwvRjEgNiAwIFIvRjIgOSAw IFIvRjMgMTEgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldID4+ L01lZGlhQm94WyAwIDAgNjEyIDc5Ml0gL0NvbnRlbnRzIDE5IDAgUi9Hcm91cDw8L1R5cGUvR3Jv dXAvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCPj4vVGFicy9TPj4NCmVuZG9iag0KMTkgMCBv YmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggNDE4NT4+DQpzdHJlYW0NCniczVxtb9vI Ef5uwP9h0S8nHWKGSy7fDoYOthOnLnrXXGz0UMSHAy1RFlFFdkk6af5955klKdJ68dpe2U0AS+Lb zM7Ozjzzsnz74VyJ63J/T4rr/b3IdYJYiTDxnEAo+pUEwoucwFWiyPb3pj/u7/1nf891XPxLpCdc EdLfKPH4/O8/isX+3vHF/t7bUymkdOi+iyme7dJ/KSLPcT0lIjdxwlhcfKFHgerbD+cx8+CKD/t7 nwe/DA/8gcQfRwylHHzKrvOyKobSH3zHUTFMBu+GB2qQTfPFUA3yKh9Kb3AzPAgGi6E/KId/iIu/ 7e+9J0Z+M+fYE9J3grDHsYwSR8YrHNeMiscS+m0pYv3gWsZE2PdsijiMPTz+PsMdyUKatYzPszEk 6DYSfJL01jEjfd+JNvHyaOFtoxM6chMdjwcpHXE5GEaDi1kmhgfe4BiK9QF/PkKTymw8jAfiJL1N r4bhIJ+TGuXVd7rhcijwAFK0YDCe35G6TehcVgrclkLvoI7/zIoyv8GDoYBimuPJ2RyXinQxoXtF SQRYwF+IQMYP/QShZyXdnxVfWaEn/MCrvCrfiKs7uq0SxEM1y4qMrhJpkT1H58LAiVRH55TVZR2G sROHK/KHQHjc4uzoVxrMET3zGuKlJZ1DC2tZslinFpUiTGjUm7ii+ZQ0DRMxxUwxf4WY3RB/35ib isStuaYvX3iuYWrSa/rDU1FhAmesCpg/ns/ydijpmnFWOha121fSUdGmgVgl5DvxRkK8TuZZWrJq 83j1lEGUQX2ENBU6TeSwFq4hDp5nmuN6GZCwqtl9LW4U1I8dL+w4HhVbVdAgcJS3MrAxzXM4KIhl Glh5e0N8Kr3eMdntUPRIeMVXeetrMJ5b+ixuMPxxNoGFKEgB7E2LpyLHlZu43yBJSSLsCNIPrQqS npiomhX679A0XS+/f2LGPp+TBIu8wKrhBfSHeEfLq5Vc5kB2tVZB9GlZryJWsIyupUUW6TXGJ+7o G2QNtUsrnhY2sI1dOemjgBz6lhXQx5RnTOnjbInJ5eEAG6D2lidO2jrg4EeB48u+pKwAhyChZRHu zoi7IPMQcPBeBjis58U+cFhPx+8AB1K1c/ZV47uCLdyfje6m1YwgwoRPajha+7NqBnXUmns6b3xH 2WID/O3ig7Qsc/hFraOsnUvVp5vsmXnSINffNOoCXJcVD+GKUZCg5UIioEEfX/z+hk/kJeOU1gem DUzBtawr58e1caxd6zMUnvx4Eu/MKQRx5MjVFYqx/B1+gQfyBpMlbuH9tH8bQyPmKYxbPm0Dk8vh G54tyA3GCiBCTNjyZOXihwbOlRnsmri7hXtZ4gi+lcVP8Q6UoGLb1YY8tSSL+ixYIn9U5S2AYX90 WwDE7MQRKV85QbJJYusdURCETrA7zBkEFJiFj/ZEFi2IG0MYRnzYNFzk34meEdmzSmC9ulbpezHh CyPyq2jvWYRV6PhmhPt26JJQxrRCkNcA+hvSip6huxxyjKXNcce2sezyUjThHW7UUcJ4juWaUhyj yERnAI4iXzR+sbss6cmNP7G4IN3ASeSLK58inVeGk3BukSysR2RGFiFaVYNGikGAGgVNRjSYNhNL R2uLC3saNPZUW9tpx3HR5D9FhTsm0Esc2U2n+bFdG0hLwvMeEEgfgWTzCRR6ASnwOLU695Ic9pZs hCGbsUkBOefyeM10XaO9aEomjpJm3Dw+4EBOoUg78SGrlSDUAGvBupQ/N9xYi+ni2IkCs1HZzBgk EqptQJa+uF4gLsZE3yoDoeNGTxp3szpl4ERydwBFxk7sr4+nvGWK+32hEwgM/8RfUyxEqNo8ryMC TkU8TW7+ujUJI+pt4O7Q9aNwZDsRt0ESNrEByVxuonOefaU1C79QpLCFzZrsBbCIvCa9Rf0DXaod CWMBfgb/5KSPvjTgH1nBACErim5GkWYyXDOTQOl0MVsEQPUAUJ3vL2+zcY4YMaATDqwNwk9/cDEj g83pilKkz/BGiiyF5+8unCJI4icr0l+TQeVD2aJBV+VdpnODFEueIYysZo3E/q0z8KW4a4SZFa2Y VC0mAm/Wkjde4jlkrDaMZb0dUZFyomRndkSREyWo9+qBjhEf9gMdI7K/0uiX2LzOv6BissxYfMEi XqrhF0T42YJzuqxkfG7STV3opX0/zK6TiHTRmB16WKN8e47ND7U6GYz7Erkpb31KE+OIdG7CJndx CC034i6dNDWzCYPpb715YYOsjaH2fTOrvm8d84FUxirV0YenW1wVIVzaVTJehQph0fZxsD6gjNjT awanbzENbC24XMPfKovQVKqYE9YmbNo0HIHLaUMTsvA+deI2pGieqxE2WUkirvWbsDLhyugY7JQl PJvFMpLnJP6Lz4OnyIk+jWyzfnzfSXboWX2aHbkNoW9pldAGVl/mNZWCXzkMvGZAr/1GXTVsjdnx h4+4X1e6xmwIz+9I927rgFOjR76JcA09soNKud7ch6ZTqMscPQs6faHBER6uf99PedzDqBhfa+j6 Vvcqm6X0nZsTch2hiHb40/XF3EfZRo8+g93Nrec7YbQytycpUu/pFbL3TacHDe1Nk/vLOU84TW1a o5hNwHp+mIlSNA0iDDkYlFgsSMokQE/XegaeMoMWpgfRu0xeH9Qa8WEf1BqRPc+43aQJmPSCLnTj 0O2yqM2WpLTqtDx0gRjxiPR5NteJRM6w2/MeHnGRmHExZWloFPkL6UzT+AXRSIsska1yAzOWbLpv WjOxfHFV9aLA8XZF1pIViT3kPrfz1vT9cecJLaZvVpczMWDGxpY8CDsf9WDgaRcQqsCMb6uAUDmJ obhqgLQurtVZsXPG6quYzF6kK2OUC4y43UGc7SW86E2oj29Ie3QXaaHLvW39JC/FOMWhMrPZmIjy o2s4k69lG8IEbVj2eavxq+/HmKBd4Ve0fiZbqwfL2ERyP93vs7Sy24cVxJvYsN6ItYFOOWvrlKjI zfv1eR3ScITVy8Vd6U6dfLXiy83afWvSVvel7gvQcZU7jAY/21/NlqRpaYVIBS/w+hjchI+fbDpt aUzWKlbwGfqbkD0tUAWCOrLMkXxAXSRfl3ugbz/pRjGLEYBy/B0J6Jnly0Z3XYnO6K28Hbp+8N5e MTMKncg1ozw4/gCj9NHejFAIL2ND4q9kTrw4coLteb5eK4BFfY0SdskGHKzt7NAhdkhRdJleZxpB fWPgWfX9T9Xf/mG1N4XWWmI2gka5sHlJo+Q/ifmmJVmk3M7EXBY5tjQx59xU/wsGcvQvccU9y7rl vlsD+5brniedCLSKFgmKGQ3utZQ3Uqj7vqbyPszB50EqeMtRWd6LepY7VdICGGmutXiZWJySQtcb Kpb6W7SnCzSE1aioqrfzLHvYoUAl56LqRjr62lVCvYMutxig+hSgUnxhJJPX0pjQBaR7TY15mANC 0HfjMc9kWU7vkGyef8dELlCkAKLoNLc9MWW1tskoDmnoRhzCS59abDlKeG+DkWxeS3NU5Pj/r3YQ FTf/9WMCIz7s5+WNyB6n3FGSTUSn/UOXw9Krtlj3FYDiTbM1slhunaSAM9WbSm5aF16Sow56Fam2 I4pt7UftqtF0wtGq7uBdGuyI13lt9O/XBOuiYVuWTAFjiPsr1B21te9Y86fuGLCkf54LHPSATYMD rGUvVRvCc3m0oimw2MCAvZRGPHHxtJzpjQAWDWmYOLFnxAJ6N5VFQ4r0vxllu52cEXaqG5E9Exql cPP6v+ullrZ7Xr41G+nqfRzfuUmshvLYUA9HyNu5UlotFG/XO38tZn1iRGsvLULfJxfom5GdptDb uehUn7nz9Kyt8Ofo05TILGdt3+q9RESNMGFE3AYSalP1OjbEjVCmeyBnnmK0K40AVl1KhEZrI27S CfSvTuFXWn+7FSKL0BrQLInN2LIpjZhAqxnVKda0bopHVC6ubuCnZgK7LNTynRFNYM5mXyxumnc3 iJy9QueNHZtSvy6+6Q2ey6BowV0ujcvttOmseQBRc1lrZuk9h/wqii8T3wkfAr1csc/ANQ9Bxwdu Nz4Q+iSS5i1k4JwCwwY2D8d3jx/jtlK/ctzEhH1xACKxDDmoenwz/BYefIl2AyMR6jfIfGzAVbka j+cceZdVzrsE5wi3hrW6NsLMmtdoCIvNRn4ksaXFaBSLOgnWtdt6u+TdgnfF2cv/eAHXyEy4yq+H 9UsiJpdDbtruZuWe+BYcG2srdpdbnzcxn/2XXwXCjXNNI53VTk7p+YirjZixuuc3wFZuI7JngiEX 9F77s6U56e83lGHXRk8E0o4WTUoC8GPEcUlIMazzYP0XwOQLAQjEGdK6deRArTRRh00PtWJ/VTnC 4tZXlNi9yFD9ekUii7tvXewbemmlU9JzQkOykU2ysaHA2Rl5nmRfZLW7glZ5ELy8wGszvROylqxw GDq7yJzVPR3oRaCY91k9HVuKltJPHH/l9RmHrqvU6MCn+P39e/0ZxCPJv981v3GOP13Xd/0kGsU4 nIwOgkNXuh4OjxJ6kpSu60WuG0Sj6JAvlgkdjRM6856vlOEJruSf8QnfGC9ZcEMiEbwf8VfFZ/mw CkYBPo5H0u2f4mfKo5EEJyfu6EAtHy6TI1cG78AD34fj7X18ju7z7h2nEdAzR1Iegu9RQ8I9HeHJ eFp4ykf5wfSQk0jziMFGJDEauPRifjCO1TLRjJNcmEEIBUxKl0ffyOk4YJpqSRoPxMj0aPRDtKyJ hj6tDhtJNlOhBQ6u4xOeyVYQsiYS6tHoSzSbLsnUC1nM3ikTeboee54TxTvrTQIcWN0ceVeDnjkB Np2krDgu4rdwzUu8m0akk68ZuUiEuNyjM7m/2T/SvpSbfar8Fnlmjv648DRuQfbcJvIne+dHGwal ER1HPosyb0EMg3ydOrq/n2C592KKtrwCw/P08BCclmkb1mO0R6c0xDPx+dMpXXuicGlEh0Pdg0R/ /nDogr9YfodL4JKD2TBiq2S4CrSeDrer8Ts01+38kS6byp1pMGELtfqiw3J2czefIOcwS2+bzd0L NJLhXVhcJutnHVJ++9e9vM1yO6mg6fVpejng05nJbrMZosE2B4lmn/pBeBeoHIir7/23iZmvDXCh FbcN9Mv+i3LXSz2hiXJ3J/Uk4Y+VtzCuT8X9jHmwGcN4qPBs4MFysCTjFyEUERjaQOcfXHFa6YHs 65DNjjEX63UDMwc2CXFf6gZCy/dx0qrw6/d7zrFGN1hrvOd3zapcNpZOhivreyLS+gJdNrDZJxr7 2JG4e93x4wDB1UsQivHKwQ2ELm5aR7rySr2fmvwadFi/X3A3uqtI6GqjZbCouyoOUczbrrts0C3u eJdbrF69PtY7gxgu8pnOYEswRAoIKivBUI3/n4D9daChAwkEFVE4kqoD4el6nIuWMYtaCVl0mLIM W+oo4agF/Tpq0YejsBs5MF8101uDh2XkEB5qmv1IhaOUYH2QQl95bAiQ6jFygHjcDk/HZFpK3bDq kWFaPWZ81xSDd51I5qgXP1qrdiPxIZONqmG1vq28GK+0XE/LalrFl7DpGwhNmj3f+hUETcuHjhBS rin1X7YKL7YGN/8PvqyJSg0KZW5kc3RyZWFtDQplbmRvYmoNCjIwIDAgb2JqDQo8PC9UeXBlL1Bh Z2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8L0V4dEdTdGF0ZTw8L0dTNCA0IDAgUi9HUzggOCAw IFI+Pi9Gb250PDwvRjEgNiAwIFIvRjMgMTEgMCBSL0YyIDkgMCBSPj4vUHJvY1NldFsvUERGL1Rl eHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldID4+L01lZGlhQm94WyAwIDAgNjEyIDc5Ml0gL0NvbnRl bnRzIDIxIDAgUi9Hcm91cDw8L1R5cGUvR3JvdXAvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdC Pj4vVGFicy9TPj4NCmVuZG9iag0KMjEgMCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5n dGggNTAzND4+DQpzdHJlYW0NCnicxV1dc9s4sn13lf8Dyi8rbdkMQRAEuZvylpOZZGdrZ27u2Fv3 IZ7aomXK1kaWvSQdj//97dPgl2QxxiSQM1NOZH010Gh0nz7dQF69P43FVbW/J8XV/p4JA53GwoRJ oGMR06+ZFlIFcRKLstjfm/95f++/+3thEOK/TEYiFAn9abKIX/+/P4vV/t6bs/29V++kkDIIY3E2 x5eH9L8UJgrCCN+fBUkqzm7oqyD21fvTlAcRivf7ex8nb95/mB6piajupjKaFPmnYnoUT0r8ImbT dHI7PdKT1VRN5ouraTK5p0dlcSnqaWZfEvQAT1aFwAffvMcnP+BhVeDz4mZ6ZOw7plJOagFp+L7b qW5+sx+n7xGLGp9YzMXqFi9AiFgVV7f0bL3IaxpaNLmcynjyt+lv4uwf+3s/0vT/99v0pLIkiNUT PTXqET4FpVhiv4LUFkFxKIPYjAh6HYbRO/padSzl61Amb0NpEvr54djQr28lv5TQw+wklJp+5I94 KpRhZN+ZhXjbcfaaX5LpW/7EUUS/6x/4Zf7y8HWo9I/HGl9qjo9U8/YsxCeVfnd8pPG3br78XSjf 6OPYysUXrGmj2StJpgL5jVtlm8KarZKQJUTRdoUp/Yamr3mePOLsxE4qfXsso8EkoQOT8Lx1iAm1 74Z6ScuYNj9FMyeNsKLaOfMX0Fuzjbe2svTJsYxft0vSyM+OVf92En8s+ffkWG18cfuWKLXfmmZ2 9PHgtbfh8VE8+BosNs/oh+Y7kmNv+yHScZBkI1qfLFbkH66m8UTkq0t6KIqpmfx+V0xlOJnVeQ3/ sJhK1TuoyuMWUjHtHTVqEcrE/vRAmyCQekwPPh2QNoEeFfRw/SjIwc9In8kThw+tizfkjm20YG89 E3DHcNbwyF0w6NajYOe+2FyWdi8nOjBd3ItMoBKfYS9Jo8A89bLF7xjTHUY3q2l2HMmaICeq+zuy t7smNpW1nV+NsOUx3tAeCuJobIAel1saijejmvhKQRH8rk7WBaUyUK6C2uXXUaCGrtwr6EloS8Wt idP/QSrKq/7xrzywj6dY5UVJa57fALD85lH3YRpIx3H8hfHXKcysKPhxie1WVHe3GNWqhU52P60B r4h8YiADyZ/KLzp3+BmmHXi0pSgmXy3d5nOyJL1W2EKH4vKetFuSL0+sL+f55SUGunwU7V68pp8c ANLY4c/FZXG3nMrE/vpIz99gRqv6UFS0XXm18uUS33hVdrOGq7rjQHALzDlnDPtHdTAwUZUGabI7 G41lkKXP6PKc/bGxRrCoatJkbDXZmsHc2gEMoH2qFLAfaMz+WpxPWdUn8NOnRSXy0trScoFnPvGi LKHGR/s9HkN8GCjjNtWBYfuTn0TO8mdQGqzWKu2SlMwYBGlH2qEQNsy4t0uBhCdcS3j8DR9AXkq3 4WPknzGKgr3Heu5WUyi3eVa3USryMtmkuFpMvwCh2p0Q8bbf2U6IUqTAz+2Ek1NSfFGdT/0pOMtI sY4DCMTZNeMgOCp/gULFgUzdRsBJ+dqK+RsGbRTjqIjKp1gThImbWJ9KTzLKHd3EPiyWS3E1leQS mJN4EOxXu80mmJu4oScKn35TB4l+cb1EmlCLcRObIxJdkimue5r/AKnwbwuP5qmkjSNO+9SnWBVI 9eLLoOR3WX0l3Ve/x3jigpDbpeiWfWVNgjKnZQ5ovZgv6M9ZzuTfonkLoY5KPLaxFuFI3NH2MnZT LRBp6TsZ7IxEJMkhcWcRiVZAPqOC04LhOQa/PBQ/iesc07JeAUg2X1aYEc1iBsSA92G7sK4I3Zcl f7ykzwEd46UlPDv0xwBvbVtVVidlXi+sptt4PWd4aBFffV1A84SlESgQphLK6ouVGJKynEnMmKst i4qHwlwKv9CinOr2hqRvxrlG9/QT6EHiHqdeVU+YJ0me0T3TCzNmqqsq57hooeua0qDTBducsjYn zicN7FVAvbQ4scegkoUcVFzGf+RTrAqMm9SLaYPwa5+hijafcRyAz1AlkyDK3MSeINH/Zao3M6Sf oYsPPrMN2hjqxS0gIhCVOqriFyTV/8S8f/1JzPI79lmwi8WSNwubR5MuXnW0ni3TYDvxVuPn7ppk u/PT7EWQyXMl5wYP8hWQkfFLRcQmYaj6FQbXOjAjgbn74KEinx5MG4b0mzwYWxsn6gFSbeZsAhXA Jn+2RGnV8yTrypwzJ8tMrEfHkcogjcZG69NDpRoSRgRdwMparwQXTrtVxg2EyEHI5heAEa19ktMu uQ5Y3QOD1BXXDVcMQN48YacHhUYzebCxEib8adHFWRsTDhAj5dMYaakpUNzRcC/wqC1bx4Dn61km rc2AB/eOZHQSgsTa1Hp1P5sVVTW/BzRZPo7WWQ/Op4esB54wLNDOH1Ajv1hgBSxB/rjGQM1ttWYG bGOrOH05p+yMucabKoEKAdbTIsQlFnpg/5YLPRQdR1Xkn5v0QlsXNXiz6JAMj6cCp1TcQCosxJtF 61CRcsd0m4t5zuY64n3ieIfMt45Nz9D2Y+pcNqHBChWPZpGxYn0mZwlnVhp57ry3Dfq54DpQPtg4 Q7WbCa01dihWZUi/0m5WHHurQIgPvKBVV2EChSu1XavDpvh/eQumt1r9qWsP4O2MH6Z9xXLxqWfD c6TmDR3Cf7DVrnsInoC3yqCOaOFG1IzCoMcCqVZsXyNLOmJdhItMNkDnOvRrX0r1XGQ/GJjWsmAO H6tSMwWJJ0j5dhXZMmbL+8bWBlsV/pnpfdFEAfIc9WZFY+h6Fm1FBLu6BilHD0+ZfOUYSWGCfdbb taT0SQrVcZ4oKaAciNTTCrSveGQSYpUGmRzT3shSkpdReneeIkzQJfLda2RO4/BJ/skQwNFJ7I+w Y5vSw9I6u7lvfCC831oFoEUO/sB9GCO9chrtgnGKGuKU6h7+cDZjpIJ4j3267CAXgn7/CdqrCP6X hx45JbJ7suGXXmMV09c6aq22rD7gTMvB1I8bUYzV9ztQJUe5NgSOgBqoWiy4VIBge9Sg12VL0pQe 02+tNNi63Si490VxmsF/fZMv+kLnVZwRoFJfHr7nrhtDoTF2k+zTMlP6ZOIodkDbiRb+EGjPecsW Fcc4W0u3obP4vcFhMu5MFA0u1x1R2fmsFVCWdRFrHZsw8b+yQLbfb8BOY3y6UW6Tr7omh47W5FyM c+RBosFVQQaYQAN9KxIP3eJA2ylgHd5F3y7wiXEu5X8NkEVG98hCoVQ5Rn+Cf9DZztiD2GT4+uf5 z4GXb0rXXyj2MkSyNIJt7d1StrYYvwdaFZIx0vwQLG0tJM/XaTVk4Wbis0yrJG1W46Yan+UfgvpK uYn1uUuiKEi1m9iz6yf9dd8WN1UQOSqaV/yCW7fLDiZtgmuv7dNZEDqOzatSYsKpsaMZrGU5Mt7G joquHFE8eBxk1hwjeFlbjbEoiZvYU45Ua3mW3yYGrSQaHl9aB1rFKPw4iBVHJMRQBDybfZyYkfAS Z+j52VV5LU4S7PDnem38acfoQKWOcjuWqnrFnMBRbBk+flQHWxJ1z10wOkNl00lFHsMbmm/QaOgi 9yvD29a23US7znbEVCn3SMzOCApwJiZ7QpZs1FHso7Y3S1wWc/bB63Vfm8o1YNJn7TUCgzEyUJ+c RRazd98uaK3s8W/aIx9sKL4WJzXAXl0uLpoOhKbGQm88n6DWn+DMlc0kmJXjMAX2uuEymlLg5bBJ 8E9TyxGL6/yz7RIABF2y/vNSFGXZQYDx7oZvSEUJHkW7I9DjSIOx2EZw2gawWWGbmm3zRGdwFOnJ bWaTX9+9NfRXQhA4xNsTW1H12oxNkw712Ei9CtKMu7cLOiVXvBhkHh6bzdMviPXcnpyNCorbCi2t q7F7qi9/z9AUzBVb2VBAPzGZXJf3M3Y9g8b9tcTrbX++hts5LwveLvngQ11JuCt6XNjCCQWdvkIy 4pPDdMD/+98d6LuST1RV5Y9cTepQ7qLC5OzJhgO8dI7u84iSxctFNcP+qWzvUYuP7fGHmU/ilDZJ NjbgzTRF41EfTw5FvuLCF7vLsucMynU4L5ter1EP7DH9MRTA5dh8fOZZJgE7MyKIW8tqnj6iSrIR Vdhs/4X3nJ6Ji4Ldvw0ty4JLjPeDJoetBqwyvcuqBw7hdkTpwB6uC9gpTcXWm/PaZ8FBIy0Zkeyz 0UJmgdouhzOPMJUJpx65zxbuKA2yl5icYqw1IuhhUV/jxEaZPxyQGdL+pT/bFiUbt/MZM5951SAa 7N057+bOCVHshhEbG7eHAVx8hL/oYjs9E9Lr/OC3gKL/+fSAQdT5hL+pr3MiQDzp6Rmx/FR+M8f+ JctPdc+6rgObvCyY3LsuqqJrxfCLWSTlCpTjjAzCq6CUEs4xQX/v+OGHgtzQ4MDMoY0Bh5i6PU7V HbwaHI2qYFe2t+QvaEXi2PaEQbf9LHdFjg8yzVzaHpef6TP/QkfEmegI7d5B8lECXoN0S+Sp4DuH EHotBqGFqYYIe0jEp//S0qBxa0SjHrc4Wiv0iKHuzoGhy0KObo+j7Vs1SXdZA1BG9lTSqJMT+d3d VG94N3q+Qk4Ck27zkt65GXpi3XuJj/Q8bGjg9Az/zX7twCuvrYM4G5ucV0FpEMqXEESmo9WYoF/4 fINu0FHvLur+GFnSnwNgdHzQHJm3J1ezzToPOhCitnWGT1TYmiAbg41rB/mqr+5vt11cN7CWP/u9 cEbpNIieZlPdRA8YZvv0+CGTIyNyvQri02ojgtj/Nx2KFR8usKmOplQHnp0VkHyBElmsRC5u2sOl fEQ3svjFZp0NI8rMJx+AWNXibpnPCmSof2+/CsyMzbtsPx0asXPbDzXnj3IrrO3Ty9lk5jkGuaxF d7Ia/iLn6nFXdiZZ260pMjirtCu6WsVxkD7NQhhZtXlkS/Spph+sL4j/z13BuuuTaz541Bxy+Rlq 3jpXznH4G9BVxnVwfz4DfetybGID0jLwWkGNJNqIRqSOLK2Mg2iHeJRghXquC+AF+s8cxkEPQux4 Qh7CayeaYmDlMABCP1IaHoHP0iYyxsxtJV5B+yeELdD3xAFqdl9VFl3YhgzmA/sDfg2nEtl07A/Q KZs9KehO+PcHsGaWfPBKqmS4esdJAT5xA2V6iXETa3tpt1L4G9nERVdd3sgrniFe/gj5rsIQfmRn PiFUOMr0bMPezrkal3H4Z26el7pzHuelJ96wOi5ivzfHwx5QnFhKv8N2+K3qaWz2Vp0btPtUcyEh OvTbTKdlFESJm+rYGXwhJ4hSYzuddrOtIxyN1c+MsXpsYVydz/rr3Wb50mfAi/jQm9OAmgh1V7Zn yG7pgb0ezbbyfl5vRGDsv17H8VqJI+DmNG4AWU62oklpM8nBMQlUKnQbVOmNOyhU0JaOjdtQvebi cZBlbmKdihgcWLFlL2wmxkEVH2yPlm8JrBtdXjtj5CLuunKa63YCK9IZVz53dPteZAwYmO8TyQCu 3MbgNZSlMd8l5CQWocwvAZK5CeYz3IifXiN4GLlJ93xvknbUdt5e69iDBOQnQAnGtr24YQRj2VID 3/8EH3h0ZEwQOM3slU+xFGHUV61j61Pg+LOdUUERrmR9zts95QsEYTLUZNZaVRRu/mgr/or9/jWZ wwXHyGIl7u8ahq47Cw1UOetuF+lvh7viM7I+l9/yQ06z/YZELqKMI9xdmT2KItwl5NS7JwNx1uf/ ZbF+rsVYUo4PrtULFDxsoYxPnOazwhbWLJ/pQiPYxjis80nNWbUeRv8ugOc9B9ifruBBNJcRN1j1 0i/OQyuSlGPqsxdcyoYrXnUXag4ZlUOB8uHnti5QPvY9Od1pta83G5lJ3Nm8M9yA7qWnRbi5ddw4 JCwq1G0tdusndIEmxkWbb4EgeLfEMakEp1MWxXLjvvqHsmvCau/S5DtRitUVcP61AFNOmG2J1a18 lsFRmsLu3j5Pr3BYosozIuj0ur0ctDfpfLlc7920ucPaUfq+dLB558JGNeqi4IOSGxlS+Te/92Nq lQTaszK3dUprnN52lNNuFJPiku2dVdmaO5e/O3vuNA7/p7edxJ4gL+suJlm3bVF3OZ1P+tCu+osr JQ1xh4yT2C6wemxON7j320n6gOTBzSOEymb50mfnsEbT50vrP4oNvLqT2A0z7I9OXjL45OsvZnXR duSTnTaXYjM6DduLEmvuTuqhyXZGio/j9Rda+AQqiisnrlO2pf8nbNQ3AJEkhtHtCr/iYtrnSNUX aPqVFMXDxGk0XnNrioCpk9QtTJrHY1Gx2+S5PNsQST6vNpRGBerFlW90YJyEVte3zY03FsBtILUW IG/cJccdjDfNLaVH7U1m19yqaN0HY217WMHejWYvYLI3+1zgvEPzbwy0YK9LiwHQm4v6uXs0m/xE W53p0U8+fU/iqiJkAvyPethcvjlxsB2wafZkO3Momg+JPnNCdrSC3iec992BSFxlhIWxx7ea3rAb JDbNPyDBty91jAdfo4d/dMGg9/WI74HxFwFxKYJym6XPwGuYxXAS218N4fHYdYR29MxtAIG9oxB/ 9Jcs8N2b9bZuX05k87q7+SN/RPLUb3KZrO3yWYdn238iohi82mTFLTOQL+/thVtbd0KkBncre8/x ZSxBGDvU3uYiX4kTmtLpL+Bee6iUYyLV4qqBNXl9X04bsuih9UW9X1x1t9qJOZLcDa84ZHrshrrq PeCjPV3qlQGIUa910sL29cFJ/zDeGc+KriT/N/nSm/4fQs/B/A0KZW5kc3RyZWFtDQplbmRvYmoN CjIyIDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8L0V4dEdTdGF0 ZTw8L0dTNCA0IDAgUi9HUzggOCAwIFI+Pi9Gb250PDwvRjEgNiAwIFIvRjMgMTEgMCBSL0YyIDkg MCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldID4+L01lZGlhQm94 WyAwIDAgNjEyIDc5Ml0gL0NvbnRlbnRzIDIzIDAgUi9Hcm91cDw8L1R5cGUvR3JvdXAvUy9UcmFu c3BhcmVuY3kvQ1MvRGV2aWNlUkdCPj4vVGFicy9TPj4NCmVuZG9iag0KMjMgMCBvYmoNCjw8L0Zp bHRlci9GbGF0ZURlY29kZS9MZW5ndGggNjEzMz4+DQpzdHJlYW0NCniczT39c9s2sr9nJv8DJ7+c dGOzAAHwo5PzjOPGad571+Ri37vOxJ0OLVMRXxXZR8p189/f7gIgQUm0EQdyXzNNJJLCLhaL/cby uzdnMvrUPn/Go0/Pn2UsVrmMMpbGSkYSvhYq4iKWqYya6vmz+V+fP/v382csZvhfwZOIRSn8nRUJ 3f/XX6PV82evzp8/++6UR5zHTEbncxycwR8eZUnMEhy/iNM8Ov8MQyHY796c5YQEi948f/Zx8vfp oZgI/CuOzqZcTKrZenooJzV+vp4eqslqKiaRxE8xXuP62YvJmylnk2pVNeUymvJk8uZ2Cj+7mqpJ uYJPs+piio9+j39F02Ly4l+LahXdwGgNPk5j47fyEzxd4qV1jbDwa1RG+LOmmsEPq/r3aTqprqLm GjG7nXI5WVc0bHmFKP2Ol6sG8VnXbTXNJ5/pymodwef1NU6gXEU1oqV/2OBHxPuX6Py/nj97DVT8 hw+5/9GtW1qImO9v2dIijZOkXzazWkivSs/gIIJ1SiYLpEZF1Hr1Bon4HqcORCgmswgfaG+qEon0 m/5ZRFSCu1/wK45Xz8ol/LP8EukrMF63Nrd4o1xXLfwA4QmAJxBcBtDew98trBAA+RXuE+ByvYgA HJ+s6emmvoSlw1GA7tkkukQgwBuIRAeEMCF+65bfBbU5sxms6a/vpxrWcAHt2mTA86m7OGHXJk/i LN9am3JNCzKYMvLovNGzVZor7dy6ZWsqvD9DLlfA5TjT6PYG5neFmwMHSWj/aJ5uW9gvuE3jr2be 8YklmYyLbGxiQQFlsSzGAJ0viFPXRJa6Peh4lTghHBYiSeNCBJ6u2AmoiKUaAfSSMc4ZSzLGVHaU vWS8wCuv8epR/pKJ7JjuHKZwiyVHPMFHjhlXcJ0JvKa/F8dHhwLu5Sdw7we4fnqEP3mljgT94qh4 SePCj/SD6ocjLjQ8GgjgHeLg2Q9HhwoHKo70Ywad4yMuX+pHT9iR1KMROHZKqAmLGQzMcSB1dAiP CVXQgELlBHznXk1J0O1tr6ZFLOTWGv8EW43kj9mjwGPrRbnGf+9QS5X4CSUc3GxRnFUgTFP9kWRw ieJUGnE6W1yDTKLxWhCVOe7xTH+P5jAQfWruyuYKZRtcKCMaW/Zjk17T8lhve1KuKGc3tj3tjbUd lNQaSkehpSOoVxAfnYag/bOoRqSkSuLCIbxIghJeKRh9k+6WpL160jNdo9SUrtQ8+xG+v8N7//wf oOgPNDv4Fa7cu3OSiZcVjUDWRPV5KknGalvg6iC6XcGCLWE5YIg2IpvGEbqOIiWBe0WmBaLVrv4C VNcyqAU5nNKzegkJ1+gVWT7vkR+09otfBBSRUuWxUCP0CwknZXE2Bud8oWk7r5up4dJ1R7cS6cAn EdAkm8xHmEuA5NujCpYJgNlCG3n906YZSpurJaPkSzjycZkBJmOItGR4okTRhuyKOA+lC2Ezbs+U uLW3d0NNbBwRtzUVPQT2MFpT2WQG65Bqu01bUiuY+y4rSm8UBIe2Bm0TkhC7DBew1S4m+KO7RT2D fZNusp5dZ1ClbI/iGxQo3xbfNWxociaQO6v2FidGcrJEui2/oLXaaD8g1VuXPAi4jML1YnpA9Lg0 Bq7mbJKTuVmPzvHB56Mb4HiiVFt+wUesNEE5TdtkvSDSDs05/MeSeWtZcQHpcZBz6eQdyLjMyLif 3uFY5x2GY9KbE+PtjfBcxdkW3RsQs8oh6FWM5Am4qXgWqxHYQcEUIPN2g6FNuaxKrZlpFWbLsqlh 4ea4MLTFotbySGc59HutMaqbbFhtH9AORXZqcSMnZlfjBfKE9JgB7Vsm43w3HaNDGJXn4FnOPk4O DwPChEsq2//aCWD1YgzO2wg3l923VdOSYCM9QBu5W6QyIEJ5HjMxgtAaBTRKlgY3fHu7pNiF5Q24 gZIKdJP17g7w+yVqsE4okeDfKQJUQcJxbyKAJXGSbk2JKNtqTVSjebSu+zBRra2t1TVepxn0xL9D iRF1FvXCWlUUY0B9rZen+dLFGtCei8rfrcghpR4NxPMcSdUCAhl9DekTiwSmr8aoEBSQjLNsDJCO qjTr1jG5yGI92x2oA+JJitAlGKMDupzgWpDsWTe3szUFwbasg53slSNHfxN37fKJDXcp2Db5VoBr 6BMfis4p1j4sQ6cYfWO6K1/2PrDxiRmT5PF2vrLjE0vXJ6YxcXyRnR5x9rL3qNNThGn8WO0Q0z3r ZetntAOdnvRONV43UKwfDdDQcUZwg8dgHp27zJzns/TIdcsRE3wk0ZAsxjgUUEMUGTnYlgrwY/LM j4/EBsaKLnU+u40ESOPi42QThwBZaqICr5HS/CS1j1mk6RGuGEYZiOh6yTQZ7cI8KpZBq+y3bEqN hhRURjtpX3JRZSoWO32PVWSMyEFsFLckBmF/I4sioBWTFZg5GEGnwVAAWqM3lZXAbVSDGEGMVmSu 3mlHW4cgbpvqV8BcixuyURYgYj7Bz9CGxlC69gduKCI8owFacmbI34jAU9SmDWq8zmNu63XdBftX ZHtHWrLTd1SG1wPFPCaLFEmLvS1pyuNi282o/tCK2hGaZxS5uCW/41eYqQ16vzggoXxnHQOSyrNF RJ+RQEYban9hLAniACodlw1B2vAwRR/4hu8I1qVdsxEHUi9er4xXHXSN2KwhNijJYOo9yHJkOQSP pbDLkWTAgGHXQ+bgB2wuB/KPYVob/6JLmGdKJvHjdlaC3KTSDf8gxXjtbixGKAKeS1Hsj0ETHnNu cIE/cR41n/rPHwizj2ewbA1FbEoyJ38JKGxYjramFx4BA+igPjCT4wMWdE/WhbpR/VgV0dkJSseu tQ7UmhceNcFp+LWkIDxdeqW1L/xP2ik/0fYAjpypgY4/ITU4CK8bJQuqmDRX2mt2rZxddb1pGmxq cWv3EDxnpCTXOtRqRmYV8xEipWeqjQCmDQHXWDKa3UTp9axSbTexzv44CmfgFuAacj/e6SVUS74E 8THpHBSoxvle90rKCd9XESm39e18js9GNaljMpsfn+aVBUPce0kn86D7mmVxmj1AExOEXUddZncd WfdoHv37tstlkI9JT+nwRTSnwMNy2eV07zB8FVAqFECQxG8WIeM34PgWmR/Yi8mi0iE5rZzJ4970 KW/bGrMFrlukMwXZ5I5cri5zMx5s7VX/bIHfyfYrb234XKfQ2+vPFQDSNze92A1DKRy9FEjR3HOZ vg8JVsSeqxSQORQob/4oqHbLZ1nMvtHxvWfLy5zFvPjzVbkXHkGDrqTKvcBipRBuMWMFjxW20Ca1 mViyv2e6JEbLRpOQRfcLdnV6b0KWfk3ZSfXnJGW/SimlIk7F/jg0TTEzeP8SDTK5vee4XgTkGPAy WOqHTkhGFYIyKz5gtRGyXepkMthcdSls4MsfUPL/9O6cuJdSOyN5qj57jZzYOvkmm7xGxjf1XFdd /K/C1LXSHvhY5tpl8JgQebvqQq9OfnxWtobZd4pIxWLB91Y7IJXA4e8nva7TQHNRbzZuNxsp+6qh yV11lo8lDmlhKq9yiEPPulJGE+gAaz5sXEfH4YsdJQxDGYHLGWHih1K1G+kfSqRjGBYc+XWXQ8L4 f1dVgHPYLv/auQoijfM9KipRoEv7wCrU60V0fAbodiWAx+c/UuhgdbXBWCuyR5UW1Sh8KxK/OjSh SV4FzoQlisdC+E3Fq/pVhszSgUJUfrhdTOPoLVJoZfPR9Qzt/mWJJsKBNT4NlQPiCJa29KTfcG1r FH7Des4Bs7+fKhO/MpYysrxO348JnUQ4Qafw7J6ksXpI3oOked/XD6G/hQo9J30OG7hwjRRHKeLO XlAVMsXXPKudQFWQ0LncLC5wtAWVF5DxgjUb+rupdB6V6bgAnbdSkf65r7Z392qIQuEy7MsxlrC+ DwYLNgUvIvuZ0pNgmGnPf1FSNjI3LrPVukCj9nY2I6esJfdrubSVyCjkiZDlsh6KYfz4yDDjbgGQ xSLzm+rIIuSJE50IviVErtDO3IyA0pEB+RVHBhJ7ZOCkq/vuEpJkQAHFR6uWdtVKOfHu4zXtJq6c 7WSSDLbmCz86JTsmSwFXXyA6ttTtGF2uaHWLQ+EGuwxbcyxlimV9IyRthluWqgPOiIN35Bq+wXMQ abFP31bAv3y7mrCtPn0G/M15DGKff57BJM/Rvvrci8jZwjW0ugWR+hlaEG3WAbECmggMi2VGUA9q iwjc7iOA3BKy7ZmjDG+MSdl2mwg5vpmRPCe+/wNDg11p0UZAKZrX1fJq6iRP5s5WwzE+YGiqdUY2 JVCG8/777YgQUsDSezwKI1QeZzu2zDUi32/6JmSEhGHx6gjgkK4mS+IiHwM0qxpaoHpOxtSspLrM i0mrE16DovV6uYzQptAMhFRpBy6G1WlVUztlbJsWArJH/QmYr6YK33IZtfR1RToQJBFm2yYUfAkZ nxRZFufiCegtckZCeITeO/w0Mph0mexlZyC4UtpNx9q40c5dIpM42V+5vZAKh9+SvFh3UAXdGmCz jEELujMKDFnvBEQ1jEkhqIbx49uQIUqFZQAjswtYLIkFqDwfA0TWf4y2Z0WcFtCf41LExVNMUGZY gjPGlZR1CcmVKWYanmBaaYYRyRFAl8bbvZna8FDIlBcF7fc/xYTxWI3ucJzab3VAaJwqlZ9gWjyP E37ftMCeCAdNiDgd3WfzeknHFn6JX5DnHhBuCuQchRsUEDj8o+T80SRg7tCgNGbHgTXr15iPNRXQ NP3VtT3bpeutKI29auvrVYSGD6jUodnaRHQovFmDXTTrcjI6FxvOXSuKJ9FzCrbbmJ77OAmo2xST mNXY/07DzOv4jPao25RIsB7Sb4bWKkP5s7/yDiE4FirsXf/lOTldI+ACLm6B3DoKaKgAQ2q/ROAp s/3PjycpFtOOAAqt/bgo0GzZ/6zA6kOzZXxW2pm2ignDMnc1Oo8hs7kgURkfQyKkbjIWzG5A5DGv qM+ATuIH7aOgRMxHQQcFpO6Zoz3DRtljff61SzffNDqsWLdaad7Vuh7BHkZalRSqawOW00rQCNx3 5a1ghkUUewxUgjaU/w+KcLzwCF+E4wX277aHAUWF5qSzr3Rzl7avoqG8CRl7WFr4fej8LRPYQMML 33MTOj4+owL3YdwY0N0ZY6f0hVvSfyjoZD+G2XW27OHQ9WzR1fQcn0UrOlXMN4LWj47YJ3mGvUr2 tRES0Ojs/qynPjJa6COjIW1sDMYxLxSC7oE8IRvGC+xj6rTujysLf5onmSSan92GFAAc5Y7X5JF3 /0/ngNdhy6v8iBC4qkvFeeoHVmdK1I5MSRcp/0CyIWApdcISjIR44XdfiqYZZIeCp0aSTKE4eurV S7Ic9YAX2FmFh611dIDaSYUuKsL2UazwFSClbpZCBRc1NVqLLns+spkaUiABI1ASLhX8yddJgj8t PdmDSh13paOMpXpVf4In6vVWmz6rGTMyCvamGbMM05r3z2E7PRZSVGOs3guNoBZiikc6vMDOhuUc IYV1iokYLyTcNJ1uiGM7xlF2btjCC7N0G2XjoZvoPfWCmZZ6XmAvMC+R2c4z2hGk9g1p1zxAtwLl Md7TrT65Da6CQvwYMhdLZ0i98A4YBxW5xPILL7Ah26OAGe872z3GSCVPYq6efPaSK6xT8xSpgYOj UnCsLnjyOYPB6ctoewuc4iEGX2kecu5pgQeovcCGDqrKHBvzPvmM8xRLhrxnPAy4BgwsqURgFuQx WsjaVTLDIKZzuD8NalelIIAfOpnXHwMOmrsQ0hP+h9OTKAVNSVWuOXzIAvsQ6I6miR8yHz+cgkQ8 QY2c6tLbDHCCD4TULyErsThox8KTRgEroTloR5X7gR1hWp1x31e3ogSP2tjt1MWuXzImpW5Hc8pN WxrTTCA5tYfxbbueU9Y9IV5TPyNhWhzZJ9Rr3W3IttNJRtvpdCf780JfpqZEJ6b7Af2DTQhMIyGm XsOAJ4SMfMVYCjiK19jsAB6j4XW/n2Pd6EBsdQKm27bvj2lGkDkNBHZ1HiAkTHcC00/Y6X5gO/nY vkOZ6loUUcMCZjs22Gt9j6YT7rQuog5CfXfiHH+YdPgZ8LatktNqwZLTtEiy+OJ48Fs75RPTyAFp CZfTISVM62QzIdZ3iHhc/wSHlxOGncf2xssJ1SFv8TJQlvoxbTaKyvpWTeZSx6LFgEN7CnBNgY5z gQG47TShWVUvv27HYdtPafbVTGIZ0KEnPQ1ryd32G2ZRTeMOfpKaFhxFx096xwxW37KOy1Z2Jxmu dNAiLskG3cA0s2zxkGVA3ZrD6QI2xoW6X4nbZaxnuUEHMpAatDGFOg3Xl0MyRT7JTn4IGhViGZkS +wfEWSyzMUDnC6w4Ero7t6k16vsRVpU91906b41oneayI+fSEpY6NSTh41CswIjrVg1J90IBCv/+ Vnfdam1b5sIpaJ5TLI1CxuXaPafD5eQ722KlubblWnVbT52jPN3ZnIAqH1PlGC3ZPbugqfKU4iNP AIgKHEYA/YQ9lG3L+cxtRaqPZuvGYgHzLAI2QTKKTn1tj4kgoyjbMRI+X0z+Fw++KXPwrabqPHrw ePlpyk1OuKmpedvis3PeqqQePfoASaRf5dC6bXwo+l1uJkPNLsJudq7ToVhQpceLtM8gu0rP6SlI rQ61rO96EuILDlAGi80XKpi+UL3C4KxrKUUK5oSNG0eDRotgj5GsR02aujaZhFvwP9dNJvPeQuRJ PjDVVG+L2cH7ZlRWE3atsXLTtNJpwUgtGTe1k2n6qO2zdGgXfo3a7cg7bE0ZWqNaXPJX9IDqWnVa iPR7OWraoWodfVnFNymlgvo07uTACNO8irK80SNF0a6KGyz2lOkI0494UDxVeBZpXwdUeJrj8H96 xY0XHuErbrzAHocES68nePrZal73AdsfoTc99E2m1PTO0K09QsYYqLTTC7W3K9TWzqvCKjQZo9eI 1x+zRWntIcpTvp+aFiNOn8+LSUC7oqCXCPkhjkr35/cBrQi0Zws/4BdTsmR0P486nlJx5Qd7BNHt dkD2dqMTwEEPEmJjOP7kXC9Zgv1qvMBSw5SSPAysSSNWam9KIFaDRWbUSoW2wKPDB1wlG28UDOqP cDzumz4wS+1d0Q6frenVG0FPIMrEDw3T9N++iwnf2qBTatHNSXc42r4yQO/cv+GWZiHLnqkZtRe6 QVskSlI7PmB1arde69aRZ9gLGs8b31cM2fdTpET7suvWMO/IaturOc2EVxF1pRr0Uhs2TtvorUKK AOQJvlSA/PMR00UU8f4ccI4nd5MHaIjd+OvepzbNLxL0p0KG5xOJZ2s8MNIFhOD/oWkZssSdCxZz P5oEhZpgusQL7Am5oVXZLL8c6G5fs4Xxc8uQfSMYvR/iqSmRMHpbhBfYtz/rdmIBoSf0lhe/LUFv Ntp8g1vAI4gc22d5oTIsVHKCYSGrewW+yVf4IaT7K7TVcr5bPdHhmza6vgtsBItCxFnhhyOKYUo6 jmtJavATsEWOihNP5gppvcnMmybHbaR7Q5S4QNWVOVJwRo2J3Bfh7NZTidrne2l5kvevGR2bgXk5 zEHAJu0FB8L5gffKctqe532UapDp7F690gWWdK6zy9fYfKekfKdO8ZicJyUced6l8vhxFwLSWZ9d +c5dcbaRsN4rRWP0Ldx3ZDt1zsfpva4znhQuc9rUO5mv1CbnupTnMDYmHoqNbb5I53FJqJHkp36m i91toHw8HMrkFHfuDp5885tg74sAc9W/CXaUPf0ynY/lUsNzwxUzCW4bU0aew1vO2wH2nt087Bm8 Ky2AR9ONkc3u4MmALUIlOCkCa2LvYd8/gK8DF14M0OcIqY9guWrN0S5ssxRO4yiBXdi8ECrdxrDD OuYKfS1q71OMKJwCJfIeQwGMxw+dyuvebwlqhxogm7f2jptkV1rFapsIrSPnRZv1Orqp6FU1OqO0 1u9FvTnpmoGRjYIE+RteYegzzvszMdjYD/3Qtz9rmobjMcwyZl4UCWnOqRz7svpA3XCq91FgJ/HM rvLCZmWwMc1BAuKQpGTMPe06SHxN7VesQ/OZ4sUBs71SUaNeHwwCntMwjeifmtppit2zfKl9cm0b +Q9lAwYEGH3YFBA7ZWnGY5nIvZXFmhYeDymDmwo3sHm3dB30yA2LMz8sAvfaB5vPC+yq6+VOa+hI 8cOglSk85944bZDiPwuhSWYNCmVuZHN0cmVhbQ0KZW5kb2JqDQoyNCAwIG9iag0KPDwvVHlwZS9Q YWdlL1BhcmVudCAyIDAgUi9SZXNvdXJjZXM8PC9FeHRHU3RhdGU8PC9HUzQgNCAwIFIvR1M4IDgg MCBSPj4vRm9udDw8L0YxIDYgMCBSL0YyIDkgMCBSL0YzIDExIDAgUj4+L1Byb2NTZXRbL1BERi9U ZXh0L0ltYWdlQi9JbWFnZUMvSW1hZ2VJXSA+Pi9NZWRpYUJveFsgMCAwIDYxMiA3OTJdIC9Db250 ZW50cyAyNSAwIFIvR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJlbmN5L0NTL0RldmljZVJH Qj4+L1RhYnMvUz4+DQplbmRvYmoNCjI1IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVu Z3RoIDQ5NjA+Pg0Kc3RyZWFtDQp4nMVd62/jOJL/HiD/g76tveho+JZ0CHLIs28O95i99O7gsL0Y KLbc8XXiZCX3BP3fX1WR1MOSEnVCZ3aQTmzLrGKxWI9fFbk/fbxW0Zfq8IBHXw4PEhbrVEUmE7GO FLzKdCSSWDMVlcXhwerPhwf/PDxgMcP/ZVxELDLwb5IJ+vzXP0ebw4OzT4cHP13xiPMYvvdphWMz +I9HiYiZUFHCstik0ad7GAo/idOoBOI/fbxOiRX/5v98PDz4++x0OTez5VzOimU0/0f06d8PDy6B wl/exgpnMk7GOOkysL0tovzmAbj4fX6kZsU8m0WPeZnP1ewL/JT545yb2S1wGK034TgULImNnsZi QMEIzmL+A5IJSBk0zWTTKG9QH2AhniJckuuATGgVSzmNiWIxT2fb9cP8SM9CLnwqYjFRDiHFn6rJ 4k8Cks3YZIHHIcnKmE2aLfzBhI4+LUDaIcWdpTHje1rlvzSm3OiYq5YtlyakKTegq9yzT3y/RS1F xGWsTZeQirUKR6glGQnmxrQko9KgkgFDkor3kEwgQi3JCBUL4SUDhNWPu3/5jGRQC9Uuw8eMKXVy JI+ZvBL2t06BjGRMXDGemBN9jC9PMnyC1U/Iy0t6Syf0ln9CX54c4Rfwu8KOw7NTxjX88MsTzo/t e+k5vT4Sx/CbnXCGvy/huQvGz9mJcS/5KY2MH+NzTCSMOYo8YzRERiPQYzTamT7BT9OMfvFT+sWE ZQOeTx0HiX0OqeBI+INPadZlFJijYZMLFATKg2ifuqcv6C1l2XGzPTnC1+ccSeH3jqwEgXM3QW0n 6MbyvJ1pFItjioSZnNKsubmicYydKTfnNLIniN9PDE3VESIecBx96udI4pEkRTu3riTpPStxK8rX KzHEMVlLh6UIurthxKy356rHIv9alBGEBdW3RwgYHyFMofCg3FZzzmYRhJEQr2xvI3xFn6wiCGO2 8IMBZNBwiqmY6RFOF0DbzMpyzoFo9UhcYUyFcTYEsZoi2yi/+zLn2s1gvb3FF/f4aFR9W2/nnMN3 P0QwTwgENxH8Q3PcFE/zZBaBABSNl2+L+ZGY4Tzpy0VVgYBypADzPZJEq9jMuZgVJT1s+diRhVtX nYGlNvszTgzJ9I0TZ1ekwue1mRnT7mTQRPQU2zjLkWb2bdw9sKHqx8AweVOC+5UJ+AyHVmeMGTBo 8tJSSmmXEz/WCLi9eUXGwBkh3tt/OB+uGrvgjaO3cvX7jfGsJ0vfa+9lMLacPrM2Rb9gU9CgeCNQ G5W0NiokFzDtxIfUVz9qA8a3hEzB8/CRNQ4ZS8s0i1MZmNCQ1krI1MUYIRBwoqzLO0+alcdVQoUU jRonjRbbT+kTcqKm0T9Tq5813aCCdhVT/AhXynsYXH4uutrVaJ7oW3a/uSEHYfuLPDSsPx+IPOpo wUUgtMFQqXFnGYVTY1JdhFNEjg5pmJ09pRucpxjTDUsgpOpzweJkTNSzX2/R0KvZT+gInm7R5n9H ex89gRchP/MNLP8duiVyATk5CPKr5G7At4IrKcnR3Puv/A5/gCdJZi4Tl61XJXlaBCoEeJl/DbjF FSRW2TsIVKokTvh7ENIMbckIoZ9XuG4RCDWp0ZdoXdn1IN99DwJ+mGuHki0/RBTy3PoQiBZ2CZ9H W1xTCndgIVMIisLNQUF0kKVjc7DhRj4SWNDvt9meZyJGnSDguMtRWfzzG2jvuixQm4vNFoWjSDg5 CnVLHPvIqiv8Leg4PbilRXjKK3oY5VzRZlnCI6kVPgRsC3xvUVT4bLX6Bot1d4dLavff7xgP5ndr H7MRcQrFKD6F/dOJ53DVCiL7FT5GdjDU3QbcX0plMecjYguo9Urz2Mj3oKNirkfo/BciyLRQINuk tUPc2l5TnL4g3Vjj37WlG9FlJWP+NmjjOTdqwFCYATd6JdtpeePxMcRjwsaILvul912MS/Gmz2Tx WRcDtiMGild1K6Jwka0LLJLjdnrvUvuMYs5OHOKieCTikmvMv4+avLmdK9exrwMJUvu0aT1xzuyX Xf6Nb0EA7ANyjO9tTEyfmmMrBkHMEmDgQYLzGgCQOntdnDEEEUlpyEkNLtiY7nCN/qaFGKZhDaEU cfIS4vn36zmmnCWYnJySxn+ELP2k6Bwm8RE0AmOIN74/WYnA6SSy1wX5DXIjN+hm7vA12ZqngBzp bLL8AyL+3HCktx/5t7YPg4ws2V8Kw3Qse3jOIHhK9lZeXnTBVKVPumm/BS5b1trb0ZbF3rHk9LUh pKJlB4cQEn3hRvQQpcU4yYJi7k+UL7r4gwUSHKzbs/FAwEO058azj0/W4yO3CNqoBoYZYs0BFc6X +ITQ5apMZpBhJ5Ik550UMKpqaAUecFY/IFqhNUUmgys+O/uIIdovaBsrKkSOAG4G8bb8S4GgJFnS vEm6Fj48xEhim683BPq9QflVmiLusa8YWmUcx90VxfXaleI3NPlvJZqu33CGZ3cPKIkFRs9fMSd8 ul0vbjEHcZkLJaM28Io87li4iNaClcvoT39DL1SHxn9CIX2e4dNFjFTjDxGF1gSp0oBOlFVUrb9s YAU8T5XFSiGoO4PxP/5CuS2ZXHi5IIaWPl3Ct6pog20HljWI4BeUZ1UQvd9hMvUds4BBH64S0pm9 rUOSxpr31sEmfuV6VWvY53lIA84k1o1GiAftDdFxagITGrLpGInIdITQMdlqbnq20EaKPewZId/a JrtKEpgQ1gabEYZFQ6tPW9U0Vw4ia2aD1x9Hbzv1s1b4nvRBNfpTeRsNc0RQ0aKRRrVi/qseZO2D eZxgUruxdhjuSnXo/GRw7Fha0zawVnvC7CRa0+Qd9FCCXSVzMaKHdrlciaJTbGwnO8/6eokYslJe C/xa99Yfoda6mmisDuyof01zEEJWhnzEvuIvZXTMegk8lVkddl7XUQY2qdd6ii+SXWTdlpddcSdt ijtB9ZjrFOPf4XkEtaKwEHyUUH7TQQs/oHNGlGn54FHdEnw0+kaLej2iX8UiY41oEXbYxYAtKubB RfKag7EBPPcbhgZmtvhKDWTDmBk8Vru0792x8dUOZGYLojawGnbKUsU621srjgOyeoLeOP6i//tW 2UhiReVeAm2f8hJmfEvw0i6CDk/uhkdtOX2GnNBBlRhTcRDYPa5UK75coyyr4m4VUXW3NdDNiBCD BgzSEOQ2KJjoCIbN3mazBxEXk5L5GV6MEcUQnPjcV7SG7TzJHw+4TOIjPOAyiez/gi7WVYqy6c5A Pa2KEl+TKci36xoSwW1SYVqVl0VUrtHI4GbYxtGnpsCB3yxW9XglWrp09lSA7YHtAiZpWbdBoPlb eT4sNm+hl/XmCz6+wPyAQOGNs2lFQHhayDjj775GSphYyWlkIecCMV7/G8jiv//6HyixCxRLQGZM hi1DL/NCxoNj0x1Yj6OjgBwkJjZimjhO0F7/J4rhr9egFJ8+z8PxobmiIGGCKICG4pIk8S8B10IL Fk/Ui59Xb0EsWNJCu8PbXrBBqXxhAmHb6NOM2kInUS6LBYIda4qelhFiStxjSjUkgSbx0fWG5Vsy aGSvGmyJwrQhMKmCkMnMnh4i1FCwkHoIoqnrWYuv2BgW5ZudKjEq+tnHX+BfRLoQ2cKGAMJ0qEJJ kUxUEf7V67gb9LgyU28GaZ9ZdZklDWQ3Jvsbz2m3G7AbY9ZCLcuieqxdwnCrnmp16ilaHurTKyoY 6UNrYArGduRLMd8TRW27hd57gq7qdf5SbOgPbNVbRjffSco7UfcZPtDGtxYj62BMnGR768HGnL3G C8fWodW02bKm1N2wWdzNbXKwrKd204TErmnTJij1ynH1XOrR03lS4ypk1Ms0nuOYNPeRVdESj2S0 docJuz00OP0+jEvSN/hPjOIR9Fd0XSww5mKjJe83AXBYHx3hB2spvFPP9jUUmdiGcawIcI+T9UoC NXqGSAgfqmjAj3JfZJ2qcnrexhJc3duWqWVyZWEC6rK7IBSh7jG/tP2fO819XVSmqb4Am7wDr9TU m69z6jLt4GtAoWkS1T2+HWCXekjktP0tX5KxAnG9tB5PIqhzHFAartB0GvxbjxAgiYioFwx9xny3 Y0d8Nazq4JnXN51LmcXp/nB3qSSeGXp1/QPewboH9c5hMkPt319bDdfZLK+G6h0d70GN3v3U3bYM rZtt2nFJVBa5va8bihrHTayQI3PBRUWQDCQ5XFu2dp1Lu/I1EqW4AtigdYOUQydvOxnwDEAoRYbD 9wFC32fSwPO0SexZj5OdlurBjUrott2Q7cFaZ1PIYoBa+w51dtWMKmyVknpakwZg9d0r9tSGq2OS xQuJOgoh8FTpsHCCnmIUdIoxLKGh5cbTqoKPLjdi2a1KtT0o02p9Oje+nt0seVPKQRPMdjTCeRVX 8bBaRGNY8yX1WXc431OUnlGbkXHr3LLRtcYA5XDhB+wrrscWwPWztYKo2wjMl2yZL7QBhMIUhNFS WkAW4aYJrShfKderNR0L/zCy0bHz5Y3F6Oc2OjexGIgafOWq26DWODrtlierO9H0ResEWNO8MOr+ yLfVjWTOSPhC3FChhJ7O2o0Xtm2ifywLXalTE3+YzFMdLkSOnirAkMGMxUYD7RxNhOCCHrFDwDaL UJUxHWClM+4zfPLT7rkXb46BvNtCTXzVPhxY9ya6PkQIXuo4wtS22dZBT2sD7M5WtA7fOZvcEDmv jX8d99lFqJXCVTQDYisGKzPDChzSGGuRxsl70JEcDzeMEPq5wjBn2EaIVOMlC3tLQJmI037ARi0g 3UR/vdkWG6ogBeyh5krgWbkRLgJWPbhS2DExjZAXPchI7A95E9gC8xL+9Q5Vjwl87O3ID3V+ThIE 1j+KKuQpoDSW00jH0adbe/azIDePVd9e7P4mXhKO3c9TFgJxfWloJTYPATlIRZxNk0bIeYNtU2Ia WYIWywdfmr0jhM8e9X2qDx1ArFbk5V1T38UTKEV5j3GcTeAoBQRVWj/Y6jE8U603i6J/9hmTQ9PC K/3J4irK4fulPVtCg0bfAuoldiPIicbBhpqWh0fMlTErRkCwuPMY9evrDgLbMPaHQAvDEYh4YYIg eAQ+s52Dc4ucVs4d8GnX/Fd2wewGbXVHYBy+yPGhFgAQh0zrVBKnetq0fqYVW1GBYLENyAMoDXi3 STx8CEk2xUxqEtmg1wFxvCBnElnb+hLdFndYOrBdO9ZsbAkgL2v8FpXJHnF6LBtoyt4I4Lp+Hoty ZeFxeEWAEdW7FyGL3SbD8uZ7i1TB5pTTqG79phyxscV4m5GAYFjxvbUZCZU2YPmoZQE38b3TTxS4 rwNX72VGyJ+zlFuP/uON7c8UDniKkfUUYSA0ExBf4YJynUnL8Lcc3dV6GXDeCmL/aUpAkFTAeSuD m2fKtEPqGtBLJ0rbGTgEuhcP92DQAlosnqYTdT7s9DPq4ZxENl9tMZgIeBGhRqKTaNPpZjl+ujmk NwYrO1EPPUr5fb1xCGc/1upW/S3AGbABkuF9J5OYHSkiJd0aEh5KCegQpcGG80n8BayQK5lh98dr NpP3sTyJsz1G74Jirz8eu3iZjz1iF8xMZYCD+JGDX0NaXJFS9jxlKUJOXIJKTdSA+pYIm4fZyy2W VI7ldHItx6YWLIrmZR7ZRHanlrpzjyql/b1+i8R3wz+4Bq7oMaCNAjnDVpo0YcgMmgT03lWJKTVI Z1Hh51O3yC4Kf+YRp0htaSHvp9Bxot9dPxQYLTFRXFgKp0raGg8hkv/BNjoQ4HBT1o/gFzxjsdpf 55a7/Pj5+Q2V/HebEjr92gEP0YAUpjEZ8gCklmSVp5Ad9ls8SXbu13pFZ9czNVGessELtprT6bJ7 Gt3fHOcuxqsvrfSnx/o9U9SUpeshqJNIJpf2rr1W+1JT4Gvd6ukv2PQ35dm+K181dIe9mW7V6V+8 E9Rf9mdPluv6pHm7WEmPmdRd9keNFu2bQKk1o93X5Uu//ftQmrtQ2tLp3YVSn193TQPdu0jbNWfW 4cRXNOnAZzbUzObYrQutU5paXFW7fUEcttAlvfX1hdrXWyWDt+vsq7WHY7fq2NG/06aE21wEWa+D 7eZr3eZ66iu9J77q7r/tFxrf830g/tJX3Vz2+Mx9jDgq97cxuCGdctRLq39gaX3rQOtu2na/0sA6 ooadJ3Urg9tu7fJ+wPjBYMPP4Nq8cAYwWq2LuyWd4vk8w8sB1ttbKnRspnSd/QbBxS/2TNDtiLWF 9Ka5Rzn4NUzoDuTgVaVuQVFFxHHTVgBmw3Sshbdy3vj4HQqvw3YccKHjbJjhAAnEYEUa4uhUjMho zDsKuhpmX1mdFcIfntS9zMZ+69FTxHB5jhnIBeUkp68ptD2H6Cm8IXAKF7S7BRgGbTvTk25PK9oD W+CwhdKw0FcmJ/GI8W9ZH671Eb8DwqiWGi3XK3hrVZT24Mc2JMDEMvy/qpjCqE05tr4B2N99HY4V MLYZn8ZK7yRS/yKVN7GScrx1bQorN3RwvApJPMumyuEJb+1eb+m68lokVXMDpXV8VV73ApCclvn2 LVcEZTqWTO0tceScWp5egKpxE+eUFUf51u4Umutdbm81L0MCOike6ZzEV1Azx8nYTyFrc2Q6zhf2 +gc9kYE4qJsxGUZdrxH4/wPGGU87DQplbmRzdHJlYW0NCmVuZG9iag0KMjYgMCBvYmoNCjw8L1R5 cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwvRXh0R1N0YXRlPDwvR1M0IDQgMCBSL0dT OCA4IDAgUj4+L0ZvbnQ8PC9GMyAxMSAwIFIvRjEgNiAwIFIvRjIgOSAwIFI+Pi9Qcm9jU2V0Wy9Q REYvVGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA2MTIgNzkyXSAv Q29udGVudHMgMjcgMCBSL0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZp Y2VSR0I+Pi9UYWJzL1M+Pg0KZW5kb2JqDQoyNyAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2Rl L0xlbmd0aCA1NjE1Pj4NCnN0cmVhbQ0KeJy9HWtz08r1OzP8Bw1frs0kutrVY6UOk04SAqS9BUrC 7QfodBRbjlWCk1oOKf31PY/VaiVLuYKsAwN2bEnn7Nnzfmx+fX0WeZfV0yfCu3z6RAV+nEaeChI/ jrwIfsxiT4R+lETeunj6ZPH86ZP/PH0S+AH+yYT0Ai+B/1Um6ft/PPdWT58cnT998uur0BPCDyLv fIEPD+Cv8JT0A4nPz/wk9c6/wqMQ7K+vz1JCIvBeP33y6UUQRNHBfvgiCF+F/BqnBwJfT17WPwP8 EF5PDmK4XEWBiF8GIjuE10P6SqTHB0K+CIQ4gc+CQASSPovwo8MDeIjIAr4yOzxI4EcFz8aH6Y8Q DjzsQNAdJweZ/irN8Dl8OT0/oK9TfiD9Q1RUQqDiAF/oRrxBwUcyJcToMwEIH8V0ZZoRUskrvJ/e Co01rgogIEJ001FMV4u4WYp9GT8b8RUqPtiPNA1q5PBSwEqEzedhHNMtdC0iDyj+0zv/y9MnJ7CV fx+/56Jnz8M088N4a895qyfe1B2gTPhqENBmWXiLcl1NhZhsvOl+OLmdimhyMw0nc/iXb4rpvpx4 X+F9UVX5ZYEXemXlTdPJt+l+NMmvymlE1+79MNJ/N6KVZKEvHihZfYvXkpVkiS9l3+JXXr4C/L1y KoLJV1wQLv2Klkk/FqtNvinxx+vpfjxZwbfeGf74Bt69+/gbkuzlNJl4b9+de0ir9S08jy6bZkTe bUrlG4RWXuO9dOXN+hpvneHHxfx2Gk/WdF8DcoPXLnFrCtqlqoCnz641KCb/HCET+iX8N6O9g1tv bwxY3sz2NtU7oIA/EnsLnOq2JJW+2mK/XlkknaHFUX9DUogKTp0ciEBffWy+Bq3CKoCFtNZVrKdE +xEieEWqodaLrO0IptZ0LU1kabyw86BapQGaeBdoNlvlkDY61jcZLQnI0T2INKo01lP0lVbEW/hq VaaXRsjVy0Z9q5ePMEP1ik1CgKbglUNdFaV+oAb20KmuioEZs0cBBPpGDAE6QTn8xtI/FdJIX8gC eQtvLkGm8AMvJ3FE8SorvHZ2W1VlfSWJbn4xFdadrGVXKMr6GmerikFsUzm0qv1+uU9INT5I7u/T vAmYuWgLF6RXQVQt1kbzlitQfGW1KWeoOqvycsoUzDe3a7zeHaFA64CJGULOIZ8JpfwsHQKUX11O hWI2WJcbUO8xU6ICi1Boa1BU+NqwINjeDZiG4r/4wWYPKFUbGuDYxLYyyI6bsmHEkp9UbYjYV2go vIYPmS/Begm+3HdHhSgKfBk+ArmjSKKv8xiAYl+qIUBvavm/g43yZmh02cswm4jWu7tf5Qbdiu9k s/tFNZZ+ZklqKJ1KahzD07tLoWUsOoi/J8SJvZbeReFdoseSr2GNyWQDFxRFrRPZr7I9GGLgWQ7+ Szr5s7sNkRGosWxgEQ43XoIpTB4DTix8KQbgnC2B0MagXM2B+i3yksEBP1GRWsiJAbs+7AL2iRWP l19daXcVFVLS1UcJqCP4SMGVuJnmEVffkRfoG9IiBQQFoFi+rIy5u1sNMLIE9WtsjlR+lDrlZNAC cU+oQ6gCv5IWXF0jsg6NrxAxGtIB4PsuAaUIYQCQtqyq37AiD/yk1ElUOXHSRgU8jXiQ4AObDysC k7gzhwO2QWhU4K8PnHXZvP9AiH06wwirXIPizYlA/3Rp8kWAgdQYPDBuLBYlmoYS5VNa8knMuiDv 0yFuSUruyAjckI9Qu9wbT5KH4lK5Rr4KR6HnVKUrX8ajoC7MHq29o9coTO/JXaNg/E/41jvkLcsm R6/fN4G6y9AFXI94HLr1/tXBf8qZG3RHPMoyWJtLCSDe4HLhlWjG64tLNDDFijl0ll+R/0lUeEDG J87STjLVrRoIBErh/fQhp4yd32WxRsaObcYmh5h0p0sRBIsejkMPDbBENByGI+AfjwHu7QOMEFNm s0+Tw/m/HaKQKgq9xhDApdHMgnEr/zT5cHrkULkE4Opkj75cGaR+Go/eaZHxTpcO/SEplC9Gcvqe V65mVyCMt1pbkdRhjsU7++tp5eUr8nFJt15hWqBxUSPyUL3Tl6h99yg7fYF50DrNgq5oHdzSU2dX t3XAZYA04Q0nV7dSD5XvUApjEY1TAbQ3EsIA3JvThUMMZDBWCblct5SUnhqn+7p6r7YbadyuFDg1 G3GaNoWCQS+APMdqQ+FO18ZuJ9gfpLZk4sfjsOJqBSbOqhyZ2qndSBRmFEfh8XmyzL9RsLnSedKu eD2vckDzq1u/EZTsKPQogYFK5Tm+ySvCyFhaNez3fp46zT/HYF/HYNzWz5VDFBLhp2oc0VyuPIkw czZm5Zbye/67QwxUMpL2n6zs3PMfL2/ekz4MwA8bybBUpHQIGjRKMHLbNy7BZn4yEuzy58D2VR+j ENyvcXvdX3Y7iullVBdCGB+16onHAZc28TJ9Z9Qu6GW6Pnms6jaGg16bp8SDa7P3GT0VNfWioU2p NhAV7Uutwjnh16R5XVo8QCoZh5NVvHCIQKjANxoF3+Wywwx9o1FgL+o8/KyOw03jAhUYMQMP/3Bj XLqtMgArKx6dMjJI/GzkhpwusKgSDhVVsv5yxlbfBBKQ2BzrNwW2YgB5Z5z87hK7kQEdpJjEOn5N HErf/vL71MbrF3jds/BYeeWGki3oMJXfEG414ADH6S4LtjG4BaakdZ93ji0rCXcLMRHWXpP591aU Zb/zTPrZSp19pS3qVCd97xADQHiUmqwxL5NvgAxqUlzR5nFkR5kpD+K9O4aovTZ4u7iunfG6H8b7 5S3VMurg7/ccn0+5rC3iU86On2yVNzhmxDU1jUElRYPINeb2nDeu4vpK3DjiA/sHzuruqnhxpEzB 6D79AYtlEsI2ppN1ZYRjNrtdY3hTzJ0mvSjZNwY5YBaR9ETkuEWXut3JisrPkdh0HZU7igVxJTPG Xtu3h/dHuEftvCzu3E2R4y5/0WxcLVsNG1xf+4K8SBfcIMt3EUSW6nCYLpqVl3AniUB+NcARoUAn ZWfdb3EYNeWZIbr3xbFao8EK6kwKim/R7kcoTAOMCZuQfCXGTb73xog9iGyim2qA8us9FGbcG8Fx l87o2MTqQ+kOSyZaIyOR3yK3WP0LrT0QXR17U6wXZm+JSZr6GEWq/fsThLgxuypXxlJgL9L927PV QVjq+qWIWrWi+7ala91ItVWAKlKWWx4ZzMrkz+gtadOzN/DuHW79x99AY1C6DWv/8H5utzsVDvtG QnCKQjGOQP1bF2Xwurt0UZSFfhL+eLXxUHM1FWudKtpIovUehVfu3eSEFHL+Or9BSaKWtnLloYG3 TfgZdyPZ3UTARorcqs8Th85eFmMtbhT+726ozWGdW1iREa711t/wU+JgWKKIJ8XXKfXzIs8ea/FB 00LlrXW3y9dhqiXKEl+k41aFaSaFvQo/EVVZfJ+EvrBVVpg45fs08MUIS25n2wttjQtqiNRG4Ruq c6P+0TGp2JCzIur0STvNwuv6xKilOAWb+fHPga33NowxlbIrcxTF0k9/Qqc576AYhchbKgbFdema OiHBIe+2ywPLRXQdOyD82c20x6nXrOhdXGMz25L6hKTLPiEJJimKx63OZUUQlE8qxoGd68iYXAUM 1+KmhYh6ADzT0ki+wbygjtSehqPm6u2aGm/CYAusQz8iDmFtIxnKZb0rhOgu3SnYvqasGPSD6oB9 QI+ipXikxDbenTlTMsaJqC7Cf0M2IU/DR3sv6Z23XsyQtyL8SYLQ0gWi1gGfJ9RU5YHbws3Oxumv XZcM7vHBdfn4HriSnNnD8xNyHtwln2UEOl4NrIun+VTvFFqdiQ4CecyfqeTAGmvTyWSaA9FjJzwr gxMgzXzKYZN6To5NZnq/nlIJXvGsXD32olPdGQ0KEmZ6brDGhmAG1sxOf1ZcT9bUDzkWrSFEXAPd q1cGX2/P3wR6IobA6bFF/j6xEaVhPp20Vy9o7JEe0IwB/egMjMXsQYolmp0xO3ZBii1mR/fo7W8f Ts3w16Ju7l+hQmZnfG3cJ52BVLrPuvLKeUHBW4ltWuSxc9NrM4rWBGp1f/DaTlhuHLbzhaEgZ75/ qWuXgGIMEAcAOZToMFQUTvYC0uyvB79qHrfms0BQeL60KfewSFAdKeCfs4BlDK+vR2PtmV0QH3wf xhnxOs558avD2VQco5DKMT37AUXkyj4CIIXu9gCg8yXntHRfgvEQKblEE54gkbO80l2BfU55mJGS 39X4ZJilfqR6OC4LNFuckLKtNfM9M9yo9mV3JlIGZojbGggnlf1SjyRq1gYermuawN48ra1ZFqBY g5CtMqce/uYxdX3F4PR3/8ylreB/sDirzIQ4L13f0D8kXkuUHkRvJI9IHfB0O0o2rgiImRjBrAW6 GSLXCsCtcAqacernCKcyI2jG6TEAKTS1A4BO0XfboLHi0OLSpVagKdABwEszrHlRm8vcu7yuI0Qe b5oXuc671oFjv3pISfHsTD2k1E50/3R1bYVQoqXlblnS2JE8dMBk4xJaqgI9r4dJI/lu7VtGyCNa wsCSR9ZI9iS3OWYibMD8mB/L49VtR5aE/l5PVlt29mYtnWvNo3e0mhkKb8y8GShXL8w6YtNBQiDs oy6ie4jmUuMkGaYv+5nMqSJQwlePAifCEvoAoH8scypqe6bAWyeKitVATT5MUpxb31VRNwS6xNtj gOXCyz1qyqG5v/UcG6F7DoEA/78u1uvuEC7/VBQhrItZYapBnB6bY04/6zkbRAcPJq2G/RE51Y63 zgJpt1hUhdVCoQOQ+dTqyTARyR0+TzXlRtL8W9UvKlnh28/TPXbdlqYBgOu1FBBtBrYrAkpnVgY1 DpwGdyG2aGxnMi5M1qv3PJBi7nAeVoTSF4OYDJAFKJE80Ie9jyph4Cv1A4lld9QA5zwLRmKwq3T2 KOCnNG304dUxCkY3uaVArO643wElkKp0uhSuS7n5Hxd9t2fCXDa2hjLALPOotW63+D8sB5BiADYK MhYNPqDIUWx36jWZ7Jt8s7R6uXAyWlhaisbEcE56Q2p3XV5MLa3K88/5uvipPKIlhyLC2e+dySG4 2+Ef5aPNzN8sv/KRFOdGn6+t4bjK7vnqnKFEnEcFvA2zbUm0RTqvqd/mzm7fQTW/vq45lCsPVDj4 wgcKKHpoVQuAabviBj/YqXWRz1EuuNdvmVc+buSpPntAWU0R+vQBu20ChzmDepiT5uX3HpAM7h/6 yfxsFPGp4z9IRUKd7/mArg6Iz3fGI0Hop39UnrS2y2HWMEt8FY3FwKGWBoJGyTiwLo1DIHEiexTY LygFxU3V+HyFOYGh3TlVLmq1Vctezp0RnSNH9jotXnU79bpwOWgClJXZo1M2BMqiKRoD1u4RHBwA 8r1T1jUzQ35swP6yNUKETQ12B/IPdh8XwyfASBViC/au2jp0afp+Wm01yC48ChCs8kKbGe9Ilxd1 K7BIWgRy2Cee4X6PWoPD2rIU0o/VGLA0zxSTUvc8lx0lEifExi18gK1isE27MyYyCTHc6i3spixZ Z9TKtV2sdThWgmP3A5g4HV9ROMcxACg2ZWzB6/48eVcfD2n1PZXkQd41Pop3hN/pxmVqmZ2ROFnd rt32Ne4jq/LvpjfdNMc8w4/Q45Ha47GeWN0U1LNRLrgpxjNdpuzjocYj7wtdZhoz5Uu4Yc3uPlV0 AoZ6iCOMhzrFu2s4kFGG8W7vCTqzsqo7bOl8TsOTM3Qdq8p/5vxMiAF0nMJh5uwH9MbsMo29fJua Tm1uo5DdNooY3xE3Y74Idv496HV2CvnsuqoqV3igFMaliiMuSjZF7WST22MdIzW0wAGW/9g5z+bz lJvfr/CaitmeKoNkx+nk20aM8r7wIR3Ss2Fo5Z3c83OYYNzYXTaON3zBYCpllfvxDNZ6jq7H7aYk K/w/HhfndoBDXPaZd0MEWXo8vHNt+g6+cmNm5zQxpwdHpAmeAjSwGpeGM80wOTYAaKOLwkdAKXtk 5F9Ax/dMhKVHiZUN5gEiaxwMO6iRPpg+iEjvYshZ0eASpmzobB2eYyL93mQt+9lGZLvMy0kpm5RJ s36T8CBbVFaFOe6AhcdlrhInogbQcDpjqfDYuQFAdgxwiFlIkwwyZxhqMeidX0MR6JkLoif9Czb8 PfeYvcEGR49Habf4xn82dXveF9YllHgE0mKFQoZDgE5/AVanY1ryqrrtGbup8zM6p4Oi57B6RUew 7p4GKJ/hIKCX9eST9iykbkXsFfgg2WUCECOlcLvuRRy6xrbnGYT/xmusDwGzu/kdzqtEtDn9GIFv wH2cbGoxGatdUFSn9KHTiQAIpKJsCBmngCTmJAYAnXyj1Ksejts+cZrdLoFGhEe3KIVZrHmfNnWe YasHnlS3y/Y+rkrunlyhirBNYwDQ0BH7ZT2PS3LGhx7Xh+DxgNOc6Iby2HZmemVSZHKXCVeRxU2a qlkcemHao7Zkcs+7uSryyiSc2Cf7QmurbvlXB5CLWvIZRXwyOeet4EYKZtrzy+z6zVk/4cVV57cT qG2lkDJc0wyDISNOWc29i+/1E2+rZrrHtLLOy8WiKSSsBoq0Iompe77JdaVuKZ5K9Aa6FN8u7bBp dlkPjPxEDsF3WnhUsNKRgGqqxwLLFDtjczz36I/O/nqM4aIRiLRPX3OKQow0HkULHs4smpLbZpm3 G+LyL+h5akeK5K1u1ODSVv+p8A6NWSJQMY5aTaNjK1RR+kQZCoc4YjraGs7vPX+BC62NUmtnpOqz /nrOEagnm9pOmJ3e0YkLl9NHMsWZ3BaBdiLvesxp1E48ICsnZISVsl3NH4pIoHq8H/2z6+Y0AO5E KtE7jMglMoYpbs4b6KQmKzA7bH1mXbFC9svNoTHdhq8HSUqcoo0ftcBnAxnfik6fYBZup2j5oMs+ eaDEQ3+C1iTEwPazI2SfQd2X9nQpFyHOqY0ih9NTKGkY+2fA1gKAD93dCTzoH4hoS1FY5RKrgECb R00qBXY1KNCsNwWyxiynX/CB33x3eXovkGAIQ5cmMg3JdekHxLq9O1qee0SA2aZstRlibroeMLV/ cwqpgdZ5PZSb+zxFLzq/aLWieEsMi3n6qs4L/nRW6KcVb6Z8FUQ76zLFDojtvMXRcO6Tyr60sq63 XI+jUa6nMmF8u/D9Eh2TjjFGWr03J/i0LDKAdhnshyLxEzGwaKdwMjxmoB/OK1o2/14NZsvcZMf4 99DteUtDCSoIbjW66qDqWR2u4Tf0gAuyFGtrlPDwbPCMmzTyZbI7vz/l8K27/g6+GBNWz5ozw+q1 USIWY1Y8bwZ/Tx6x3tUM5f8KYvq5tzARvMOWIDxWNo2HcHf8GwhCNQQo6+h86eNiZV1APqJ6AkQB yCfmyF1q1ytdZnvAXkaDOFasZd+b5jzSF57EHQGNCuwN/7vDJaPR9t1vjJ7qGwDEPEqT6IHdrKt4 o/7c08fzoPxyRGNSu191FAd47NIAoHPOt7Gi/y9KKDvQXC/V3VB4xEvc+p13Lez+D7CAIqsNCmVu ZHN0cmVhbQ0KZW5kb2JqDQoyOCAwIG9iag0KPDwvVHlwZS9QYWdlL1BhcmVudCAyIDAgUi9SZXNv dXJjZXM8PC9FeHRHU3RhdGU8PC9HUzQgNCAwIFIvR1M4IDggMCBSPj4vRm9udDw8L0YxIDYgMCBS L0YzIDExIDAgUi9GMiA5IDAgUj4+L1Byb2NTZXRbL1BERi9UZXh0L0ltYWdlQi9JbWFnZUMvSW1h Z2VJXSA+Pi9NZWRpYUJveFsgMCAwIDYxMiA3OTJdIC9Db250ZW50cyAyOSAwIFIvR3JvdXA8PC9U eXBlL0dyb3VwL1MvVHJhbnNwYXJlbmN5L0NTL0RldmljZVJHQj4+L1RhYnMvUz4+DQplbmRvYmoN CjI5IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDQ4NjQ+Pg0Kc3RyZWFtDQp4 nMVc227bSNK+N+B3IHIlLWyGzeZxMfDCceLMLDCL/GPv7kUyCGiZsojIsoeUxpO3/+ur7iYpirQZ u+XdQdYSRXY1q+vwVXVVv/14ETg31eGBcG4OD2LPDZPAib3IDQMnoK9p6AjpBlHglPnhwfxvhwd/ HB54rof/pcJ3PCei/49Tn3//79+c1eHBu8vDg7fnwhHC9QLnco7BPfpPOLHvej7GT90ocS5vaSiQ ffvxIuFJeM7Hw4PPk/Uid95Mj+Ukn8+nwpvks/X0OJgUUyEnf+JTPk0nzjJf3UwDuvmNczUV/iQv VlM5wSVnjYcX9C138KnaTEUwucWTDj15Nz0OJ/PWTRjt/uwO3zf0HcOscY1oRZMMYy8303CSV0cO xriaqvvWPDhNFnPEhP0nJ4yxzKS/TPBEhlGIAG7Ns2o9jSfOAz+8xtww3/UCN/3uXP7z8OAD8fb/ 6oWK4tQViVkoP3ZlYnWhojRyfb9ZKL0+YFDG7My/TKfJxCkqfglcvyNGKcY8LJh16gvdsan4Ha+d Apdxr1POZwGGEfTWMf3zt9/yJW/gSxLbcOgNnOcRkr2EQjeNBwj95Mk4OrH3UgHRkpZfqp9Q8gj3 7mntljmtrphUea0SLOMzFmb1W+lkq+tppC+y1mHVq6JiucghF6xr7vMm7sM0hdHWxGUSuvHYZTda FAo3bilRkFjVoShxk0hPhf5zafSb5vNvPLHPF6Q2ZVGSaVCK9bvznvSh5hnztmPV5uAi37Fcwr7x xwcygkJZwb/jJqd6y1bEnmQI3/XFuLcia5iTeZitCxhFZQh56srakfkmW7Fw7mBm+W3aNtnajCUu peNmbJFRkoQzGsmoUyy/c5+RybdHn1TYi8fRf2uRbOi78n/A7TBw05HcHiF9LKW0KiJiDwyDR4tj kU1BKF05cr4/zKaWafMD2MG92bZAEOT4cdv2iWxbVmY35BzK7J5+ZqhDpssaf0VEYGjc/CxKoYhS N/HHkb3ItV3URt6ehfZ8Nwlf/d19L3RlPI6shHq5UEPBTmpzT8JxzUqWAyvgo5OR4lXO3AB2cnIK XT5Uf7doN7yEEdVemNXSQ0EK2AqopG9VDWnE9Me10KLc0+tF0ah5XOpwqS/emhf5kpd+Rqihxj7r jAxDQKLAMdUCUEfZ55WOw24VAsX10jFPzmni9xwWslUv1kUNlxiEwu7Hu6iDZpFVlZG5WZGtOZ67 dhjRctTHD5pQ55ZMGN+64UErIv+dQ04S5NiEnM8WmzAlix21A3G74Z0HMk8sWIfLkplMOoqoFDzp cK8qblbEk2y9KZUjjSczdrF/0tW8rFwHly4XFBCq5VYeNl9lFk1RkrhROO71rjiWqdjaOO8+fsJa VnivfMaRTXXPgpV9y/Gt1PKioTlmznwpblnIYNFmijv0SysBkZsbM4jyuphBxNoi2BuY0D9ap70t f5jErgie4A+gD2lSvtIWmnQxVEmWW8wekrFcF/DhyxzKpxYbTxU5B4gsI+pNVTIjL0pHAd4tPiLp c3rxFbd/AqdOL3+einArGaIVjdZDJRXK/I8NyU9RFlOl1Z3kD8vjPYJRb/KNw82SftUGwrnJOVTK ywyLlQ8sAf/d3xLEkkLPx1eA5Wabz20lg3SSVv3rjpipYmrmppY/nV7qgg11U8puWLh+7Y75E2em 5OQN7n9XkujXCRvm7yWLel690bmflU0YH4WuEKPY8vm3c2LGWcBpI5oR8keMJmw6tgArHo9fJpXh WxctP/OmcVUmCWmsaO2qSB12/IQRwJCVdG8CGHmu/1QA0uMCqjdsHa1CdgpPxLgJ2YQufuqG46j2 WSiVUc7Wa2hZWVyRVjJIaBQRyVudH2WMwL7l2mFMY2yV0Bniko2nHiAm48VOR8WrrZRyo8T3JdR+ llcYnqwAVPZyARkkkrfIWTOFsiCvRHS/TFYbBi31OjIWM9a5V/4C2STH7ItfECFgGpMdoZlvqU/1 ZerUHKnBobH6mXG4ygFzJrrqwBUT5JvUC61Cs6ng1NbyqsGgGPtahaoKK/hbWIEx6HeVdtuAIs/g ViuKdpva1TH+Dfr2G5bwaTkHP0TGbC/0L46IXJG2wvvQs7s8Uj4dFjEjNMaZfSWjxspBDFWYea0l cFs1npny7dXgOHTTkXMdYCMi5nhv4VlIkXES7ySjfwUfkm3X6zqfb1UGl0Wv/B0SQ86buFo7FavZ CsI2A9OzaWOJEWKIjsoFAHOkk8st1AzBikmu8PZfP9V7cTaTpH4UuH76CizwIzJ0gzw4Xa+hICqK ZDRK2OrYZ2NBAAwmp1Lp/DccPOXsTtimNLsAZW1xMmA90XITwGh0gQRpgwRA/pVGqbVUbcc4m4q8 0tX3HmPzIxFrkKRuIPfmL4LUd8Nwh39bJoh5o2C/NLBfvaIyp8BdFZsm4yDiyUP2HYFo7RtU2E8P zE3Y8Qh352XtK263RmmnkZUAn8JDXP7s8HZofo0ZgucEo1fsDixqdxB6yDAPcOzYbio7ih9bGqPE /dY3gP1O9ycy2CMXO/OCgHxDPuINowKbgFKolHsvWauECJkNvh8yLCxeGnuqOB7R7/o7EM+txvSz BesEA8islnEGUeOkH0F8K9IsKg1tO15LoeEQCnHkXAHLMeSpo3sRqDkpckpJ7/NZMS/o1lnB+vhd uQp7LAyRsBxkoVVCkUrk9RL6BQs1UOIRBIkbir3t4AQUcEe7Dunhrk7uXENaFvkSKXqnmO9g6LjJ gZYKqtK64S+vncmHzbKKE6mqMkSl9rche51W5W/KHO6IndpDXuKjwtlcWpAtl/Bq12zk65lbLStI CSfEQ9waWDkZYgN2b3ZNJsD+//us/6iJ/Iodv+upicfWHKOqz7NFpoOgG/W7vQmmgsujnp6gc+y5 AtHDjFyjRd8o0tiNR83A8l4c+X45juytTbIpKi1Gka3tPIM1zoDAYMycJafIIQpQ4uxGh902k4wE woNw3DS/TC5YUgk457uxbVXn8OBe7437ApKGtVvfabf3rBCZQoAXYnGPhK/tOmRk1QD5AUqtHucf wQGYcn/yAPzHMYbdjCGg1qiJIFgiUIIV6KbCQ7MHkS2rOva2mKHAjrwnxs2z35cY/7MnXyLJTMm0 P0OhNgmci+EkZKjY1eQwvkz+ky2LektfA0Z99+nypsYLAH4B44cvU5v8JsyUiKG3smlnQwE7+xqE JGo6Bgj9dn4G7gfgvs+ltMeSa2odFmiN1ju4LK84Z8mYXyeay0LtJjlmgXjHjjFXs57FuoW8VOp6 9o2tG0PDhxrUrRyy5OJF+98yIcXYXzZBJhLjdtn5bzbW7znFz/H6B87FFIxgaXzGs4xmC97UviaB b6IdLeYRK4VUe2QWq41F6sbxwMxRbRxYrDb2QyTHBrhkU7rJjkNf+wlVi7q6tQlIWpkaLjFYQAhT NuJXdealRJjJq3GVz5s4loMW9dXJ5pxuMyUNDSpVZf+oEeyaKsfEpaqavd9eR6yoexNckNmNI1nt yvwf9laG7E0yTM+mKyfESq78NQj5yJoMEDLVSdkSuLNZeaE3zZpytJluZ1BWVDtDWLs/AVjLYv59 px2lLlzasahNPGu37NkXQy/a2wPz7iNenrFpnXXXMBVawjnqoL2/qQoFMlMb4qzqZDRrpU62Piw4 mF/mPZk2oy/k31L5wo6jPntpFCaMXa/HXnpR4nlhfHIs6bNITo4D+usFJwJ/o4CunZ0c+7Cr554M wxPh4XfpiZR+it/zZ8/Hb+/oe3iS6J89X92Cf+/oMRoCP2N4Eb6nz9FJiI/eSaCfCN/z4CI9xXee ED8dnjIhGsUT0bknxOlJZIjg64dmTvSZHzuLTtKf8JX+eepJGrX+mUYQDVXMRc9V3YNHMX26zdwV vz85jumyn2hCPC/1VoZKdKZG73+79FT/qmjjKfOWxG5agg94QsanIM8LEuhfooDpeP7ZCd0sw8Se fwtkClDdLxs2VTEIhBunr0IoQM5/gNAnpYXtvh2OimbLjVZgtXd+d5tzVV6vovqRG8Z7iyllwE0T 3Zkrc/MXN8dlV3Xh6LqnK4bfSPn0rBvovaXX6mSbKotJQl96MGID79DPTz9VKZM9pXeliFz/qZDz NZKEoyYCEI20Sc+egetjrRdZRVCOKy5WKBqPdorGm5JC3pTL50vErFE3Zc3o7srka5oWzbrwGEAP //LVc9PIvT45Ecgfj2LGC8ImPwlR/7ov9Iny2ribBaeZk7lWGdRfU4s8SyjgSR4jSiYcRIVFmmni iiGa1mFvbJlOHwwSngS87icEj/vBePIahShPTp4frpw8OrtqCf8szwV7bnLGnvzwgZ2yEMrTy1ih DC/WKCg6PzGghxBFqMEF4QGmY2jINg12/Ax2CEFEPzWzSM7UEzw7GiFsUBUBNB5RGjCnp0rAAo/K MGXa6kn1roR7NDYx1wyUYhACVOPHNTpkiKThkfAUevH15SRVI3r+icCt0VmDtmjOuJdHDgI1Nwad H/htCd6kHYyUnNVz4RH9Lips3oGfA75LUuYycVh2OKyRVtwCoJiqAae4lbjM09a3Pt/sxNwaujez E4dItnW1RCV2ux3/rfoO2HWuVec4ZdWUPXarPbphGsIhvx0OcTH5N50vSHY2SVUWn1MIGdeDOtmK QqQNJlgVNzozlF8jsS92m57qZoK8QhtJdtPaLcv0DjGirRKNFa2jBQZSEH7Iuv6i1XgkovIj4SY7 qUhEH6KtpEp5IXUUBinprQWeZK8OApS2Kaiv4X9H4xAcJK1flZAzDT0aGyG+RkTilr3wztmM1DOo tZMtWHhuM2UWIdPfyxw4K3h98lWOzeSZQp3962E1S6dOVBgg9F9uByIpVlCdey5m6yWXVV3f1RWt 9Z4/ylLoFiXwFnt/ZBihYr9/BbDLC9BOS7CymCVDts8foGm3yzlKEUi+AiHScjkgx58nv8y5nBDp HbKRqTaRqhC6qdXkGmrRWxsft44MMbndgfoXHHkh97cFoA+66L5hmc/yuqNLm9kjtae7yJui7NML ep92ZR8x42eEIdWiru5WvuHquXUNvZsA6hiQ/rnb3gQIBWt9P58sb3Gl8RCha91vqfOt7Uw9B/t/ mU8OWvHUfjwZn3Rnp2C4iYPWbKP6EXcWy8iiVPu4e6oTx0ky3m7igGSR20JWpntkXW5ma1XtZNGI CZmiFm5gEjZjnsBHLdxrEArcNBki9ItzY5qyCHCpbJhqaAX6arUbtlUYBY5zpy19G1340QZynHWC r4tYZs2TXILJyat7U9lStxfbMw4yIWmSA29t2TjIJEa19/6XUiYp58f6CfUfyPXHhhN8qv37znTh mW3cep+6WJrEZzuG6FV/kbRyn/ZdkS/caNfZ9gqYcp6809lsM92XdV0GOsIS1CEdWS2nk6y4/fN8 WBSzBaSdnaLqqJKqiNi4+PK23lnt5PhMPTyKg7thWLO31srwOpnTRFtbxwW0TaRqrPxqIEpj6/Xu b+8yo2pwjylZ30ua5F8rxU1+iWaV7L7po2EpF5R9qmNYZnlHtFXUWLUOwWua0bohcLZcblm3Jmw1 Df3cuJ6hcC/Svd5laUqDouf6o75seuBL9BMMsGtg6SK5dZKX5ePwROJh7/iHs+lnKB2oyxpJLMFi YYqhjfCW19hmrtfGdUyfD7E5IC6DwwmefqjLF1BQu9VZaKrcdJ2WtnrYlu4UaRkTkqmqnTmvZPsc MZgPi+esBDJAJc8oDr4g8y1C7uPdl4kW4Ygew9fYThk1kX8BL/8FzHu0U3RtjIjVHr90JIfafVoQ P7i3+oQNjrIUnm/6UViuVWEaDOVFY5bYmaA4992yLj6Yfav0yQS6AmGrk9B4g6c6VDl6dU5fIo2S u5v3Jo0KsT+xp1Zos9M24l9ZBJZ3dSXbN1WJX++WlqU6vOP+boW/2wd/rGuvjAQnSmVE1FcrU20U oG7CtFafECcPaDl0ZfQTJ66oDJJC6dunjFa8DViXXvPt9ZGjTSftQHYBPVRyf8d7COyWP7FAreCu QJyRlwjtBIvvn6wFu6W0Guq4jvNLtyGnzNtd8SvwjdUl6hOABi+2hEB7G7UMNa1HRIDbzCAG9ryF HyKJN4Z9zaqrM2J6Ra+dP3+0oV54qWoI25M80IjeU8dMPNnMyhayK/fr6khvYsSm/JaNXwcwbulZ juvoggSm+5XW9t+A7pdKr9Zlcd86r+BiBwnSD19hQwgHflOFYJXNplIfvQujGPZletStzG2iAUQC jU14dPHTiM9P2Nfip6kb+U+Zaz6OQmcUVbRCrIXrsnggqiAsJsdNxyZyUc5wFNn+44q4vt0NVGv8 kc241gdofHWGpAGg3Ciyc5U36rSXQ225p5+d9dYRCUewy8pqswaXvCUpa3Xe2nxMcOid8plzp2hM JYIAHSBo3cpbJ/lemx6orHsClDn0MNUN2PsJpJOIizQeZ5w5X6W9/6qObgl2d2CtHkriofFva44v zoz1hckiluhxHEfo/wGWdp4NDQplbmRzdHJlYW0NCmVuZG9iag0KMzAgMCBvYmoNCjw8L1R5cGUv UGFnZS9QYXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwvRXh0R1N0YXRlPDwvR1M0IDQgMCBSL0dTOCA4 IDAgUj4+L0ZvbnQ8PC9GMSA2IDAgUi9GMyAxMSAwIFIvRjIgOSAwIFI+Pi9Qcm9jU2V0Wy9QREYv VGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA2MTIgNzkyXSAvQ29u dGVudHMgMzEgMCBSL0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZpY2VS R0I+Pi9UYWJzL1M+Pg0KZW5kb2JqDQozMSAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xl bmd0aCA1NjUzPj4NCnN0cmVhbQ0KeJzFXWtz20h2/e4q/wd8JLcsDBrdeE1cTMm05HUmm3gjJ1up 9dYUREESYprWEORonF+fe24/AJCARFtNZaZsmSDQt9F9H+e+Wj+9u1DBTfPyhQhuXr7IojDJVZBF aZioQNHHIgmEDFWqgnX18sX1n16++O3liyiM8F8h4iAKUvo7K2L+/m9/ClYvX7z5+PLFT+ciECKM VPDxGoNH9L8IsjiMYoxfhGkefPxCQ4HsT+8ucp5EFLx7+eLvk79MT+RETLNJhH+E038EH//l5Ysz GvavT6NfJKEaoG/IBh4JZWGhnoOQiCLanTFC71fTZBJcVNNistjUP0ZVDlGVcZiNvd7rSGRvZycJ fqYz+ZooyEieS74kk3wm6Jo8O5udSP6sv8/Ooki9wSP4PCvo6eI0Egn9EWd8S5Sczk7i1/jMX2fJ LO3QmkezE0U/ozgS6TkTwVP8fUbXYyIc62s0RBTF2UxE9DnJ9HNFxJToq1lubkvoY/KW/kSaEr8N E8DU3iSRyOd8Cc/R8zI7Ny+VzTLz3jSGTAo8ocnQSwj12r4U3y7ygkfJ5zzb1Ly6nThNCBN1L5qe 85N8DZPOCzdxIV7rGcc5fs5UOzcmpjqrql+DH+F1os92Qm594r314ZUXerjvZKe/Ov2SFjIUx1Mv aZGGcbwnDM1dVX6u1sE0nyxuv9LfX6cnyaSpISM3UzUJNqRx+Fpwt54Kqf99N5WTcipivqXcVNOT GHeSXrqlbyBZwZpuTCfbqVATfC8nQXmF53+fnqhJtSbBE9Gkwa1f+Ar9Y0XPbgLcy+SDZrvAcEG5 CrZ303RyBao0WD4JvoBM05T0FKZQ8VMXf6ab/v0//5Vm/BZjEsUrjFNv6JFmR7/YVc9IWtPusn// qg8pA7vqOemEIWUAxjFSlDwmRU4kiDOLlueZQYXWGPQkMya4EIzshDzpCzlLnNQStzO6EWwWD5oV y+OD05LZqRMMq1wcTcwjnWsFAO0WQQGcf690jHN1nKowL4bXN6BR4yT4uCCj4tGqxGkR5mJkS32a r5iYR8oxQu+DSzD/sq4gQb9b4WFBZeljWVhX19UaN1Srhb5SQ/oa2D1vE5WADtnYRBcgv6lZYUC0 A5qlYuwSY77059PkbgnpLRurIVhehwU1Zf31JEF9SD3S5kq19w715tPUI9TKVSjzUWIeWShPwyLy TWhIz+UFg8dhQqQbYq0uSC0wHBGssdIOMoElJhsvk0QjjwElZdQPKyo2vmda12j73kERb/s6yAEt bZ9PZz0FpREAoJVM3mirb+lDzxnk43QvDaZVonmecUkCROPUI/Q5vVa2o7UJmvAtNELa0a1vEvdy dGkH/QD5EUqanaRYw7T/XkTaYR28Bobo6H2ryOVrN/KjejxzalyTiZ0Kt7gPSIovm63E++OPXUeC a731MSTNqmNp6EriptTb59agzQZFP4nDoiP5MvYq+UlCo++KSLkC+CmXQBeswdb15nYqEo1WCJoQ qBDCKNvNbcmfOhAoIG385t0HfGaQswiAkYC2oIY/s75bB1cOUVUNdGJDOEcxutI0N68AzDa3VfDm HX3/AbQbpovx6N93wFdAcPi0BiIzMAtYqQlKnh6Ub3VP2Ci4qG/ox4px1Hat5zm44rKAA3U0VKRi IjOgLcC5YCjLtkmrI0hOezJaMNP2sNAetoHcf7fP8rA49NAM+26ZT1QTk5FLRtbHK8SI8zB9FkJS hCLzTGiItWIpw7QYZ6343Gog69gxS80zyyROwTFbOL+ODNMj3AVvFjYpceYOPnuUkg8vzwxCzsF3 lmV4OK0RtSInb5NDAcb1l2cd62GNmvFW846KNRbEmMaONMDTZSLwgoHMbQhA7Bi16HzWGlIeG3fR uB3f3/nImHHXN+bPA06v1SHEy9ERAVtchGIf2jDuZX8UWm5RQ42zHwtXMbguF4DJwacJ9KLTs+xu bmo8cQOFGpA63/dov8I9vSVfGaq6ooFI5dZOgePhT1PWt2w7oICDFTQyf639Wkbuhg6R2Tb4vroK Vl9Bj/U32xf2rTe1BvdLKPxvDJD9iYuSKozlyCpCqyl/Wk2RNcmSsR3zqGwUCX+cjRGqr4NvNpix Nf7IfbnaBLyTt2xJh81hUuSd0G+chSr3ag5FEmYDewD8l2irCMWS9hVLNqxXBuxidM7qyplO6D18 rxjG6biBNbUtltVxsxamP6wMrTJr1YQz1BqZOopGa8G0Ejgcm2N03mqsdD6iMqOeyoRl/iFWiqGd krTv2tIux8Xw1ox4qEme9AN4XvVdkudt/I7+D4kFb9p//4dvWcoUsfyBZP9+MQVAXiMYyPrrHz6D +bSUIj9sIv8Nzdx4pE0wSR5G+lVQ3qxZh1Se8zMiFdA+z80AIlVhlB5G9rymrf8Di38VINjaxqHu bUh5fUW3tGHlO7Kj3+iD08ZkVrc35luY26YbOapXwSWcL21KbwMOG5UL9oQa9oQ+TS7YlvbMsn66 CRQeC2P4ZK1tzvRFhKGmYXCKyBOu0xt87xp2VECSIQXUGgqZetUBJJQu0Da2FzsIiGOA2kulV9WR fJf7ou/aRdarhJWLGWzQomOBL2hN7VYAG5l1C9nh9ekpKEIJ2WHv6JNsEsNB+RGydtOVIiVxNL2v CG7s521cNliwtgk+3nI4ODhnD58FiiUjJsnAF/e39eIWwdVy3cYtVhYAgzWC1ZZEg9U3w1QdPb4i TGsYwcRuQ6DnbDLHJcc8zWa9XWxatE3jDUYtfqXJfWgR7m1wutms60t6BFPWiaJPU36TcsXB4KTP leFTpFPSVsrjpdgSckGLfSf30+S/ymVt1EvJsqS0xJ0uyd3IOvElrH9q3Yg7vYm8DR7VOrDs2FTb DNzG8FPDkaXf6Do2qFotDPeYWV8HVqksaPPSyYZ4jv6mK+RlXeohbssGnFddebSJMiNcVoy9hkf1 IDNCAMIzoSFfQObMnMOEdPxCJm9MIFiDdQ2KI4bUSVsCAMBt04tZavN5uzHX4di6SYSbXOLZXmCB I76ns07gfjcoYUMPHTrd1P6gAhVkKIvjadCYyIi9vbuojbLqh0N7/jvZvi3ZUmL5Xz8gnW211kV1 Q19DVqsVWD43bvs35KYvK9a7jEH4chvP5cdLSAVL2iudmGuQoaZr/+yRbclqZGLs1X3KRxIhjvAc hOIwHSVE5i/oIU2UNGATuJDAWCNCqaZkoWsfaflXKHzQem+xZBhZrjuFD4NWX+VFWIinxQQeYtoo C6N9z1PXSryCua6v9+JTpHTp5Qkn27cnznIxpUe4EF8vORNbOBZuF6O8dIGubVulwUmPf0JAjSaD GBZGw/N3GImf1QK1bNzjgUf3TJIto8UfWSsWVh03ayxv/KAJGooQqFhBa40QH2GaLA2T46WyVFZg +O911n0W3uWIvB00D68hgkgX8RxAVocIXvmNESQ773ycqkYp4JAf9JbIVcYdnOZ0Ym5xW79c5GBj CDmufqVnP5DxK40pVB1T6BF5qVCIQ143OCEigoZFxU/tU7/kxmF4XnaWOSmG5DCy9RetvIVNU29K Vuoeg+rg7+Kw2bCfFrwnyP877Afbkju4ld2yPl3lU29qlxxhpls+wbNTqtC8chxjrFB7lD3y7vfW /nbDXNfWPVoHi2W5rulFr51Zcrf9xNn7ctMLW5XLyvrAFcmbs+EQ2rKp/xcSdxXo0oNot/yrK/T8 dd08AkpXG5/ZJcGJmEPWzXeuiXyJ9DDKXjNPBEtFcRhZLQWXbWrwNtBO/lBKsfHoNKtCspn8gbWx chYLgPCjyZnM4dX//+OXQ+ZxBPxyCNlza6m7Pkyp7bIL6m2n0kbyhA6nr5FltiKPoDyiehzkEV6j qalAXclBb3Jlp7PYOq1EGMKjHSVororDJuPRMZC0m/HOGrjSZIIq4mmlycMk0zAfIfkDnNoR+IjD X0dzWOgbue/Nu+B23A9uo+rf4dFywx0G69bLGwYW2i9mq9uP56Bz4dZn1XaKRMLIK3ktD89R6TRC qIPXTbGfUH1E3xBit0GBiitUNjqHZuAZnIa5C1JfV1xPWK3LXhZIZ5ia7RKVM1y7qPXJE3hNFirM s6OFASXaz/aFg196wazE9rZuNlgUYSBryej11nHUmoBX1o/iI5d2W04tvP0CdjPr2qYwSf3S14KT b/t2Hiuq028y1IXxHxw00yqSAULT1CvsafC+k3PR99hU57VGocG8l9ujTWSubzGmq8kfMvMyF6F6 YkrrgXoXmaswSQZi3ErpmHHby6ZrUtoqtXzuespy3VJ20pZ4u4KZOG3LNk2By24312ENOI80pZ10 KpxNWYuwDXPdJrJz1BlGrpDO9Oq4Cj2+/8xON7K13ZFuOONms4xnrEtyTNl727vWaXfD0FxdM29b g7rl4vulg24hxKmuwLEzG2gR7C3gbgeeLZBHl51egXbLulVF8V6R+OMlllGqbJsT74s3XZqIBOmW YY50tQi7rpEVk5Q1ytEUVibg1O5O6hT4N7hnFbJE0DYol/elqxFsbNqtHxymp0ja56hhtApBK4Ou pXzPBRCrTX1duwywqZW0+UAa684ATGSJl7hR17bree0mkXsRp+6EFvxFMj4bW0w50rgnE9qyIyZz SbcAye6uvmt/dP6zzmzruhcd4e6/6F+Q+/wC+6LB+Nqj3wA9nY5N9cRjazPJRx6PEIKIKpZ9rlSE uCqdkDRaZliPc9me15ZAFaM/b2Q1vFaqJOjPew5CGWD9CKH3G0hjU7noECciNxBx3R+ruwINL5Yb ltLNLSSWeTa4qpvFV+0yoku3tp5jvfnWLQACqju9+DekeZaEjniYS3Y+oRHKz43tURmWU0Wv9UQl +RCWUCqM95RkiwXYIMMEzTNjYE2fUreZ3LSbWEtFtyStFWLbGFn713aYF5GDCbZw1mTbO1X2um2d 0Uw/4S6TQjd3ibkest8PZ645eAMR4yaDTkPb/nkC4waUAYKzwqdDw+jEvT9xlLFABe3wBmlroZue wFTsTVzpUj9Gw91OqhPNltC42vHTJTGFxdqQgqZs+8B1hJRZnAuK/riDnawXDH03y6FSesusMUva 0ZhVRihx2+8G73ZdnLbl0hZqcmPh3DYWAlmZ3dblFWIHpHLdtC7SmOuGJwedT23bRts9mCWzfo9V C//y1480j7fsZQBx2sWWuu3yof71oRMtMDmWVNsgafpX7FEU+Ru3VjtzNjISdYrFZwO9YWOgviMe fBhHt6q+U57O4m02TLbz2jtKwt5umiRdhY1d/3i/Gt+uCNpkQYHkPx0r6x+spJGChe1oiBSFOnJP ls2RDnWb2eianR0wiugCx3fc0Q+m2tAfKsrSsBib6w+ComH0FYVxOkZIw2F6Rx0V2NFn1xy/brju cqzIqGGlyA1JLjbaTeXwuNflQjsoHYzOIYCV6WcxpR2MEtb0TKoTU9p/2PD5Gn28qlUmBtVNqogn 7SXnLL9FrNCOxm+RxCEPQ1WKVX1jcmGXLpHls+aeBAl+4fAEvIb+szDxTGcQwcc4FGOEkC4vdIrc 9pSjRcf0kZP1EcmeNh8+M+dhK2G6Bk1Tj1Zqnd4jUnl5T+dGrsAwadsQbSv5W33ZwjTM0po7ayQ7 wRfbq69hmmndNAiwHbQ47YVOLKjbPUHJviVu6TRMahPXsx0IiOhWJmfuLPC0Bx+4+Mq5jo/0OzsZ A9oNmouhHtCdbiq9cy4MVOzMWbfwu+4scyLDDoQYszFxRmIujtbjEBdRqPadHQA/clcQXWia+qtN dA0XpnWdnLppttWoHtY1LcqUsmnbNbc5ex0PRk6hWnOABREK8fTc7HC/WR4W2djbD2vfOCnwzLG0 b5xKeG7f3fp1UQ0FoDyqTMUH8R00vfboA5+NUZwkPoh+Uy1sWIgNMrs4dyWxk8dW/hiBsIOmA9O/ Lu9oy3wmvlQOAHTQBLw27kQIjhxEtjZH/g1VWJiGJlxTpsOEhJwLipHh4lYpoyPQPuy1wk0iGXzQ G3QzVFdTkU5MwNSpI4/d2grVZ8+9nUqmaBI/iCyKnoJvHmmnMYqGDqLdax+3uHwnjn5b2SarH06G xjLm2oUjVdqg2c6FFMdetby0h9+0pvWemwbJO4GzURg/olNp3VF3g7lja5bLdRXotvtOSn+J+5Xz cDgbgRDRAi1i6CDigrhURy63dKVp0K7J1f3rymdtt5GB7io9ao1FEUZPjB09tGMx9ymOlkpIrbv+ Zo8iKi+/2sAZe5k6Yc9V/nwEkSmZQNngplx85tQRHvTYhBLHHPodmbnX02xkmIpnIZSGQo4R+qiL rg1nm/P2Vl/BsF9MYs1UDYDJdVmK7U1Z183ntomDi1Xu8KR2wrmkt4YXTjv0RbvurpmlX4zwwxpH FILLSo6F66M8zPbDJCz7zIv3Vmt6deOLUI6R9gkJidPz+FkIKXTjjxDizlrdemNbfHV5y3JrNGzn KMhVP/TTd4c4Uv6Njzp7yB1q6050n+huT7lPBykVaLc5bIktS6cKR0e0LJ1EXnUy8q/u1MNHPSR/ 52hHYXoo9WOVyB5AHMewKtKWKHb82fOBIGnan0En7nplTgoGMkB+MlhVXO/KXpdIej6QdG3m2jzi 5ATX4tw7MsFnVWqEvNjI9FnyKhbLa480RQKDNULTY0xcihzO6AghrT08SoIknFaMrqXP95I5AOEI IYSgb8zBjfD4/ZFNC9QlPcP7kUYrxBihNUPJ5XKqu1NMvsej/xVxt/IIdZ9OpuBu5THZs1EC1DP0 zy3OGV0rny4GnH/l7Z07Ro8c6Tw+Go4TiQzzdNgP4QVsm4p+9rdaIoqRaxsh/pTVItdB5kfz2gQ5 DPsOJNtksR9s2lr3uHvAxsUv718FF/B2oWb+Rx/dg1M2fmHXgGNSu4V7qMi5rztly60DXwa/bRE/ wpEkanJd082f8GOJIV6B16s/rOmrVk39dWXOYzFO+aJfWMwB+bbfzRyc+IT9iIqwUMfbDxox2meg DdooE11J4vM3qxQaqA0RPdIh9SJSDI6G39MroQwURgjteiKZ4aq7aa+j+Jf3Qde7CK7rdaOT3NvG px+I0kApn2FVYqUQlH4OQqTYszFCpytOeVhZLqfdQyCWXGvwM8d/dHEvF25oI49G7kD2z1xCJa6/ c26SGHHe4Yl3avhT1Sujccc4t1VBnPdsf82LPb7GZHojqXOf2U4dXXxuCqZ6J1e6yijzO2I6daqu cGeg4N2mwfkQ9/a4nc5Zvf3ipsGEapGyX3qsojOjhPaLzvq/G4hXdjcN3CuiGv71Q2e6CpL2I+3v R76TwJZzWw/G+5G4/eC9EOrgzcjtKGmvqsw9bI8+ak8L3S9zfLAgDL9Tyf4WpFRzkj5+ietCvdYs SxkDkA7vkVevkzwlEju/hAblW2boLh7jOiPXvQOmeB/0Xrty2raWQhfJJQPSOtRLsnvkbKcgcadG wpwmq0+YPZ91jqYVe78bx1UT21liImY80TmB13WytAUYvfLMwXOyC3N2y3EyPXkainzIFeeDI7iD hA876uI+VH4rALnOuXsesXzCwdKRie2w4v8BHsJ8uw0KZW5kc3RyZWFtDQplbmRvYmoNCjMyIDAg b2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8L0V4dEdTdGF0ZTw8L0dT NCA0IDAgUi9HUzggOCAwIFI+Pi9Gb250PDwvRjEgNiAwIFIvRjMgMTEgMCBSL0YyIDkgMCBSPj4v UHJvY1NldFsvUERGL1RleHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldID4+L01lZGlhQm94WyAwIDAg NjEyIDc5Ml0gL0NvbnRlbnRzIDMzIDAgUi9Hcm91cDw8L1R5cGUvR3JvdXAvUy9UcmFuc3BhcmVu Y3kvQ1MvRGV2aWNlUkdCPj4vVGFicy9TPj4NCmVuZG9iag0KMzMgMCBvYmoNCjw8L0ZpbHRlci9G bGF0ZURlY29kZS9MZW5ndGggNTE0Nz4+DQpzdHJlYW0NCnicxV1rb9tIsv0eIP+hMZ+khc1hs9l8 LAIvbOcxuZiZnY0TDC4mg4CRKIsbWfYl6XGyv/7WqW4+JJGOEre8M0gii4/qrq6uOvVq//jqIhSX 1dMnUlw+fRL7nk5CEaWBp0VIP6VaBLGn/VCU+dMni789ffJ/T5/4no//UhkIX0T0d5wGfP33v4n1 0ydnb58++fGlFFJ69NzbBd7t0/9SxIHnB6GI/dSLEvH2il6FK14iSiL+46uLhIfSfPnm1dMnf0z+ uJjqSVmU03CSXU2Pw8mf0z/F2/95+uQF0fnXwwYk/cSTowPaHMffp8dqIqbp5Pk0mlxPj/VkPVWT 3BPC4XhC7cnN4fA4eADfTOdf3YLGqSeTZkWl8lTgckGjJMDrtwfMqxWAbZ64mEpi1qzGVwU+txwU IT55+E68n+Dus1dTGUx+w61VTgyfielxMHl3M5V6MqcnsjrHF+IXEoy8qrLLfCrlpHo/FXi6yvDT F/7492k8ET/g5lNxhpe+wjX75tk0mYjqJs8+EY28ZCL1MsNAandLqlL6So2xyKHsqFR5Wo8RKiqx btleM6MyMAQCzeuUNx8+QqqJG4m5d4E7qtvZkpgtsofIYKS9OOzJYOhUqURR4iXRzrxnNImI5WyR z/PSrG5hhU+GECL6+O4Cn98a+QEnDIfqJViU8+eXKyigS/qrEosiX80FRMmwyN0iBjryYjU2GYfS EmjSCKOE6mUuLnISgdkt9G7+gfYR75qsXtKFS+xEIzVrcMhyi/jG/BD/ycuWOaJYi2y1msqIZe3s 1W8tk82+vqW1uaE/zc5OtqfZyI8OPHU48dHaC4NhFUY6hkbFa59XgjWYQwUhA4UlGBmAS+MSRJ5K xghV+XoO4fZ+cEkykl70KHOLQmi9EUK/Lwua2orNhGikFDph9UWQZHfG3OH+UtIL5SPMPFDKS9UY ocUqo3ldsqYrKt5v2Gf5olhDmudHbANqbMklbjK6bjaVvuFKWeb8g0uDqH0vfgzOKK28YJQz1fcR UoOEYra8g4Se+TI99aUfnEjffpYvTmL6GOuT4/AZfqTPES7xLb6vfKmf088YjTo5Dp75Ko35mtLp ybF+xtfwmtS8kW9T9u3aUHDGxlDT1hqbncv1Csn2RfEYofPWolhjDkv+gWzRFenmfF2PGI0g9JKg 58qEyTdbjaElb6xGKL10B2zRQgSJL6OXvOxYF+2fhN3q0WrS58TdEklfkdswPJgRa6pT4kXUY4yK nJpTGZIHeb9D9QiO3T7DeDy/rj8aJ24d/SFuHwwT6SQGEwcxkfoGt06ae9/D+/JprxIMX4nWGwP+ K+YkChlM0ix/P8XtZlWAu37Eu39g/01OLHrEx3zGUKyDjzJsPcPWqekhN1j6X/A0gX1lsX42B5L9 i28t2c4V7Erm/OpMdDAWZOjlMYylRQw7SAIvfMhq8r+HW81YefGuGSQgoCeXDI/Erz+/ee39gDm3 TO87zFuQnfjd98Z7PCeGQyy+yvGaFqcgZmd8qYRIjDKb/o4Np/Fudu/xXLw5A3ohhKEkgPPZKZIN oxRIdpiJLunE7L4/Ap0QwjZM5+2SsOJ3AqRBYmlKrtswrWHlMWyzNOujg22QyPeC+yIIdcaouWpj I+QmQ2mU4oaDA7Mc2kbcYT5LjqKwvrOhBNpemOPP+OnNa5cOALnwemz0Lj0NwhcqHiNUcxANE2Yt 0HgbHGTpBZ2wtY36nrPrMcNN1tXo2ZJuk3suPQJyR+VjsEpFClB2hNBrKCxRLVt9V9ZHkCmWkZ+J j29eC5Y0qxh78VDx7oZNZW0la3CbBKSq1OHC9zqMgKm/YZ8woGo97VIYKbFoq+Q9JG6gs7Hqn3Nj 4t3Jra+9NB4b9neu+pBTEBDoDNMRQgT748gd5A8k0dKOJzVIKPBZvQwTqlokBOGFDPPqfW5DqNXy +nY1n5rgX51hqVefRPbxulEG0BtWzjcs+Y1RB2THj/hiT5GMPGG3jvd9cw9gUHS0Zbe0FwR7MrnZ fX7gBfHBHCstyZTKQy44gEG4Rei/4sJJnxHX18dBH/yAHKsZ8cHhdpZSM0TagxHPfN+EXXyZpBue v/TN1/L0REoT3FH6xclxTJ9DfSIj+le94OgNXuEHL+n6y5OIb+X4zrm04SAT2+m/gYgxkeT8RAY2 koTIA24/j/A03oWQQxtUiiPz2Q/MMKOXJ81lM3KHKioJvCTdT5CyGWMCG11fc7bARiWVRVDzVgHM btuYTzK5W+Zlzhrh5gbCyIqFfYAiI7E0+silTogS1gmO9mGnOMKEcNzhEhxhKvHeQWc+NEDL4JKP nPNi5t+BzbnRvqrV8jVp8/xzk/EhXd5C979w5WgndbZogc5qNcWtenJXrC9hFCxKvCvZ766ZKlYT 9EwIgLO3PzWP5fSQdR6PGDYUa8EoXFoombGb2otoZ7VN7LJ5Qvop5tyvdVlN/heyVz5k7WLtqfRw axcnnt4VNmLeTV4urjEXdp6v7O4xJlFka3EKBY15sh9eXGKHZPWms3XU22ng3RmHacaS5Imhwslj 64XP55wbXtMnm8crQCLoSGQrUTFx/qG+Bf0yFy32Z/EyIsETySujCTgXveiyEQYqDtrdMGL5PtgS RNrzd71XA3qhbpgXHe+3UypnDg2jCjiRPjyi7YDNB1qxNnWbdbusLD4St22k5djUXmBncNjlD5f+ KbIj8dhwjx0SIm8rVWOEnoMHHvKARre5TNon2ov0Y8wQJiIdI1RxFLV06MWS46RGGepwXoocp2hk XuIYr01kxPguc+gXKnKhglFuupxeIO+RD6O0BzXznwLKPTQ6UVxN7aWyM62czGV5zvjRVfV+6jbu iWzc6O51Sij20tHVOGNdlnH0yGGWPkxDpMweYXZp7I1KgENlq32OOB1eprWvxid0QF2rA4bf+02w gQYhw6eDQQMtEW87uDom5R9Go+Qcri15CsnYvA6njsnNRd7/8NOTfujFyRihe9QxeysN/i0/9aLY WcXa+N3NtMmJcQS0jwQV4Pq8fd+MMbCtoeNo7pF4LarbS/tYXtVNXvpLEziF9qMZNkOAQ/RXU7q5 QYYzmSYQhwSaLavl/CpGt4X328wa/0QO1fAmUrzjDraJVOLJdGc1jGcaICccuNTHcIbDEaos4hIB P5LwY5f7KuHI2shUXZYb0FbyozFC6wZHcMrGeuumMLZJVbGbVdXGbeBUA2d3I8hqbw/Mp417w46P CRAUsNFifk13d4GarDRJ4rVxC91BqzD1knhspvVW5LhzkjOT6DfbR9jdIbXx4u4y3nXs267nLiEO jVI+wvqH5AkhAzRMyCHcCCPFcY9hQg63ThhFrLOHCfXwBkTQIdxA1EyN0nU5QUKi8ahucI4lNH0l H2NeGjVP9ynag2AJHYRcKbDX9BoD58eoSz1U4iakIcUj8dcRuGECmpwIRmFBDWXUr4QRBRt6Usg2 lXq3Fh+76hh+3BQ9ZyUKFMzX1Q27j7NisRWyoq2DgO+S8QvH5tA0kptKy3wOXxTJ29MLe/NGSBFU iusmVOwy3k4wDfm0YfYNYxWV+Kj8fVDV5z1LqciZU41Y7Z8ac2ngTW5sr4H8L6x8dcTx1MvWFPJf cxvVB+yM+7Dz3mqch6XIIwQD9xk4Euahy4Q5LV66H8tcps9J/0VyP7ImrtPU0fXgvcMSngQh0r1G 4xD4BDpEfO/Rea/jvZd8K7HlcUbp+dQsgykIdhkQVHsvg8uqpCBCzchhyPa0L7DaA5Nh99Tcqyj1 0p1kWNdPoV5KTqcrnfjIayOlLuPIprk5Kf7Sb+9QL16YPHlscvD2DiTY8UAUcg4+ft5l0ZEmT865 xwIZfXnuj7dxnGkmjcv0j7J3mZoA8xQaOfAH+fgmjX/ejqWhdiJVN4q2piD1uTmEnze5fUzSNhvw 09FL03XSPAkqqETQvVYS+o7ZhNcGps3EBzfM6Mwc7ai5z6QZNUYGHgT2vdG5LYA4B8twq8PW1hA9 tMMrP7n4ifbtP9/9TCaMHQHx6z/f2pKy66bhCaGTGfcWXgE93TZ1xHWB3N1qu5Lum8RdK86SdOIe OY2MKM27drzczmazb2Hb64Jz8O7glww0HIWRQTjtTkR0ZIzQRW47Uck6fvgNM+cENLpR2WheXnHl gOlGNbnjO4OOl1wfkBLuzdoKdXb429T42spHr/vZpa5HmDF+BAYq9Gmlj0IogqM0Qgi149zLj3RV nq0rwcGl3SbhbLYs8i4IsxHDHKlsVSrl/OeBYpAqVJ6/q1+qnHWGCRDVxaxqK1kXqFrlYwlyds12 0v9N7ZI5k2BH+Na3bSN113X/yfCp6J4AQj9iQLJTDzx8ioHViHiEy83R2bSrDUVbxyEqU3uxowcb vgeM2g91fIQKUrx+dM9vdp+zN0r7PR7o+nsIvJA0mnhkLI59ERknnhybtsspkR8cBaNz6pUWniQA DqcnPdjhy8AAB0CPM83oxYIY23Ia95BFkFjEcW4aVgGtdGK6HhMuQ3RY5xF78dhKOfUfSN6D9FEI BV4yKhCvHLrfcTrOOkjAc4M0tzBtTyROZNhb9R2xUFr7TTeyqWU9s9jVgPN+USteEveQ8WkLkAGv LaAN+4C2q4c9BUrmryImzFd09wbbH93AaF+/oOGc82vCM4L1ianGbSpvZbKBd9sKWYvzU/sV4D1G HbY0d2Cu1ZhBmsL1PFgESkZesGt7e812ZDDILphWipscSn5WZKuuURFWiqM8xvqiipLzmXzROMHc 4Wf7cZo8J5f6FXUX6ctWYtUGizgh5DD2p4gBcFiHZztsq5pirANhBJRgxfG3x/5+71rBOMA63ywS bPO7WBfc0Dui52OTr7ttvy9qj5O8zxt8MCs4FzcXddNzI1Y5AG8HrooaceKsEoQOwg1/qTRlgUtC Dy1uMWHnJsr7DuO4eOuJXxroU3276e2tETEzOFxBRhBz3dr9a1RcNYXiJkTepOINL4o2+Mnpzrti tRLcuWrPtGFelgXCprxaHi3wsW1yqpdtc0tvNR0aCwUJ3GOSB0tkk7FHo9NefHY584Tx+V5k/902 GtZYE+Sus095c3gPY2mXWegAEa/H5ocKNXoQ9iJb1WVbRr22kmlqSWbX9BH8sTuAxTzjHRCa8P89 +mFQA4chOsYOlUgLIgkn8P7p5usFb8Jy1lk1YgFXpc/q1RdOGPMJXm6PeUhRwrQxwgcDxsGojEaJ 1p6EmmUxJxIdTOmq0NMj5VTRNxwWoZrDIsj2/NYWv5qaqbyCB1uZ/iCW4NesouvydtYTWN72XDpr 2wnEeXcKHIeL5uaAsg0pb2zd1kF41ftpi6Q+3wBBobs1skS2y/y58ei6PUOJ+xiiJlgA9BT1E67f b0BljJbWg61lIIFe93PIu7KyiwJBBNviUTYFZVVuMo/hRgFRvUSOOd1pJuHktlm09uoXLMCaV8rA n48dw01F8FxwZ6kFTSsku23R2w7ONUFBIt4P0cRNU1GBHuRwMuNcvP/gFOhwRUTMSmKYx6jeG9y9 Pm+vg624HwM1b4+G5w+Z7gGibEU7gtbnaOj8ky68V3ZlYxvJTEZI9DVz/grbUqyMfeEt5jL0ipMR gBeG5+b0ZAQfi+OW0KD/TkAjHSNE3mgcbvjGHLppfHq4xOTAkkfeBHDYieUMEnnO0vr77XNbvaUD yafkWXtIWTIQCjLJJnbso2cjGSo45m1ODNmyXmZNxacmExU9M+enBduufksGjjmR0b2XghzRiboA A25EE60h04QKxjx4Gce9s5Xcn6Ig0xA+0G6wuQltdscn7GxAjq8XtdGsq0Xv6FxjGiuzl4yT2ezI hfj3bcXFnEOqL1sVXe3yxlFr2O3+5B8u09A+qgEGGeCglXswkBBoVGGM8HxY48oIx9UcKuYtkST/ Coi9gLEtyoxNp+sKIlIhao9RsA8ZgGkzPrjEYQmTBoTdhw9OC6cST+3H/Qw7Z+P4YIav5eb+cDey JEXnzj4jO3JINYU4Pvoq0D4M96OKupzbrq3CVJEjw+jbAsfOPaiqruniFEFQ08rehs7WzSHDZdGd 5NuhV37kV8IpVe/s6w18Hw+elG3GkpV5c3aBwx4rzr3vw6bZ6tbOw0Zqv9+3IKvJLWQHQpoS5RJf O2v/PSHwNfyk3slRH9tV4C+vWi/Snhowfz+1Hr3LY4VTnJK515hfsz/DvQOVWLABXtWtq+PyxGiL AvcalVOUqxGN34vs0HHz4tJ80y8+LfhUjzzbch6W2V9oHGm3XPHZNFvxKQLGX4fPt27OIBS3fOBU e8QA7mRV0Xc7t08Sa+RdRb0jYt3Lu0q9NPwKu05X0Ds896OdmEK/eKBzqI0rbmKZxnUuC45JfGIB dHl8lg/QtNc8tr15HCbw2anok0sX6P0G49jBi+P9yBIQh+frQfRcHl4XRAF+NcBeYyg405dfmgSd wzGkEhnxvcZwwwZ7ySq5Wl6XNfZjvi6sJQZ77G/sMJp96MSZWf8EuQW3pXW2urHg3FZp7bz4yDfV d00kLx9pZ5R+CiB4qAQtztr/2sHDZX55i6KbrGwRS145DH9I5bPx2mMoLk2mCvDrDL6Dql2ZVHup f7hTPpGYD8LhOHXcPweJhMd0n4amGNw42G9syqSpvYTNKoG9ZrU90sieknR68aE9ieX07U+8xOx9 1zh5JeydvPJ+ao4yuqOne8033cl5ywwnW2E/kTQXCxvCzMX55u6Yf9j8zRzG11+s+PhjsRNY/BZM mASm9fxAa5JoprIbCzE90N0hwP8x561eN63RQy3NTbrPpqldemgSKmNksC4b1JOQAP8InbZJZEYr jESWiZRzrGe+CX1kuCkKhanyUP0aRFNMe8q//uYnFpI2XARB5kTZTRPK35zi/wMovrANDQplbmRz dHJlYW0NCmVuZG9iag0KMzQgMCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3Vy Y2VzPDwvRXh0R1N0YXRlPDwvR1M0IDQgMCBSL0dTOCA4IDAgUj4+L0ZvbnQ8PC9GMSA2IDAgUi9G MyAxMSAwIFIvRjIgOSAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdl SV0gPj4vTWVkaWFCb3hbIDAgMCA2MTIgNzkyXSAvQ29udGVudHMgMzUgMCBSL0dyb3VwPDwvVHlw ZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZpY2VSR0I+Pi9UYWJzL1M+Pg0KZW5kb2JqDQoz NSAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA1OTgzPj4NCnN0cmVhbQ0KeJzF XetvGzmS/x4g/0N/G2lh95BNsh9A4EPs2Nnc4uayk8weDpNBoMgtW4ijeFvK678/VhVfLTUVJWbr ZjBj2epmkexiPX716F+fv5LZzfrxI57dPH5UsVzVMqtYmSuZSf1rozIuclnKrGsfP1r87fGjfz9+ xHIG/zS8yFhW6v9XTYHf/8/fstXjR+evHz/69YpnnOdMZq8XMDjT//KsKnJWwPhNXtbZ6w96KCD7 6/NXNU6CZc8fP/pz8vTVVE3eXvz3b1f65+Wz6an+7dWU88nlP/+4/O1iysXk8j+mf2Wv//Pxo0tN 7J8PmxWvVV6WO7Myk8lSEqpzlpqQGCLUMP3MIoSeMFZKxtVTxvkl49Wzs1P1hPH64owXT+hvzdOz U6E/q2f6d8Y4Kxgvr87gT/oHh58XFV7CmAguf3pm72pg4uKMsyd+hKqEr4U6hzvw6+qJpw9XcXbW 6I/nCsepL2h4dkWzsuOYrxuGf4ZxTiWSpZmFYyv6Cu6mGfRnpi/FfYDv6Db4/qwOpqWHKJ/4ncJR yzNOo54lYw1ZirxpjsCDssSzHSE0m8Mxm7f3m3Z6KibXUy4n2Wy1Rd+IibJqcl5bMVFUuah/XEwM sa8RE2VT5kWxy76OPxr8wYnrzDOEp3JaDDOmf8x4yTbHnFquApaongEd4HekUD7Z4l9gVKRB/GMO BXP8JpTygzI6O5Zx/c11YygYBiWeRuakwZ8R0wLr65Mn/SBm1fYA0NTPOCfW7XOuv4L2B5j4onTb Q4eswGniMizvu/n2R4AV660LSOII+vDirtI6aCohcbMJsFRaFgkLhofJzUGvlka7RAGAYok/CcWU 3tr65w5eAbpMlf3zUMlcxHht++BZxi9VXvX0Y1L1WJZ1XpdjCgG9ZiW3COl/8zrrbvzn35Hsn6CM u2U3lZPZh+mpnPyVUiPqzdMi5KCJvL5drkH1Z/NpPfkIRsGHaTnBKbWrKS8mmwxk1nKddSDE2rsZ CLFCCzF9z7SZbPQ9FX6C+zhci//LE66nKFle8EPWk51qIgJYbq4NnuvrhHOotJXRHDQHTaPQ04Up tClnUDd5oQ57qik3v+F5VR1GdpatWuCSL+nIC17n5fFXLQqe8wNX3XZ4NPDwdNn8Fk5NO38PpyBb rlDZv2rnGzhSSzhqeOHKnB+Fh6VIaIoImVcHHZakxrEUVV6Ig8jumIhe24FuMqYGfqf1sSTzwWr+ GmyFlCZiU+QHPucXiwye8+a2/eF9C7ScKnIxnpJTKpfFd9bxSbPe/VSgCDfSPPugP7fr9ewGz2/2 BZh1tsbPHV6hTVg2aZeftZBvr7NF99FqiWymuTg7fw7fv4Q/rFtQJdl9i/d1cBqyDXD5LdBLKRlE XvLDlryBOWodBjOakbICBWc/vIPVd5nVgAtUbPoxn+u/PH8Jc8etoIWt79vZezTku1+0EqdN0s61 iNk1AnlrtEcued7U31n/XK+rRJmzaK/bbgZiaLN0gugE1zCH3YGHhOt8j3ofNg4vgy1pV+tP2mDp WtzHze1sYzfqFXLH/FPXvtW3IhvMNrd4XNbtzYdppe/daAKVkZJdu74HwehmALyoZaWa3GgCxC4f p0QV6Whu6uAZOisFbtrM9C2a4bJZZOf1ponQlZJ10p0vanD69u/81R2YeDc4zcWyvbvOvixxZxhu 3EW4Hv1s4MG8fdX++5NefLuat/gQFncz/e0NapJ1C5uL/Lyx25nZhwSDtHk6oS5YnTfioIWCWL4C DwnkOCtlBLsg0a89O0AkSiPtjYdoxLtDJEgZuD9bX6Wo8U+Nc8bEleh7XOjbPTWTsReCCykun4Gb Bj9O0emkodIpE6Xd9eYwxhhmWf2f5q3Q+y+TsizjgJV913xVaL1mKZ2jShM+aAJpfbIGYdZxyAaP DX8+TMbvwWxUJbSRsgvZWLa+kiE/M6YNJG5RAThNAEmEYJ6D4RAtgFvEFcc/AQoAl2wdESaqS4RX 5DniMeqJxxIsPIOw5iXhChccD1a5c2wRjmRFRWCMquhWA9A0dPgtksQq4UBSRwCPtYOlYEF8Z0Gi utITr4A8zl1vB0CMrLjqW5skljwuZGURoDiAIdH24bQsBuZBomEojNDeANtx6y38eh1IZUApt5VG CFa0gzg/wLH0fzRfdmZxVxRx5i7aIgKRyy0QGagYOaqfgMeiCQX+UckXMLyWdHw8sEaBx78L1mir U6tDsF8JSY0bqJ9BHS7Rzsl++RcYnndLrYPBzPgFLIxzMOu08QYm4BzNmW2ruA6N4jUMnn3Uv39G w7HDW945E0ZrdO8DmvlVWuMPTQ1+wVGWswzm8ptW9TQIKvt/zcBiWF7rv5qZesuajNCI5pAgI0Z7 ILLM610kb78rQbs2W8Fasg5N0E+wZWC9tGCMgy05h1+G9mZobAMz6ZGbiaaQ0t9XeVPFlmkmC5Yo ctz1R/R8EB+zj65yRjaskCxTNNHQosZHC0xXGf/o7Uu4eIYI223kiQoGLvXDAob7tIoQYB7vqhUr XUG6FYQOoyxiVyjRPYBtYG+hGlIe1SXonp5cs3JQgPgvrtLZWlxCaCSyiMlpQjRVMcClI4SeASfk IFtAlGwWCelWCjD0IyywqrXkiNBZa0nES+3GpyPXKDBxj7Cupt7DIe/QpZIoYuBIpgNMiwZwibTr GzrGhShQZsWOsQvuNDayK2qOh7Umby0hQC9zJWJLThoJKMEhPQYh7TioGKEXeowZaCsQ3supNUTu ly147GWIIqGd8hU+oQqYrTNUXd9AnW0BHoSPwZjg3Vt96WyJ5SojU2HAUogoEF7mVTOeTcCbvOGH 2ATrbNbhxrRfYeLwLRpeGwQzglCS/vCuRavh01qbA28msHQyuVYGM3EmIGwcbJndPK12228Ih8wo VIWbBJAIqWjY1M+odJ0p+Gb6k2DJoAlRovMf2ZWUsQnNm9VRCOkHLXiM0HmLukF66wgDH4RYIR/P N32z6UXKhAvMkohMLaESkXoPVJTXx9P+skEHa/wFKqaFRYzOGqVLQuUPIqk5dFlWjDEthNV4YoyV udxBV8azD7QKhqSICNmU9g8kHNYxQh9T5hsUkBgXIYQbmF07X8l6fhQmRfxbURgGXTt9jmxAQCsB rSJLUpG/fcSgw47mm61W1oEGrYDu17z90IL/tVmD0nkzIWcsHoStYNA30xNS0R1834JHt7ltO/xg nPy2CwAHCo+5cdbZwsLw3bA6ltqgb5rRsF3ZiJyJne03BorxWeefYHEmvWODmtaHEUDZfr2HXap6 WnXZgTqGi38yP3QoRajQG1A2sVlHdrDUwviBkmCPQyxLlZfVfpTYeLLq8kwFnnF9gcgcBh8MJltz wjsBdCxqgxhSMKIHViJ0d1E5R9mCiIRcPmVMKryl3sIVh8FRAAAhlw7BP8i008a/3J/OFySWmrg7 wYQW14V7CIl0a2T0kXLsPJ5a1LS40ie+2piMW52eD6Z5elCSRr8obYi/h6ryAPB04SNKsnXpfj+3 TJfv6nLq9N2GBnPJdNLm0BKSEQLaNJMepMovuM2BpJGLgVRBM3uDOv88BCulNoH4aGpRqgLQp/0h E5DtXbtYfs2+WLcHhPAdSuZ3rQNWV3gdSJDZHN2cd1og37V5do7uzC2inLyXP2Bgw99tPPkfL35F EpA2d6MFFDpP2wb9DIPa0gl2dDua0O2AsdGhunauAwk/VFDtvV4NJu0ocjv80BGJJFBkjPYQRA2m /g/nc6yzbubUlXcuUQ3q3QvcIlLDFE42l7m0iDyD7MAMEgQLvUEdbMVnnxmY0t2uJSqDQ5YLhtk3 TK6y+tb6k3rNRv/eOxV/B9oPAXi6x7AV5jrQfugb6VGj3v9GyYt/R8W3mrcnoP6/tHQv0NhO/rGM wGrwlUZT7oUCG3j/zgADtHfLd5A70M0Ierhzi0qZYKrX1xw4KeI0i1kAr6497jFbfQPWMzYfPbwP aIQhDkJhAbzxbmYtQRgCEyralNmdTV40hy0oKdvzvOaHkcWT2WEkKaGHz7SHLw6bQJ4yHUBwfeuB Kx8+cKKRef1AybvHFhTa/26aIVTVxtzVWDF3m/df79xlkmd61kmQOLNtkZiwug8GX/hwM9hdNtPS 2mJQgiO8wWOKdiCSbocQCmowmmB13kTrGTkwJNhlYAT56oyelWXTfDjbtomYq3rYqpkwZSPKXhWs Fb5CO9LcadIJbLWTDWUpW+BhrEcyyMuz8MnBttishMblIhmj2O0F3hnayDSD0AxFK/Ap3lQ90NjT 7kQux8sbFVr/KrXjhaGgXqBF1RPLPeeZYFtvPYDCPO9lTYITTlmTHbn0Rvqb5MHO6nEf2KesUUyh BsWeWn+JosgrEVv1Sz1dBPb+yP5MCFkKhc8uQjQh7iOUzHkTIxRAlvjMEmKWoqoB1TvCCmvtm1Qx QslBS9HUkFI//rqkVscsui48FJuE65IcgdUjrAsCUdENfA/uGB5xROZWBnj9KzOSB2RL4TyT7PeX +tM/Eh5MxSTgpONvg2JoNg8SwsqlRkt6SLzcJARnFa8gP/6w1VltU1YBUple21QckIvtufw+qATu u4+AxGKZGfpx5NYlFc1c8byKTStpKolEBhgmNKJk5tq/KctjrLAWkNwRIbRewiMFNzVpPkmTi2M8 vYKR1TBMqLvXD+79MiE53uR1c4x1FQIKC2PrSqlxCiGhmu8IaxI1+JexNS3m5bSe1FStWk1YSiSh gFrVtCsczP6pVK5ibO8Lww3srf0H8EzAW02b+aNNoyYyi5EqCbQXuudcJCVU5jL6KF9rW8Sndnbt woAzWLRTGa8opftQlzCN8Y+OqBsI435fSaXOeOASjd/RFyjBIorK8eTegxQir44h86AEN84hSeW4 lHWujsGMUltmdZQpqAyTXIcQVVi34FJgDGMNVZ02syyCJCrMXhwtz1qoCpTeroi2uBsgRz5kaREy 30zHtMixoJMPIrKgIrrXbmi314irXjGVHzi4KcCrdoAtV6nCa/pZUu0I6A6CLE2oFroIaSLSQXw/ 1CGGMYPj9WPBNu4agIXmz9wWGKbMJBeQk1RFHlNSyVowQNsjhMYEZqRC0Tr+CrVckNEVpgdmSowB HGFdZQ3B8Aih5Ka/qBWkkh5hXXWNuimyruSAE4P2LEdYl4SUwegGjmj+gw5Wx3hyUhKaPEwIYuTL 9Um2doBJttyk7HdWM8hhjFC/o+i7ycp7v6YA7hJC6qSxLfI/rI6LKmdqtKp9ISU4aNtzXmAvpvXG VKUtMHLRgTUPySimdcTKF/y55HIwg9trzG0BYOMnE8oHM+QYR2d5eMLDm1c0DSZSjJSGAKqy+l5S UPqWWgeRPUZLrYMm8r9Y3piyARbXLoQ6kPoVWBBfkSlTApfatTiMfsKKCq4a6JwyDtMFZ0Z71sV4 WaXQt0vsq963TSku+gkFkDiqTV7fxQLzBcwV+iYMzKutEncmXczdmdYGAsLYtrbVVRDa7pvYppbe JSiYWs7D8xmYdQ58TihkRMow8O5TOSHR1FzG4l0BbCqEy8y0lfkYcw86iIQZpzZ/wFC1vRtt5maQ 82lTQr0HYy8zKa29lF2XBsB9WgBzAX9XB2u9I5MAYAnAfrJC31JRJwXtVemv0P9yjpZvzfrwDFHA IuvxMkQBgWx2U7dN1O7LrLuGNMr2GrpJFZPlBou1lljFRSUAkPRZ9ErbfWG0vjohko4Tjcw3YRO0 gtfg4A0T+snCapW6VlNzQ9EMz3EkxBZoFfwY+19VoCli++86NAeAROPRE5vCBUdU9E8odfKosduQ gUAGO4iAbAJZYTPySX6bViVhd1bfnNVCOkH+vxU9TkSCPLNoUK8FrhnQp6Q7CMZmVoVNp81sHPmz QQtSKkwJfIj5vU8blkUuB/Pq+kuBo1GpXkWE28YL5rpHU/GET3EzrX0R4eIBVuY663o9YtO8bOPp ECSzGWFsp48B3kr6JNJreDfr32a46XUEg/tuLu7CwdbJ20opZFnTWJkWEE2W86hdwha/AvrOqcjz jHknvAKkbSzvpBAKgn7/r24Cgzj7QROxbsLV8mt7ndBtBFtdbG3GA6Rt8PTYNk6e1k5mEZh8b/O2 0EgN2s8/GzBQd23oS8q9NUYo9LjaU1oV6TvVt4HRAMdMUNYrFrKa3qToyieueV2FzZ12GutjU31D KUT0bSKwFWRPe+Z1UHdkowU+vZY+lxd9x+HpAQVUFDau8QpQS2D29nwAZXttbdd6+WTb72Tk7sYI /CJtXvKwmtvdvbDlX9gg/aFNr3jDoQf0WPY0bwaBHtNMIijPSSaumlpLqyjhlHKRcYBPIoRCP8D3 WAVHIeyzCj1WoQMmlu5s98yEepdlrx73JOhnCr0m3me2cWbQzxTorj+BLqAwPvYa9W2dVjafud8W 9hVggnN9G9QIvYX7qOMp9QPBFp0FtesM+6ivh3Ui1zZrWYwXfeQ1ti/aFauc+WrNaHlBYKQSKFH6 cKURcfaU2uidNctsFNP0AwzEnxcAW1Wevmle4e1oM7ewe50eWlRPveivz9Hqca8UKUkbbL8rAWZI k982w83rSYzo2Gt+Db2xJH1eDSDrgkceXtIkF9VAam5aQoO9ZEusJ42xI8BdQp0bQa88GNIwo6D6 3WB3XzKzFRvfLSYJIChShE5pxQqXt+LY+3mJhzN2NSRWVQ36WryUwbte0isU6EizW9ShdYkWYvcY uKBGhst1NsNS0QvfJxrrQq+NXA3kYb+xt+2pfbd2FZf4DgAG916fZO9MwR5231l9JBGcMKDeAMA1 vM6Uh0QQ7w7SCWW8r4xpr2l/Vhk0YIA8lLVWGsMdKN5MQId8of451CgpGh0z3ehGYxklht6Ssrc6 s5r8F/zxD2iB/pra/ziOccn7XNKln52mxMrcnaLt2R0k8dC9GDHc3EL78DdT+xqS+87knq1tq5BN yiZOhcq5iG1D0hIk9HaOQEgweJNFhBD0RFm6ILEt6ZJYBC1y4MyKjJvOPdJ5C5wclHG9wPYnm+7T PHiQ1BFtgfKkG6gWt+wsqoe+DmGf7SOZfzdAqGwG7QtnWwSddR0eE3cpmTTNzvc5HsY1Zc7fs52E e8hNEJAwlhXqNwC4Ao9uF9MKSjQtOqR8OIKsL/tiutIHh0JfzXrPwRK5jG7LPt/UVVUe6o85KNwk kvVc3KHC1hAqjTvbHtXDN4+pIZCQMF+XbHZImGtYkRcCXsLg+VgUSaVyUfp3PPjDa94dc2JaFfn3 K9gXPcAZRAWezpErMfEjMiEvRD6EfSTo9RonmX1vFBgEne/sdN85dbgjW7DsBx2vWfZqeTMl42S2 0c6XTb1+1d5AnMn2NDrBpkaLZQe5HDWVDNFLLbCcFPNBv9y2vqasM12Qgu4XEVnF2dYLPNMKK3if yY6E/q6w2nKE7NvswsY5YQeb7zhCNs9S7lrAO3Xe2yKDXiznpJhr9bMFXQXF0dsBiX7EObD69SLD tNR+RCDo2mMr2o05PoSohXGbpm+xl9/z/YbaN43h/UmB6c6DHDFSjE6KMucqwoRJX5UpaihEjBB6 kX3BI++7CN0t3/tunh6+QWu6DRqVoTgYOrbQSJGNaDEzNvSOwwW8KefubsekhS6ZRlgByjVfLtAZ aK+zpe1GA5lzKyfeoLnN3Wzeki3Wfp5iL9Tl4iS7wztNRp12NBAeowZHyyFz7sSNRyTnKRuJVA0U BEQ2g4xBkuXkFlGenWu1Z+r8IW2J1gsuE7lRww+1FohcjvVQ6zKv6l04pL1bt/hqLPJnuvbNFLc2 ZWcdCa0UI/STtvApwR9IS2jwrcnaRxd1hJDJWCqvXFaSka69HKIdGGan0ADk+0WJYYBQgDsjbiBH CeI/gSluc4LI3sbfh2zuKNzkoabtznUGa+pZnz5ngGIiTWgTOziqV9ERaLKgPsQFgo1W9S95tgq2 7Ct4+0IQGL8IlLhV2gYJHdTODvk073JxDkRBuU22/YmJbBsFab0FUudb7Vd6bPZ/MPn3Sg0KZW5k c3RyZWFtDQplbmRvYmoNCjM2IDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291 cmNlczw8L0V4dEdTdGF0ZTw8L0dTNCA0IDAgUi9HUzggOCAwIFI+Pi9Gb250PDwvRjMgMTEgMCBS L0YxIDYgMCBSL0YyIDkgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VCL0ltYWdlQy9JbWFn ZUldID4+L01lZGlhQm94WyAwIDAgNjEyIDc5Ml0gL0NvbnRlbnRzIDM3IDAgUi9Hcm91cDw8L1R5 cGUvR3JvdXAvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCPj4vVGFicy9TPj4NCmVuZG9iag0K MzcgMCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMzA1OT4+DQpzdHJlYW0NCnic tVptb9tGEv5uwP9hv51U1Nt94S7JgyFAli0jxeHQOwfoh/ZQKDJtC3Ecl1SS9t/fzOwLlxJlyxGV QBbFfZudmZ15ZnZ+ur7J2H1zeiLZ/elJLrgpMpYLy03GMvhZGiY1z2zG6ur05O6H05M/T08EF/iv lIoJZuFvXipq//UH9nR6cvH+9OSnuWZScpGx93c4uYD/kuWKC4Xzl9wW7P0nmAqX/en6piAiBLs+ PfntXAhzJaSEjxGT7FzI3EzO8Btf5VbIcjqR4lxoM5+cGfw2QI6elNBlJmHUFD6X0F3g8wR6QKt7 VQrqeaagqyrcu9xOZO5mDzOdafgt5hP8ujATiYuX07apKKmpmMHoy05voegRB9g5kJMjVbQ8/sRW mAeWmuQJVbAnesYmQ83ud1HiGhOJE+M6BqkUtHecAvcLG/KbEjq/cqSELmFIYJ+nGokIsyJH5TSs PinaUeEVzQhclF4AkQfQVvoZZja8apsDZ+15kI2eS2rSphD6qjOT27ZQjqh0mhL2IgOhxLW4Hb9t JMR26J78j73/+fTkCvTwP1GpbV5yWQSlVjnXxduVWu5WaltarlSr1E6XR3X155exHa3qiq3HZ2r0 MNajalyO2DL+Wo6L0Uc2PtOjbw9jqUbVE1vDgxxV9PIL9HmGzy18FuPO1g4hWynBpd5F9rrCpRu2 qMdSeEJqIm4JLdloNZZ69BWfqtvfx/z7yFJoW4ztklXmPJO7yGLjXtFaw/OOvRpWsrbghfW0wH9e sPq+ff4vUfbbzdiM6lU9zkaLT8gXIPRh8QSi/9iguO8+j8+sY6ET/WKNnF0+rGDEE4j2Hr5RRTQp xarh8Je9WxPnVyCIx8exhB53q79INKgN7Amng4nN6BtnoEW/4pT0u76F6VZPQBPNG5UNKMroVdUw pJLe4SxOlrTaB1yoolWQMAbk044WOKfrQjOzG1LS5ToqBC1NYzJ84vhOY3/YWO5a2VtVJRGzUVwf T8rG8Ey9IuVm8TdyspUT8c4Jaf1QIft7DzYIENsSNqJOwAfFiAe8XqGqkKyI8XX9Gaep2dKZhOXH yHbqVC/WrgHmqFvLQuJ9M4t3O2ydZVzKvXiDdv3Ku6hpcJzBSXpngGbaufTEvZHlJv8rnJkHk0/+ GV2bH2jSgeR2YIxxPpymAp8W/DqBB3NJLjjgBxsdH/qaC0MOULcOrdeqaDr2B+nbCyDIZpKXxWs8 fQMSGswzSGnRU+5D4Iiz6SOoXIOWgM73j2z1xPAXHAc0SRVqsiVFJiVWQYmHc2QgJ2X2I3fAo6Ey wfN8TzES+AOdTBFND1jysCsKHYBcEfDRZYLnSJ23URWhJ0BW/rdxR2Mm6dyl0M1M/XmYSDxoMxGV qgW/is5x1h5nBxVpROfI6faAeUwKGJxasvOIwVuwCb/tjEaFo9zCv8AUZxZgtqJLCVgEbfJ0MNqc wTTJCMOF3U+T3t0RSNPoEHuthyKTeTRvpQoM0V6msYMcEdGB5/qEjqlpFvcVHlL2jTwSHV9YHnss CfCtvsKhrW7ZHZ1e8ltsgT7r4hrbf8EXDTk49lzROAdtWsdI8Iah40OwE0FEFR4+ICE1mgiyG3fY A23GBby5/oXQp4MXuEbzXC0+Osf4D7Aejt7pDaGTXu5LEuHRuC8Nl68wf0mAD8HQXXVb1QvUlfUq IqQfaQt9WGENjPBQqYRYoPkC9rWuiI3rh8U68OmG5LT8Uld/wFASCGACMr1Ndf8J8Fb1tIYFPO6q 66p5RmAXKUCtaAEFCe7z2K1K64BcaxeoFO2g9WKFEAPw6HAG3EAkYvZjar+04cNNEtllxaDCFpLb 1+D/HL3g4p5Yc7eqHm/ZtxVJQ5CwZikPQR9QGf64wdDQgJiWDlTfPS4oDkCY31CUhaqQQueynaT6 zpirF+WJgpd6n42yM1jEZDl7vyTAN99GT4dwXAPyEHI/ju9QBZMlB1+V3Kg360JfWOp1wcC3sq+F pW8JagzoqymPl5YwgODtABS/wBo4fNlwCyWskRB8mKMBcCNzrvJNgluMra8oLGnxlAs1hJq/EatJ H+/oufbpygKehUNs8ryTuxMiI7RjW9xFaUua1aG1LgokeGTnm7RsRV/l1GO9CJ+gjwqhVDphCLsk ZU5pPpwEwaLcvUHCZvm8m0H1CUcEvzgNAbw2n7cba27hS0xXKk8Mpm0BGlKI6GCiI0K3ISSOs22K Ms1oYsyJv7NuirKDxlsgSgoQwlrKm5aTJJMayAq8SNLCODewzCeOiWDdk5x8y3nICsttfpife+k8 CM0L3XMekH6nAR0dcZx0TZgnVgmiF/FMkJhe1UUnphjbusSyiFnhJMTwSXzqrENI4COf7nVAIDho soaww6bCmgWN6CbYk5RDVykc0Z3kdMzXUxTuN7JxDElNgrrhiO62QaFbjfzuI5gElrQpPCQ+tZLc AMTQis6QuyUAS+Ts2xVl18lIaWf9BvPrWW7RK/dr2GjA7HGWl9yqXQv1Q4bMlFzL1APbIR0w7l2b oRxw70LOAXcWekOaGiOGS3z02BKTvwOKROqS54NxIRGblijjY6H+LANMXG4R/G9g32rd/HM4/pTK Sa9/vUMYJAuuy6PBp0xJbmQffCJrhPbjBdjkXQQZ5CT9FP2MRzTkZKy7Tg0GeCNNvJlFCnen/lYw pKRsvMykVjTLZTuRv6PVaLnxBtmNCg6lc7mqig2fT24k3Mm2d6GB3I3LV4+FMI2Vd7JYNJlf23oq PWog6tFNBQiELHD706Yk3xZcHyGwYsCIrBB4bvuFPaQR04XiRT7wQr3BbmHoWOxQX9JT0CVtLryz FU4Wtmy1xuHKFKWm99LhmsHfp3u1xl7J9Xq8uXDaF4FBFnWElm+xzJxgVFKI8N2GQZfAFH2Yw3vJ MIiCi764yqPAXdc6nWqD5G6mg7R8Dp1w/7RzkRSsRwgwepPlHRkBu4u2xddvpItC5w3AmCC9EA/Q yQzNoRhkVyAQKibCEmBVnEUR57ssSjRfhGZNJ9DoKMpWXjyi2ZBUd9i53cAr5iUaZZ/1H9LW9II3 nfEs36E/O8CbtjDN8XJ/aP7y15KSPZjqMuTsXKoOM3ezB2xPr999Xp2ukDEZ67KAzzEv/rdLycIs dEPMmi/3PluLSfQmJpOHu0nDogu536YHLfkoeGG6yw6CgLSBruXx6ti00civ3RBoI3NksxSidELj jbRIvuUo0kNNE7kqLrKfydVbEp1iKglC0ZioyoyLc/2K0RJGu0fpDNGFPVtFc4nl3ioz6wav3lFG YOSuqzcNlQvmO1GqA2XBF1z66NyEW8xITsitmGk0XdGuBvPnaQo1fG/fdJFsNEkAhVjeY9VQbzBz kb6vqovOO7+ctMSmripZLkCKA/y6Ujw/nl/XGMj1+fWYkrHOPVx4OaellC51tJHhK0UHEaUi3pZ+ qxkRrifOrU3oBaaGlGCYvU3oOZguoqRC9SUsYs47uror5xrlO6D3U3nJhdnB5R3eT5UGSx+O5v2k wlq8t2cUBgPrcPTwUmEfQs7JwpnzaE3SKoQdZiKk2P2IkK8DRSi6irAVM/qaWQ3HGaxxrFPwBnlD jcn8emscLgOAWDJLdpdVchFIm1Uk6lAP7d6m1lcgDxwR2hIR1166cYDvVjbnRXk0Y6aKDK88d7vu +Vb2wkHmqUt6A4e9oYvGaCN6SRylnUXT4wP8mIdAKxVh91WqlP5CJ6l+TlB5tIubQY7QcxUumTbK gYrv8S4vgMVM4l1tPyNHv4+u/gIMvI5VpM3qA6bOHrHoYI0pR0K3bEZ32sZ3ucXr8HqRlEk0gxYX 61xj0L+D5kO01UDocuBV5QuGWJmcm/zthvhfWAWy+IrMbCs9VlSUQLHGomGrhup00vJkEAmyPtQV zxZPzJUEuyrwylWyWtfB1wk9unqfqnZVP3dtIVAFAwoqaICOn6hA4r6uXN2sq+hhy7awAZahSuTV cr2KNYVUUbz48NlVw0MXXxW9ZrdUHNPWzh4gQafOR5MgFtLqVySIlSLvrm6uWU2VT19RJFRXXX2j w/JcxyJrV6XVNEMm6gsJnOhSetjhGIJv0nL76r3B/wFm+qayDQplbmRzdHJlYW0NCmVuZG9iag0K MzggMCBvYmoNCjw8L0F1dGhvcihrc3JpcmFtKSAvQ3JlYXRvcij+/wBNAGkAYwByAG8AcwBvAGYA dACuACAAVwBvAHIAZAAgADIAMAAxADYpIC9DcmVhdGlvbkRhdGUoRDoyMDE2MTEyNzEwMTkwOS0w NScwMCcpIC9Nb2REYXRlKEQ6MjAxNjExMjcxMDE5MDktMDUnMDAnKSAvUHJvZHVjZXIo/v8ATQBp AGMAcgBvAHMAbwBmAHQArgAgAFcAbwByAGQAIAAyADAAMQA2KSA+Pg0KZW5kb2JqDQozOSAwIG9i ag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA2MTA+Pg0Kc3RyZWFtDQp4nIVVTY/aMBC9 51f4uD2syNiJHSQUCQKROPRDpT1Ve4DE0EgliUI48O/rzPOyDUhpJLCePeP35sP2LNuut3XVi9m3 ril2thfHqi47e2muXWHFwZ6qOpCJKKui94j/i/O+DWbOeXe79Pa8rY9NsFiI2Xe3eOm7m3hZls3B fgpmX7vSdlV9Ei8/s53Du2vb/rFnW/ciDNJUlPboNvq8b7/sz1bM2O11W7r1qr+9Op8Pix+31grJ mCCmaEp7afeF7fb1yQaL0H2pWOTuSwNblw/rEl6H44e5cuZuiFLxy40yZBhR+jasEjEkiVnJe757 3zcrfu87tk5gFqWMMqDYO7EVPQmQms2kgbUeUUSPFNJvmjCFzIHmjJRfWwFtgLJpeifWq+RhPaLX j/RubzbLmSKG5jgEWgJJINDHipEGS4zMaOQp/k9mDEpjvK+eTr7x9JwLClExTZMUFHICiVB1Pa7v /IGCCBSaoyBChDpmJBGT1oxiv6EB8n4J0BoIQt3AaAmEEuoVEMqrp0tIhmtHBo2k15N5IuPpuYSU gN6E0xQJ150SyDM0olCPFHNEb7j2NF++l3FAKzSaGdX+6VhSxltQhvNnkNVMYxJtZ5JpFZkXy5lV EcJWHLaKoUKOMqseVSg0uHI9xZeDQiRyKLwcDu4bGy1htOJZSkCwwWSOyWzyVCtfdglx3PDOSQFp oAjId3n+r/DoSbgBvUEDSWhKOKcqIUQT4yy7duQw5pxcNTf+IkSSpcTqhhWqHHlT4Sie4Z4dnoP7 JV5cu87d3/xm8MU9XNlVbe/PStu0g9fw+wvzvb3+DQplbmRzdHJlYW0NCmVuZG9iag0KNDAgMCBv YmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggOTg2NDEvTGVuZ3RoMSAyMDQ3Njg+Pg0K c3RyZWFtDQp4nOx8B3iUVdr2Oe87k5lMycwkM8kkk2QmmWRCSCBAKKFIBlLoJWUwCQQSEpqKdEQE xK5R1FUsWLEXLJMBNFhRsXcXdVfXtrq77q4o1lUgyX+f93lPKLp++n3/9fvt9eck99z3eU55z3lO eZ+YIOOMMQ8+DGx6ec2EcbddsGsOU7oXMhZYUzG2vPbmRy44nrGDf2AsvaNi7OSymd0vnsvYV30Y i4+OK6+o/NtT36hMObiGMfXzcdOn1SxqHXkm495LGb/ONq4mMlZV839gyo7rGKt8Z1pN0aAf/vR2 F2Mc/bGmlsXNSzffZo4ylu/FALa2rF4ZiF675w3GGj5lzJg+f+mCxd99N8XGWL8OPC9tQfOKpSyd BfF81GfOBSedOn9QTsMQdGVgrHb8wnnNrV8ndnrQ/yyUD10Ig/1e0/nIb0Y+Z+HilWumn5kzkTGl hLHQhyfOW37yxJxh+Yy9sZWxRO9JS1qay8+Y+S5jOyYzllm7uHnN0qwROV+gPZ7PAic3L57nu3fZ RsY+Qd4+eumSFSu7fQz++PJ7Ub50+byl/zrY8jwevRePczPhW+OjyyxjVr09xzHqW5ZqZiI9/M91 Lwl+w7Fmy8EDnRfGf2Z6ANl4pjBKaBfHuhjfY9l68MCBrfGfaT0dkQzjhMWRz5qYkU1gWAHmZEVs HmOuy7TncqYaCvilKDUbtxiL0WUmsfoaO1dhZqY4jIqiGFTF8CGWO8zu6abnMjalJhBgYUwnRGMw 3aCEAozfKMrUB40JYqboPeHwaPirGNFNYl1+XTI0sHsM5az5J8s+Y/ccmVc/PTr/75J6L7vHaGMz f9TfocPtFcMv6+uo9n2ojdr4023j3sZz+/50mXEya/lVz8qmfoxzWYuh7hg/3MvG/VQb9a/McdQz s9ndv/h5bSzblMmO+5E9jw1Av5m/tJ/e9P9fUt9ks35tG8NgtkWdyxp+Yd2mo553kDX+knbKMpb7 a8f1/zKpe9iQX1JP+Epq/hY759c8g/+j+82e591yVD9bfqp+XCvbcuTzfjSWkl+2Zj319b7EGiov HN2vmsWqfkkfyn0s69c883+SMM7Nv7Suej3LNnb8eA3VU1i+eiPL/pE9n9X/T8fXm3pTb+pNvek/ JynXcovU6s6ff3/zbtZXyWHjgYcVI7vKeC67EraLhL2nj3p2PlDwa8ehphz7M6Q+vhWsQis/1P2d YNNodsVR7Q51/3BU/cXsHGCtspI9DvyqeID6Yzf8XDnfwy5Uh7ALf22//1sTfk4+Uefq33gc44H7 gOXAAmAAME+MD2gR4/utx/iflrCXZx+Tn/dbjaU39abe1Jt6U2/qTb2pN/Wm3tSbelNv6k29qTf1 pt7Um3rTL06qjnT6zQlfiByUWssMfDIMfViAGZj4kz47y2Z92UhWyiawejaTNbI5bC3byu4NOAPu QGogIxDq7tb6tKNNHitkx7ExbJJes1mvmRTwBtK1mrz726MGkqvmqD7GuluUpz+ey9jHY/FVrP8+ Jwfj6M8ms+k9fyezWuebD3egTlSvUq9UN6inqxerEXW5WqeepH6m7lM/V79Q96tfql+pX6vfqN+q x6szDGMMFeoUzMzFEpkXsw9pIy5io9hoVs4qMO7jMcsGNpu1soVsBVvJTmVrucId3MnTeCbvw6fz Bt7IF/GT+BK+iq/m6/kF/EJ+Eb+UX8N38t38Cf4Mf5a/pK5UV7M4/pk2xi9/9PspzhT9LyIV9vOJ H55lz5T12UL9F/NlTJ8x+4k5s5+fNXrfCJwBQP93fPBfzOw3TWq9tv9lDqulzlbnqA3qj/668hem 3nPzf+3chMe1zpndOGtmQ31dpLamumr6tKlTJk+aOGH8uMqK8rKxY8Klo48bNXLE8JJhQ4cU9e9X 2CeUmxPM9nvdLqfDbrXEm01xRoOqcFZYEaxsCkRDTVFDKDh+fD+RDzbD0HyEoSkagKny6DrRQJNW LXB0zTBqzj+mZphqhntqcmdgFBvVrzBQEQxEXy4PBjp4Q1Ud9KbyYH0guk/TUzRtCGkZOzJZWWgR qPAuLA9EeVOgIlq5emFbRVM5+mu3WsqCZfMs/QpZu8UKaYWK9gkubed9RnNNKH0qRrQrzGwXj42q uRXNrdHpVXUV5b6srHrNxsq0vqJxZVGT1ldgkRgzuzDQXri77aIOJ5vbVGBrDbY2z6qLqs1o1KZW tLWdF3UVRPOD5dH8tZ94MeV50cJgeUW0IIjOJlX3PIBHjbnOYKDtW4bBB/d9drSlWbfE5Tq/ZUKK Kfa4CeVSM4wNI8T8srLEWC7sCLO5yEQ3VtVRPsDm+mIsXFRQH1WaRMluWeKJiJKNsqSneVMwSyxV RZP+vXqhN7pxbqBfIbyvfefiG+WBqBpqmtuyUHDzvLZgeTn5rbYuGi6HCDfrc61oH1CE+s1NmMQi 4YaqumhRcGnUHRxLFWAIiDVYVFOnNdGbRd1lUdbUoreKFlWUi3EFKtqaymmAoq9gVd0uVtz9Yfvg gG97MRvM6sU4osllWJRQRVtd6/yov8nXiv05P1Dny4qG6+G++mDdvHqxSkFnNP9DPC5Le6LWCnM7 prasLGZuyjUH6hSfWi9WC4ZAJT6CY0ehwInl0rJiRceOCtRxH5PV8BS9hlBH9YOMmls2XhSpomnZ eF9WfRalnxmSTx+TMTdqPqIvJww9Y6Ln/NuhUW0xoPxAxbzyIwZ4VKdGfYB6bz89TkX4Qn8wWpjF co6XRWouTi5sCrrRTGIVvYEomx6oC84L1gexh8LT68TchK+19Z1UE5xU1VCnrba+S2qPylF5CeWi LAvFMqOUYQ9WFvjksmr5cVq+Jzv+mOIJsjjQZg5OqmkTnQf1DlkAJwiTjgtNaL6wJHEwjmYlbrdg ZXMQr5zKtuaO7o1z29rD4balFU0LR4g+ghNa24I1daN82lir69b71opHJbJJfFLt2H6FuHvGtgf5 +VXtYX5+TUPdLidjgfNr62IKV8qaxta356CsbleAsbBmVYRVGEUmIDKip2pkzFp9364wYxu1UoNm 0PItHZxpNrO0cdbSoZDNKW0KbAayhTWbSFgk70K4GNdtRaBVLM+6+oVtTfXicLFkLCW+eZQHR7Oo EhzdzpU4W9QSnDc2ag2OFfZSYS8le5ywm7AxeDKHc8Sd1NYUxD2FDVXHfJy2oiq6DHR0d9fWZb3s 21efha02C2ioi8YX4O435k5EvXECTTCPi25saRbjYJE60daUO6GlHttWdogqE6Lx6CFe7wE1KrU2 YjuiUQvWBguotd+ITHRjfbS+QDy0blG9tp2dUTY+OALLTn0aQ+JBRfVticFB2tnEUbDknicoHmNj NXVk8SGLh9WTk0w2jLwliKKWpgC8bWAtNdjqdJdafGSZhyvREJqnweLTC5mYlpprtVui8f3RIb6F tvYXR9KYa6qvp8FrufP0Cni2M2rFiEJHuFJvAO+gaIIYC77Pw1BF1SdEN1UdrDq4BjeLGLTWkwnF UXvuhGZc/tTeCkuwRDY2izvCqvexh6wmMXMb/K7m1nZ03xE8NeuI1K8wKF4OYmMy3y5sbFbfdqwh OrOgX6H5WKtdM7e1me0/3YD8Zbb3sDAGKvDWYCwWrwY6lLN3xHv5RIizpDhTijOk2CjF6VJskGK9 FOukOE2KtVKcKsUaKU6RYrUUq6RYKcUKKZZJsVSKJVKcLMViKU6S4kQpTpBikRQLpVggxXwp5knR KkWLFHOlaJaiSYo5UsyWolGKWVLMlKJBinop6qQ4XooZUkSkqJWiRopqKaqkmC7FNCmmSjFFislS TJJiohQTpBgvxTgpKqWokKJcijIpxkoxRoqwFKVSjJbiOClGSTFSihFSDJeiRIphUgyVYogUg6Uo lmKQFAOlGCBFkRT9pegnRaEUBVL0lSJfij5S5EkRkiJXihwpglJkS5ElRUAKvxSZUmRIkS6FT4o0 KVKl8EqRIkWyFB4p3FIkSZEohUsKpxQOKRKksEthk8IqhUWKeCnMUpikiJPCKIVBClUKRQouBdMF 75aiS4pOKQ5JcVCKA1L8IMX3UvxLiu+k+FaKb6T4WoqvpPhSiv1SfCHF51Lsk+IzKf4pxT+k+LsU n0rxNyn+KsVfpPhEio+l+LMUH0nxoRQfSPG+FO9J8Scp3pXiHSn+KMUfpHhbirekeFOKvVL8Xoo3 pHhditekeFWKV6R4WYqXpHhRihekeF6K56R4VopnpHhaij1SPCXFk1I8IcVuKR6X4jEpHpXiESke luIhKXZJ0SHFg1I8IMVOKXZIsV2KmBTtUkSluF+K+6S4V4p7pNgmxd1S3CXFnVLcIcXtUtwmxa1S 3CLFzVLcJMVWKW6U4gYprpfiOimuleIaKbZIcbUUV0lxpRRXSLFZisuluEyK30lxqRSXSHGxFJuk uEiKC6Vok+ICKc6X4jwpzpXiHClk2MNl2MNl2MNl2MNl2MNl2MNl2MNl2MNl2MNl2MNl2MNl2MNl 2MNl2MNl2MNl2MNl2MNl2MOXSyHjHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7j Hy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7jHy7j Hy7DHi7DHi7DHi6jHS6jHS6jHS6jHS6jHS6jHS6jHS6jHS6jHV62XQhEzbHM0X7EzLFMD+hMyp0R yxwB2ki504k2xDJtoPWUW0d0GtFaolNjGWNAa2IZZaBTiFYTraKylZRbQbScjMtiGWNBS4mWEJ1M VRYTnUR0Yiy9AnQC0SKihUQLiObH0stB8yjXStRCNJeomaiJaA7RbGrXSLlZRDOJGojqieqIjiea QRQhqiWqIaomqiKaTjSNaCrRFKLJRJOIJsZ8E0ATiMbHfBNB44gqY75JoIqYbzKonKiMaCyVjaF2 YaJSajea6DiiUVRzJNEIaj6cqIRoGNFQoiHU2WCiYuplENFAogHUWRFRf2rXj6iQqICoL1E+UR+i POo6RJRLfeYQBYmyqessogC18xNlEmUQpRP5iNJiaVNBqUTeWNo0UApRMhk9RG4yJhElErmozEnk IGMCkZ3IRmVWIgtRPJWZiUxEcbHU6SBjLLUKZCBSyahQjhMxjXg3UZdWhXdS7hDRQaIDVPYD5b4n +hfRd0Tfxry1oG9i3hrQ15T7iuhLov1U9gXlPifaR/QZlf2T6B9k/DvRp0R/I/orVfkL5T6h3MeU +zPRR0QfUtkHRO+T8T2iPxG9S/QOVfkj5f5A9HYs5XjQW7GUGaA3ifaS8fdEbxC9TvQaVXmV6BUy vkz0EtGLRC9QleeJniPjs0TPED1NtIfoKar5JOWeINpN9DiVPUb0KBkfIXqY6CGiXUQdVPNByj1A tJNoB9H2WHIpKBZLnglqJ4oS3U90H9G9RPcQbSO6O5aM+5rfRb3cSXQHld1OdBvRrUS3EN1MdBPR VqIbqbMbqJfria6jsmuJriHaQnQ1NbiKclcSXUG0mcoup14uI/odlV1KdAnRxUSbiC6imhdSro3o AqLzic4jOjfmaQadE/PMBZ1NdFbMMx90JtEZMU8EtDHmwWXMT495hoI2EK2n5uuo3WlEa2OeVtCp 1HwN0SlEq4lWEa0kWkFdL6fmy4iWxjwtoCXU2clUczHRSUQnEp1AtIjaLSRaQCObT83nEbVSzRai uUTNRE1Ec4hm06QbaWSziGbSpBuo63p6UB3R8TTcGfSgCPVSS1RDVE1UFXOHQdNjbvGEaTG32N5T Y+6zQFNi7n6gyVRlEtHEmBtxAZ9AufFE48hYGXNvAFXE3OeBymPu00FlMfdG0NhYYiVoDFGYqJRo dCwR73d+HOVGxVz1oJFEI2IusTWGE5XEXONAw2KuOtDQmKsBNITKBhMVx1yFoEFUc2DMJSY2IOYS Z7OIqD8170dPKCQqoM76EuVTZ32I8ohCRLkxl/BSDlGQ+symPrOoswD14ifKpHYZROlEPqI0otSY sxHkjTlng1JizjmgZCIPkZsoiSiRGriogZOMDqIEIjuRjWpaqaaFjPFEZiITURzVNFJNAxlVIoWI E7Fwt2OuX6DL0eLvdLT6D0EfBA4AP8D2PWz/Ar4DvgW+gf1r4CuUfYn8fuAL4HNgH+yfAf9E2T+Q /zvwKfA34K8JC/x/SVjo/wT4GPgz8BFsH4I/AN4H3kP+T+B3gXeAPwJ/sJ/of9s+0P8W+E37Sf69 9pD/98Ab0K/bC/yvAa8Cr6D8Zdhesi/2vwj9AvTz0M/ZT/A/a1/kf8a+0P+0fYF/D9o+hf6eBJ4A wt278fk48BjwqG2Z/xHbcv/DthX+h2wr/buADuBB2B8AdqJsB8q2wxYD2oEocL/1VP991rX+e63r /PdY1/u3WTf47wbuAu4E7gBuB26z9vPfCr4FuBltbgJvtZ7ovxH6Bujrgeugr0Vf16CvLejratiu Aq4ErgA2A5cDl6Hd79DfpZap/kss0/wXWxb4N1lu819kucN/jprrP1st8Z/FS/xnRjZGzti2MXJ6 ZH1kw7b1Eet6bl3vWz9p/Wnrt61/d304Mc6yLrI2ctq2tZFTI6dE1mw7JfKQci6br5wTHhVZvW1V xLDKvWrlKvWbVXzbKl6+ig9YxRW2yrkqsEq1rYwsj6zYtjzClk9fvnF5dLlhZHT5h8sVtpxbOrp3 b1/uy6wEh9cttzsrl0WWRJZuWxI5ef7iyAkY4KKSBZGF2xZE5pe0RuZta420lMyNNJc0ReaUNEZm b2uMzCppiMzc1hCpL6mLHI/6M0pqI5FttZGakqpI9baqyLSSqZGpsE8pmRSZvG1SZGLJ+MiEbeMj 40oqIxWYPEt3pgfSVacYwNR0jIT5+NgBvrDvQ99+n4H5or7dPjXRkeZPU/IdqbxsWipfknp66iWp qsP7qlcJe/MLKx0pr6Z8kPJFiiEpnJLfv5IlO5MDyapHzC15Sm2lxqXlxAOHaHOdkhwMVTo83OHx e5QKv4cz14eu/S7V87jzVaficHCHo9uhhB2o7kjwJyjioztBDScMHFbpsPvtivjotqvJYTssosc8 2/TaSofVb1UipdZpViVsLS2rDFv7DahkKg9wzrgTpJpRdwf3+CvVR8X/ro4ZGeeXstqCSR1mVj0p ap4+M8rPj+bWiM9wVUM07vwoizTMrGvn/OL6dq6U1Ubd4he2Wv6cTZtYxthJ0Yyaupi6dWvG2PpJ 0Y1Ch8Oa7haaoUp9wewVq1YUFKycjY/ZK1YWaN/I8VUiVyCM4nvFSuTF1yotzwp+NlE10JwVSCul ceXPt/rfnvhvPYD//NTOxB8ajOlWzmatylnAmcAZwEbgdGADsB5YB5wGrAVOBdYApwCrgVXASmAF sAxYCiwBTgYWAycBJwInAIuAhcACYD4wD2gFWoC5QDPQBMwBZgONwCxgJtAA1AN1wPHADCAC1AI1 QDVQBUwHpgFTgSnAZGASMBGYAIwHxgGVQAVQDpQBY4ExQBgoBUYDxwGjgJHACGA4UAIMA4YCQ4DB QDEwCBgIDACKgP5AP6AQKAD6AvlAHyAPCAG5QA4QBLKBLCAA+IFMIANIB3xAGpAKeIEUIBnwAG4g CUgEXIATcAAJgB2wAVbAAsQDZsAExAFGwDCmG58qoAAcYKyVw8a7gE7gEHAQOAD8AHwP/Av4DvgW +Ab4GvgK+BLYD3wBfA7sAz4D/gn8A/g78CnwN+CvwF+AT4CPgT8DHwEfAh8A7wPvAX8C3gXeAf4I /AF4G3gLeBPYC/weeAN4HXgNeBV4BXgZeAl4EXgBeB54DngWeAZ4GtgDPAU8CTwB7AYeBx4DHgUe AR4GHgJ2AR3Ag8ADwE5gB7AdiAHtQBS4H7gPuBe4B9gG3A3cBdwJ3AHcDtwG3ArcAtwM3ARsBW4E bgCuB64DrgWuAbYAVwNXAVcCVwCbgcuBy4DfAZcClwAXA5uAi4ALgTbgAuB84DzgXOAc1jpmI8f5 5zj/HOef4/xznH+O889x/jnOP8f55zj/HOef4/xznH+O889x/jnOP8f55zj/fDmAO4DjDuC4Azju AI47gOMO4LgDOO4AjjuA4w7guAM47gCOO4DjDuC4AzjuAI47gOMO4LgDOO4AjjuA4w7guAM47gCO O4DjDuC4AzjuAI47gOMO4LgDOO4AjvPPcf45zj/H2ec4+xxnn+Psc5x9jrPPcfY5zj7H2ec4+7/1 Pfwfnup/6wH8hyfvnNmMmW5grOvyo/4efTo7ga1gG/F1LtvELmePs3fZXHYW1Ba2ld3O7mJR9gR7 nr393/x7959MXacaFzOb+iCLY0mMdR/o3td1O9BhTDjCcjlySYbAYUu3s/vzY2yfd13e7ezqiEtk Fq2tXXkD1q95Z/cBvF+R7x4q8sp50A6txZemG7ru77rjGB9UsQY2k81ijayJNWP+4q/TF8EzJ7KT 2GJ2spY7GWUL8DkfOfGX97hLNH241hK2FFjOVrJVbDW+lkKv0HOibJmWX8VOwdca7d9OnMbWsfX6 5ymaZR1K1mr5NcAGdjpW5gx2pqYkk+UsdjY7B6t2HjufXfCzuQt6VBu7kF2Edb6YXfJv9aajcpfi 63fsMuyHzewKdiW7GvviWnbdMdarNPs17AZ2I/aMKLsClhs1JUofYc+wnew+dj97QPNlC7xGHpF+ ma/5cCl8sA4zPOuIEZP/Tunx1gbMXcytTZ/pGtjPPKLFat2PouZZqEm90DqIXtYf44lLMQfSh2dE uSu0+R+2HumVn7NKf1x3hGeu1XJCHWv9d/pKdj1O4E34FF4V6mZoUjdq+kj7DT11t2r5W9it7Das xR2akkyW26HvYHfibN/NtrF78HVYH6mI72P3aisXZe0sxrazHVjJB9iDrEOz/1zZT9m36/ZYj2UX e4g9jB3yGNuNm+ZJfEnLo7A9rlv3aDbKP8meQl7Uotwz7FncUC+wF9lL7FX2NHKvaJ/PIfcae4P9 nr3N7VCvs7/js5O9ZvyEJbAx+IH7Ifj5OjYbX0bcSivUN3CLqMzEhrMpbCqb+Qiz43WfzEbwnTs9 5eXmfqbH8CpXWADBgBk/rJeFHQbF/mBaWmnwwSFxm1TXhA7eb0epaRPC3NLO9ztfKep8f1/i8KJ9 vOi9j97/yPnlK67hRcUf7f1o4ADuynJpcCcoJpM7LpjdXxmSFxpaXDxotDJkcCiYnaBotsFDh41W iwdlKqpbWkYrIs/VNw41qNM645QNwdIZxcbMNIfbHmdU0r2J/UblOmtm5o7qn2FSTXGq0WzqM2xs 9qSTKrLfMbkyPMkZiWZzYkayJ8Nl6nzXmHDgK2PCwTLDSQc3q3EjZ5XmqFdbzIohLq4j05vad2TW hBmOJKfBmuR0JZtNiS5bn/JZned60kUf6R4P9dU5BW4Jdh8wbDC6WTYLset3sZzuT3fYnHxysEMX oY7u/TusEFYpLBDhNKFyneLTrn3atM9wH54rigutfEpOMJT7jc1q82ZnBC12nmywMZvTptwffDz4 alAN2oK2xIzqxIgxwkpLSxOHDy8qamx0pQx3QbqKnfsGuYrh8YJGehWygoLc5OQ4zeV5apaaoAaz Q6Ghwzj5OcUUVLMMq8zcmev35ybFG5Z0/vUE1ZIUTM/IdXAzjxnsqXmZgb5pCYbT+Af8yeOSfQkG 1WSL5yO7no+3xxuMCb5kQ8yaYFZVs8O6qfM08W8o7xH/9Au7K5MVsBL2XDjN73XyKX6nQ3zY8eG1 4SOAuYrfE4f7pHnCKPeEUe7xWAtF5UJRuVBULhSVC0XlwofwMyHr3r0TmoWK4entqAnev92hs13j 77bbNP50u1Ww4gzbt1p3WxVrWt43AweacrT/Ml01uINb2021rHRfqbZvh/Oixo80pw3aW0AC5oKC 4aThVHeCIZiVHRriGjy0OAve84j9nKnywf2VYNAlNnPSYWng/pJpLcsmdN2Xkp+fwkMrN7cMSi4Y 03fIrIo+XZ1pJQ0TY3vKqoemTs0dd2LVKwdG1pWF+IrjFlSP7uvx5xnOzPMX1q6d0r92XEmiZUj1 yQovmjwkvasxOHJa53sj6kb5u0rSh1Uzzpq79xtsxkyc4rnb09nIAt0rBbpXwJ8Jr4A/F14p0L1S 8Bh+xk5gXl7EsliIF8aSagwP875sCBvA+7fHz8CR3rtPgBfR9J1v7Rk4INedEHfEsYzz6MdUHGCP O1MR8xbbymBTjGZ3eM5pEza8eMmUmitfP73khIZKn9moGsxWc8KgacumzdjUOmxIy6Uzp6yoGuww WeLUB53exAR3fp6v9tYvr7/p0P2zPIG+voSktER3elJ8XlFexblPrDvt0dPHhIpCca5MnECxyy7B LktkfnZKOKM0iyeJnZMkdk6SG3NOSsSEk7yYbdLDYuewNPJNmu6bNH3HpOk7Jk33TdrD+Lk/Hr6x xRKqfB081G6kXSJ9sVfuiEZxox21JUxHbIBLZty2//auz7Xlz73z0+urdg5ecve597evu3v5cOWa Ow/eVk0Lffwtn25ZtPPsiYdcozc+If51K2amrsPMCtnq9rQ8fUXz9FHn6aPO00edp486r0NxhePj kwJJAQw+rYObw/aNIb47xF8L8VAoLlX8ksZelQdqj+vZ9Y3LlmNaRdo14tR3v7bOyo92ejDLdYxU 1xksdnPn5WKGynyz3Ww04qMrjsfMuBoM8dBTFW62WwzjEn2JZpqtOdHnTvS5zF0nxDvTkxLTnKau gWaXT5t39wG1FvPOY7PaTUn6vJP0eSfp807S552kzzsJ895pz2CZGSZMbXtSUmpcB++zPbsqVVyQ +hupaI9reM/s+I8mI982crpqLSZm6oL3TBi8psNmdyDNm+02Y6qVmnVPUjpmMd7k9HmSfK74zr+Y 7CajER+G+8QsM8SMZnZ/blhjDLBSdnM4Iz3d4RU71Ct2qFfcbV6LTSjMwitWz84ez+OBvHBeU56a 59Dn79Dn79BPskM/yQ59/g7xF+JFg/lgbwe37MjOHl40+mFuwTvewvNjw2vcHbywvWiGWG+cZhe5 Q7/n9jY27um56HS/HHWahw5ziV0gTrvmLZe4AQ+ff4NhjcFsM9lKZp/VcOLdq0sr1t41b9RpQ7r2 ulyGeLwjrrUmJ1oSR8ya2zrwys9umdF4175LJ545ryLNYpidlJFkDvUPTW17bMm63WeXZ2TwU7Nz 4Eaz2Zme2JWUFsrI9toa79m/+ZoD0ea0YH5aNu0Pw3S8c4tYx47SgTxo011k011k07eITd8iNt1F NuHc9JQcq/C+VXjfKrxvFd63ivvBKt4RKSzswYslnCQ+nC4+mYVRzlLEr09QIPgBlKX0rcYLpDDs 2G3jr9m47ei3MQ7UvlKOt8Ze4VZ9yx0+WI25PVvtyF1Ht6YHNikN083uLG9awG3u3A6VKnae2Z3t Tc1ym5Up2l6ESoP3seVsZmV055NSG96RqvOAEie1fr54HfznYdMfLE2ZlnJ/isp0FzLdhUx3IdNd yHQXsodwJ1q6dz8IT1ic1dp0Mc2eizD3R5PhdXLc8Z6slNQjR3t4hPLUf49RFbO5YddAcRgGiDUp EirLoo/Poo/Poo/Poo/Poo/PIpbY5smrzrI4fdXOw9FRqby04X180jhDoTz+E+7XgyKPO87EeXKy +r3Jne0LFiabunKOXQP+QpwzJSstLZBksid21fBXXKZ0cQHGOS3KeZ2n9lwFh9fiCaU03mYyGGGw p6V0dndek5ak3/WTMPs0Nn4X89BkPfpkPfpkPfpkPfpkPeLfOrB4R7WngxfolzkvelkuxhG3d8/G EpfaJNzI8Z17UvJ7JvGaCOEmuX1J8bib75NDPXhTvCtdX5m4AtzHo9g9YWfT6KWjFfuAASlFRZb+ Xm9axy98mYqFycwZaLNZxOmziNNnEafPIk6fRay0RewtxHXhVLHRcoZWWb0p9iLvwP5x/j5V/og8 XKWJCHKLMVEZnSHSdfYo1/DjioqLRex7xF4MchHvIvLlwaPueC305cVivTX/xBWY3f7UlKwks9JV rFo9GW5PptuqdI3jOGmpXixyoW9hYECON56fYuTnWtP8odTFDl+S7fCWXnBws8liUg0IZfDDxZYe ++19c2xpfXyHjldvz+ybao1PyvDoN9kGo4sdx87ZnudwuHVnauzQ2a7xfuFMt+5Mt+bMTEv//oOE Mwd5HeIDFQc5bUKhyiBRxckyS6ot/R15hlTxHhQ7RHOfcN6PfFdUrG8Z8hTORjA52fMT/spUU4pD R+wqwwa7J80+LC0vGPR0LQyMSVcUxZzk93r9iebCtOqMPH+Gi4/IGDpooJcjDEjypyYHEs3j3Php ypoxKE/5cPj6keOvnHjo657TcnefbEtKvr/zucEtTY1F07ZNUx7DzxqIJGwm8X8FaeneZ/jUmMWS ECGsC6e5hQ/cYkO5RbjnFuGe20tuKg7HB9gAthE/jWTqzs3Ud2qm/iLN1F+kmbpzMx9GSGxhqXht OmqC4mQZZxwd9jUe8ZPAUT+ealHfETGw4dOJl7+/+bI3LyyfuPn9zZfs3VSxM2/m1UuXXj0nP9Rw 1fJl18zuo1x5/aH2Ocff/t3WLf+Hsi8Bc6O686xXp0qlow5Jpfs+Wy2pD7W61Zeq232pD9vt9o3b xndswAfGGLCH0xAIMAQCmQ/CJGySgZBJAOOrbcLi+cYZkpk1S2Y4ktnAkG8mCyGfd4ZkN5yt3veq Smq53Z5k2rSqVGqV3vu93//+P/HZ85tW/9Xvn93z8v1LVz7w0s7rz90/sfKhHyEPF2rGV6H8ebEU dtOxKK1PhNYnQusiR+siR+sToREFZMGH4PEheHy8yQzGfSiG8qGmXUyIQV/hOE2b4DS54/ZJU52r pBGEv9Rbiix0kcg6R5d4VTn0w5u+xkohF9IqDW5gb5jYdd146mTXmunGb31j6c6hKPG1zU/u6a5k a3IBl5qRSxtuXrNsd94y+2lyeKu2wn3Ul+EKJ7Au7M8VnzEkJtEskmgWSbTISbTISbTISTgTxYgF vU3e272Et0UHp0UHp0Vf5RZ9lVt0cFrQzjoxZDRnZkDqhDwVI9vRUpvRUr9xAYFQnF/vmndUbG6i dAQSdH0IpMeAFFjAADgLo4m2rbvhaG/z17dWmXD/Pz00IqV6G8p7RpI2Q+UHC0lxvRwQ6FBpfbe/ cfXTHz/1xKeIGb/7y8lHj+7LdC8JW6UI/t6eH92/dOrBs1+6/pUHIE1exjSekBzkSQEbwB5W/HxW aDfAqbYj1NrVtW9HKLYj2Nrh/E+nULydKgkIK3gm6JgJOqEEnVCCjpmAWqC9WR7GFKf2KUBR5B7I m5OhSVlXzWokcbEGXF38XNR1i5p+yBKXEckh+wk9jJYlhwPk44l4vBpAcbQt6neHbBx5yJ7pXdl1 oEoxGFBJzX3usQNLE5H+DcVgPpO03WAxVGYHlrtKrQ9/b2BrfwCqZgPUHFAxNufXlCKzv6hRD7rn FGHuWL13Sd/OZZ02S7p7aXPlX6M+4u7xXTJDV8ZDXcuhjh6eu0hshVwsY++fwfrmPjhh5cF4nw5R nw5dn66h+3So+mbwRiXdokg2MN6iCGAi2hJtMXmc6L0eZPY8PI8e4Fs8aDk8Z/FmZPuOe1Rf69xx l360acdTVuSImrIvgQTWDl36uMIJwXbQrnAmMC6g/hsjOmsX2gVHN4x/TvZ5qNSUA3Jb115wCS4K KLpLp6f5izwS8HnPVNReWKDWyCq3tfRclr5CuE8TW5cc+m/TfXvXdMkcDAQMltbl+0c7ppdEW1bs 2vOlFa1dux5emV4z0S3RJE7QHMPlBqY7C8vz7pap3Xt2T7WCa676860tjmDYGQs4fCITTkb87ctb 25d2Nbf2rty/bPK21RmrKyBxglMSvRLrjfh8Tf2xwtLultaeqf1wjaxQQ74NmR/Gtp92KiiiEhBq J5AH+yerS+R+CHPnTiLm0yIKHn26RmyBLu5HKjg/TvPn07XQcd6Jr2oC1cF6Ww15H636ivBMD4mJ o2pArEaMn3+zRsQtBsErSVpSEflb34f27WboC6axxxXf1RkQRFIbRFIcRNQJIo8piFiD9rgqQn28 ApmGOfQJO/QJO/QJO/QJO/QJO87iPPLlUVSDGuEUFt7CGF/Br/DM80YNYnQ9mJ6nyDS43G3WVV6d Y3Dz4O0zB6954dYBLWiWDI1TB8tjByfTKjQhiQXv3njm9v7em08dIiJVOL743fp71mUa1965hpDr 44Mw1G5fgqhEsT2KL4oUWzIK3OgYd4OkDOJm0OgCjU7gmtGFVD1Bas9ZvYJOFBFdcjldzngssMJJ iVoUIxZLggg0QUAzxKanwfT0dHo6HVOdRxK5RIVCncvY4nDQDH6atLgSPkfIKZgYorLOAMRk2BsS WRIcAGAXYYCqKxA1EwY/So4C6PdzBvJFNX1qMBs/f4UsoesofYrm2AM97ffgHLuxncfj3QAaq0+U JUiwY5CCBnSSzIEYr16JgbATnaTCwBlEJ5lmkGkCmSjIRED7ioYVkSaOqA9Kod9XgisHf1BaWP8X q3nGRPVs4TQvnTB1F8l7U/5A2mshKx/hnxEWdyoYavRaicr3aSDEg4GoxOAgAoCNYG0xvzdkYwmQ woGPoKWIzx/hARW3CMibEyzEz77IVc/Jv5bdCBUL9/l5spOzQq1tsHKf/x3ZZYTnlMUtI4SaoKT/ QY39mxRfKgdSWRB3grgMEg6QxEBqRYQTfCuEusAPSuu0+jOfAAeglv+um21tioD4NzMlpsLBqJ0j K+9V3qFM9qg/FLdSZrC58ryJ4aGCijuMNHAAG2WUwr5AQiBNlRd6HW4rRRg4FidmZ6GzSlBWtwOf wksOj5UkGKgUvODfDGZGXe/ZH6P5+FXfzoY1YOvOQAPwpwfhJii4sprbOKeYULIjtsJDiytoncug Xp/PK6r56UIrK7cWCu1SjcllLR60GyqPcJQ1EfLHHBx13NXixuVm1wmCk8LuaIqnOPBxpSas4B38 n9GykYzZWHmg7Yau4v52cKPRwqAFc0CfZAO0niXi72FUr2AvKEFrf6A/109wrJw3wRnlkT7LI1WW 55F85mfAx4oFSySsGDBhSONhnbpl7dRjoU4dhM6qTHfO4AbFJsg/xvJ8Hu86lwdYHuTz2b6GGeBR rK+HQThM+j7Mjvb80jRBYrlqxlNNgk3v3zhddezPpzdOF/XsZwt0WDbCCBIRBsY6bXXOXmub7uPp V0hV1zGaMXSgZBlR4r0ed8DS9fDk8IHJTO8N39t1xNG8tNizudxsMsBAhvH0r96R33zvyvh3HxzY 1h9Yt7xvb4/TZIKeuGl9aSg2tKNvfN9obCi/vM3ji/gMvMvq8rkjPqlx1a0rz8uZUmpoqn8Aovs4 RPdNaj9kD4wgT0JlbQwVdLIUdPIUdLzQcxWvwgz4RPHY08iDTgdRTQDhn0Y2Js2rpQLcqLCY3Vho C5FU0wygTsVHPUP8eBGeHqMmVKsAIZSLtShyHrOaXUjYLzcQmjKpBkmM4HCoYcObrVu/Op0uDw0l DKLHDsNCmpGCTheMEZNjIyPJLfevST5nz69Wgr3KYGLgyJLete0u8P7Bl44OCfHO1B5IRUg/k4Hq UD09+DD761RHhF961wsHB+/c1iM29LdUHp9a0731MJS39RCxIPFTrA2775hX9bA0gXtPF7QPTiAB WyTZ/n8uTbLPfagl33FOMecswOJ6P6AYzSOB6AzAT0ijxG+bkf/BmkeaG2cAfYydQJWU9EX1oZZ4 PV9Lsy8op9Cae0XXF1OIIE4xru6xtbnNX9/e1rf/8XXpyYE2J0vjotma6F7Veei2kDLdXVxdSptQ CuLbgkswu2I+UTl8/ODdr9zSxbvDTovkFBOBUDJ0+rk1d61NR9MRg+RDscPVEJcnqeuwOFbE7lcC pS7AeYpIOovI2ygib7WI2FFEZCm+BND/HS6noZbTwcrpYOV0ic3pYOUQoYxSaIgrJjykpQFt+nCO QlEnj1smqHHkYKl0Ki2oq6h8qiVx6kUQhgs1VhHxeH3A1U48yQheGyrVDj9+1dYH1iRbtjy8adld CmMLIE6xTy/5s4ESZBBkVF+oRxlKuKoEOjSxeuKuY1tueOno8OASnKtmI2YHIXe2HFEG7twOubSk GaE1DdF6HGq1NJbHnlMacoVSYW+BkJA0SUFUpJBCjci3b0RoaeVLVb9BLnx6ciD93TSOCnMnkbTl SZ18pM4x9TmnHjUFRyL8QqHGV28nv0ri50jwOglI0pv7ZXzU+eHVln0W3MJ+6FUJNl1fzdGE8p20 Rja1hqkKKB0J1dHKfin5cHuioALKEI8nXLMv+of2TSrbyjkTw9EETjBcYfV+Ze8z13d2739q6+7H rs48Tdx8qGdDbxjH8URo7KbVWbvbzlhcolmymjiXU+q9ZeaWG87cMThw4BtrpTsfzY5vb0d2Lzb3 GX4PdRP0dLa96OCRAKqC59G1lqeqrTy6OvPoZPKg7a1NDbGZudcVEWXnY8aLhWF3/GLTSHCcH1Gj 0BaUq0mfb/1Ik7HW8wtqGnY9u1sfhUb0+kZrtaaB3wN9NZqx+1OeWD5o+Sm06pRo/akBqiZnUDLc xvNI1dwWGbluNNIfNUEfzirJForlWGfrZOcWRnBL0eAXv0XuHip2EvZgVHILzPTGL69Oma0myYMq 5G2VrxH3ET/BerGl2CbsdcUuZoaRlA0b4JSHg7wExodbS9ALRBCUdPmCx/dOoZdKzDJ4qpitIhhf 5iGtTUQrwyD28Cpe5xQzPMm0Mh4P05ohEcZKHoG8Fn3E2iAP37a2IaZw8BizNjFEx+g/m6Y+sNuv 7iB+0z3SEOz/RcfoVb8ILtOLhCWtbPSWpvrTrRcQuDJ0mJHLLMCL/IU0/C9dfUCoQ4wdDs0UxBM0 1GcOWY/0q5xrh+Y1X1AfNckOtaDwv2ZOUTE9nkhYCP0ZcZ9kvSPibZm+fWn7Vo8o9xV+u2Tfimz+ mqf3X/f4lkY+1BxszrXEAtH8hjvGU8MBwAtCpbJ9umk4J2+/qnkkJ09tmvxNMOVkj944tr3XQ9wQ CUTX5JbeNNXoc4hZfySLG/FQz7qu3n2rmmPKunyot6PV5Rpv7Lk6Hpvun7hlZYY1hCofbdgZ7Cgn 1+0ItI/Mbuws4QZXJpW09y3xNfUifj8O/bqnoGVuwW4+UcqDhvkypU7suvqlXs+EZln2a8UotSyl VqRUtcGh14xaHcrf4OKhRTmdGY0OucZV9akmXkBOL8Noxrh4aTFGtSbMIrUOzRu0E08ZRM3mOrPl pt4jA/CpmvCumuLhr5bXHx4Puap8xq0TGweia1fN3l+9Um9/x8o9O+7bjDTl3XOfgUkqh9mxEPbA 6VJkWWRvhHDovtwlEamkHt9bELlqkepL+H7Mi9mvVAbRIbVDmE4ZA6h/BG30POHiyyo+b11M69pQ tyyLV6okZHYRGSELQe9CAKTGrs40+q1BQBxltAkzoKmzIVWEv3DGc29Wvga2wRlHsSbsnuPLWlBH j+oswOPv0LhjVcWOWn3QBGLoOy/SJkz/uzp3X5tXze+Huk8xulxYSxbNMQvneDwZKNugJT1GqVIK Zyq0tlb9WW22cK7UJQkdx6VR+iXTnvQr24aDGScMXwmGZeiIHMr5LVWlhzBoSHd1NVi3HV6ZNhjN gmhGlXvKlhkpE399ORyaHByBcpDHHlNMpQJINYNmRQQT0D16XZ1cs27+mtHsTepRNX/NL+EJLAzD HA2DK9d0oWi4HZkMhiDRRMQR5qhk2TskVMVDTeZCZwt696pNaHmvyoIaDf6kQuARA4yBPBGnla4c XcgPsNIgumD8FLazZmvlLNhj5tTUIwz7WPC7ivlyMfniH2GkZGYJaFRZk5OvnK3EBLuuO0AvxMyO KWp9dq9an108FJznCPjkhJEfUmesE2DxeuxlzHZdPjR9FNTr0MdZjn2oeERUhVV7aOJq9iGhph72 rQBDl/dhaBnRun6ND2v6ze93oIqLv0Wr+qn1P7X0p6o5I+T36eUoh7W89/K2Fu22l7W/vAQ+gUqW B/SLY6PQ+aYVc99o71Cmo5wZd9Wtf30Bp6jnpYVitXKNtKW62e8/U5lX0qF2PaLWyUK9rqlSyWBr HMgWDwwi6ZFDEuNoXJIt3lDTrLTolR0+nhl/qNyxbqCJz0yODUfX3FgOzOvYSHGBjr38CnEUOiYE wXKGQ6uWuXN9yeaBBgkq3/GqDYIr2II9qli1FUQPujlauEpX6KpBwaKf4/mqVVLbJuo6JsAnp3XD hMySYsyMNrii5Sr0yGuoWaZqNUlH+08wT/Y/Zp5qIP7FxB8xT5cABQG6GlknFA2+CxFClcTvKd5S CiRFkBJQLjFuAnEDiDOgQc1eLVI9fG/R6iFy1v05IzDWlSWDl5Ylz+JGlOs/bcUm9sFlcqGd7tbR CIwc9fAaRYg6ZLlasXG6+vPHqo7Eu50Hfnj93r/aUyge+MEBeGx/ztO7e1l510DIU9q9bGT3QBD8 es+Ze8b6bz1xPTyOwuOR8p1bivlNd06M3rm5mN94J8otVB4l3oTYoNzC7Si3ECos0nWhaZ/59gvk xNi1tIKaYFArHlqGYdG8QplfdsW8wmJphUU4cuW0wiMbkwN9SrSOLDa7R2RS4xOTmS1fQWmFVjWt MJQYuGVJ77p2N/jNjT+6a5gP5yOV3qouJH8DOUOgrN7NDb0p+/jR5w8O3rGtW0otaa48MbW2e9sR NX6GaD2po3WP4oFwBbg0Epi00VRNsahKLo1i5wasVaNNXdfqh3rXarWbtdq1CmNne6zM9aQDJJ9F sbN7tAPFzvwEsvmLx86XYNYmaJndKl/ktivHziwSs4CNSY2OlBMIopatD29KDg0ON6DGZ5tXYC6L nysnqkiBC6lixFqNoYVYV+q6KnSV/6cF0VpCBgbRqnbCn1Ezg1tP7GsDcatOqvmGNp1cVp11VkQu sa7QgViGuSHnYgqbHo1b7cGyfRzT1b1q8NM1X7g+AFxM0agkovFncJo1GGRf1O5qauuMLFQzsb7O os8civpMJAGILQ6/wLKswZYdb5994XJFc1dhIGElDEYja1H7GifnLuKvwRmXsdcUU26sNLZs7Lax 58eoumLiH/QiokqKPpSekhYUGdXiIvilEtAqimotEVFMLyiiEBnpHM9Z8Ae1mcaI3CKTwump4ji8 X8n0vAk3Zd9pN/5WWC5cLewTCK1w+L9Q1XDU8YEmjLWSoV4wnEYloLqC4bwv/V8tGOKvtW68c2nT msEmh5FEBcF0aXVHw0CLJ6EsXzWpJFIrDq+IjnSm7AwBvSMjzYYL5VyDkrInlRWrppQEsAxeC9db dtmiAQn6n56gR4wUYvF8MhBO967ubttcbjSJdt5kdfCCi2ccLocUafIm2pLBcEP3SrQWobl/x68j f4h1YhtOpDAhktExz+hrkdHXIqMLZEZnZQaR0CSbMxcjIz7zRXmkGXnfjKa2LyDaterZqwvntdQe uXiC4dI0hKOajsGvM/DBVFYe2qb4brWKqGr4Z1VH7X2UOxat77cPy1GvzUCxFHmVL8xbWDo2dmAp btEyDG9VW2Xe0nIQFeP0JtbIUhYnmvejKM9H/Aj6BI8oAegJcAnEoARiUALV0hKqkkrwqssFPj2l SVpARyWgowKPn6iyiU6Oqw38urAGdI4GUKzCSplygqNcZeiYUfPJvvp2vBqlFk32LSguFtrn035P MqLPLvsEeuLrqulnbFqMIudGmnoPDzK2AJRcka15BIdWLe3eed8WPFyVztn/u2zTktjaVfjB6hW9 ykgchvg0Yv96BovMQWuGHN2AWnuLBYBfO/EDhz5Pu360zbu/6lGs9UzM/YfSjhouoFchgAQPkhQI J+GFnjCIhkEInZZCIBoCQfVqEESDIGEFN4ZACCW5WME+EgpCqQ2h2iULqRhCGUb0DK1ECN3fhFok k+UQ5y5z4/P1nzTa9zGteg5p7T+1Eqbhjqp/aXUnTq05rs5ESLJWGPLjxGGAE3jlAml2J/3+pMtC Vl4jKdTGJfsiEktWSOJz3CiFPLJfYIhvkazRxHzxLCpqkgaLkVhjElkCxoQ4fGBn3SYT/r9Zk4HA DRxCuw3GGEch2oPYu2ewYaieeuDUOlDyK9UB2tExlgXxEIgHQTwA4n4Q94GEFyRJkCJAZxfo6gRd GdCN/r8ydjDB6+kDdFSMkK58EN6Bt+qX0VEtlVnRZWtfWf07BGaJX8bv5W/jSV4RHSN8azlW7vxq I2hErzUirclLjpGdjYca8UF4VR5nEchvIiSnz5dKFyCSGt7zpWOteKz9aEDTNZyJBFNXa10E8rpT 6ihJVT4mzHLSH2hwmYiXcfx5wuxO+QMJ+KzyKUXC6EL2hkUD8QscfxVnRUj7gGjA38bBWzgrhdxO H1oWxmadXxT8QZadPTC/RFYbw3JwhWCkOutmWbhCZqh4UbOqs/oMNxjReqWgdIzB9cph95zBmiEw AsrvI72RRRqjKwuckI+nUD3PCWRdNziqlxyARWxtQHErek83BjoioMABLojCC7QqHNfclCqjGm5Z qIUQWmU+V6vKI/Jq/E3HHLbqpiZikZquJM3XdJcYpETAH7Fz5M/fJjl72OuLCYAFzsrHBiAlgr6I zUheeJ00CgGPLybibOXTRotkomB0zoDtlW/AA0GZJAs4DZ6xSGaSoI1M5RhYRqNuT85mrWxE2gN6 gUcgPlFsxRnMA+fahiTfA1Ie4FSDZyeIWwoWPMECNzLJnW7g6kDAuUCg7DJKZeMYuQwb04NWVK1P a0KLhDdEaFNtl1Dfcjxfq9JLalbHYWPw1pvo5hZ3UMDpIyxPVF4x8FG/P2xjKQCIT2ghHPRGBbpy khcok80CiqRoJDbYnRaKMFjNs1n8LYmjoJ0Q4UzWQaf2beI0lsa6zmA8nIkDdU3E1S6yHHw9zw6w OBsTYNBy3DViTajBCxw4Sr63QF/hwjTqs661IKuZXnDJJgK13QugU/xt2mAxzL5l9yA+ggcrt/ES 6lHGSU4wMeha5SB42mBm6SHJIzDeUNjicLh4fHcoJsLntMUhBC1O2c3Pfp3hoaeFA+PcH8AvqY2Y HUthlpNUzDPBD0FQ33mtrmeTiNcSYAs2Gb7MoE1+XpERgMEe8XoidoOFdSUDgRSUB2cqEEi6WHCw 6vUSZ02iiaJNgunzYijt4ThPOhTKuDjOlVHzn38g1sCR5LERLK5YotEAaztOUU3sQCeykeBY0xBy Hd5BuyTV/Lo2wtr2SHWUuj91WdV5YSRIrGlZf+sEE0nY/aKBBqzoFR19G4ruoLK5v3ONkjIy0BjS tuLk5vw1T2xrqpyHs/EH4Wzg7IJ+ODviX9bee3WB+shqReIPoH2VmNTAhpbipsG4y++kBZ/D6ZIC brHnSw980bVwtgBrqLwLDmDvYR7M+CInezH+jQta4x/DaBqvXaqhfIC2yMJ9lFlySYJsBOTdnDPq dkVl7qFAPptxvcYYDaoSAtLtniBP03wQxVkjlX8BDxKPwYg9h4WORW0v4cuwOHzh8EljIN1EWbHc Bfih0Lt441d/d3mDrrD4UB5EqxtMotVNBtHq0mZZuJcyiy5RHdpdJjnqcsKhEcFgI5pzYzCcQcfM 7IQ62P9hMDIkinOAUBssjr0097E+1gTmOYbZZvDDp43+iGucso5gpQulC8hZbFl8lJcQ8rLxLXx+ +biSIe0CXBxodN0ZpL3/Ao5nD1wdDpOPoba4c6dQ+xtLQDULh5L+G7RUdbngPbne7iz6vW44lx2E v6hi9fW5j8n/wN5F98AiWMMrmBM/gvkxE34YE+EyHDlNh+ysx4ru2dp6oQWqgl+hf5femrrCOdiV 6+7Mol/wt1l01gWt+/nqtWuHctmBRX7hzB4gDoI3qJsg79gXaccwnA9E9ZIqU7tmCGwMGDc5oy7E M41/JsklijJHkkO3eYICTQtBjz+fzTpfU5dU7z1rgPc/oN+fk/X7/xdpTcUDrbmM8zXGpBpXFki3 uYMiTYsqr+8lDhFZ9RPaMfMJOuxogZ8CAVx0Hn6oOBefHf40J0eczrCDgxTmv0yZIIV5hxFQFXmR F6AtJIdv1Ufh9rdCJl+oTrty8QovoNGmiUP4z2qj5RJya220NVTi8fw8LNSiYOE/Q4O5lzSLTjQY 4qhRjrjkiIOrPFH3Ahw+qb6CRk8lAnA0zgsGDgkcRFGAKKrL5r7SC3D9QOV9wkj9d2gPDMd4CstB LSvrg9Fz/Mz3SLPNZ3eFRJLGp0mz5LfDkIukPjJbDSRjlsz0YbOVhfO3meH9BsEJPIv3YFbMcgJj uIskhlrm9YpnSKOzatmyolDZKMIf8G1ovyjwacIfiMf9tODGALRRF0kcvxXeRXgR3uUM8GJXuhGJ S9IXJUkUJeJvWCtL4YV4JBKPRVhtx+Rj4CL9LH4bZq7eyXeFOznoZ2XrZ0Wr0y5Srwp2vJAKBlPx SBiO5tPK10hszgnvYT2JMcbfkKiitMgdSIwXvugRRFEg/pYXKm9Fgv5IOIxQvrvyDPg9dT/UC2HF TiCHkECpCEJ1Ggh7gLsbK+WgztOa0mgY+4pyrScvS6hM1lYD/Pum6U1XUcDic4luyUQUVnR4A8UV rYDlvQ7Zy+PUlp9W1r31dmX9P5gEjsJpA7XjZz9/Z//+X/7iH3eSNA2dMx7hcgsc0ftwRCGs9Qwm apGaqEf66HgSjUxUG6w5NZekjTDdUuuDZqpeZUFsy+MJ3WeQHSJ439sxWSBMklt0+8yA2rBx40YS 572y3SsY8J0Hcdf+d37+sx2UgcYp6Mb8PXjm7bfAMz9leSMcHU1eqCyD43ulcg73UIewAPRSXD+x ul9Fq5a7WIW8GgGHaokCVWo8VsscZnKIHCc6TACjoVG3Wr7zHXSsfBHyQB/IRqeRp0TzshD0ftZN W9XeyfWVc+CU/mn8T1zWV2n90yht24+eoJhPVaj1olOcKJvmLFZo3pjvfEc7zplkkfvM5uEZT0iQ rTR13hsUZJ5mBI+EPumb+JPQ67kX2minYvEnA4mczFh52shFOCh8ogyDfQCdcppOJCQH0v/tEkOj lv/29gTCuiDLRBxZBIZoLzggSRiGKFtwWfaZ3vQSwWw2SHjfMPllGVg++sgCZNlveqN6/U2TT5Zx y0fEM3QkkRTZb1Q+s/KQh/Q3WDGZiNDX7IYOUkJknwAUD38qnz8Br8cjzG447vuJHaBIHYR6gn2R 4uf1vOaKVfPtIMxYnaLosjCy0R6SndDiAeKeWhb0f6plP1bTlPCO+BPqHVVP1BMfRrctXWhZ9MaX XnHY8bvgEoqi00rLRhv6JBsLKl++5FpTfOFHo7NK86XXeB6O5Zq5i8TLVFD1RR8/g43C+E224hNX j4L0wRLYUQJLSiBfAtESKM3gSxSbyes13dIGdreBsTbQ2QbSbaANvnBqHwaQuKOwWutS/eA0vA3W ZAKmmbnPFCN8Yuqca2qi4jMAe1FaNzAD7MeoTbVvWIACNv0GjOCmf6XGxyJqulTP0M7YdF0ykVyY PGQW5PqrFY+X89c+vX/yyIaeGC9mlx16ek9sXGm0MCQOGI7l4oWJ1ul7VqUId9/E6uZdX10Xf04u rO+PjQ6W3KHSxpKysdcHvrPqWzeXk6PXfuW7G6e+/837d3azVpEzWyWL6OYNFsEyfvuzG6x+p7W4 /b6rOzf1R81yQLzjuV2ZpsntyC9aAbE9q+5YaseGwZ1nsAJKiAmo3RKeIDXTNqNfaateyVev5KtX 1HKAMF8WKKtbP+ASlUFT9W+aqqm2+itqybxpBncpLltS1bdJNZGnnwe1jVJOxe23Rvx+tF/Qpj74 bX5jh/o3HSjZZPeBiQ71jfpF9MaOs/gSDJt74zha5PlFr+1N0Tsoz+n16XNqI1c/ivSN6B79TfCm /dVB91cH3a8Puh9RTTCiaNjY1kNlZl3rBmdrZCnWNhe/oaWtLtmwAg98XaUIsaf2la31TnW7Zlzm 92kRRL7WXykXCujrOqodRgXibPf+p6/Z9s09ncmxPYPdG5RQ89bHd2x5aLoRtVcO7x1L/NzXMdV2 7V5PcU339msbwoM7B0qbegJ3H739LjC+8q712YYVN0307Fg9Fg4MTm4oDBxa25qb3FNq3biyHIyM rtqEb2oYaHJtWZVY0l0M5G+d/XZ2rK8nFOjtLzdu3n0NinEgl15V9zemsQ8V14KSZKxaksygzFQM sSMD6oqNqMJuQ/lcG1o8G/raFBglwQAAC2qp7KBOrqBecwrqSV14/ABFBNEgQP8HOYU1oq2TCkao 31jDos5O4zIjjqlZSXX7rkaIc6rEY0bMmGn0oC/9tk6hfYXVbZPzuyqm09NQ0OsrweqS/Sd1TbKu PEUSr+aue+GOW57ZkW669oXbD8PjCxZPunuiadXuHoe/b/tIx6oeGBPhX3nsD8c2r3n246ce/Vg9 /mDzEzeuanctf+BH1z78D7d3RpdsvP5uqL6eg2L7LUrGstivlWjUD6I+EPWCiAdE3SDq0ncVpFTs RZSfalI76hDcTQBD0GIpvTaQ0gFN6VnylA5oSk+ApdBGTIvfid7k5NAjJ+hyBI+qXAm6HNVdP6dv vYPQw3c8JQBBEmdA6XhkRYqfAYy237ulNHtBrcygnwuo2bG6T0kThvks5LSei6luVILeAa1lH9tj eueC6l0Q36KNZmZ2A2PiaJo1G4DlM9TXSNAwuG0gTdAhd8Kw4EODhaUGUO2F4d2S6BZY4uePGUmz XxacvIl+hSBJQDIc/flDLHR1IdrXQ7SfhJzuxR5VzKkCSPtByocyuspM1QwpwIFY7FA1jyOoZg7x zKnWGPyHFXWsi2ehm8tp4HAof8uhfgShoxgMFiH5sqdaHXR2ii/OgGQVIa2OldOUCVQgF2pfcqJi pGZqLwEHJV8XpFvomu5g1C1eT1LQC59ts9itDGG0mj5fs6soetuW59UWfwaGIDhlcHatu6Zr44PT WcfwPXsv4K0GK0eNov1rDO932KDzYgbGDY/ctCWdnugMh5Nhg+i3Wx28xR6NONs23DLYe/ih569/ ixVVD38n1AmPQPzWAuoMth5C5kWQrQfNBghKMxL8ZhW3ZoRb8wzephiXTsWXLnVKYEJBlYM4/JM4 Smgr8GpcISweA1+tFarv9ATV9lqNsh6I/Ek1Sav2xCP5tujUtOhst6CFk+AyWLpQ61WXoqYGu4BK XZ3CmgXoEroER2EGcIqxPNX4+2CQKqOtiVxta2LuYpGv7U6Eqjun6Xtd16stpqhdRyzO63ldWdBq 4qBWcdQ2r+vO62U5s/lFtEML8EjvDd+/pm//2k6rgSYsZrZtau9A/7aBcHrq5onDcK0YmrOw+/t3 lRPu/GRb5+bxFiPKAcNYQ+pctVdZf+9VmWDv+q4le5dnwPXrHtrRbvcFLBYYQ0a9wVgw3LuqpX2t EobiYZdcViasrGtPlguBSDJCWT0OqyxYJLjO2ZUHh3t2TRY5nGlbjnQ/2t/0T+p+oCz2udKJyh8Z kGgE0QSIxkHMC+IeEFEVVMwJYjKIO0DcDuI2EOcBXOIoBaIkSHuAqq1ETVtlHE544gjyeoel1ln5 3mnUeenNZvmZuS8UH/wLHokfcpXhA6qeICPCozCOR9+ElMBITVeR0ABUG9UVI+pUJ5tyCU9WXeD/ z97ZwEdVnPt/5szZ902yCYghQjggQhQaAipSibggKhqt0RbIS93Nkk3I1k2y3d0EkhpZYrTBpHZr rd5S+79QrdXbe7XW0qLtrZuGJlpTq1UrvtSmra9cRXyruW3M+f/mOWc3GwSv997e/+d+Pv+cqT/m zMyZeZ7vzDznnN0kVZfM93ic869wGr+HhF13+psrVpif3y8xvxuVf3bg1/Tv5A486uBTfzw7szX5 ZKyaxU/m88WTMwtuSv91hg8PuT05eBt02vhvLTOKlxbPX17suSn/hIm9ykQt/x6PzF80cST9hSD3 WD3FhTOKZ5+YIwrk57gWvKGPD52svP7h2XLHNWDH3WLJRcQa8OYsPosvXkk/ECQoYv3YCFhnmVHp LPrjbvIXrOWvZpUAfYn8dXW5L0pyL1vRumLHCrHi2L+I/6ByOv3el3kv3Uc/xThjv/zxIPlTwjMK V8q/MuNeevZ7mvxNJsvSywunbJ0r35RbZ9kS7vmduWMOXPmUsXkMuJLu5G6Z8gW9fAQ6ecqfd8Jb p/kjweKWCxL3hcvDn1uJ1ztFvvQ5T7swtOG8yOWliy+/etM5VYvmFM6bq5xjz3NaZhZMzD35orLW O1s/zfc0faf17PzZhbnu/KKC/JPy7bPnFmnrt168xn/uPHfRKUrefM2BILiwZOIbFuXMwA26nn4v UaziV0ySr8ceuBfk57FnHmD5iF3O/Pn8knyPx/xV9Km/ov6aeZ8co7UYp69ZPfvTV3k8xheCdJXH vIqqXfKb3DaP3DhW80vc+emZnc+zHmwP0gPtCeYdOeunjl8z/zjL6D5cc4Ilfz//1P1Fl7syvzJM t2SahSXmt67pL18nv3elL6yyvxcR9wqLwzpRask7cWHRgkX5ipUf+vDrM2ZYnLkO5Z3cE1xW9UDB 3JNm5/7tMXeeQ1hzZuSoF5csnIH7irVgDmiabyKgOcLkG6g8vxN3jjK2jv2rd8appfw0Cz+VvkE9 bRFf5OTrZajQpNvrcTvJSd9J5nYu559eftHy0HKxZDlfLn+h3cFyczUWYYrxGmC8DvxIrtjV8r6B S1fL5xX6Bdu21Xzl6gtWN64WC1fz1fuVJd7cZafwU7zvaJpt5XunfRar2H6fbVPWSyG9DtIvRV1p vhGuyF7DtIrVo3/M5Kwpf4ZBnfqzcCvFnTPLLv/S3ZEll69dOhOwXHZXyTlXnB7oq1qqnHlzXfjr 1YtXfOGO6OVdn/cuzr93wbq6c9d+fvWc2atq1lX0Kw9+7p//sa9ptctTUDCvaFZRriWvIK/imjs/ P69sdWP/Zzd9q/2CUy9tvmHvBYl7w2XLLgueuXrL+lM+JYn7+CrxbXERy2Ensbk/Yrm2E1w/406m snxoIZO/QsGXmZ+WZn+ylj/lTHz7xLwP3XmzZuYr7xXMzM4LUTJvXsnCBQsmNsuv5E9ZsIDiFfOJ /ep87Br3/QVzPFa27NdPpT+m5plnPc7lu9DKlbNOlD/QvF+1Oq3jb7k8DlWx5bqU6z7ckZNnV1SH xyVmOnOUNfknzXSJibj8JO7EOQtOcFv4OfxMq2vWyXOL5uYo1omYZbH8a8J7jcSXHTe9rGzJSr8x kqg4RvqRWptJf5PJcsFx0y8tv7TOyEopW21WevLYyX4J0quOm4zkDGalR43k2nTM9LC7OpMGcpZP pylp9HgptyPPcox0m5E85xwjpf6+Kf9fPpoKllP6p2OnGcspPSrTzNys9NYJiew0K/c46buzvnvi mhN/YqTCrmOkf/+vpNm7jpWKvCcVZtJdc3IyKTydptP/p+k+meaWHJWq594794Pi2cXB4puLfynT vDnz4sdNt2Wlh5BemveSZjXTYjNFtJT2wfylx029R6X75n/w/yIt+O6C75786H8vLbzmlDNPeXrR I4tvLDmvpKLkUMk7p37/f2l6xUinLZxO02k6TafpNJ2m03SaTtNpOk2n6TSdptN0mk7TaTpNp+n0 vznRz4GwgpmMC+5mzGG1MpUV6G9DF5NW6K9Dq0mDeh20SR+FxvTvQeP6D6Cd+heYynfrI9CU/hx0 WH+GqeJS/WfQjSwPWsXc0Bq9Alqr/xDqo7yf8lGMlc9U/Q1oUH8cGtNfhcb116Ad+lPQTn2Y5fMS 2QZjSU2RDslrMSLyYqP+ErSG1ActgBeHoRWk1aRB5mQFaPkBtAZWFYhaVg31Ud6PfCEs+RM0CK8L Yclr0Lj+DrRD/yO0U3+WFaKHR6BVsLYQI74FrWUC6qO8H/k56OcQtAA9zIElUitAbw4skeqDzXO4 or8I9cDaObwI487hxfrz0BI9Be2ifB+V75Y9wOvHoQN01bDMg97LbBHG+gq0AD4uIq8XkdeLyOtF GOvP0A7YswgjPgKVIy7CiG9Ai9H/IowlS/qoJKn/ni2Cj2dAq/RzodK7ReTXIhHWH2KLwecv0Bhp HDwXg8yf2GJY+GfoAMZajNl5BzqM8qVEaSnxKYedP4Quxvoph53/CK0m9cHacqyxP0Pj8LGc+JTD 2oPQIv0PUMmnHHxehbaBZDlvJ+2i8l2U76OW/ZRPyj5B7znoPipJ6d+CDuh7ocP691k5GL7I1sCq Q9DF+hPQCv1JaDVpECt8Dax6ChrTm6Fx/QZop17N1sCS16Gy/zXo+YfQAX0/dFi/j63B+s+H1uir obXyWhCQeT/y2AG4tgL9PwKVa74CPR+CdmD2K9A/ysHwPegIOFdgRh6HVoFnBfo8DK3Fuq0QPsr7 kd+MPkPQIGZkM83OZvT2e2in/j7bDJ5PQT3609AieL0ZPJ+BlshrwVDm+6g8CVab+W4qH5aK0RVo 1cTfoDUsB1rLyqA+yvspH9Zvhkb1QeykIEhWk1/V8Os9aAf6qYYlv2XVvJKthobYZdAhNo9Vg1UI ukmuBvRsh/pJw6wXuoMVQ3cyjdXQOq/BTL0JrcCKrcFMSfVhL9RgXJmPYT3XYFzZUq7MGnj6ArRL /x00pb8CHcA6qcFMQRGjnMwHem9Dg1i3PvQgNU4lHfq70E707MO1r0MHsJJ9uPZV5sNcoBzzi/bC R3k/5aOYhSD6rIMWYNwgbP4ltEIfglaT+jBHQaQ5LIjZQUvMzmXQIqyQIGy+GFqJOQ1ite+EtpN2 UfkuyvdRy37KJ/Wt0H2UT+l3QAf0f4IO6XdCh/XboSN6lAUxm6XQTfqN0M16J7RKPxNaw2ZB5cwG MbMy76d8WP8GNAoLm+DRk6yJ4m0TrnqBxVCyByrnJQYfX4VWYC5i8FGqD7MfQ3KwGHy8EerRvwkt 0u+GFuu7oZX6bdA2/TFoO2kXLI/BR5nvo5b9lE/Clxh8lPlhrO0YPLqHxWAPZh0e3QzdrP8EWqWf Dq1lZ0L9pGH9FmgUESAOm2+Hyl0fh81SK0irSeW8xGne47D5AagHuzsOm/dDi/V90Er9V9A2/QC0 nVTaHIfNMt9HLfspn4Q9cdgs8ynsrzgsf5TFYXMJdJMehFbpK6C1LBfqJ43qd2HPFODe1wELH4JW UL6aVK60DtjzFLQYd6UO2PMBtAuxqAOjy/LduGd1YFxZkkI86cB6+A10GBGgg1ZsB63VDox1L+sE kyZogf6v0MWkFfrPodWkMnp3gkYn1KMHoEV6F7QYK7ATkfAX0Eqsrk5+JaJHJw9hrE7w+Q60nbQL 67MTfGS+j67tp3wS969OWPsUdB+VpPSfQgeozyH9QegwCHRirm9jneCGJw9wa4du1huhVfoMaC0r gvpJw/q10KjexxXY9h50t/4mFPyhA/o70CEqGdaf4wp28fNQHzQP7d+CJvW/QHfrH0BTlB8gHdKf gQ5TfkR/iefh2kNQH9QDPm9Bu6DF6OcwdLf+PlT2UEw9FKOHP0KH9XehI/obvFjGcygiOS9BDweh Hv1JaJH+KLRY/zUUzz/QSv0AtEt/GtpHtUn9ZWiK5UAHmBU6zJxQ2XMJWHVDq/Tt0Bo2G1rLmqE+ yvspH9UfgSLG8kqM/hzUA2KVGP1NaDF8qUTEngHtArdKjCvLsbp4JeL2iVDcEaC17LNQH+X9lA+z i3gN8a8h/jXEv4b41xD/GuJfQ/xriP+V6GcW1A8NUT5E+TBs+z3Uoz8OLdIfhhbrP4d26T+F9lFJ En2GMdZfoPv0V3gY3t3P28iGNrKhjWxoIxvayIY2sqGNbGgjG9qpfTu1b6f27dS+ndq3U/t2at9O 7bvQ5gPogD4GHcIMdqHN+9ARzE4XZuF5vovW1S5aV7toXe2iVbGLVsUuWle7aF3tonW1i9bVLlpX feDv5P0g8DuoR/8TtAht+kHgZWgl5bv0P0D7KI+nOGgKs9aPVeGCylXRD0sqoYg20Bo8R/aDcC3U R3k/5aNYY0lY+yZ0t/46NIW5TpKdSdh5CDoMj5Kw8zBPws6Xobj/8t2w8FWoh7QI1+6GhYegXViN u2GbLNmt/5nvxuguaC27EOqjvJ/yUX2Ap9DPn6Cyn5R8UoUWk5agZYr8TaHPN6F9VJ4EzxSeWJzQ FHNDB0iHSUewElLwPQCt0qugNQy7GqPjiRCjy7yf8lH9CT6A0V+HetDzAEY/DC0mLcH+GsDoMi9H H8DoMp8k3Y33nwEafQCj26HDlB/BvA8Q+QGMjlVCow/Q6AM0+gCNPoDRn+ZDGP15qEf/LRQRHlqs /wrahX06JGM7NIn1OYQRrdB9sHMIvZ0O9ZNG9V/wYfTzR6gHvg+jn9egxeA5DC+c0Eoq76LyPlK5 d4aJ4TB5MUxeDNPKGSYvhuFFC7RKx12EvBjGuHjeJS+GMbrMRxG7RuTTO9RD+SL4MoLRpZZgFY1g 9LegXVTbR+VJrJMR+CJrU+A5It8joMMyj1HmQP1457kU+ZOhfuhG+SPf0KD+JWhMb4PG9S9AO5gT 2qk3i41Yb0+LjfINFFqr474r30ChfsrH9V/h+U9lbmiB/hx0MSmeB6DVpEF9K7RJPwyN6SFoXI9A O/X1ogoeHYRWsllQ3MWgKf1+6ID+M+gw5UdgTxVsOAdaCwurYIPM+ykf1b8Kmqr+OSGfbF8QNTR6 DY2OZ1pWC42xVdA4+sEzLVsiakD4MahH3wst0m8X8in3bmilfo+Qz7oPQvuoPKk/IWowd+ugVfpa EFQnxqAFsLAWI94PrSCtJg2yPGgnyxG1GOUqqEcPQ4v0VmgxaaWOpyt+JbNDQ/pfoG36k9B20i5q v4vyfdS+n/JJ/VroPsqn9JehA6RDsLBWPplAR/RXRS2sPRtaBUo+IuMjMj4i4yMyPiLjIzI+IuMj Mj4i4yMyPiLjIzI+IuMjMj4i4yMyPiLjIzJ+IuMnMn4i4ycyfiLjJzJ+IuMnMn4i4ycyfiLjJzJ+ IuMnMn4i4ycyfiLjJzJ+IuMnMn4i4ycyfiLjJzJ+IuMnMn4i4ycyfiITBpkHhLwzPi/knVFqMWml /nsh74xSk/qzAs9l+rdEVD6TQFOkQ1jnUfn5ibhG3l+gIXYuY+xTygImf+NeHkFSQZ8W5dKZoN95 yRWqmRdsoSgw82pWGwsrFCvNvDWr3MbaxWfMvJ2dhhoj72CaOGDmncqeTHsX2yReMvNudpp6tpnP Uf5BTbfJZWHruPw8i44VtiYzz5nNttvMK8xmP2TmBSuwv23m1aw2FuZ2CDNvzSq3sdWOPDNvZyfY Ws28g3kcF5t5J6/MtHexJY4aM+9mJziuM/M5/BJHuk0uW+l8BZZw1WFyNvIGZyNvcDbyBmcjr2a1 MTgbeWtWucHZyBucjbzB2cgbnI28wdnIG5yNvMHZyBuc78Z7+Aq8Fy7HW5XGLsWbez2Lslbsw1bW iH2osfOQi7IIaQAlIeRaWClq1rIwksauQNlWvE3GcZU8a8C/DWjdDg2i5Xm4Low2W1AWQosQtQvg v2b0FaS2LTiLoayF6ozrQ7BAw38BtAuhhw6cbUMujrFkmzb0GEd5A86kzW24Ooj6Flgje2k1e42j RbM5pmyhwcdWGlOOEiNfLiJfG1EifWxDeQNdEaWSMFkdN/2oR81S6rmZSsLUYwCMjPL0KM3oJ0zE IqaVLShpplGNPqWf8SwL5IgR8sXgnaZt2C5HagUBDf4bxKVVzWgbwPhxOpMexzPzYTAzRtHI9hbT r1Ziu4VaTlqc7ZGktp2uM7y+CueltB6yZ3Mx9dZMPXQQhzZz5rN5yxkz/G8g+6X/xrxEaTXIf40R 5Vxr6COS8cawcavZJoazTrP3OLwwZqg9M0sBWiMBlDZP8Su9muthSYDGrzfHL6UVu5XmStZ8dA+c /RGvN5krJ2SusTPRy1nsjI9Z6XEaM0grUY5yVWYO0myOtfe2mus6kmktV64x4y1o30Br5xK0qGcl xPRUtAlSfxfSta3UfxwpAj+WIW2jVEp7aup4pWbvy+TnJbQCt5LVEfTQgVJJrJE8lit1aq/pcrlb De+vyvRXTT4Yq6SDZjdGFsZpHcdo3xlXa+SD3AMNNIMhGqOB5nALXZumdT7bCL/XmtdGs2qM/RMk JpN7YhuNVU975ljjGueybT1msI0YBjNrLEj1EVohHVnrKkKetpgry+irgVTulKP9lvXGjizBVXKm 5GrYkhnpWFa1fKTnT85osvd0VNTMuBYnu+unxJeP+p6OJkfbtTqLgPTE8MWIsun7RDQTsYMUs1oo dgWO66nBOTCFqbHjW001vDLybbTy2ujKIO1/6U1Dph/ZMky75uNm6O+1Lyb3xDKyRu4BI/KX0lxF 2Pa7tRVly8/ULg3VR1tjrY1x7bzWaKQ1GoiHWltKtbXhsHZFaGtTPKZd0RBriLY3BEvPC4RDW6Ih LRTTAlpza7Ah2qLFAi0xDfWhRq0x0BwKd2jbQvEmLda2JR5u0KKtbS3BUMvWmNaKpvGGZlzZEtTq W6MtDdFYqXZRXGtsCMTbog0xLdoQCGuhOMaojy3VYs0BWFAfiCAvL2luC8dDEXTZ0tbcEEXLWEOc OohpkWgr7JZmo/dwuHWb1gTDtVBzJFAf10ItWlz6ActwiRYOtWCs1kZtS2grdWwMFG/YHsfFoasa SjXTzcUxrTnQ0qHVt8F5w+54E8Zv2KZFA/AlGoLbuDDQrLVF5DDocStKYqFONI+3wqF26VJA2xaI NhtjScz1TYEoDGuIll7RsLUtHIhmZuDs9NCbAAfuaGeWnnXGFOjxaCDY0ByIXiU9kNZMzt5WsI7I 4vpWON4SaoiVXtJWXxKInaoFG7QLo62t8aZ4PHL2smXbtm0rbU5fV4rmy+Idkdat0UCkqWNZfbyx tSUeM5vKfGMAw18l21W3tgFJh9YWa8DgMEhWawHMQEO0ORSPNwS1LR1k1vkbL1mL2iidYH6CbcZM bGsK1TdlXYt/Qy314bYgLgWxYCgWCWMAySoSDaFBPVo1tMRLtfTYrS2YyJLQqVpD8xZ50WRXLenG x7SImsuliGmJxaOhemO9ZEaXyyTd12oyoCSEUbBk5Z6IyoUdbN3WEm4NZA8KmwOGpZh4uAvGMtMW j7TFgb09VN8g2zQ1hCNHOfRJ5oJmYlmwoTGAxV8aiEW2Z96b5N95vJ4d6+BogSdvNoPZdJ3l4Rnf eNtgvAT/hY3v5T/mUNXz3W6ONsrNn7R9To5sL1/YPln7vDzZ3hL+pO09HtneevCTts/Pl+3t6z9p +xkz0B7/Mvn2pVJ76cxG0nyWwwpYESvEc+UcPE8twh1+MfsMnqprEVubWDni6hrWzdazr+IJ4DZW gfeXzezHuNMOshr2BPOxFxGB/w0tx1iMW1icF7AOvph18jO4wtfyPH4J9/BqXsSDvJh/kZfwq3kl 38Vr+C38Sn47D/Ef8DB/iLfyEd7Gn+Xt/CXexeUnvX/lfYqN9yszeVKZx3crp/F9ykqeUtbyAeUS PqRcyYeVJj6itImLlYS4VPmK2KjsFpuU74jNyr2iSnlQVCspUaMMiVrlMeFTfif8yosirLwiospf RFwZF+1CEZ3CIa4ReWKHKBYJ8SmxU5SLG0WFuEVsFLeKK8UbokG8KaLiMFq8JfrFEfFN8ba4U7wj 7hfvipR4T/xavC+eU9eKV9XzxVtYwP8+lbX48L/I+g6wvg+sfw7Wj4L1s2D9Cli/y5rQbYznyG/U wHoZWJeD9UVg/Tmw3gLWzWD9JbC+HqxvBuu9YH0vWP8MrB8F62fB+lWwfgesP+S7FDtYnwDWC8D6 U2C9CqzPB+tKsK4F6zBYbwPrHrD+Klh/G6y/D9b3g3UKrB8F6yfA+hmw/gNYvwrWb4H1ByBnE3GR A9YzwLoIrDWQLANrL1hXgnUdWH8BrKNg3QnWXwbrm8F6L1jfA9Y/BeuHwfppsP4TWL8F1uPq+aoF yzhvKmu7O4v1iWB9ClifDtZrwfoysL4SrK8C6w6w/jJYfwOsbwfrB8H6YbD+HVjL774/ZD7uYkE+ G6zxvsXPBOtLwLoerL8I1jvAug+sd4P1nWC9T357BNaPg/UfwPowWI/zsJLDW5U5vE1ZwtuVNbxL uRisN4F1A1jHwToB1v1gvRus7wTrH4L1L8H6CbAeBes3wPpvWIlOsQn8Nov5ogprtFqcIWrEalEr 1guf/CwXtWFoVHwRrLeBdRdI9oD1DWB9G1jfA9YPgfXjYP0cWP8ZrN8A67+Kw6odRGeJI+pC8ba6 QryjesW76mfEe+rnxfvqF9S16naw3gnWfVNZu2/NYj0brEvA+iywvgCsN8qfcgFr+XzWDdZfA+s9 YH0vWD8M1s+A9RGw1lkN1rCPnwrWq8D6QrDeBNatYN0L1reC9Z1g/UOw/gVYPwbWL4L1IbD+K69R HPxKZTYPKYvBehVYbwDrKrC+Cqy3gfW1YH0TWO8F638B6wfAehisnwTrP4D1O2A9wUewPi8Ws0Hy VLD+NGiuA+tKsP48WNeDdRis28D6GlD+Ms6SYP0dsL4LrO8B632o+SlYPwbWfwTr98SNqk3cohaI W9WTxBtg+6Z6OlivA+vLwboOrFvB+hqw/gpY3wbW3wfrB8F6EKx/M5V1fmMW65PAeglYr5Y/FQXW tWB9FVhfD9Z7wfo++RehwPoJsH6DVXAb28wXsGq+AqwvA2s/WLeC9Q6w3i2/WQfrx8H638D6bzwP scADpkXKIl6snMVLlPW8UtkI1g1g3Q7W14H1rWB9F1g/ANaPgfXzYP0aWI/xfmHnSXEC3y0W8H1i OU+JNXxAVPAhUceHRTNYd4H1DWD9LbD+Z7DeB9YHwPoJsD4I1n8E60Ng/S5Yj4uwahFRtVDE1WLR Do6d6hJxjbpc7EC0TajVYqfaDNY7wbofrL8B1v8HrO8B65+D9WNg/SJYHwbrCfGuJVe8ZykW71tK 1bWWNer5lgtxn/7sVNazHshiPResS8G6Aqyb5M+BgfUNYP09sD4A1k+D9Stg/QE7n88E6+Vg/Rmw 9oN1Aqy/Ddb3gPVDYP0CWP8761BmsU6sVwVc85QrwDoI1lGw7gHrm8D6DrDeB9bDYP0sWB/mrYLx NlHA28WpvEucxXeJ83mf2ATWW8G6DayvBeuvg/VesN4P1r8B69+D9V/Fxdjfl6pFYqO6VGxSV4rN 6oWiSt0oqrG/a9QGUYt16FM7hF+9Fqy/Ata3g/XdYP0DsP4JWP8crJ8E69fA+kNxo6VA3AKGt1pK xBuWFeJNy3nisOVz4i1LgzhiaRdvW74u3rHcAdb7wHoIrJ8B69fA+m2w1uXzmt2G/3k8JSXrr+7u tlu43TaaTB7p7e09Ik+skd4Ejt6I3crt9iO9PThQo6LmSCKB/yWmnCSo2ar1icRtPetX0QkuGJdX 2Tm3qwnzoK57k3tSe5LJXtmBxaw4Yrdzu3Nw8Ls4vvlN6uDAgTvuuPnm/n462d5Dx3bqgKzERQ5b Vo2VfKCqZC/1ba1LJryaJ1lntzC7dUwzjrRxRncSQnf3+vUlJR6P3cXsrh6tR7vYe7H3ciQtocEx XNuzYUNZ2YYNPdRRb29lpezIauFW2xH79t5essoGJ3rl6FaVWy0R6VSEyu2yCRpR+0jvWCKx3a4y u1rmPeKVBxpZrduTybpExGCPnn7wsLzEQMcMQk6h24XGTC9S5GAiIVHuSU5hbLVzq/PHj+zCQUMa fZmj45BWWW2GrTQjVpthoN1uFdyqjhq9wAtrJJEq84zaVGZTDWPLqBvZ+h+arBZmtRgwrA5mdfQm ehMbsWcXIBl1qKnstU8283rlAJZRZBKjWTazBHkz6vHUeb3MKxTGBZrYFWYVXvn4jBMr51aRkCcJ jkMkuA0d3CQUbhfeRALX2OU1Qq6pyj17BAhbKiv3uCzMYbHbPR5NDp9IcIE4M8qtTLWOcwdXXXoC J7p13ImOVNlCHl4vncqMPABfnqbShFPGqdc8Uha5LLS7IndpAjYJtBACZuzZs4cWDFEn7jip20Pz N2bWwDTNmzmJ2O1ms7KyysrkGNYkLV3aH2bNKi+tM+NkjDyTa8gYJ5KpidCMekaFhVmsY2wMNlqt ibrCusTHbHxsDZvcxImEuYn/rhvfduyN7+B210BiIPEdpJuR5DqaGgCwzR2r1nfjwBCZXS4DgH2y plz8XQKA+yMBgFqsR3XJ+u7jBQCHhTtsiewIYDUiAFXYMyFAVtQlj8gKlTkQAo4VA9KdHScIqJNB wKFyB4KAGQUcnDsywP9bYUBGsB+kjgoDFLS8x44D1o+JA9bJOGA9RhzItpolyKO65H86EjhkJHCY kcBhRgKHGQkc/2EkcHLVraeMSOBCR5lIgAhA5+lQgGI6z8SCRMo492ZHA0cmGjjMaOAwogEW6GQ0 wMlkNKCadDQwTsxogJPJaICTyWggd2smGsiaTDQwxolkatLRQJWTMMayw4HDwRwOO5uJJGdsLdtB a81h5Q677HoM22QMd1qHvXwdObyuXJ45xnrktutGnVyuYwkjHkyejSWMO7TDIa+7sbvbvE5eNCFl 6nKl8XqMCNHbI3uxpqvGHE7ucKdw7PXu9d5EqR8Ju9/hHNi792u7dl133bV0Vr5upzwwlOyOTKdt 45B1bB3bmUnr8MzIE5PNehHpyHb54EPkHTbmsE14zCNjO0UhgiZ7XgtgEpvEZ2cOF3fkyABygxlC lidkCAFeh33nuoULCxcuXLeT+jUjjsdjs3CbnOzt2ElOK3fa0en+A7DowH5ZZTyH9UaoSlXVeD+q +uM2K7fJJ5/xROJqp8qclkwk8aKlzXa1nPkEGmyf0idcJOhmNEm4he6YDCcIKE4Ld8rQY86Dk3Pn 5BQlbA5uc9/PRihEG4kMMftOG9VjDGuWH9gvJ0CemrbDC5vKbWaASci8DJZ1Hs+oDIqWtCdl1B91 B4clJhk9ED5sTmZzrfeu956WkCkfbwhGNSorK3udWU2xGaj/Ix655484ueJM33jAgLyVu65MkxBU hSmq3OIORT7weCnceBOILjZAkPEmoXCuIK/Y0NFNN6kK8MhAYWTQVkWP1g3JZBIbDZkNG5I5Vuay quqUwMNVyyheCC22Ce7mllz9CE4mbBM5gjstWlbk0ahEZowDVW5ZMjo5JaNGQWYGtVGLdIrCj4rZ k+EnoaqwCkYlzQVuRiA6MyOQNmbWkaHeyTNjK2Cb2ApLSjZs6B2329NbHFHIbvaCMGTEIWo5Tu7C 38x4kUydEYlkKLIxq22CsQmLnC8KRU4Hc2KvTAajHdhdtH9t3OmgbSqDzrjTjtM1aw0Ca9fIU+d4 N+38naiVK348HYHGaZIzASlBjenar+7caV4rr9Pp6qMWPHXVk35s6ZGntkzluNPFnTmpulQdQvue r2lfw66/QZO7nzqVgcmITIg+Ttca05X0sRbxh7qXbhlRyuU8ZrtzGUtlACBQ9fR0mwtXbho5BU4b c9ozkcqT8ckIhUT1o7HKzqT9uT1a+oFnMl45UWfEKwpY1H0mYHnMba5ejW3psnKXjC7ZIctmhiyq U48ds1wqc8mYlQlaNtRdIwNHAg+lV0/t9j+MWi4Ld9G8mGHLxbkraxb/h+KWdHU73SuO/E/HLRdX XOm4JTGQw3J3/ucjlwNdSQAIWa507HKlY5fLZsQumfm42GVnFruejl12NmHXcwV3ZcUuGbOoaDJ4 yUoqyopeiF9GkZZ1jOLZ0mVHBDNCmDGTCGEuCmG0Z8x3fjlfFsVp1zJBzKwlmzXveOZ0OybPvBcW ZuIYnV4N17Nqy73mojNOM5HMmxl3e0+mdru5LuxHEMxsdhnMbPLlAsFMRThzOZnL6WYFlOYjeRM7 Eujfm/C6bNxl7meKaC47zosDBj5voFieO8euN2Ja9/VjtCFkTDOD2uQ5ScLl4C7XPFaX8DKsD/ZV o59EXWIeo6pJ4HoW/KP3CVnVnXkI65ajTMY7jJrDXXmpwlThnpI9JckNyQ3yNnKd/Tp7t51GSSX2 ICWRehM9SN1IOw3b5rD6KYFtLc7nMBMDPUbSznYep+lcxMBMYyMGknWYAvhZZpfz57IxV1YU9Bzl +GR3axjNjJwH/C8xn+ZGzpEbiXzshkfne4xUIp3d4/F6vC4HYMoOjCBqzzwxS3IYm14jjbHNz6wQ I7FA3DbupgC8/4B8ejywf8p7NtUqOM6+QNZecLb5Ri3jJGotzG1ZNRko5cqxT0bK7quP6ry727iF ZfjlCN2ZHSy1lNvK3RRc0/Ps5tydvQwSdhe35z6QGtJ6shK9hacHmfJK7pqsoaBJ52lv4Bi9iptR M2G+jsg7F25c8nHJ6x0zXFtFvRoDAAPeu+3HfDNPB0/jMwUZLhE9XdnNsWHTL0TYuokxN1fcmdcJ yYYYRHqx74+OoPKjHYvXfNfEmydX5EcV7OgY6jZjqDsdQ93pGOpOx1A3xdBcG3PbFCUdRc0gaskE 0RxuydPHjCCaJ7hbBlGvaShyGpVRLh1FvQkqG52yqkeNsuw4SoHUPRlI3elA6rbJQErbyZjC9Cy6 HGWVSXP3TND59h7Mnypj6eQ5gqmiYLvJkOWeOXPh+vU9OkBSvRFNFaqX50Y4nex/wgQBEpnx1xsy aY9cNOrYMUOq28XcrlyWy06itDyxPFGX2oFnMPkY5rZzt3N8aGjowPjQ4ODg0LjbgYJ5LJKoY6ms VIeSeQyxxu2eYIOJgUQq6xhIDCYmGO2qCXk+TqUTkwUTRju6fF4i4jX6HjYvr0tFUvMSVDnZp549 QMqtYDFOKZB2Dw6NjBw8cvDgyNDQoBzMntVgwp3L3Z7ROaNzjpQ/vvRg+GD44UtGRg70D/cPugfd NNho6kjq8dRBpBGkIaRfpAZTAym3i7tz5rEvmojSqS71xRQQGMCIFQ2U6z5+6wQbZWVEdJwNsUFK Q0zmjbOBBDEqb0ylRrfPybVaR7a77czt0Asnj6O4TB6BxLmM5tYYTiY5t8Ysy/l253F3/oB1wDp4 fX1/fX/jSOPIyoNnVJVvLywrLDMADjY2lhcWljc2Dg66nbrbEUgEEqczmYrl//VwJtGb/NVDVus1 Q0OPtefYeY5TmvDCK4PyeOUF47OORrKrsZzqBY7VW6l+62r5QQPcHBrCSthSnmPlOdbyurq6sTrz cMv6HViGQ1enrsEV1xw9xOBgjsJz1FQKN7X04VH1HEtZGWNlk8dojo3nOGTtEJbGkYMjI0PmhVmH w80deS+M/l/izgQ8quru/2eWzEwykwhhSwCFsCmLgIhCQRYVlc0QcSnFVqeA4KAiIEsAgWgQd3FF tNYFLVK0aEm11dopIiKERcAkpBlKSGBIGG9CEnJvxkg97+ecGUJA+tT+n+f/vj39zMxd5/y+399Z bognFf23nVX0T0Oavi/2s5Hp+vP0q3zNjh07GEvAxKSm+IhVP7cVHz79FeqHJNlbla2+p7LV3NN1 JtzB+t7x70Ec9YMR9dPcqUKVKykdKYkp/F8l69S0GWumrRn44VU1aTzx6R+MaN+Ubb7zX5tG6S90 JU750tL6kx+nku325GZtCB21VtlPuVwu32C0Q8cEh82eQA03q4fmRD7p38TROxhvExOU/kJZoAZf tuxJ3FS1Hi5MTuhME4h90lckcHtPl+m7du1KcItkz/Tp03c91tItUtx8n49apSnD1JmbbU5bgqvG pn4SKnNsF9hcLeUPbP3AVgsnuRI7K95b+P399U79Kf4/dVzvrDm7jdTEdvY/6381bo9ITkybLNPk 5LSEpuxIICs9u9T/dNuIW3/afV/S4Ozi021S6h0PbsN2YkHeMztcV7nYu+1B3epTaERtsaSHmC6u p83LHJdQRZ+9TKXCg/Gz1Y6LtE3bznyjdChrYko11Wm6rlj8DP156ghVCzp/mztRdf6J6sGXyYLP 7mvhz9G/NZUk1tonCcfURXPvFa1nzL3rHjHk3l/PmyXGc8R288RrOpMvQkr9b8cukcwsLbZlE/gl 2uj9sT125nAXEFRb4RiTlTVadJs44cbOov8tE8d1ZpIYO0f9nlsL0U5vOfiGlk135xGWOWN6fIt5 mmgl2osOU2c/MFu8o1836NcP9evH+vUz/brlnrvmzhLb9ese/VqgX0v062H9eky/GurXMEWderW5 9Gt7/dpXv16jX2/TrzPvu+e+e2zL9OtK/fqMfl2tX1/Xr+v068am31b7T6+2n/jqQUkHGrhQmBaN Lv93++z4kPxfv6vkVv89hPoN/ofF82Kt2CS2iP2iXNTZ7CJRR+qJR2sI9d8iObiuNb2TTf1bum1I 7P2xlbH330abXUO+Va89a9vmO3X2dkqPs7dbpp693erVs7e7/3D29iXnHO/V/uztgfSf9ubb9c2O u4TthqvO3h7/BO9J5PQlIkv991tc8zBS9bdnieX2d+wHxJuO3zp+Kwqc85xvicKEb1yP2RxJNyf9 2vZJ0qM8VG73tfBdZ7/Wd7vvdfui5GnJM+1/S16e/JR9a4o9xWPfn9KQ0mD/h7DlWEobV1Hyx+ct eyklyUeblUi87D1PqU/p0lQuoQyhjKLM1GXNuSV5b8ralD+1WB0vbzYrG1RRzxfnKUkts5rKEy1f bCpWrKR2PE/pSxnY+tVm5Z1Y0UfOKa03td7eVPa0OUw5pkpb5/lKat+2qW0vafdEs/KiLlvOW/a2 azxd0lqntW8qo+Jl7HlLli63xd/PLjnxV3XeNl0Kmkrs6kNpNem90qelv56+XpVz756+8Xwldvf0 v6SXx0v9maK+Jb1Rf1eO4sLxXYc0lfFdJzaVafEyk5LTdWa3AZSR3ft2H9V1Jq99u2/psf3iIl3q L5lMmd2zB6VPz/KeUSjv+UOv7b1fV6Vnee/Pekd6R/o4+6T0ad3nU0pB3+GUrL6T+70WL8HLci7v cXnlwOevHEgZPiht0ORB2YM3xctng7cNLhjSizJ4yMqhB4e5dHl22BZdTg2/cvj78fLxsFNsvz+8 Rm/VjLCPsA9/f0Sfkc+M/OzqvtdNohy64e5hz8bO5r0mdtaY4eq8MePHdhnbf+zwsevH9dAla9xM XbLHrRz3Gq/Z4/Iph8cvHp8z/tCNsymrM/2clZW5J3PPuHxeD6pPlPJMI7NxQo4u6ybs0uXQBAMO TbCynBMsjhtZk7MOZpXfNI/y/MTOnLdughU7MnHxBGvi0YnVt2bdtm3SpF+l/qrjr3rMcM6YPKN4 RuPp97v7UDbNajGry+zs2Q/P3jy7fLYx25rjnDNgzqg50+fMnrN4zmNzVs95f87Hc7bO2T939tzn 566fW/eAeCD1gdEPTHngsweK5g2cN2Xea/Nvm//Y/OD8+gWuBX0WXL/g/QXHFo5a2JjdMfv6bH/2 3OzXsjdmFy/qsuiXiz5eVLyocbFvcdvFgxdfs3ja4nWLi5f0WjJqyR1L1izZsOTgEuvBkQ8ufvCz pa6lI5fOXfrh0m1LTy1rv+zuZeuWGcuHLM9evjEn69/0VR+f2x+d3dvkLDhTVD+if04WL7Ee5N+0 vbHntriz20ks08/b65zueZqVs/uOnG1niuodcgrOlFi/oPrQFhvStrV7kX64ZHgNvabug/U7/W3L LPrXNSlrW6xO3tvUZ3JuS6vrNHVt8scpa870nTGV6J1H6f43dlaXlLWn1VN7VV+szy1Rx/X5cQW5 78fJR+nJ13JFib7bXmq3mvcSXc6MDpFzRoVRzcaBMyPBWlXvH/X+G37U+yfF+/wndH+ve3l9H65O GcXnNad7QvxYH/eLvinW/8T6t7iP9In0gMq1aU2942lH6ePSxuaUqyvOeNx1Yk55Tjl3U2fVcywr vbzrxB/nBP1gQbMe9Tz9bPN+9cd9arzn3qazKdaLjj/df6p+nT18a46Rvp49E9OyrhyYuaetMzaO 6XfGrHaNbQ6TVamnR5/To0pqx7bOMyNQLCvV2KbPdqozuHZL21R1RO1RZ6n9qR2T957O1LT2qR0Z AVPV9epzbO+ZcbT5SKrqokfN+LjZbORM5Q7njpMvnjU67o2PjK1P157jjbFvV98/LqvN4bRR1Ocs 9ZVqSmOcatZiT2sca4lKzVimdJ2G3mOVm0qJtKzWr2q/1ytvmrXqIekbifX0CFsQu2uOkZaTY8SK +gb13nWickV9imWaes8xuvftNiBGbITrNkCPSs2KGuFio5seH/8fix5Tm5Ufn6FH2mYlPuI2lR9f oUba/67osfgnl6YR+9+Uc5VSpWkc/zdFj+w/uejZxk8s56qj5yjNyo/103OXZkXlfczp/678+M7/ uXY/rcR0VnOXlLXDXGO7DDuVXKJmPbo8q/e41ExHbz07touaA8WPUZhBDVazpthe1ferT6ro2dEk PbNSc6ia4TV6fsTsiE9bhj2rZyc5TbMYVdZNyMk8OCFHzWD01rr4PCf2eR2zoHK1R81o1HWZ8aJn PPP03Ihz9dF16jV9I2evU7MpeosemQf1vCs7XrL0nh5q1qW3sjIPqn4pfozCzK0/czU1Q1PXrdSf KHqeNlvP5zhXz9Sa5mvjskbYtSKnlBY3zYspMcyl46HGsZqOy9f3Vt+0Ut9L3/fslvhjR5vnwcVF sS3hUmvkqrVx1cq4al1ctfqtIygGCbUu3V69mqv6ZOjVFW16pVq7Wm1WrzXrFe/JU2KrPGXzi1a2 X4uJtiki3TZVZNimiZa2e/QauAPViq16jVabXovVybk+zm3JuT7OTdL3C3NWtUi0qTW//KIrx2/l +IUc78q9unOvDLVOql4Z1avWNVUrmToepB5L5Z+p7xDHEfmy46jo7wiLAY4K0dtxXO5zRHjaVXff q9codaoVQ9V6oWpVUL0maLa4QIwVLWCI6CmGgloj9C6YDmqlULVO6HxYAAshG9SqoWrN0CXwICyF ZZDL9SvgEVgJj8Jj8Dg8AU/CU/CJuEZ8ClE+/wBS9LQJsEGWGGq7CSbCzXALBMQEtSKpWo9UrUaq 1iJVK5GqdUjVCnlqDVJHrrjI+Ybc73wT3oL9oqfzGyiAQiiCA1AM/4ASCMFB+KfomdBC7ks4LPcn fCt8CQafq6BG7ncliLGunrxfLnq6ruT9XrnPdR/MgvthvqxwLQC0caGNC21ciwFtXB+Ioa4P4c/Q IIa6e4lO7t5wp+jp9sMUmANzYRHkwEOARu5n4Tl4A94S17jf470KqqEGaqEOGgANPVNhGtwF80Wn RCGGJrYWnXTuHtNrqapPx/UKqG3I2jyyNo9s60G2XU22PUy23Uy2TSHbxpBtI9VqpWpNUrUiqVqP VK1GqtYcVSuOOoJyneMIeRYWDscxcvC4uF3n2VG9+mjLplZxh+jX7P6juf8C7n8d9x+kVgdVa4Oq lUHVuqBqJVC1Dij3+4z73SZSuMsJ7nKCu7TgLhdzl1ncpR936cddenMXtbrxIbVmp1qxU62gp1fo VJHu0OtnpnGPv3OPv3OPS2x3yk+5Tz/ucyf3Gch9buY+I9SqmNyrn22N/Ita5VKtZalWslTrWKpV LNW6lWrVSke5rKd2+Y5KWutxcakjEm+xLblrL+4a4K6DuOt13LUbd7yEu32jVl7Tq2//mfz1xnuY f9GTqJ7lFZErDbECHoGV8Cg8Bo/DE6DWf34K8mVU7IRdsBv2wNewF/bBfvgGCqAQiuGfUopDUAqH oQzK4YjcKY5CGOpkSJykndeDCRY0QJTe7TuON8L3cAr+BT9QFykNmwCb7hWPOCaTYb+UJxx38O6X J5z7peH8BgqgEIrgABTDP6AEQnAQ/gmVMuo8DhH4Fgyogmo4ATVQC3VwEuqBujh/ACl3JqTKne6R Muq+DsbCOMiUFe5beL8VJnP8drgD7pSG2w9T4B6OzeF9Lszj80LIhkVsP8h7Du8PwUo+Pwr44F7F +7O8Pwcv8PlFeAlWw8vc/w32r+XzO3x+j88f8PmvgEduPHLjkRuP3CEp3QcBj9x45MYj92GuKYNy wCP3cRlyR+BbYjGgSu51V8MJjtVw71qog3q28c5t8d7ANh55psI0uAu/7OIZ0VqPXA7xDLl7q1pd D38T2PoDW2PZGkOWb3V8LXoLG3stMYrMDJGZITIzRGaGyMwQmRkiM0NkZojMDJGZIc6uINOiZFqU TIuSaVEyLUqmRckig4yxyBiLjLHIGIvvU+s9hhy/EgmOX8MUMmiqPELWhMiaEFkTImtCZE2IrAmR NSGyJkTWhMiaEFkTImtCOGnhpIWTFi6GcDGEcxauhXAthFsWTlk4FcKVEG6EUD2K6lFUj6J6FNWj qGqgqoGiFopaKGqhYggVLVQMoWIIFUO6xZYIN1peTUv2MPb+jbH3I8dextp9jEKMNlrfCBHuI8Iy re+DbKl16Tui78Pc4YCYxDiZwTiZwTiZwTiZwTiZwTiZwTiZwTiZwTiZwTiZwTddyVjZjbGyG222 gDZbQJstoM2W0WZN2qxJmzVpsyZt1mQ8TaXNhmmzYdpsmDYbps3itxjHuDmQdlpGOy2lnZbRTksd U0QPx1S1frxYwTjaiXG0E+NoB8bODMbODMbODMbODMbODMbODMbODMbODMbODMbODMbODMbODNpi mLYYpi2GaYsFtD2TNldAmyugzYUZ4zIY4zIY3zIY3zIY1zJoK2HGtgzGtm60lTDjWwb5X0D+F5D/ BeR/AflfRv6Xkf8m+W8y/qUy/qWS/2FyvoCcN8n5MGNgBuNfBuNfBuNfhsp3WYfWdczPnpGP4MBo +vMy+vP5ODEaJ37H0afI9usc+5lJFcgfHIViinYvxNklnFXMiPmMXMbWFK7dz7XfsHck1z7DtV9x 7ViuLeC6XwhXvB39nDMLObOAM8fq+ZXKmXf1ne7i+AiO7+F4EceHcqfHOfohd7qGO+Vzp/76/H/o eeIh/WqJJNsFopNtMtwL98H9MBvmwFyYB08w0rdU6w2rtYXVysJq/WA9N3pTtHP8VVzh+Bz/y0VX Ru2bmSWmMnK3Z5bY1VFJz3CcGkTY9624gvF8rvycK9oyp+yixnSuv1eMUX8tQq0qKcY47tCzrzEi hZp1oGYdqFkHataBmnWgZh2oWQdq1oGadaBmHbiyNVfO4srWXDlLX5lsU+sT3wv3wf0wG+bAXJgH TxDNZP2XDi7jSvW3Di7TV/q40seVPq70caWPK31c6eNKH1f6uNIXv3Jg/MqBRHK76MWnXlrjPD1H aFBrAKs1AuEmmAg3wy0iiblbEnO3JOZuSczdkhLVv9M61dq9as3Y+Exjq/aoTBTYLpHltp7QC3pD H7gU+kI/6A+XwQC4HAbCFXAlDILB8DMYAkPhKhgGw2EEjISr4Rq4FkbBdXA93ACjYQyMhXEwHm6E TJgAr8Jv4DV4Hd6AN+EtWAtvwzvwO1gH78J6+D1sgPfgffgDbIQP4EP4I2yCPPgTfMRsbTPvn8sS 2xb4ArbCl7CN/V/JQtt22AH5sBPUOsC7YQ98zQxiMk8rd8i9zi+ZSWyDr2A77IB82Am7YLcsdO6B r2VhQktZntAa2kBbaAdpkC7LXavgFUAD1+vymGudPOF6F9bD72ED/In9X/DObNP1JZ/3ykLXN5xf zGdLlrsvhIugE3SGDHnC3QW6QjfoDj1koftiuESWuHsCueAmF9z47h7A9uUcGyqPua/ifaI84bHL co8DnJAALnCDBxIhCbzgg2RIgQugBRCvJxVaAXF7iNtD3B7i9hC3h7g97aEDdATq76H+Hurvof6e DOgCXaEbdIce1GmAPOa5HH4mCz1DYCj7RsL1cAPcyXlTeJ/OsRmcdzcEYCbM59hSWAbLIQdWsf9t zn+X89fLEs/v2d4AdewzZXmiDYg1sZUsTCSOxDbyWGJncmiJXmsadWyoY0MdG+rYUMeGOjausKGO DXVsKKNXpG4JqdAKWkMbaAvtIA3SQa1ZrVas7gSdIQO6QFfoBt2hB1ysVmnnKbsn9ILe0Acuhb7Q D/rDZTAALoeBcAVcCYNgMPwMhsBQuAqGwXAYASPhargGroVRcB1cDzfAaBgDY2EcjIcbIRMmgFpt +yaYCDfDLXAr9b4Nfg6T4BegVsReBsshBx6ChyEXVsAjsBIehcdArdyt1u1+Dp6HF+BFeAlWw8ug VqP+DbwGr8Mb8Ca8BWvhbXgHfgfrgBHQth5+DxvgPXgf/gAbgb7WRl9r+yNsgjz4k1o1XK3UDVvg C9gKX6o1sGE77IB82Ann9iK3yl+rVcXVethqTW+1FrZaz1utJe6kx3PS4znp8Zz0eE56PCc9npMe z0mP56THc9LjOenxnPR4zo08o3wAH8IfYRPkwZ/gI/iLrHJ+Ap/CX+Ez+BsE4e+wGT6HLfAFbIXd wufcA18LX0JLkZTQWngT2kBbaAdpkC68rqdkletpabhW8Xk1n9fICtcrjEl4oHuzNzlGLK7fcYw6 u6izizq76KVdH8ijrg9hE8fyQPVyH3P+n9n3Ccc/hb+y/RlQTxf11L3fV2znc2wn77vYtxv2wNew V/hc3/DdPNu5eLZzFbHvgGzQPWUJdeN5zlXBtTyzuAw+M7t2Mbt2nQCeWVw8s7h4ZnGdhHowwSK2 BnnUnSKr3BdAC2gJabLBnQ7toQN0hAtFkvsi6ASdoYfwuS+GS6AnXMa+AbxfDoyybkbXWK8rfB67 8Hoc4IQEcIH6RXcPJEISeMEHyZACF0ALaAmp0ApaiyRPG2gL7SAN0qE9dICOQD091NNDPT3U05MB XaArdIPucLGs8vTmGa0PXAp92Wam4LmMz6d74oF8vhIGwWD4GXEMgfF8vhF4zvVM4LosudVzE0yE X8gGz53UczrnndtL87zr4XnXsxCWUodlsBxyOP9xvpv2r3vt1byv4b6vwKvwG3iX+62H0734e+zD Q4/Jtd/LhkQhjyba1H/yJo1E9d8WJPHekv2thE/37IxQie3YlwbpQH+c2FH9XFK19Pi8aqlab1/P 0bY07Z+l1rbXP0dR861qkWAfLX/puFF+wew0Sf1si2NVoo+9v4zYB8IgGAGj5T77GLnTPg5uZFZ+ qzzE7OIgs4uDSZPkzqTJ8KiMJD0Gj8MT8CQ8BU8Dz3JJq+BZeA6ehxfgRXgJVsPLsAZegVfhN/Aa /BZehzfgTXgL1sLb8I6M+HrLiHBQU8s+iWfiuTxDD6X+JvU37UNkmPqb9mt5f1yW2Z/g2eV2cSn9 16WcuTPpZhlOugVug1/CVFmWNBPuhVkwG+bBo9IkNpPYTGIzic0kNpPYTGIzic0kNpPYTGIzic0k NpPYTGIzic0kNpPYTGIzic0kNpPYTGIzic0kNpPYTGIzic0kNtM7VpZ5x8F4uBEyYQJkwU2yjNhN PBwkD+DQLrv2UW7XPznsROzriXu9/Xa50T4N7oPH5WY0UH8HooTY1xP7emJfT+zriX0zsW8m9s3E vpnYNxP75qRsuTFpESyBh+ARuZF6baZem6nXZuq1mXptpl6bqddm6rVZXI0DARwIULcjOBCgfg1k UD0ZVE89S6lJMTUpdtz6Q71j0g+m+hsrONNP/X0V3OkXf8bfSnbVk1311K6Y2hVTu2JqV0ztiqld Mc4EcCaAMwGcCeBMAGcCOBPAmQDOBHAmgDMBnAngTABnAjgTwJkAzgRwJoAzAZwJ4EwAZwI4E8CZ AM4EcCaAMwGcCeBMAGcCKFCMAsUoUIwCxShQjALFKFCMAsU4ExDXooIfFfx4sQMV/Pixwz5aXEj0 mUSfGf9565Px5+le6i9Uqb90of46lfpbF/GfEv8Cr3bg1Q682oFXO1AjEzUyUSMTNTJRIxM1MlHD jxp+1PCjhh81/KjhRw0/avhRw48aftTwo4YfNfyo4UcNP2r4UcOPGn7U8KOGHzX8qOFHDT9q+FHD jxp+1PCjhh81/KjhR41M1MhEjUzUyESNTNTIRI1M1MhEDb9wkwv1ROwj4ueIeAERpxLhMiJcKNLR aCv6bEWbIrQpUn+/Qf2lAo6+QPxbiX8r8W8l/q3EX0T8RcRfRPxFxF9E/EXUo4h6FFGPIupRRD2K qEcR9SiiHkW0lYB895z+rl5car+JPm4SBOjnZtLH3QP3Avemxoeb+rql9BnL5U7vEhnxPghLYRks hxx4CB6GXFgBj8BKoG/00jd66Ru99I1e+kYvfaOXvtFL3+ilb/TSN3rpF730i176RS/9opd+0Uu/ 6KVf9NIvpiRCEnjp81TPHtF1N2njYdp4mDYeRjf1nN6Do/tpu2Habpi2G6bthmm7YepuUneTupvU 3aTuJnU3qbtJ3U3qblJ3k7qb1N2k7iZ1N6m7Sd1N6m5Sd5O6m9TdpO4mdTepu0ndTepuUneTupvU 3aTuJnU3qbtJ3U3qrvqsSfIfqL0LhT9v6rNURKViABHlcbyc4w24cQo3TuHGKc4t5VwP53ppKUlE 2peWkkS0feM/A9qGQ6dw6BRR5hFlHlHmEWUeUeYRZR5R5hFlHlHmEWUeUeYRZR5R5hFlHlHmEWUe UeYRZR5R5hFlHlHmEWUeUeYRZR5R5hFlHlHmEWUeUeYRZR5R5hFlHlHmiSuIJBdvtuPNdntAdMSf 7UQwlRbwHS3AIpIVRNIu/pOZduonM0TysvppFt5tx7vteLcd77bj3XaiyiWqXKLKJapcosolqlyi yiWqXKLKJapcosolqlyiyiWqXKLKJapcosolqlyiyiWqXKLKJapcosolqlyiyiWqXKLKJapcosol qlyiyiWqXKLKpR1P0u14MFF8Hf83p+up9QvUepPwEu9u4t1NrLuJqw0xteHIS8Szm3h2E89u4tlN PLuFyz4fXxfI7+wL5TH7CvLiaVltf0n9pJ29jfYV0hI2Xr8TPTnDsmeTEYtghSy0rxQe+6Nc/ZSs tK9Wf8dBfm9/RX7vZX7rZX7rvRAugk7QGTKgC0zjnLtgOsyAuyEAM+EeuBfug1lwP8yGOTAXHoB5 MB8WwELIhkWwWH6v42mkpkfsS2UFsRy1vyhP2HnSE5Ptc8n2B2A+e7OJchEsl3vtOfAQPAwrRBv7 SvmBfRXnPSsP25+D5+EFWCM/Ib5PvHa5y+sAJySAC9zggURIAi/4IBlS4AJoAS0hFVpBa2gDbaEd pEE6tIcOshoNq9GwGg2r0bAaDavRsBoNq71D5F7vULgKhsFwGAEj4Wq4Bq6FUXAdXA83wGgYA9OI 4y6YDjPgbgjATLgH7oX7YBbcD7NhDsyFB2AezIcFsBCyYREslp8IJ5lzCBW/QcUy+2pZSy6tkHXk SYPIwoUoLkRxoBEHVIaVMeJYjDgWZ1ioHEXlKCOMxQhjMcJYjDAWI4zFCGOhfhT1o6gfRf0o6kdR P4r6UdSPon4U9aOoH0X9KOpHUT+K+lHUj6J+FPWjqB9F/SjqR1E/ivpR1I+ifhT1G1G/EfUbUb8R 9RtRvxH1G1G/kVHOYpSzGOUsRjmLUc5ilLMY5SxGOQt1o6gbRd0o6kZRN4q6UdSNom4UdaOoG0Xd KOpGUTeKulHUjaJuFHWjqBtF3SjqRlE3irpR1I3S5haQ3aotLkXTZWT3CpGC2kdQuxy1T4jZaBxE 4yCZXsmZ29H6CFofsS9me6k8zlV1ZL5B5htkvkHmG/jwL3wI4kMQH2rtz8ivaAEHaAEHaAEHaAEH aEu76Bu24VEhHhXiURCPgngUxKMgHgXxKIhHQTwK4lEQj4J4FMSjIB4F8SiIR0E8CuJREI+CeBTE oyAeBfEoiEdBPAriURCPgngUxKMgHgXxKIhHQTw6gkdH8OgIHh3BoyN4dASPjuDREVqIQQsxaCEG LcSghRi0EIMWYtBCDFqIQQsxaCEGLcSghRi0EIMWYtBCDDwO4nEQj4N4HMTjIB4H8TiIx0E8LsTj QjwuxONCPC7E40I8LsTjQjwuxONCPC7E40I8LsTjQjwuxONCPC7E40I8LsTjQjwuxONCPC4UARwM 42AYB0/i9xZcPIFzJTj3Lc5V41w1zlXjXDX++/B/E+4ZuGfYn2Tf0zi9Sv4BBytxsBIHK3GwEger cLCWPPkbLpbiYikuGrho4KKBiwYuGrho4GIYF8O4GMbFMC6GcTGMi2FcDONiGBfDuBjGxTAuhnEx jIthXAzjYhgXw7gYxsUwLoZxMYyLYVwM42IYl6pxqRqXqnGpGpeqcakal6pxqRqXqnGpGpeqcaka l6pxqRqXqnGpGpcMXDJwycAlA5cMXDJwycAlA5dKcakUl0pxqRSXSnGpFJdKcakUl0pxqRSXSnGp FJdKcakUl0pxqRSXSnGpFJdKcakUl0pxqRSXSkV/XLJwydKtMeZCPS7U4kItDlg4oJ6balG3FnVr UbcWdWtRtxZ1LdS1UNdCXQt1LdS1UNdCXQt1LdS1UNdCXQt1LdS1UNdCXQt1LdS1UNdCXQt1LdS1 UNdCXQt1LdSpRZ1a1KlFnVrUqUWdWtSpRZ1a0Yue4RQ9wylav8F4nmR/kiieIgpdez6vhjWM968w bndgVtcRLoSLoBN0hgzoAtM45y6YDjPgbmAGidYNaN2A1g1o3YDWDWjdgNYNaN2A1g1o3YDWDWjd gNYNaN2A1g1o3YDWDeJutK5E60pqbFBjg1YQoRVEaAURWkFE63+6BaD7jzKfGbxd/WTj32d7JX5U 4kclflTiRyV+VOJHJX5U4kclflTiRyV+VOJHJX5U4kclflTiRyV+VOJHJX5U4kclflTiRyV+VOJH JQoaKGigoIGCBgoaKGigoIGCBq0hQmuI0BoitIYIrSFCa4jQGiK0hgitIUJriNAaIrSGCK0hQmuI 0BoitIbIT2gNERyK4FAEhyI4FMGhCA5FcCiCQxEciuBQBIciOBTBoQgORXAogkMRHIrgUASHIjgU waEIDkX0GF+j/xXySrwy8MqgtzHobcJob6C90thAYwONDTQ20NhAYwONDTQ20NhAYwONDTQ20NhA YwONDTQ20NhAYwONDTQ20NhAYwONDTQ20FjFaBCjQYwGMRrEaBCjQYwGMRrEaBCjQYwGMRrEaBCj QYwGMRpelQvzYQEsBPKNGA2v+vvcLeiLzbPbDJn2pG7pFn2q9Z/aCHP3BcxReTKltflobS5aWxkt rQ0tLUlkNvUo8xmNl8IynstX8F2Pyxoyu4azo7TNGkbneq7qi8IWCtc3mzXVkN01ZHcN2V1DdteQ 3TX/S71NDdlXQ/bVkH01ZF8N2VdD9tWQfTX/X2dF6mklilJfNT231AtHfF8Ul74Xt6JtPtrm418V /lWhrXqyKcGJBPStQN8K3f+tYvtFnhFeYqa0hn2vyAp0rUDXCnStQNcKdK1A1wp0zUfXfHTNR9d8 dM1H13x0zUfXfHTNR9d8dM1H13x0zUfXfHTNR9d8dM1H13x0zUfXfHTNR9d8dM1H13x0zSenqsip KnKqipyqIqeqyKkqcqqKnKpC9wp0r0D3CnSvQPcKdK9A9wp0r0D3CnSvQPcKdK9A9wp0r0D3CnSv QPcKdK9A9wp0r0D3CnSvQPcKdK/wqjjnwwJYCNmwCBbLCq3xd/GWEBWt7B+JtvbPmXFuIS+/kDn2 r+R6+0nmGaZcZf9O7nXQczou5em1n/zAMVCGm35b+TbRwvFz/TdS1e8UVvpCcg+OvcN9N8IWWsAX ssC+lUz/Er7iO7fzvlOG7Ht40i3g2wp5L4JKkWg/Tks1meNazIQaoFHWOoQ87HCDB9J5+u8njzgu kycdA+ByuEJajqGy3OeXhu8uudt3D9BH+O7nfbYM+eYAfYJvCe9LeV8GzKF9ucCI6XsaaJW+VRx/ gX30fb6X2V4Dr3GPd+R3vt9z/w/gQ3nS90fYxL48tj/hnZh8e9m3D/bDAbaLIcTng3CY86rkYd9J aJCHk1vL6uQ20BZ4Okzm6TC5G/tnyt3JzOmTqVfyo7I++Wl5MvkleAXeltVibFzVEnyKouoBVK1C 1SpUPYWqR1G1GFUPoOpJVD2AqgdQ00LNOtSsQ8k6lKxDyTpU/A4VTVQ0UdFEwSoULEHBAyh4AAVL UPAAChajYDEKlqBg8TkKlqBgFQpWoWAVChajYAkKlqBgFQpWoeAB1KtCvSrUM1HPRLkqFDNRzEQx E6VMlDJRqgql6lCqDqXqUKoOpepQqg6l6lCqDqXqUOpAXKkSlKpCKROlTJQyUapOdLFvkEvsH8kP USpIDn6PQutQ5Vv7ITmDPJtvPy7fILtvs9cz0/5ODifPtjkccqvDJZ9x+OQssr3Q0VpmODqJ6Y7u ch6Z38XRV16Dam+T/deTc79xDJfLHFfL2+O/nVXq+Ll80zFJznQE5N/U7y8R1af0SZ8zSnwBX8l/ 8o3H8OMQ3xjmG45z1xruWM4dT9CWhtKWhvFEuAHHPpf7uEq1l126jVSKi7h6P1fu4Mqj1C1M3bzc oUC3h4GygCs/lzu46hhXfcwVrbiijO8r1e2Xp2rdhjvRTi9lu588xFWHqeVWcSGZdVJfuZXM+hK2 kzE7uXoPWVXALLKQ9yJ5lOw4SnYcJTOOkhllZEYZWVFGVpwkK06SFSfJiCgZESUjomREGZkQJROi ZMJRnDuKcydxTfX8lSKF+rio+Tt83wa+9y/E+glsl43oehA9w75saXH/Ou5fx/3rfK+w/bq0uE+d cHJVPTWfyxXlKu+ZCW+gL/mIWL6Qe9kbsu+jH1EaHpIRdNvHfQ9w3wNiEt+6irNzaFNHdLb8RS7l 25dyZS1KNKJEI3c4ghISJerj7aoeJertxfJ/iLv36Kjrc9/jv2QmM8lkAooIilZFEG+9qLW21Vp2 W7a1u9bWtnZbrbbd1bqh0IqCFhCBXrSt9ysoUrVSRC2XmlovgHer1gYSMsAwCTRyTwg/CAQCBPI9 r5mm+9h99ll7nXXOWueP9/rN7/a9PN/n+zyfZxZM5muxlifVl7fzngz6h6sSA6zGQByBIeG6xFCc ELYmTrLOJ+NDVo/dE8Pd/0zp3y6fbjSn23vrWbeTdTvtvfUs3MnCgYWDvbeeFSazdGCJO1niTpa4 0/5bz9r7WXs/a+9n7WD/rbf/1rP6flbfz1qTWb6TxSZn54lE87EoXJd9w/EvqMNSrEYBa9z7q+N7 2lgXrquJwp9qKsL8mhTSGOx8GEaJUNPCnfbgequ5v+aBsK5mOmbgIcwK86NqHrmTN66z0h8VfQ6K PgdFn4NW/eN2+kE7/aCdftCuPhgdbT2Ka7mH7Xew/Q5vpcSoDjGqQ4zqMPdOc+80907z3mHeO8x7 h7nuMNcd4kuH+NIhtnSILR1iSwf/7hBbOoy10zh3iBUdYkWHWNFRltHjNB7wgNV/xerfY/XvKV9i RV/Cq+Gt8jdkxTfxVnicF3SXL3c9x7fyYXz56rC4vIAmNGMN1oZbyv/quA7rtbnBcSM2Y0s0jbfU lrf5vBXtPG+bY4zt4bryHejweSd2hZFiU73InRe583bwN8SopeXd7h3AwbCkvMcxyMJlKEcxfiV5 W4XPKXEqE6Ymqn3OhjGleNbX8RAcin7oH87hrefz1vN56/ly682JQeGGxFHuHY1jo28mBjsejyFi 3lCcEL6VGOb8RJzk/GSc4vMH8aHwOTHyuyLLPKs2zapNs2rTePuXxMvbE2d55uP4RPhJ4pOOZ+Oc MCXxKcdz8elwuV1xfuKffP5MuNbO+Ebvv5idZ4fckLg0OiJxBUaGZeLr77IjQ312FK4J3XZJtx1y jx3SzUum8ZJpvGRadpr7P8Ev8Ev8CrdFA7K34w7c6fn7XXsA053PwIPamen8146PhDHZx/A4Zoeb s78NN8hmU7JPOX8av8O8cJ5ddZ4MN4UHTuOB0+iDm2W5Kdk/hJ9kn8UfPfeCa4s8t9jnJXjJ9Tec v+X629r9s2vv4i+u1WEp6rXVgOVo9Pwqz+ax2r0CRG/ePc2uPS+7Niy2c8+TRafYvefbvedl17vG B7N8MLsJ/DC7Ba3hlSw/zPLDbDv4YHY7dqBDBNiJPT7vDUuy+7Df54Pgc1k+JypMreF3NfyuJhGW 1CQdK8J4UWK8KDG+ptJ5leiRAR+syYZXamrQx+e+OMT1Q9EPh7neP+Rl+rxMn68ZqL0jPHMkBuEo HI0PePZY94/DYP0f75oIKxpNrZkS6u3waTW3RANqrHWNta6x1jW34jbc7t694QY7f5pIdZ5IdZ5I dZ4oME20Oq9mpnZmGfcj2nxc+7Od/xZz8ES4LhosSlwrSvy+lJlfK+XzN0WCzXb8nXb25Xb2s3bt Arv2HTl3tx37sh273q5ssBv/bBcusQsb7bp/trOusJMW2DG32zFv2jGb7ZL77ZJGu+Al3v9b3v9l 3v8K7y/+T4WzePyy6N/EqyeN5Hcy1vLyBbLUs2LC8669gNfkudfdeyOsFD1XylyviFnbZK5n5cBt Rtsqez0rez0rfs028jfFqVYjXyoWvWHUefFmnXizzsg3i9c5I98uZufE7Jx48obRzxML5okF84yy 2yi/WtQ8stfy7HdF2qvCszLYszLYchnsWXtzm725TQZbbn8+aX9usz+ftD+ftD+flMGWZ3/mvZ/j VtwWVorqK0X1lfbmNtlsuWy2XIRfKcKvtDeflM2etTeftJfm8ft5/Hwen26VT3LySY7ftsopOb7a yk/f4Jez+eVsfjmbL7bytXV8bR1fW8e3WvlWK79ax6/W8as35KIcn3pDhnuWTz0pwy2XOVbyj9n8 o5V/rKMgl/CDl/AqhfZWeJ6lN8gODXzhs6J5s2jezB/eZdUWVq1n1Xo+8ZzIvZZl3xapm1n2bZZ9 m29s5RubRONG0bhRNG7kIx/kI12ibEGULfCV1fxko8haJ7LWiax1fGaFaLpaFM2LnI0iYoOI2MDq G1h9A2tvEAEbRMAGEbBBBGwQARtYdoOo1yDqNYh0DSJaXhQriGIFUSwvitWJYnUiWF4EWy2CrRat VotWBdGpIDoVRKeC6FQnOtWJTnWi02pRqSAqFXqjUp1oVBCN8qJRo9V5W2RpFlmardLbVuht0WWt 6LJWBFkrWjSLFs0iQ7PI0CwyNFupeitVb6XqRYW1IkCzlaq3UvV2frOVetvOb7DjG+z4Bju+wY5v sOMb7Pg6u73Obi/Y7QW7vWC319ntBbu92SrW2+XNdnmzXd5slzeribdQx0VdfWY4EH3MLivWWT+w o2bYUTPsqNes81S7Zp91nWNda61rrd3SZl3XW9f51nS+NZ1vR+y1C/Zai6nWYqodsNd6TOXxe3n5 DF4+g5fPsBZTefleXr6Xl8/g5TN48z72ms9O83nzPraaz1br2Wo9r97HXut58j72qWWfWvapZZ/1 vHkfb97HRrVsVMs+83nvXt47g+fuM+dac3w93M5ju8xgibNdxr47PMU310aDzGyXs41m1mpmrWa2 w6zqxIE2M6szszqj22V0dUZXZ3S7jK7OqHYZ0S4jajWiViNqNZpdRrPLaFqNptVo6oyiWMu2Rsfq abeeVutpo5426mkLGxZr1Hq9deqtXm/1etutt3q91ettt97q2WInW+zU62622Knn3XreqOeNet7I Fjv1vlvvu/W+Ue8b9V6v92J9uFGNsFa83BWWmfUyPXfqsVkse0HEXSXiFuuD50oRN+Wpzt4aqq33 /zB9JHFJdEbJci3uNLvTUjor1nbdJTtW9L6101m79ldqv4MaztO07Sy83zwzLBGhgiZNIY3Bzodh VtihjbWllWnwdJMsUhxjZzRMG2+68zz77dTWi57Y9Pf6vpRvIvEljUpkwotmdZHZfI8dd7LjWnZc y47F+not++00hheN4U1jeNMY3mTLf6y7j8LR76u/B3t+qL04zHGW5x9xrVhzl5lzHA00vg5j6jCm rca0tfcbnO1G32pc241ru3FsN47txrBd3x367tB3h3636nerfrfqb6v+tupru3469LE1Gqr1RWb/ JzN/+31RNsfO8/S0pxRVM6V/KfLz3rVcbfYji/+i5+/Rx4zf1usivS7S66L/MvIUI81gzxWjzDDH YsSY5dn/HDGqSll0Fx2wT22dsq4Xh2t6/3XHMj1/s/QvRs8w7rWefM6q1akLVhr/y6y04H0RpJgZ 8iw1y1oX8+4m1prFWrPM52Wt3qq1+VaxjnZbyYKzWHCWlaxjxVl2RN6OyFvROvN72a7Im+Nac1xr jmutah0NtpIGW0lvrfxPkSNvleusct1/RI7B2hgaZpn7y+a91irXlaLHUazexOpNpW8jdosi+8Lr Rr2N5ZuMeJsRF7/D2cbaTazdZJTbjHAbKzexchMrN7FyEys3sXITCzfpaRsLN7FuE+s2sW4T6zbZ VbtF3f2yH+/hYbvDy1G5LLifUtoXJaiRt5x1ONscDXYWq2H20icxfRLLlF0yZZdM2dX7HWEbzbKD jt8r47XJdG0yXZdM10Wv75Xt2mj0vXRFTJPvld26ZLcu2a2L7t5Ld++V2bpkti66I5bZ2miPWKbp kmm6ZJeuqEou32ckD8vdsZxd1HWb9Bpbwcet4OOlqFIl23cm+oskHwrtZtDqqfbEx6K+IoyaJzpd P/koqZ0N2il+57q3OAMzzpa+QWgrPs8S/e2nj4W9rhe/lfWE99ZFhzsrzr7T7DvNvrM080tphSvC ivfNvNPMO0uzrndswHI0oRlmZ2adZtZpZp3RcXpbyr672XcV+656f2Wu73a9bGTb3XrYqIeN/1GN P1P6xm8j2+5m21Vsu/sfKvRVzvOlbwFLlTrbrtL7RrZd9f5qPSoz893R0ESNT/3DI9RSTC3F1FJs TH80pj+y1m6KqZViKn67to2dtlJGsRU4YAWetgJPqyP7qSOL/zqyqHpaqZ5W4/ojddNK3bRSN63U TSs100rNtBrPHymZViomNqY/UhStFEUrRdFKTbRGaaP5vZ536XGvHnfpbZ/e3tXbu9EQd99jt83G uNoYV3tyT+932P9zhT5G2Z3Drz/DDrPDZjbcz4b7/2OVnnGt1vkLjosorbcc379qq5zn8ffVW+OZ Fs+vC6v/YRUHsFoLq7WwWgtLtbBUi3H/tfc7qRYWaWGRFtZoYY0W1mhhjRbWaGGNFpZoYYkWVmhh hRZWaGGFlmiQea4xxzXmuMYct5tjzhwbzbHRHBsp1aLXNZpPI1XZRlW2mcsayrLogY3m0mgujZRk m3k0mkejeawxhzXm0GgOjebQWPpflEMS346GRDOiK8OD0VX4Pq4Lj0YTw93RJNyIybgJ68OMaAM2 Yqdn9oW7ov3oxgEcDHeVnRTqy07GKTgVH8SH8GF8BKfhdJyBj+JMfAxn4eP4BD6Js3EOPoVz8WkM xz/hM/gsPocR+Gech8/jfHwB/4Iv4gJ8CRfiyxgZDSx7Jbxc9mp4ruw1vI438CbeCkvK3sY7+DPe DUuSj4S7k4/iMdQ5X4plMNdkD0K4q+KQ8GBFvzCjgsquoLIrqOyKgTgCR6Il3F3R7plt2BHuTp2M szA6PJgagx/iRxgfHk1dD3ZP3RnqU/VhSUrFkx4WlqRPxEnhufTJOAMfdf4pXBpmpC/DFeGu9HTM Rovz97AO1izdGh5Nt2G7e53O94S7KstDfWUCSVQgBUqxklKsrEIG1ciiBn3QF4fgUPTDYfhkWFJ5 Nr7t8/cdpzo+4Tg3PFe5O9RXaavqMPr48qhfWBodBtEvOhwDMBAn4iScjFNwKr6IC/AlXIgv4yu4 CF/F1/ANfBNXhod57sM892Gee1M0LsyKxuN63IAfY2KYy5vn8ua5vHkub56b/FVYmrwVt+F23IE7 cRfuxj24F/fhfjyAR7z3KB4Lc636wxWrwtKKZqzBX9Hi+ibHzWh3fxt2uHYwLE2lkEYVMjgCR+IE DAM7pNiBd8xNnel4luM5jp/H5bgC38Z3MDo8zHMe5jkP85yHec5NPOemlPmmzJcHza38UdE20d2h ProH9+I+3I8HMAdPYC6exFP4M97FX1CHpViGejRgORqRwwrksT48IyY8IyY8Iya8E+1CJ3ZjD7qw LywQJxaIEwvEiQXixILkllCfbEUbtqIdqpNkjO3YgQ7shIol2Yniez0IYYH99kxaLEjb+2l7PW2v p+3z9IXhnfTXHS/GpZ65DFeEBekfOB+H8bgBP8aNuBm3wH5Ls1GajdJslGYj+2lB+jeOsx0XOC4C O6TZIc0OaXaw156x156x156x156x196x195Jb0U7tnu303X2sO8WlH04SkaHRhVIFf/CUvEPhaAK xV/vrka2+BOT6IOzowHRObgyTOLjk/j4JD4+no+P4uOj+PgoPj6Kj4+KJmhhYhjDz8fw8zH8fAw/ HxP9NOob/Qw/x824Bb/AL/Er3Irb8EJ0TPQi1oeJVnSiFZ1oRe+zonOt6FwrOteKzrWic6PiL0jv C5Ot6mSrOtmqTraqk8seCivKZuJh/BqP4FE8ht/gcczGbzEHT2AunsRTeBq/wzzMxwIsxO/xDGrx h7Ci/LSob/np0YDyMx2H4/wwqfwL4bryL+Ii5yPDtPJRYXT5DzA6jKbZvpi4LIyj276Y+LbjuPDn xPjQkKiPKhINUf9EI9W7QlW+Msok1oe5iQ20yMbopMQmx83F3wZy3Br1S46LDk2Ox/W4AT/GBEzE JNyIybgJU/BIGCNejBEvxiSXR32TjchhBVZiFfJYjQKa0Iw1YE/ePpm3TxZrJlUcGlbw+olizJiK rVFGfJkkvkwSX8ZUdEeHphLgW6l+OAxDcHIYkzrF8XR8NBogpoxJfdzn0WGS+DFJ/JgkfkwSP8aL H+PFj1Hix6gUX0pNBF9KPRhWpB4q/Q/6FekP4Bgci+NwOi4Mc+20iXbaRDttcnps1Dd9LaZiGu7G dNcfcXwsOsZumpx+2ucWz7+HdeBzds59ds59ds5cO2dueltUlY6x3fOd7vM/O2hyuivqW9k/rKg8 HAMwEEfgSAzCUTgaxlpprJXGWmmslYNxPIZgKE7A97R1Ja7CZOc3YUpYUVUWVmQuCddlLsXkMDoz BfZNxr7J2DcZ+yZj32Tsm8ztuAN34i6Yb+Ye3Iv7cD8ewHTMwIN4CDPxMGbh12CfzKN4DL/B45gd 9a2ehBsxGTdhCti2mm2rfwL7u9r+rra/q+3vauOsNs5q46w2zmrjrDbOauOsNs5q46w2zmpjrDbG amOsNsZqY6w2xmpjrDbG7KlR3z5VyKBafChPLLNT1otGxU/F3x4ZWH6DaJYt/XWBFNKoLP4NE2SK f62q92+a1KAP+oUCBVCgAAoUQIECKFAABQqgQAEUKIACBVCgAAoi32Ei32GUQBsl0EYJtFECbZRA GyXQRgm0UQJtlEAbJdBGCbSJkleLkleLkldH/x7iaCRG4QcYjTH4IX6EazAW1+K6MFJEvUZEvUZE vUZEvUZEvUY0HSGajhBNR4imI0TTEaJpRjTNiKYZ0TQjmmZE04xomhFNM6JpRjTNyLvN8m6zvNss 7zbLu83ybrO82xwVv++YiyfxFF6IjhR5j5R/Y/k3ln9j+TeWf2P5N5Z/Y/k3ln9j+TeWf2P5N5Z/ Y9F6rGg9VrQeG21Wy25BK9qwFe3YhhjbsQMd2Bmmi+xzRPY5IvsckX2OyD5HVJ8gqk8Q1SeI6hNE 9Qk0fZ6mz9P0eZo+T9Pnafo8TZ+n6fM0fZ6mz9P0eZo+T9Pnafo8TZ+n6fM0fZ6mz9P0eZo+T9Pn afo8TZ+n6fM0fZ6mz9P0eZo+T9Pnafo8TZ+n6fM0fZ6mz9P0eZo+T9Pnafo8TZ+n6fNlX4kGlF2E r+Jr+DoeCjmZKCcT5WSinEyUk4lyMlFOJsrJRDmZKCcT5WSinEyUk4lyMlFOJsrJRDmZKCcT5WSi nEyUk4lyMlFOJsrJRDmZKKeWqFVLLFZLLFZLLFZLLFZLLFZL1KolatUStWqJWrVEbdlfokxZHZZi WZSRxbKyWFYWy5afXfw/qo6fczw/TJHNLpTNLixls8tCe/mVGCm7vS+rlY8J7TLbuTLbKJntXJlt lFr8zsR1YV5iUXgt8VLUJ/Gq7LdMPd+gTm+MBspybbJcIrFKff+3TFch0w0t/cZkm+tbZZ5xUVaW y8pyWVkuK8tlZbmsLJeV5bKyXFaWy8pyWVkuS0m3UdJtlHQbJd1GSbdR0m2UdBsl3UZJt1HSbZR0 GyXdRkm3JaeHODkDD+IhzMTDmIVf45EwQuYcIXOOUHfVqrtq1V21smhGFs3IohlZNCOLZmTRjCya kUUzsmhGFs3IohlZNENnxnRmTGfGdGZMZ8Z0ZkxnxnRmTGfGdGZMZ8Z0ZkxnxsndoT25B13Yi33Y j24cgD0hM0+QmSfIzFfLzDmZeaz6L6/+y6v/8uq/vPovr/7LqxIKqoSCKqFNlVCQwUdUbAixSqGg UijI5FfL5FdXGFOFMcnoI2T0rKqhUNHjPIQ4FaEM5UhEWZk+q6IoqCgKKoqCiqIg82dl/qzKoqCy KKSO9uwHMMS1E5wPg1iryihQBiMog2zqNPf5IHVwmKqjQCGMoBCyKo+CyqOg8iioPAoqj4LKo0A5 XE05XE05XE05XJ0SR1PiaEocTV2HcRgfRlITI6mJa6iJa6iIEerZPCWRoyRyqV+XfpFpQGoh/lD6 VaYBqTcd60MtlZFLWUt1bz7VFQ2gOHIUR47iyFEcObVwrVq4Vi28WC28mALJqYcXq4dr0+dEGTVx rbogVhfE6oJYXRCrC5qplDnqglhdEFMrY6mVselvhfb05bgiTFAfxOnRPttT6R/iR7gGY7V5LcxL 7dCsdojVDrHaIaZwMhRORg0RqyHi9K88f2vpVwVjqiejnojVE7F6IlZPxFTQBCooQwUdqa6IKaEJ lFBGbRGrLWK1Ray2iNUWsdoippDGUkhjKaSxFNLY9AZtb8QmiPVpsZ5qmk41Taea5lBNc6ilCdTS WGppDrU0gVrKqPXzav28Wj+v1s+r9fNq/bxaP6/Wz6v182r9vFo/r9bPq/Xzav28Wj+v1s+r9fNq /TzVlaO6clRXjurKUV05qitHdeWorhzVlaO6clRXjurKUV05qitHdeWorhzVlaO6cpVnGNNH8clQ W3k2vq3t7zm/Elfh+65d7fjvGIlR+FFoo9ByFFqOQstVTvXOna4/4dm5YXHlkz4/hd0hXxVFAyi4 XJW5VR0WaqsOjzKZr4X1ma/jG7gkXEjZXZj5ls8/Du2ZCZiEvyu9aT7/HLdEWYovS/FlKb4sxZel +LIUX5biy1J8WYovS/FlKb4sxZel+LIUX5biy1J8WYovS/FlKb4sxZel+LIUX5biy1J8WYovS/Fl Kb4sxZel+LL/HxVf9h8U3+HRHeFTZVdEXyr7TvS1su9GPy77t+ify74Xfarsyuhfy8+PLikfGX0j cXH4bOKS8JnEi2FO4qXwpcS68A5t2D8hwiU2hbsTW8JbidboqESbemtr2BMdG93R83r0dFgevRGW a/3Tvb8Ge5bWT9X6qVr/p7KRYY/culEvqjlV2cXhbL2cq5fxicVhUWIJXuppT7wSnpXjViVeC28m Xg936P1net6b2Bg26/1svd+p94Tef63316PKxNIwO1FvTCr5xPLwvURjeCGR89bK0CQrrqFTnw5/ MrY/efKbcudST0/39KTE8p4eTz/m6S/Io8964wZvPFT6bcePGO1k2fwDsvcXyr8kk48MI8t/GCXK n6KTXw//Vv5WmFG+NvpY+W4ZuX/UN/GR8NvE4igrS3/EDH6vp7fUo4nEcrXmivAHWbpC6z1mlJOp J/Vm6kRvTZows82JVrNqc31r2Fb2r1EyvBBVIIU0KlGFDKqRRQ36oG9YFB2Cs0NTdA5+GhZGP8PP cTNuwS/wS/wKt+I23MGGL4SG6MXQUFYemsoSSKICKaRRiSpkUI0aHIJD0Q+HoT8OxwAMxBE4Esfg WByHwTgeQzAUJ2AYTsRXwpqyi/BVfA1fx2TchCmYimn4CX6Kn+HnuBm34Be4K6wuuxv34F7ch/vx AKaH1eWnhYXlZ2I4LgrPl/8yFMp/FQq8/GKr0s7PDvCxhVainY99mY8dSOzp2ZLosiP2hnRiX09X Yn9PU6I7pBIHejYnDobhiR7XQzgyWdGzJZkKn02mQzpZ2dOVrOppSmZCKlndszmZDcOTNa738dy4 8EJyPK7HDfgxJmAiJuFGTMZNmILfhKbk45iN32IOnsBcPImn8DR+h3mYjwVYiN/jGdTiD3gWz4c1 yRfwIhZhMZbgJbyMV/AqXsPreAPLw8JkI3JYgZVYhTxWo4AmNGNNWFjRHV5IJcB/UxVhUaqf42EY glNwOj4amlIfd7wtrEk9gBnOzTP1W5/NJ2U+KfNJmU9qgWsL8Qxq8RxecP1FLMJiGHvK2FN/9vld /MXnOizFMqzEqrA6VXBvM7aiAzuxC53Yja6wJt0HfXEIDsURYXX6SAzCUTgaZ4am9McxNixMX4up mIa78QgeCw3ppx27wsLKE8OaylNDU+WHHU9zvBBf9vmbYXXl99y/Elfhl67PcP1BPISZeBrdYXVV FNZUHepof1XZV1WDcHRoynwvFDKjMBo/xDUYB/s9Y79n7PeM/Z6x3zP2e+Z23IE7cReMN3MP7sV9 uB8PYDpm4EE8hJl4GLPwa5hj5lE8ht/gccwOC6v/JRSqv4gL8CVciC/jK7gIk8Lz1TdiMm7CFEzF NPwEP8XP8HPcjFvwC/wSv8KtuA234w7cibtwD+7FfbgfD2A6ZuDB8Hz21LCwT1V4vk8G1eH5KClX LBT52xIrog+Lywei+6OJYWY0CTdiMm7CvlBQPxfUzwX1c0H9XFA/x+rnWP0cq59j9XOsfo7Vz7H6 OVY/x+rnWP0cq59j9XOsfo7Vz7H6OVY/x+rnWP0cq59j9XOsfo7Vz7H6OVY/x+rnWP0cq59j9XOs fo7Vz7H6OVY/x+rnWP0cq59j9XOsfo7Vz7H6OS7+ClfZn4zzrdCuZm1Xs7arWdvVrO3q0Bnq0Bnq zkZ1Z6O6s7F8dthS+veRf/tXR++Vd4X3ZLO8LDYzsSw6Vr5skcFuU8PNVMPNVMPNVMO1q+Ha1XDF +qmgfiqonwpqpljNFKuZYjVTrGaK1UyxGmmmOmimOmWmmmSmGmKmGiJWI7SrDWJ1QLs6oD19Siik Ty39Hmc77V/U8gU6u0BbF2jhAg1coH9j+jemf2P6N6Z/Y/o3pn9j+jemf2P6N6Z/Y/o3pn9j+jem f2P6N6Z/Y/o3plfb6dV2ejWmUdsrx2t7qs9PFH81LcT0Zkxvtlf1t58uCTNozBk0ZSNN2ZidHLZk b8KUsKWmf3iv5nAMwLE4DtNcfzy8F5XLKr+T1+m4xIvRJxOLossTL0dnJl6JjmDf5xKvUVKvRycm lkYXsvWF6voKiuHTavt+iVx0Brv/lXI4hs5Z5+r66BR64UJ6YVhiS3Sedl/r/S77VD29Gp72/L2l Phe6N4qqWBT1ce0dZ8uKv0v5v/6WbtnIaPh//Xu6xnO63fEpvV4gH37BGP525XTZssvVz8qWi2TL ttJvFG8t/jVKV4929unSd4oDPXuCMRT/FsGm6EOe+LCzZdFwM+zv3jHmWvzVt0tCXWJcdLbxv5Y8 l14rd+VtZ+96Wm6iCbc7W+NsdFTjbL+zt6MTo2Q0PKpACmlUogoZVCOLGvTR48XR4YlLabwrMNqc FtGBr9CZr4aG5LhoeHI8rscN+DEmYCIm4UZMxk2YEg1Xyw9Xsw9Xsw9Xow9Xow9Xkw9Xfw9Xew9X bw8v/f2LGuq2U09rzGJT4mUrWfxrJq+GP1K3W819HJu8aFxLPGW25l4T9Surj4aUNUSnscwV7PC5 xKWeuiy6LHFF6TfmLkuMDq8Wf5UocX1Yl3ggOisxPfq4fmIrfQIlMz/5yeiM5NnRaax1WXSMN47R z5lWc1x0nJ62Ffsv9VTT+3dN3kp8y9uXe/47jt91HMfD6sNqGrmdPt5X8p+VUaW3ElGq+JdQPD3A kwM8WeXJ2BPbowHRelGUhoo20k3X6qm4pteHRrq73ar3FXEbSu3lrOAKb2mzqIgr+oUDavgDavgD auQDauQDauQDauQDat8D+rw4bCn+jyctnmKnpEutrQid0cB/6PNbYtZ3MMbcxlHiy0KH0W03j5jH Ha7v3d56U7/V+t373/Zbrd91xb/NorV++q3Q4m4ttmuxU4tVWuvoncUB++xiV4u/F/gtSv47uNad cdGR3qwy4pQ393jzgDdrjKWnaDVvdtsV66PPRxuwEft49n504wAOig4Xq1wuCaclviVaXB59O/Ed x+86jlH7XGs814fHEzfyiweiT/CHT7F4vR7PLq3N8jCr1FsurLTn+qty9vf6yBlJbSd7EKITK/pF n09fistwRXRiejpmo8X5e1gH40xvd63TcY+xFX//cbuR7TPnfUZ2innvM7JTzHuQeRcjRqX5Zsx1 c2JVdEjJ6xZ74zVvbPDGIG9s8MYgb3zC04cY86aS5y0P3ca915sbSm/lSn+X4FL9XcaTr3D8tuN4 UXFddLyIt12MyYiMR4qMh4p3i0t/Uae4fgVPJVzZbh0u9umS0t4o/hregMR1vOoG+W6TcW/RY2uI S/7W4r0N3stovVLL5e4UoiOjK0NHdBW+j+us/sXW81LjugLjeWbx6fW8ZBNLbzamVvVlm1a2ypPn RgMrDgkdFe3YFjpSozEGP8SPMB7Xa7dP798Eymu5oOVC4jqzGi/mr7OO63nRBjuoNFtxeAsbtYa/ lGrxgcbXbXzdxtfdO/vid8prtbJWK+VaOcUYD9FKl1Z6tFL8pflKLbxX/HtExtdtfN3G12183cbX bXzdxtcdfSi6Mrogugrfx8RoRDQJN2IybopG6LGvHj8oZlWw8EViVgUrXyRmPcHSz7D0En76Fj/9 Aj+9IPFUuNuc3pUhhv1tNPJWcTRbqIlPRmfz0bOT54Z88pFoRPJRPBaNqDgkuqCixbHdcRt2RCNS J+MsjI4uSI3BD/EjFMdXaVR7ev2mvNdvyktrVbRga9hc+jZivnHP6X1qQO9TA4w79uQZpW8gWkMj zxjd87pacJvar0Wtt01t15I8qWcjXxvdE7u63ZXtyZPCp7U6umdtYg87d3v7gNhwMCxNVoQudeHe ZHXo9ORST55XevdVdxtcaXAlU3o3TuzXXzerHAwr1Jg9yaoo5d0eT61QS/Z4cri4NLpnk156VKmd Rtae2OfYrdcDPPNvbx7Qa4/qtNOI25OVjhmjqHb9by0dMIPdvG60urYrKtPKdq30aCVoYUup71RU 5u3t3u7xdvDmlt4xnFy0U89dxrDO20O83eTtPYn9dmxx9Af48UEe10MnhHDQWNZpbYjWmrS2J1kV cqVZVVvnbHSISrlNyweNaV4xi4ZyLe41jjWJnqjcW3v1vSZZ4/NJYXDxiZ5lntisv6KlCp7YrM2i lQra2MG6/2m9rH7vOnn7v1mf0rOldfHsf7Me5vh/uQ7i6f+h/UWZ/8d2N8f/jb1Ld/5LO0d9kv2j quThxndElEkO0tpR3jmaZviAz8e4d6x7x7s31PkJ7g1z70T5IJkcoIej3D3O8QRrkk32d6aGSA7U /yA9HKWnYlvHuH6s64NdH+r6Ca5rxyoUny72fFTvE8Weim31M65ydzcmB7gyEEdExxhfP09u1OYx xldufOXe2pg8zv3BON71oZ45wbVhPp9Y/KvkWlljrMUZliePNNZBUUVvK8W31xh/cYblySHuDXXv b2+Xm29/HM73BhjzEdodZC5HWf2j9fWB4rzcP9b949w/3v2hrp3g/jD3TzQ/s7A2h2t3gKsDcURY aQw9rLMuebS1/IA5H+OZYz1znPuDcbxnhnhmqGeGeeZEma24TtmSXY+I+htH0WJ7jaO/cVQbR7Zk 2+OdDy1ZcK8x9DeG6uKqRInS3Af12vl/UPcd8FUU2/9nZnZn9t7MJiEJJaF3EFRABKUo2BV56LOD CCqKDfUhIiJFQAUVpSmgIKBgAXzYQUGxomIDRYpIR3rvPfP/ztybmJhASODp77/72cns7Jlyd898 53tmdk9irbd3T7jfHcuxLd5qTklF1Qn02q24f3/RC/T20yksrG4gVx1SR9MPXK1KqSdLR1Babfzq IuoJctegYieqKyjlbPuLTo6+4El8555jkXTGjQ1hYfXGoXoNsTdzA5C0PRCnDFCtpTiYuQ2odqE4 nLkR6NMBqFYBqNbI8zM3AFHbA43KANVaepHMbUC1C72EzI1Apg5AtQpAtUZeWuZe3JFTcUdq4o7U 9ErhPN3Uxh1JRKvq4q5Uw12p6pVDennIVYBMRRyVcF4ZclUgVxVy1SBXHVoTgeWmYXOdK+z/9fmS UsF208B0q4BVnAWuMAtsL8n9b6Hp7CZqzNrTRexmeprdgr+3wnK/xowW18IWuc5MB/MY7f5TXc1j SM1yUvZ/IC10qVlnb2efcVjyM9ln5m0Xs//dbhViSbCSTyWiRrBJT6Hm2OtQC7qK6tK1dB1SbwCX a0J30EC6jJ6lSXQfTaeZOPsM+xD6jhbQUFqEfSwthXUyjtahxImsNCtNv7By7FSaxy5nLWk1a8Wu pjWsNbuRNrF2rB1tZTezDrSN3cPupV3sQTaS9rIXsWew0dhLszHYy7CJbBIryz5jc1h5XofXY6fz +rwhq8cb8UasAT+Hn8sa8vP5BexsfhG/iDXml/AWrAlvyVuyZvxKfhVrzq/l17MLeBvehl3M2/F2 7BLegd/GLuUdeUfWgt/J72WX8868K/s378b7s+v4k/wZ1pEP4sPZPXwkf4F14RP4O6wrf4/PYo/x b/gCNoIv4qvZ63wD38Te49v4djaV7+T72If8AD/EZnIjiH0uuBDsS6FEyGaJJJHCfhBpIo3NFSVE BvtZVBSV2AJRRVRli0R1UZMtFrXFqWypOF2czpaLuqIeWyHqiwZslWgkGrM1oqk4h60TzUQztkGc J85jG8UF4gK2SbQUrdhmcbW4nm0TrcWtbLe4R3RimaKzeIiT6CF6cCl6iV5cieFiBA/EFDGFR8X7 4n2eIKaJaVyLj8SXPBQ/iYW8lFglNvFKYq8wvLbne4m8gZfm1eDNvKZeU36N18Xrz6/1nvI+4Hd5 H3oz+XDvR28Of8n7xVvDx3nrPcPf96N+lP/ga1/zH/1kP4X/5M/zf+M/+0v8FXyRv9pfzZf6a/21 fJm/3t/Al/ub/O18pb/T38nX+Xv8fXy9f8A/wDf5h/xDfLN/RPp8i1Qyke+VyTKZZ8oUWZwbWUqW E0JWlGeIqDxTninKyobyYlFOtpLXiNNlW9lXNJCPySfEjfJJ+bRoJwfJQeIWOUQOFbfK5+Xz4jY5 Qo4Wt8txcpy4R46X40Un+ap8VdwrJ8v3xH1yqvxYdJOfyi9Eb/m1/Eb0k7PlfPG4XCgXiaFysVws npPL5HLxvFwnN4oRcoc8LEYpUly8rpSqICapaqq++EqdrZqKeaqZaiYWqfPVxeI3dZn6l1imrlRX itXqanW1+ENdq64Va1Rr1U6sVbeqDmKzulPdKbaqu1U3sU11V73EEfWo6uNx9YTq73nqKfW0J9Ug NdIL1IvqRS9FjVajvVQ1Ro310tQENcEroSarGV5J9aWa7dVQP6sF3unqd7XTO1PtVge9luqwMt7V QbWgmnd9UCM4xbshOC043bsxqB/U924Kzg4aee2CJkFT7+agWdDMuzW4JLjM6xBcHlzudQz+FbTy 7giuCq7x7gpuCG7wOgW3Bh29e4P7gv94DwTdg+5e16Bn0NN7KHg06Ot1C/oHT3qPBE8HA71ewaBg kPdoMDQY6vUJhgejvL7B68Eb3oBgcjDZeyqYEkzxng52Bru8gcGeYI/3bLA/2O8NigD4vMERL+J5 QyMqEvWGRXSkpDcikh5J98ZHSkfKeRMiFSIVvDeiV0VbexOj7aPtvXeiHaIdvHejd0Tv9N6L3h29 2/sg2il6rzc1en/0fu/DaNdoV++jaPdod296tEe0tzcj2j/6pvdp9LPot96a6PzoEm9rdFl0jbc3 eiAhw8tMqJww2K+QMDThZf/ZhKkJM/0xCXMSdvqva6VL+d/rWvpCf6m+Xt/h79d36/tlRHfWXWSS 7qq7yRTdXXeXxXUP/bgsoQfoZ2UFPVgPltX1UP2crKGH63Gyln5FvyIb6An6TdlQv6Xfl830ND1D XqQ/0Z/IFvpT/am8XH+uv5Ut9Q/6F3mN/lX/Km/UC/Qi2VYv1stle71Sb5e36116v+yqD+rDsofO DEn2DnnIZd/QC6XsFwZhKJ8Ik8MScmBYKiwlh4UZYRn5XFgurCJHhNXCanJM2DvsLceGfcLH5bhw QPiMfDUcEg6Tk8Pnw+FySvhC+IJ8OxwVjpLvhC+FL8t3w/Hh63JaIk9MlB8npiSWlLMTSyeWlXMS 9yUelL8Qj4K/E+nzil1BNagCnaTNTDerzVqqY9Yj/nu+EplmlHkL+zbzFM6uMG2QZxZi6+PX15uN CFfGz/bmyW+vbjS7sf95TeVTzy4czxXY3kdwfJIrZRlqKGFrOeoGywtyv5lDiGuM5DdSiPPVuduY 9WvyqfMHs8JsNT+ihFX4tesKauNxbAFKHR4v/Q+z2cwya+JnO/PUvgnHUrPczDP7zWUUwb07hSrm uJ5ZUGVmD57dbpTwZ8tx/8FYYldfNa+SxpH9DP+SewuONWYxyliGUx88qxqdg1h5d/Ur85NZAP2B 7sBuz7/+SeYVMwZ/B+A415xmHjRdEMtxH7N+PWKb8+TONF+bddCgr833aAeeg717uXNly/5QwK0g 2KlEiS72bDxlK8r+MUs3c2pFPGU3fvlO3PvfzS7w/SQk1cdTyK7dbHJPaFOWdJ78m80G9LGtWXfc zoy6v0tyyhTU7rjc4lxn/8l19u3xlYGtrpOPa5pZiOcXmIUF1LwvR9+uS2cVIP2mecP2aPP1cbcp d/61Vjuszua5Mv84cuOXmSdcbOpf+7O55TjyQ0fM+w63ltnnVtjNTHRoOhH3Ne8WHFcJ28x0h5rH qRf5lLDz+LUqn9xxhDW/FCn32y5caJHjpG9nHEf9a2NjmTkEPdpV6Br0Ma9Wx/FvV0vWiLcytsev l88nT03s5bHXzNXK1+J/58T2Y+Svm2/++N2FluwBOu05WoOBn1vMDiDYCtenrFbvd+nD3OVy5jMz 0/xqR/Sj5D+cI/40pQP/r6NWtofE05ZibJiRF4uz8xzKER+MkSeJLqX2iE+Jp63G3fv56KNqVv1O o19A/gjQp3McyW36u+YtEmbaUfP/VQt9sKeOSH8mfv1b8w3u/3fxs7z4fTBH/CnkTqeWZJnQufG0 T8xHKOG/R63/j/zTM/HELD6aK82/TAfTKi49Nk/+vkCxV81/zVzza45kTm2pHw1E7FkaZL+ZoTeh uVNoGtjhDJpJ9dysQgP6khZQQ/qN1lALWscYXc/as/b0ACz6f1MXa8tTV2vF00P8Lt6JHoY9voh6 8t/5aurF1/P11J9v5JtogLXN6Sm+l++jgfwQP0TPWtucBlnbnIbANk+gYaK8KE8jxY2iLb0g2oub aZQ31ZtK1qo1NMZP8VPoB/mB/IB+lJ/ImfST/F0uobnSSEO/WJuO5lmbjhapK9SVtNTadLQcNt11 tMLadLTK2nS03tp0tNHadLTJ2nR0wNp0lAmb7mlGsOaGMKmGqZEsYm06lmRtOpZsbTpWTI1XE1iq telYcWvTsWqw6XayU2HNGdYqEIHP2gRBEGU3BTpIZDcHxYJU1iEoHpRkHYOMoAy7KygXVGCdgspB VXZ/cE5wLnsAVttt7EFYZwNYN1hnT7Pu1v5ij1ibiPWwNhHrmfBIwmDWx1o6bIRO1qXYDP2mfpN9 pVfr7WyWtTXYPGtrsN+srcGWWFuDLbe2BlthbQ222toabIO1Ndh2a2uwHdbWYLutrcEOWTuCHbZ2 BDti7QjOEyOJCVwlFk8syaOJ+xMPcrumsNBpDHMaw6Exw2FRjKAXodOjaAJSXsWu6DWahFFqMvRJ On2S0KeP0es+gVZFnVZFoVWzkf4d/UoJNB87h5YtAKv+jZaAXS2lVehjq6FzFWkd7UCP34m9Eu2i fVSZ9mOvQgfoCFWlTGhkMaeRZZ1GCqeR2mmkhkbeQ8m8E/RSO71MgV4upRJ8GV9GqXw5X0kl+Sq+ ikrx1dDXMk5fSzt9LeX0tbjT1wynr6nccEOpAvSf0qC1HCE2Kg7dVYjj4VO6iECP05wel4Ye30jV RFtoc3Voc3vEb4ZOV3c6XRY6vZSYt8xbQ9xb660j6a33tlKCt83bTeW8Pd5eSvL2eYepvHcE2l/V aX9Fp/1lnfaXddpf1ml/WWj/+ZSmLlAXUIK6UF1InroI/cFHf7gMKS1UC6Rcri4npVqqlhSof6Gf VEY/uQJ5r0RvibjekmBnQChU16HPJKLPtKGK6kbVlpLUTeomqqraoRcVc72omOtFDL3obuS6R90P mf+ozkh5QD1AXHVRD6KWrqorSn4IPS0BPe0R5OqheiC9p+oJ+V7oe6Hre8zOp0BmgHoS9T6lnsbV QWoQUgarwcg1RA2BzDA1HCkj1Ai0ZKQaiRT0T4ra/olyxqgxyDVWjUX6eDUe5UxQEyA5WU1Gyptq CvK+pd7CfXhbvY8784H6CO2crqbjnsxQM9CqL9UstPZrNRtl/qygmWq+gk6qhWoxSvtdLacKaoVa jXvyh1qPujaojVRJbVKbcSe3qK1URW1T21DjdrUTbd6tdkNyj9qDq3vVXqTvU/vQkv3qAMo/qA6i 5EPqEEo+rA5TqjqijqD2TJWJvEYZ+/9VA5/KWjRBCDRBCDRBCDRBCDRBCDRBCDRBCDRBCDQhBjTp j3BAMIC4xRTyLKYQs5hCGpjSA2HPaG9KtshCAsiygHTCwoRFFCb8lrCTki3KkLAoQ+lAmdWUqv/Q f1CaXqPXUKjX6rVUQq/T63B1vV5PpfQGvYHK6I16C+Jb9VbIb9PbILNdb4fMLr0L8d16D2XovXov ZPbp/ZA5qA/i6iF9mBJ0pjZUKrSmdarFL4Re6CH0Q0kpQLGASoaRMErFw4QwAZI6DKkMcC0VKWlh Ccqw6EYlgG4ZCEuHZSBTLixPaWGFsALKqRhWQrxyWBnyVcIqiAP7kA7sQ8pL4RjUMjYch1wvhy+j 5PHhBJT5avg6FbdoSMKiISVbNKRkINY7cTQcjF04NPSBhiMRHwUcFA4HJVDwTcSn0IcIPyJoG9Dw M8S/AAYKmgUcFMDB+UDMBcBX4ebvA4eDwuFgcYeDJRwORh0OlnQ4WMrhYLrDwQyHg5olsSQKWWvW GuE9rBPC+1hnhF1YF4RPsacoBEpeSdyhZAQo2QGhRckEh5IRh5KJDhPT+Ga+mYo5HExxOJjKj/Aj lOQQMFl4wqMUYF+AeFREqZhoLVpTGdHGvclmsa+sw77y4iZxE9LbubfbLA6WdThYXtwibqXS2Ti4 jgQQcDcFwL7DFHWol+FQr4SdtUX/bK6ao/eep84j4TAuUBcD4zxgXAvELboJh27SoVsp1Uq1QopF N6GuUlchvFpdA0mLcZ5DtxIO3aIO3TKAbu1Jq1vULQhvVbdC/jZ1G8KOqiNCi3SBQ7poHOm6qC5I eRBIJx3GBeph9TDydlfdIZ+FdL0Rj2FcX9UPcYt0gUM64ZAuqgaqgcj1jHoWKRb1Aod6Oo56Q9VQ pFvsCxz2ZTjUEw71PPUSUE/EUW+cGof4y+plINor6hXIWxwUDgczcuCgcDgYAAenIx7Dvo/V54h/ qeYitNgXAPsWI25Rr7hDvRIO9aIO9Uo61CvlUC/doV6GQz2tdqldyGWxr4TDvlIO+zLi2HcYGCcc xumABYxEDK2i3aIPUyT6SPQRhD2jPSkh2hvYlBDtE+2DlMejj1PE4RRPGJrwAnGHOGl6C7AmWe/Q OynF4UuyQ5Y0IMs+xPfrA5QETMlEP7eYUiwUoaAkoImiRIcjKQ5H0oAgKYhbBEkNS4YlIWOxIy0s G5ZFevk4dlRECRY7Uhx2JDvsKOawIwXY8RLKHBuORa7x4XjITwBqpDjU4MTrbbczrw3Xnt+ALqPr j8bz///YzHqzwR7xsxX52V12nsfN9RW27D/sDJezvD9z579n1enCuXHrc7O1P50tutisMutyz+gU XG/WDJ25v/AtPLmbaQHL0/49qu2dJ8d6WNrfFH1eJruczX89MztcGE+Hrbgbd3aV2Yoje2YvhyWa liP3YkgtIjvvURKx+AxjlnX9N23R7NbkrFfTDS5tU36zC2Zj3rk5s9OsNL/hSp5ViKJuWbPkuc9s /4lrdY75ArRdZMc3H+0pm+V5ZzVP1pb/Ck6BuSaYl93fw242/Ft72PkhMxGx2XGZLM2yPXiPmZOV Xqh6/nA6uurPczsLZpbmkHjGzQfZufLlLvYHWpMToeL393ifr5u1XlWwXOE3aFqOcs1ecxjHQTvX ZY7kkjvWutT/se1v7vPHsZnRJ5D5inzKW0U1oIPlTqDUY281yGGrxVOHqfluwIbjXkM88bHiL+Xl alXOvnec+d81M83b8fWBNDPWzHSpq+3onnP0LhJ/WARsXOH4wzrHTRya2THJrMDfyXGprW697Tsc s7Cvyz1z7ZAsnbLmZr/CWDDb/IxjNFIvM/PM9y791xiLcCvaNxS+pXlaviHXmRtDzTs5Uu4y400n 86Sd5Teds1MbI+1D2+/yrjqSXXPNuxa60XyG37L45PXULH2w4xgQLIsXzqb4+mzONgCXs9dG7BpL ASX/eLLaWNQNdyl0f4fY9eY8V7uYr3LJxv4uxei22mpIEeqbb7Xe8S13n2wM49uK+F1DaO40P7nn vY9EPmNYSHXylLkV/WBLfHVJADmyVp32xa6e+Pj25zp07vXKLJZiuZcbt//AvjUP91zuuGc+vR29 +SRjV37bX/BsXp7rh/+aEk//T/7pVJh19EJv5vZCZoi9YzHAPO7+bnMI8J49EHvDTI3F3LUsfubW O/GkPipC6941HwIxP4iffWUmkX0/aJqN4wByAsW+AkpkseBtQN/v4zgRWz9LzFPmN+YD82m8zDR7 Fk/PhQ7GFL61Lh96qfkt+yzLdllpY1l2ZYyJO0SbbfUj9o5IvP/sdIjc1lzhzj4lu5p3P46HEBts RmKseyheSo53W3AHZpjuRWjtzaanecV0QuwL9OpXTEeHD89gNHoF9/lTM9rcgbF1m10DdL9supli xsVqjo8aGeaLv5S5ziyAVRnruWdmx+K80xyIHcfPmHOVvdv19+y3gnKPUm6czrZ8HfNd4d57yPnG xWm531j5u7bcq7juDaYtBbfE/aI871/9HVtuS9beVejwroLw0z2dk2bpFmbLyT/QG6yVtRB/j7LS nS258cTba14yPcxjZoSLz4G+v2zflImPQzG+uMe8j2PmidXjSqoTe5PlhMpYbdZiJHTjI57pWuhh NueOPXWzHZxje34MsNB1FYFz58j9feypoi0WB3+Mny2P9594q/+Z/pzfZm43t5mPzVTi7qyn6Qq0 bh9jBGaa2Y+zgeY/5mxTGTha3zxk7jyBumL8scIJtTeOSTGbNvt9w5dzXz2Zm5lwEsqw2rsghurg t3mevru+yvzy5yj8z25oze/oc27OEzpsLcVsSyXGdHH1GxxHeVf1797Q3mdz9lzwq+n/ZHuOvqG3 dbHcKfamq3kA7OhX9L7YtU9d+Lv5yLQxTyI2yCyJpRWxrm9OvL2FrHF3zve8/u9u2Rx354m/XZnf u+4nc4uxQ/DvNRj1TsKMRUHvKB8z73FqlHnLze1vKnpNObb0k1LKcW3gQifMXM2Qk9GSAuqIIx3Y 7QnPy5+kp1RQLavBbP/HPeXkbWA9u0/anUk5gXacjP7+N65HFEUbwXtWxXLGv+zImhf5ya0z/HTM zPfGZd8ufL1/91aUbyDylHHU1ZBj5HGz9XamKGYJx2Z0steCo8eyj93cbjp1Iln4el3+InzlZda5 sePPb8my5uSO17ZLoIsLX+s/upUoasbCrzyRfavBrktnW/Zmhgu3AJ8LXI34v7aB9+85+jcTOeT2 /+/bcnzb8SFkUUf1fL+VKrAu9wbBn98OuhWLbM2K5pspS9bOVZWhNuhz/8CWm7vHUAPWUwE461Zi /oH5PrPjJJa1kuIzyvl+cVTTfeVkV9Dn5HO1oLLtd1Qrs3JmxdwM/8p4SladjV1df2lXjrP+f5aZ 1Rb7vVaeVtmvsuraVZqiWO1mtHnNTM/+Diwes4wgPqc5J7sddfO097XC15crfxHeFDK/uFWJ77LP 3TtA4JvyuFf6juPrvaPUne+3yQXkWetmrexI7rDAnX2FvhdDhuix+KUbUZLonOP7XjOf/EV5/2Ge /d7SHXtj5y6Mz5ofGx3iv6VM7veNoF87zM/uGE0lwUk3xFeTVsT6tNO1uwrf0gJ+R2yFLYe1btqb h8zrZozzG5D9To9pYd4tZMlf/T2M2bbx6PWYzPxWlWMrin9J21HwKk5RN/eOTByZzU7wiZ3gR4vM 4j+RyGxGml0zPstc687fgwYsMG3NLHtuPjXPma/tjLm7NixX2Uuz0gvVolamk+ljLoufuRg0sKOL v2bGm87Qg9Fga9Mx8lqJqeYD83581Laz8yWojltz7mbucWmx9xHHgFe/ZJ+H9ZKQ/RZQrrkgcyDr a/5CtfcFMxG22ovxs59c3aMdzv/k7oFdfX3b7DafO4HYV/vxNwziWnxm4Wv9p7b/ydfYeWtZmYVY sXXnf2oryjoVnvQWyjHrkO0h4XjGnlSy7+9c5eJlqD5szwou7xqwjjVuNClNZ5j56KF2X2qWmbPR XzqSNrFxPW6nonfGbKqS8fN34ysVnLK/mHbpbx7jd7h3K0x3jHPxGUjT3LTD0cLcTqkmNgZn+dDo ieNC09hcY+JfNphvzRL3toTtsRsxJq2M26+1qIYbOWs5qWPPbuTfrpfNeIQTs8+nW1su15sVV8cj bejfdBbVc35iqrorOX97NPMXk5C5z42UH5u7zXt2DDO9TD8bQ6lP5ao29g7Y3UVo7z3mPvz++9xJ gNg9Djf7uZH6ZzzLdZmxL+mnOa8gWZu7s+aBeBnHYePlW/eGgmXy5Nns3giwPMFpk9Pmr3Duucv6 mHzH5kqiJmg9p3kF+LFrHfdj15cuZZwVpw7OO103551ugPNO9xRrzdrSYHYnu5Oec37pnmcPsqdo JBvIRtAU652OplvvdDTDeqejj613OvqEfc7m0Ke8Dq9LP/H6vAHNtd7paB4/l59Lv1rvdDSfX8pb 0ELemT9Ai3k3/jAt4YP5MFrGJ/AJtIq/zqfQaj6VT6NN/CP+EW3hH/OZtJV/xWfRDj6bz6Zd/Ef+ E+3mc/nPtJfP4/NoP1/AF9ABoUVIB0WySKHD1sMcGedhjpyHOV9UEVWYch7mAudVLkE0EA1Y6LzK JTqvcsnOq1yK8yeXKlqLNixN3CTasRL2WzlWynp9YxnW6xs7zZvmzWStrdc3dov19MZus57e2O1+ sl+MdfTT/HR2p/X3xu7zl/grWVfr7431sP7eWE/r7431sv7e2KPW3xt7wt/jH2L9rY839qz18cZG WB9vbKz18cbGWR9vbIL18cYmWx9vbKb18cY+tT7e2FzZVj7BFlrvbpxZ727cs97duG+9u3Flvbvx QI6T43mi9evGU6xfN55q/brxMtavG69s/brx6nK2XMRrWo9u/Gzr0Y03kuvkJt7EenTjza1HN97S enTjV1iPbvwu69GNP2y/j+O9Ah5w3juQgeKPBglBAu8bJAXJvF+QFqTxx4NSQTp/IigblOUDgopB Jf6k9bjGn7Ye1/hA63GNDwrqBnX5EOt3jQ+1ftf4MOt3jT8fNAua8xHW7xp/wfpd46Ot3zX+kvW7 xsdav2v8leD2oCMfb/2u8VeDLkEX/ob1vsYnWu9rfJL1vsYnB08GT/IpwcBgIH8rGBQM5m9b72v8 Xet9jb9nva/xj6z3NT4jeC+YyT8OPgvm8W+DBcFCviT4LfidLwuWBuv4ymBDsItvtl7Z+D7rlY3v D0yE8QPWKxs/bL2y8SPWK5tgkfRIORFaf2wiNVIpUkOkRWpFThOlI/Ui9UT5yJmRM0WFSMNIY1Ex 0jRynqgWuSBygagduShyiTg1clmkhagTaRlpJepFrotcL86M3BvpLBpGK0SriCbWu5tobr27iUut tzZxmfXWJu633trEw9Zbm+hjvbWJJxOuTrhVTLZf7YkZ1lub+FIrnSR+sH7axHzdRt8htls/bSLT +mnzPOunzVPWT5sXtX7avATrp80rbv20eWWsnzavrPXT5lWwftq8WnqCnuzVtn7avPrWT5vXyPpp 8861ftq8ZtZPm9fc+mnzLrV+2rwrrJ8270rrp827Wq/Uq7zW1suad6P1sua1tV7WvFuslzXvDutl zbvbelnzOiXyxMC7N1EnJnoPJqYkpnndrGc175HEfYn7vF5JlMS83sTZKqBeIiy+JEomRsWwC0rB OOxRKYzdPkb1qkivhl1RdYyCAdUGSkaAh41JAw/t/3k4x/0HDIuYiQ4xk4CY1yLXddiLATfbosSb 6FZqRh2Aoc2BoZ3BHB7Afh51oW5UnB7GXoK6Uy/U3BsIWwoIqymdhSyRMtwXwqVZMjD3VGBudaTU YDWoDqvJTkF6LVYL8drA4nSHxXWBxa0QXgFEvtD5C01nbYHL9Rwu13O4fAZwuQfSe7L+VJ8NYANQ 5pNA6tJA6kHUgA1mz1NDNhyoXdehdl2H2nUdatcBak9EfBKwuw6wexbGg6/Z19SYfcO+pybsB6B5 U4fmHGheH+GZwHTpMD3ZYTp3mJ7sMD3NYfr5DtNPd5h+lsP0MsD0iVSeT+KTqCyfzP9LFfkUoHwl h/KVHMpXAMp/jPATYH05h/VVHNaXBdb/iPAnIH4FIP5chD8D98s53C/ncL8ycF9TVREC/as59K/h 0L860L8UnSLSRTrVEhkigy6wIwHiGAmoJkaC6ghriJrIhfGAatvxALkaiUYIG4vGuNpUNEV4jjgH MhgbEGJsQIr91vpi9631Je776ovd99WXuG+qL8I40ZvO8R71+hPDaDGYkrwh3nA62xvhjaRU7wVv DDXyxnovU0nvFe+/lO5N8T6gDIwo06ie9SZK9e24Qk3suELajisIk/1kau4X84tRXTu6UD2MLr+S 8Of786mCv8BfQEn+Qn8hef4i/zfyMeosQcpSfylSlvnLSPnL/eUU+Cv8FVTcX+mvpAQ7JlFoxyRI rvfXUzF/g7+BUjAybSLmb/a3oMat/jZK9bf726mkHatQ4x5/D5Xy9/p7qam/z9+Htu3396M9B/wD iB/0DyJ+yD9E5/hH/CMoOVNySpVCenSO9KVPDCOcIgwWMqBQRmSUkmSCTCAhtdRUSoYypKYyUSZC BqOg/a/uMhV502Rx5C0l0yGfIUtTiiwjy6LkcrIcWQ+oFRFWkpVQQmVZGfJVZBXIV5U1IF9T1qSS 8hR5CtJryVrkydqyNiXKU+VpKP90eTry1pF1UFpdWRcy9WQ95D1DnkHajrioq6FsiPSzZCNINpaN UUIT2Yx82VxeCMmL5EWk5MXyYrS5lbwSv+vf8hqU31a2R+03y1tQy63ydpTTUd5NzeQ98j5qLu+X XVDjg7IrnScfkkAP+bDsTiXkI/IRtLaH7IXf0ls+inL6yD4ooa/sixL6yX6UIB+Tj6GWx+XjkHlC PoFawACotGUAVAcMYAjVl0PlUDrD8gBKBw8Ygasj5UjKkC9I4IAcJUdREzlajsbdHifHIXxZvkL1 rA9YyIMroITJcjLCNyW0VE6RU5D3Lfk2XSjfke+g5Hfle7g6VU5F3mlyGtI/lNMhOUN+DMlP5We4 +rn8ghqAYXyN9G/kN3QaeMZsyH8nv0PK9/J7SP4g50ByrpyL9vwsf4HMPDkPLfxVzkebF8gFdKpc KBdSQ7lILkJecBTkWiaXoeTlcjlyrZPrUNp6uRHym+QmyO+QeyCzV+7F3dgn96Ft++VhSrc8hs4A jwkRT1TFqL5KUalUWqWpktRAlVJlqKEqqypQXbCc6tRE1VA16VJ1iqpFjVVtVRspp6rTqamqo+qg hLqqLiTrqXqQOUOdgav1FWxHcKOz6UzVSDVCXY1VY8g3UU1wtalqirqsTwFmORPVs5wJITgTQnAm hOBMCMGZEIIzIQRnQgjORBmWM1Fpy5kQgjPRqZYzIQ7ORE0sZ6J066uWTguaB82RC8wJKWBOkAFz QgjmRA0sc6KGYE6wBIKOQUdqCv50HyUF9wf/gQxYFPKCRSEdLAqSjwaPopw+QR/E+wZ9kQ5GhfaA UUF+UDCI6geDg8HIBV5FZ4BXDUfKiABaF4wMRiH+evA66nojeIMutUwLKWBaFLVMCyGYFkIwLYRg Wgg3BDvo3GBnsBO17Ap2oRywLqpjWRfiJjD2f29FiC6MsAijdMvAqDQYmEIYRAI6M4KN6kSikSji OpKIMCmC8TeSHEmmBpFikRSkpEZSqUkkLZJGZ0SKR4pT00iJSEmkp0fSqX4kI5JBp0ZKR0ojXiZS BrWUjZTF1XKRckgBt0Mc3A4tAbdDCG6HENwOIbgdQnA7hOB2CMHtEILbIQS3QwhuhxDcjqKW29G5 4HZXUXL06ujVJKPXRK9B/NrotYhfF70O8eujrSnNMj+k9I9OIB59Nfom4uB/iIP/QQb8DzIHEhjx BJ6QQedbFkhnxXw3WBZI3LJAhGCBCNvoNlRW36hvpAq6rW5LxfRN+iYqr9vpdlRZt9ftqZK+Wd9M Qt+ib0P8dn075DvqjpC5Q98Bmbv13YjfoztRFX2vvhcy9+n7IdNZd8bVB3QXKgdm+RDSu+luSAe/ RNhD90DYU/eiMrq3fpQq6j66LyT76X6QfEw/jhoH6KeRMlA/i5LBQVHLUD0U4TD9HGSG6xFo80g9 EuW8oF9EfJQeBfnRejTiL+mXUOYYPQZXx+qxVF2P0+OopmWuVAPMdQLV0q/qV+kC/ZqeiPgkPQky k/VkXH1Lv4Xwbf0O1dbv6ndx9T39Pq5O0x/SKfojPR0pM/QMpIDvIgTfRfi5/oKq6i/1V5CZpb+m avob/Q0kv9XfopYf9BykzNW/oEywYZS/QC9AuFAvgsxi/TuuLtFLUM5SvQzx5Xo51QdLXonSVulV VN1yZSoHrtyXyoT9wseoUvh4iLsE3jyAaodPhrhX4cBwIJUPnwmfQcqQcCjVCoeFw+gCy6eRAj5N tS2fpjTLp4lbPo0QfBoh+DSlWT5N9cDsmjk+fZHj09wx6RhvzmLMlh8nOn6cSDdgT3TM+BLHjC9z zDjFMePLHTMu8f9Y+x6oNq57zTsjaTTB4o8xcQgmhBBCCKGUEEIoxYQQTCghhBJCXEqREEISmpHQ f4QQo7/IruPyiJ/ruF7XdR2v1891XD8/1+uyrkv9XD8/l+NyiOulXpdSl+f6+Xgpz6U8r+NH9nd/ konT7rbZc/bc83263PmjmdHVvd+nM/OByvgRVMbpqIwffSC/R4H5PTzm9ygwv0eB+T0JmN+jwPwe Beb3JGJ+jwLzexSY36PA/J5kzO9RYH5PMub3KDC/50uY3/Ma5veswfye1zG/pwnze97A/J5mzO/J AKW+CnRzIpOIGv1R8gKTwWSAhqZKvRyU+hukArX4m8xbzFegnWrxLzJ6Rg8K28W4gN2MF3SzDxT5 i6DIN5P1oMW/DvV3mHdgfarIXwRF/h6pBi2+m7wMKvw48A+YH5Aa5gTzY1hKVfjbqMJfQRVeiyp8 A6jwYiJDFS57QH/LQH+/gvr7S6C/X0MVThOG5JgwtBoThlZjwtDDmDC0GjX6l1Gjf4H9OruFVNFk f9IaV+pUlz/Lfp/9PnmGPQm6/ElU5E+hIn+a/Rn7M9DfVIs/wU6xU9D+C9DfT2Bq0WPsL9lfgSL/ NftrYJpgVIipbgXsHPsv0PI79nfANNstC5ONctn/yc5DneYb5bH/xt6GOk05ymc/Yu9BnWYdPc4u sx+TLEw8ypExMhbqNPcoT6aQKaBO049yMP0oV7ZKtgpakkH9F6HuL0HdX4q6v0W2TpYJ7VT9F8me BPX/eVkeqP8iVP/FsgJZAdQLZYXAz8meJ8+DE3gR6uWycvI52RfADxShH3hOVgl+oEj2kuwl2D/1 A0XoBN5CJ9CGTuAtdAJt6AHqQP3vIEmg+/eQVFT86aj416HiL5efAMX/RVD8Z8l6+U/lE6QGdX/t A5lMCsxkSsZMpjWYydSMTqABncDLmM/0GvqBCvADHxIOPYBS8UvwABx6ACV6gCRU/0pU/+mKOcUc qPzrit9BC9X9HCr+R1DxN6DiT0XFn46K/1HFomIRmGr6OtT0StT0qajp61DTsxwHml6Jal6Jav5R VO11qNeVqNRTUak/iuq8DnW5EnV5OuryOtDi4Hu5IlDkHGrxVNTidXEVXsqVwvplXBmsT7V4Harw mOZWos5WorauR23dgNo6FbV1I2rrtaitH0FtnY7a+lFUz49yW7mtoCm/wX0D1CRVzxWomCu5HdwO aKeK+QVUzC9ze7g9oCOpVi7j9oFWrkStvA618nruAHcIdPz3QCWvQ5X8Jurj9dxx7jhsRVVyGark N0Eln4RtfwhaeR1q5XLUyuu5f+TOwh5+yv0U1qdauQxV8jpUyeWoktejSq7lpkAlV6JKfhlVchmq 5PWokqtRJW9AlfwC9yvuV7CU6uOYMn6Bu8UtQAvVx+WojytQH7/JLXPLoFCpMq5EZbwelPEjUKea uBo18cvKJ5RPkRpUxrWojN9GZfwK6uCXUQe/jTq4FnXwOuWLyheBqQLegAq4VvmS8iXYJ00US8Ys MQVmiSVjilgypogpMEUsAVPEmjBFTIEpYgpli7IF3p1miSkwSywZU8RewxSxNZgi1owpYhmYIpaB KWIKTBFTYIqYAlPEkjFFbM0DKWLJmCKWgCliyZgiloEpYgpMEUvGFDHFAyliCkwRS8YUMQWmiK3B FLEMTBFTYIpYMqaIZTyQIqbAFLFkTBFrxhQxBeaHKR7ID1Ngflgi5oclY36YAvPDmh/ID1Ngflgy 5ocpMD8sGfPDFJgfpsD8sGTMD1NgftiXMD/sNcwPW4P5Ya9jflgT5oe9gflhzZgfloH5YQrMD3sN 88OaMD+s+YH8MAXmh2VgfpgCPMwaUgGO5SnyMvqTGv5p/mnwBvl8Pmj9Z/lnSTlfyH8O/EYRXwTt xXxx3LeU8SX882QDupcyvowvB6Yeppb/Iv9F2A/1MDV8Hf8qcD3/GuytkX8d1mnim8gL/BvgZNbz zXwLOIS3+bdhKfUz1byaV8PxaHktbBVLYqQOpxYcjgneizqcJN7G22E/Dt4BW7l4F3mF7+f7oWWI 98NZUJ9Tgd5mHSY3lqHDqeRH+BFg6nM2oM+p5L/JwyiBPqcMHc56/jv8d6Dlff59eHfqdmrR7bzN /x1/CLainmc9/wH/Aazzff4o8D+A81nFz/C/Bf4X8Dyr0PO8ip6nhl/kF2HP1PNU8B/xH8HZUc+z Cj3Pm+h5XkbPU4lupwzdTgW6nbKHEsHhVILDWU2q0eHUosN5BR3OBnA4a8EFPfJQOqz5KDiccvQ2 69DP1ICfeRrepQD8zCrwM6XAZQ9VAK8HD7MKPcwq8DBvAFP3sgrdyyp0L6+Ce2mNOxbqVTaCD2lH x9KR0AEt3QndpCrBlGACFhNEYEuCBdiaYAV2JjiBaRbdasyiW41ZdA9jFt3DmEW3GrPoVqPzkaG3 +fKqdatyyBdWNaz6MqlapVvlJa2YVCdHtyMHh/MsuAjqYZ5FD/OMqgc8zBOqXpUJlDr1LU+gY3kW HEsf1K0qGzgHt8oNLdSrPKkaVA1Cy5DKDy6F+pOn0J88i/7kGfAnW6DlHXApz6BLeVr1N6q/gfWp P3lW9U3VDlj6HviTp8GffAv2Rv3JU+hPYs7kSXQmRarvqr4L/L7qfWDqTErRmbSo/g6cyXPgTA5D +weqI6QYnclz6EyeR2dSCs7kH6DluOoH5HOqE6oTsOYPVT+EdupPPq86Bf6kSHVadRqWngVnUoye pBQ9SYvqgupnsHRCdRHaqTN5XvWh6kNYk3qSUtUvVVeg/X+AJ3kePMmvYG8z4Eyy0JkUq2ZVs/C+ 1J+UoD/5vOq3KtB4mA5YiHmkBaqbqlvQQpMCc1TzqgWo07zAPMwLzMG8wELMC8zBvMDHMY80S/Uf qv8AptmBhaqPVaAAMUEwF4Q5KEDMEXwcs0mzME3wMcwmzcJMwTzMFCzEbNKCxKTEZGin+YJ5iWsS 10ALTRnMx5TBxxPTEzNgKc0aLMSswTzMGszHrMHcxJzEHFhKEwfzMHEwBxMHcxNNiSbyBDqxp8CJ BdGJQX9I3JS4CRzaZnBfT6H7eh59Vwv4rm9CfUfiTlKM7uv5xF2Ju6BOkwvzMLnwMUwuLMTkwnxM LszD5EI5YdbdzgyA+FXJtpBfE6JpB2gAeoAIsAM8K6+M9RC8SoAIYAtgFLADsBuwD3AQcARwHDAG GAecA0wApgDTgBnCBi4giGYOwQYmAZehfhOwAFgC3COkiwXwgCRAGiADkB07hq68/8trYWxfXSVx 0G3KAVW4jHTVAhpix4vb7IudY1czoA3QEWuPv7KBqwjGehRwAurXVtpiuAGYj9cvAxbj9bsxBEkc HEAFSAWkA7Ji6wZzcX3SpQUYY9epy7JyzWPrFuB6pMsJ8AICgGj8HLbG3i9YHD/XbYCdgD3x5fvj y8viqIQ2+By76PmcApxZOZfYOZ8AnAKcAZwHXARcAlwBzAKux19vPfB6f/3bgDvx1yvx7e48sHyZ EK0ckABIAawFZH7ySj8/bQ4g/zO/ssGaTz4rem7aovhn/f+KjE8D+/eW2Ptgv8qIrYfv+yBKARWf vK7sI7ZfNlgP7dWAunj/g2Xaxk9etS2AjfLVnbPmhqFJTaSPIHPIKuAtfanAo33pwDv6soB39+UC 7+srGJqkW/k7NAf7iv3azuvm5qHLnbfMbUNXNUf6ypArV+rH+2qGrtKlfmPnbXPH0DXNWF/90LVY Pc53zNqhG5rxvibkVuBzWD+H9Ym+duCpPg3wdJ8eeKZPHLpBt/JbgI1QXzZbhuY1c3124Jt9HuCF Pmlonrb7nWq52Tm0qFnqiwDf69vi96oTzN6hu11s3yjyDuTdwHxXLXBS3z7gtL6DwBl9R4Cz+44P 3aVb+QNdeX1j0m51ijkgwZXtG5eIeq05KnGU/VF1pnmrpOoq6TsHXN43Ialoi39rrD3OOeZtUqo6 37xTSu+q6pta4dq+aSmdtvu3xbnIvEfK6mrom0GeA27GelvfTeCOvgVgbd8SsLHv3gpbrKx/Z5fT yvv3qEvN+6XcLq81ScrFvRXEWwLWtPtMW/z71RXmQ1JxV9SagZx9v07b/YfU1eajUlnXVmueVEbr /qPqamsh1OvMJ6TKrm3WEuTylfpOaxXwHmst8H5rA/AhazPwUWsb1jukSrqt/4S60XxKqlG3mM9I 9V0nrNoVPmXV+k91nbEapXr1RvN5qUndab6Ix2BBdq7Uz1u9cCQ68yWpteuiNbDCl6xRqVVtMl+R 2nvHBwLIUeStwOcGtgFPDOwEnhrYAzw9sB94ZuCQ1E63Gvb2zg0cHQ6oreZZSaN2m69L+t6bAyeA FwZOIdP60sAZSU+XDkfVPvMtieu9N3Be4kys+dbw1hirQ+bbkmjiBy4iXwJOwnoS1tMGrgBnDMwC Zw9cB84buCWJdKvhbcB3oL7ZvCzZTYUDt4FLBu4Alw9AC20f3qkescglj6nKS7nWmzC8R73dkiBJ pgZvCmVTFOtrgZu9mcBt3hzgDm8+sNZbBGz0lkoS3Wp4v8nirRg+pN6lviZFTE5vtRRR77WkSFso B3PVByxrpVGT11sHHPA2SqO0ZfhorD3Ohy2Z0g71MUuOtNsU9bas8FbvRvjuQPvwiTiftORL+0zb vJ3IupX6Tq8JeI/XCrzf6wY+5PUBH/WGgE94Nw+fMp3yjvi16tOWIumg6Yx3+/AZ3NuReMt57y7g i5Rpy/B59VlLqXTcdMm7F/nA/TptH76ovmCpkMZMV7yHpTFaH75kmvUeG76inrRUS+Om63Dlgb0n V+q3vKeBb3vPAt/xXgBe9k5K44Lcexk4wXtVGqfbDs+qL1vqpHPqq5ZGaUJI8V77E17rvSFNqK9Z WqQp9Q3LRmlayPTOIy+u1HO8d6Vp9bylU5oR8gfJChcNctKMetGik+a6rli3Im8DnsX6detO4FvW PcC3rfuB71gPAS9bj0pzdCv/Ga3cesJ/Xn3XYpJuaojFKi1oE6yngFOQ1yJnWs9IC3Sp/6KGs7il JQ1nPU+Z1rU51ov+JI3K4pPuafOtl5Cv/Em9yDoLXGq9DlxhvQVcbb0t3aNb+S9pUi0hP6tJt2z2 89o66x3gRusycItNDrzRluDnNVmWEX+SthNZZ0vxX9HkWrb707Qm21rkTOQcf5om15YPdautCNht KwX22SpoO6w/qw3ZqqFls63Of11TYNnlz9CO2BqBt9ta/BmaYsteaYqy/5Z2l22j/7amzHIA1t9r 64Q9lNl0lKFlNtYe50rLYX+2psZyDI7tgM0EfBj5mM0KV4a239GetLlh9sS6pt5y0p+nPW3zIYdW +KxtM/AF2wjwpG078GXbLuCrtr3A12wH/MvaG7bDATns57S/UJNlOwZcYzkL3GS5AMc5bzsJvEgZ W2Y1rZZJf4n2ru30p5m2B8C22s7687o524VAiqbdctlf3q2yTfrLaT2wVtNugxaNxnIVzyvG1+7X u1NtN4DTbfPAWbZF4FzbXeACOwEutnNw7nTbOxq95Zq/SiNabvhru8vsqj/hSnuqv1Zjt8z7GzQe y6K/ubvGuo2yPX2F6+1Z/maNZLnrb+tusucCtyK32wuANfbiQCbVJIGcbr29DPQJaINAfrdorxy6 0W231wB77PWxGTxQROfBQGm3ZG+Ssroj9lYpi85EgYruLfZ2OivZNcAw1wSqu0fteqmse4ddhPkF vi+Buu7ddrs0R/ttoLF7n90j3es+aJeAj9gjsT4WaKGfb2Bj93H7Fn+ept4+CgzXIdDZPWbfQa+J fTdw7EzH7fuAz9kP+ptxxrkulA6qYPahI/8toWIwVRKF6sF04LrBrPj4fJuOcsN3hMbBXGmf+uRg ATAdZ5aFlsFiOuYMlgHDSBKVCxsHK2H06Byskaax5892T9iPBHTdU/bjAVP3tH0sYO2esY8H3N1z 9nNDV7tv2ieGrnUv2KcCPlhnGtZZss8EQt337HOBzTrWfjMwouPtC4HtuiT70tC8utF+T6rRpTnY wC5dhoMP7FVvdCRJTbpsR1rggDrfkRE4rC5yZEtZujxHnv+8rtBRGDimK3GUBE7G9Iau3FEeOK2r clQNTVJFETirq3XUBi7oGhwN9FNwNN+f2XXNjjbkDuA2OLZJXYdDG7is0zqMgas6o8MSuKazOJyB GzqnwxuY13kdgcBiTNN2sY4oqLiYjkKVogs4toJ2Rd2oizq2AW917AQVR/vG3S6tA1i3zbE/SHQ7 HYeCnG6P42hQpdtP11TLHSeGFnWHHKeCqTHlptntODM0qTvqOA/fcdSouhOOi0M3ujIcl4bu6k45 rsC7Gx2zcB3OOK4Dn3fcknJ1Fx23QYMdctyB47nkWAa+4pQHRjRLzgTY/6wzJZiuu+5cG5ikVyCY pbvlzIz17WCu7rYzB/Zzx5kvlemWnUXBgh65szRYHFOYPQnOimBZT4qzOlhJvxfBmp61zjpQ6aDV g/Ux7sl0NsYUeLDpAW5Fbsd30SDre3KcLUM3evKdG4fme4qcnUOLVFEHxZ5Spy5etyN76PcrKMWv JOjhYAR5Cz2q4GhPhdMUHI3VkXf0VDutUmpPndMNehhUcXB3T6PTF9PAwX0P8EFQqk4pt6fFGQLe SJmq1uCRGPd0OjfHlGrweI/OOSIV95ic24GhHVqszl0x1Rqo/oSDY/RbHxxHPhfjHrdzL2hRUKTB iR6f8wAoT9ClwamekPOw1NSz2XkM2Oo8CZrzovM0aEv6uUzHuGfEeTY4o81xXoBvNx2Zk3q2Oydh 9sxxXob6LufV4Jwmy3mNzgjOG8GbPXud8/7bPQeci8GFnsPOu8GlnmMuErzXc9LFhdj42I6jt6bd pQrxPaddqTAae1zpoaTYSNhz1pUVSuu54MoNZfRM2upC2T2XXQWhvJgG0JpcxTAX4CzTc5WO27E5 uueaqyxU2HPDVRkq6Zmns23PoqsGZj0YtULl2klXfai85671UqhKu93V5M/QE1drKCM+Lx9wtfuT 9JxLQ7WESy/N6VUukc7pLrt0T5/q8vjT9OkuCd73qitC5y8XjIH6LNcotOe6dvjTuotdu+/PFPoC 175Qrb7YdRCODbREMFVf5joSmKRnF2rQV7qOx0Za/yV9jWsM9lPvGodZAObcULO+yXIs1EbnqVCH vtV1LqTVt7smQka9xjUVstDrFnLifrx6vWs6FNCLrhnwODCGh6IxtUM50Bnj+6rG4g5tpRxrCW1D 3kmPIbQHeb/e7przs3qP66af10tUjVBlEujUR1wLsTrMd8CwFcwFoUN01A0d0m9xLcV0RehonOEs Ai36Udc9mC+wjud1SL/Dzfqz9bvdPCgK0BWhE/p97qSYioCjWuHQTu0Bd5q/UH/QnQF8xJ0dm/Fh P8ChU/rj7rzYLB86ox9zF/pL9OPuEmBoh5Zz7vLYLB86/wBfpPNU6BLyTuQr+gl3FczdMIOHZvVT 7lqYqWEeD13XT7sb/A36GXcz8Jy7DWaxJneHvw2v+S3k2/Erc9Ot9ZfrF9xGf61+yW3xN+vvuZ3S nIF1e0N3BN1gfTRBMA02RZoE62ArsHuwXRoVfIMaSS+EBvUSJ2weFKMpsI4dlo4MeqJrhe2DEizd NRiJZgp7B7dEc4QDg6PghvYO7pC2CIcHd0fz1dsH90mScGzwYLRIODl4JFoqnB48Hq2AGXNM2iec HRwPbxYuDJ6LVguTgxPRupg7UF8YnJLGhMuD09FG4ar3WLRFuDY4E90o3BicAx93Y/Dmig6fH1yI dgqLg0tQvzt4L3xMJD42qhM5Hx81iSpfUtQqpvrSom4x3ZcR9YlZvuxoKOZATQ2+PPBcMaeDnkLM 9RVGN8dcnlgALXax2FcCngvm+uiIab+vPDoi5PuqotvFMl9tdJdY6WuImkyFdE31iK9Z8og1vrbo 3pjP6h33ddz3szGPKdajr2wwXaeOz6ddefdDPiMweiWxyWcBxxTzOMvgMcfF1sGFYKWpyueE/bf7 vNEDosYXAJ8FVyB6WNT7onGtsk0UfVulfaLdt02aFj2+ndFjouTbEz0Z84NixLc/elrc4jsUPUt1 TvSCOOo7Cp4anHV0EvmyuMN3AmYNcNAwXwBHr1L2o6eOXqPvEr0RY3G37xSc0T7wXHbxoO+M5KH+ NzovHvGdj9cXke9SvbSJxK8kuNdNXJzhqDapxOO+i5tUsTpyqjjmuyTtEMd9V8C9gofdlC6e883G HOumrAc413Tedx2u2ITvFvAUZeoxAxtjLE77bsd85aYCccZ3RzouzvmWgaEdWm4OyWMec1PxA1xG VdymSuSaGIsLQwngHME/bqoXl4ZSwCeCi9zUJN4bWitNmdmhTGB+KEeaNicN5Uc76eeyqRW5XT0y VBSdN6cNlUpj5oyhCmnCnD1UDWvmDdVJ7QbeHQgto3fA+QjHLvAshiR3NCw3pLm3hhM0nHtbMNWQ 4d5J5w73nnCKIZsy1PeH1xry3IfCmcBHV7jQfSKcYyhxnwrnG8phKz7m6QxV7jPhIkOt+3y41NDg vhiuMDS7L4WrDRl0/ES+Y2hzXwku0NEyXIfcqA25Z/1phg739XCLQeu+Fd6oKXPf9s8ajO474U6D xb0c1iGb6DgZtsa9FXDYbXD2y8O+mM8yePsTwiFDoD8lvNkQ7V8bHjFs7c8Mbzds688B3tmfH95F x8zwXuQDhj39ReHDwKV+1rC/vyJ8zHCovzp8LDanGI7214VPGk70N4ZPG071t4TPGs70bwxfMJzv 7wxW4ijKGy726yS94VK/KTxpuNJvDV82zPa7w1c1Yr/PX2u43h/yVxlu9W+WjsdmKMrhaxoJZkOo 94+EvDHl1pPSvz18w3C7f1d4XkP694YXDXf6D4TvGpb7D4eWDYX9x8I5Rnn/yXCRMaH/dIQYU/rP Rjjj2v4LEZUxs39SGjXmuHdGUh/cmzG//3Ik3VjUfzWSZSztvxbJNVb034gUGKv75yPFxrr+xUiZ sbH/bqTS2OIhkRrjRg8XqTd2elSRJqPOkwps8qRHUuNs9WRJc0a3JzfSavR5CsIhY8hTHGk3bvaU RTTGEU9lRG/c7qmJiMZdnvqI3bjX0xTx0M83IhkPaDyRiPGwpzWyxZjpgTHfeMyjiYzGPjvjSY8+ ssN42iMGRoxnPfbIbuMFjwd40iNF9hkvw6YHjVc9W0JpmnoPOCzjNc8O4Bue3ZEjxnnPvshx46Ln IPDd/orIWC/xHAnO9HKe4xLXq/KMRcZ7Uz3jkXO96Z5zktib5ZmITPTmeqYiU70FnunIdG+xZTJY 2VvmmQlX9FZ65iIzsOZNWLPGsxCZi71Lb71nKXKzt8lzLzDZ2zrARhY0nDFfWuptH+AjS5rKgSR/ dq9mIC1yr1c/kDHM9ooD2cN8r93oG+Y1rQMwO/d6BgqHQcsNlPjbeqWB8uG03shA1XBG75aB2uHs 3tGBhuE8Q8lAc3CB8nBhzPX37hhoGy7p3T3QMVxO1ctwFVUpw7X0V5Thhtg3Dn/B2Br/peLT347T 8d8K8JeB4ebefQPacD6d34fbqAcf7qC9cVgb+3UIx4c7vQfdO2H/qMR6jwwY/ZcMeQMW/6X4rzf4 u0rvcYt12Gi4PeActsRcf+/YgHfYST/rQAthySPMAvNvhDB/ZJYIy9xlPiJy5mOWIRyrYDnyELuK VZFVbAq7miSyD7NrSTKbwa4jq9kc9kmyhs1nnyEPs99mv00ekdXLvkTSFXWKV0mGwq5wkEzFTxQ/ IVlJUMjjSdlJr5PspOakDtKUpE4aJl9NejfpxySUdD7pFvn7pPmkJXIZjubLRI7//SCJJJOHyGrS SlaRNqIlbxAdeYd0kG+QERIho+RDEiW/IL8hF8hvmQTy3xkVk0g+ZpKZhxmGoc848fS+SeYRpp0x MJlMLxNlCpjNzHamntnJfJt5i/kB83Pmq7IPZB8wbrlT7mL65QF5iBmQb5a/w/jk78rfZQLy9+Tf YoLy78jfZyLyI/KjzNflJ+Q/ZLbKfyz/MTMq/6n8n5h38XnM7fIp+YfMe/IZ+SzzLfl1+b8yu+W/ l/+e2Sv/o/zfme/Su+iY/Yo1ijXMf1F8qFhmDnIKLpe5xD3NPc0scs9wRcwfuRe5CuYj+oQH8zH3 ClfLyrk67nWW497gOtgkrovTsZmcnrOz2ZyLk9jPcV/nRtgXuVFuN7ue+w53gG2gT06wLdwR7mfs m9xF7iJr4ya5adbOXeWusoPcLDfL+rjfcTfZIXo/Fhvk/sAtslFuiVtmNyuJMpF9V5mqfJj9jvIR 5ZPs+8o85QvsUeXLSpEdVzqU29hbym8qvylTKd9T7pYlKr+nPCJbQ/+vquwR5X9VnpRlKseUP5Fl 0fuBZHnKXyinZaXKK8rrsnLlvyr/XbaBz+OPyVr5Pzz0hOw3SR8lfSSnz8uJZDOwimTRp41rjsbB AwpJnqitvyMaa+u/dLm2WLSITtFbPysGxGit2DwqnhBPiWdqx8Tz4kXxknhFnBWvNyY05ohbG93i tg0NG4ziTnGPuF88JB5tzNlQC71KDn18Afv4HwnDfMx8TFjo0SlEBssewztRCfs99nuEYT9gP4Bl R9m/JzL2R+yPiALvROXYn7M/Jzw+CfYQ+yF7iSTgPagqvPs0kf0N+xuShPedJrO/Z38P3w56Z2mq jJExK/81WCHjyFp8cixdtla2ljwqS5elkwy8U3SdLF+WTx7Dp8KyZJWySpKNz4A9IauWvUxy8KmY XLxn4yk4fhWTileOMhHOEp9wVrggTAqXhavCNeGGMC8sCndFIiyKnKgSU8V0RJaYKxYI82KxWCZW ijVivdgktortokbUi6JoFz2iJEbELeKouEPcLe5DHBSPiMfFMXFcPCdOiFPi9IPF3CbOiHPiTXFh pSyJ98ysmX+gJJnTzBnmbGjN+1TpMOfBuoXmEnO5eO9+MVeZa80NwLQ0m7XigtkI61rMWrPT7DUH zFHzVthnnnmbead5j3k/nD/zkBgfNegz66vxmqRDkZFMKHKSR54mClIIRUk+D4UnFVAeIpVQEkgV lFWklmzAu8tfg1GHPneZTL5C2kkK6YSSCuOOjqwhRihpxEGc+MSlF5+19OMd5WGSAePRu2QdeQ/K Y+Q/Qcki/5kcII+T70F5ghyBkkN+COVJ8t+g5JIfQXmK/CM5C8d3AUo+/jfsZ8g0+SUpIL+CUkh+ C+Vz5HdQisht8gc49jvkf5HnyDKU5xmWUZJSJgHGvgq8f/yLMPalkEq8f7yKyWKeIC8xTzJPklfw ec9aGA2b8YnOdlLHfI3RkFcZLaMlr+G95I34dOfrjMiIpInpY/rIG4yLcZNmZogJkRYYO6NkI4ye XydfYd5htpKvMqPMKPkaPt3ZCSPpSaJmxpgx0s2MMz8hOuYc809Ez/wz88/EyPyMmSC92H8FGAXy icgX8AWkD+/Os/LP8SXEhnfkOfgKvoI4+Sq+irjwSSI33n/Xz2v4LjLAd/PdZBA+2+tkCft+GU2W MB0HjAHGAecAE3FMxTENmCFvm8ZM46ZzpgnTlGnaNGOaM900LZiWgO8JrMBDSRLShAwhW8gTCoUS oVyoEmqFBqFZaBM6BK1gFCyCU/AKASEqbBW2CTuFPcJ+KIeEo8IJ4ZRwRjgvXBQuCVeEWeG6cEu4 LdwRlsXNolxMEFPEtWKmmCPmi0ViqVghVkOpExvFFnEjlE5RJ5pEq+gWfWIIyoi4XdxF/4OoQqvo hUnwa0mdmK+w4f9b/34dSjL28hTs5auxl6/BXp6Gvfxh7OVrsZenYy/PwF6+Dnt5JvbyLOzlj2Mv z8ZenoO9/Ens5bnYy5/CXp6Hvfxp7OXPkAkoBdjXn8W+Xoh9vQj7+uexrxdjX38O+/rz2NdfgL7O kjLs3y9i//4C8xiTBf2e9uxK7NnrsWdX4fMRL2Fvrsbe/DL25hrsza9Abx6C74Cf8cN3gD4l8Sr2 5nrszQ3M3zJ/C98H2qcb8fmI17E3N2FvbmYmoB+3MBeZi+RN/i3+LdLKt/Pt5C2+l++lz2unBFK2 wOekgmu/ijC2Tuh3JYByQBWgNt7WAGgGtAE6aJt8tanUViZM/WXgOtP2S6YKW6Wp2lYjzHwatM1U Z6sX5gA37VcoTI22JmHhL4OuY2qxtZo22tqFpU9A/zZ12jTCPZtGZO2zJp1NL/J/GbhOkv26yWQT xTSbaLLa7Ai3zSNmALLtFqzn2W+JhfbbJp9NMoVsEbHkE+Df5fY7ps22LWLVX0GtfVlscMhNI7ZR xHbbDtMu226xOQZap+cmtn0CPNe9tn1ih20ffUUcsB0UtX8ddD3TYdsR0zHbcdH4aZhO2sbu7/dB mE7bxkXLJzCdtZ37LLB2uneZLtgmTJO2qf8jLtumKaw6914K01XbzGfCNduc6Ybt5p9h3rZAYTU5 RkyLtqXPAqvVfcB013aPQiB2FsHZeQqr232YvvZZXIcEjV0rqOxJQqo97U9h9bmPCen2jL8Ga8h9 EveRZc9G5NrzhAJ74adQbC/5M5TZyz+FSnvVZ0aNvVaotzf8GZrszUKrve3P0G7v+BToeX8GiE5H gqC3GwXR/r/Z+x7oqKpr7zszd4aIMCKmAWKgMUWMISAESmOkQGkMIfMHpIg8SmHM3Dv/yEyGzB+Q 0gg00pRSGviQImLk41EaU6RIMYUYkOYh0Lw0AkVAirx8SDGFNPKAFykfhm/v37kThhCXdL3vW+tb q11n7d/d7LPPvufss88+59y4xkC3RHVFi0J9ipaEkqBXUhK+J1pYsmheacmSu4jtLSdaGUqZV1ay /F6oaE0obd6KkpWdVFGyppO4fj1RZSgd/JbQ8KLq0Oh560rWo79dqGhHKAf8xpLKL6OimtCEorpQ 3h02NpdsuYOqSqrvIm5bH7LO216yo+hwaBqeTaGZ3fXnC2lXSc282pK6u2h/Sf28gyWH76LGkqZ4 KjoemhPL7fG5OJYrO3Pc6ZDSmYOaQ774PNIZJ/HzGpuXmI8uhIKdvm0NReP7hFxSTjmF1n5wlcgB wbVi/WJdbShJxr5B8R7cRLQ1ui8Wz8Ft9KT3cH3RldDiouuhZUUdoXK/HFrF+4u/Z2gty3ls/j6h Df6k0CbOr/6U0FbOk/600DZ/emgn7wH+4aHdnNsxZop3/+jQvlh+9ueEDvgnhBp43P680BH2hd8a OsG5k22CpoXO+GeGzvnnhFr8SqjN7wtd8wdDN/zRsMT+xR7EviQf+hfTPqntZ/5ltP9ofvaXk51V YRPbQN3acC//hnBf3nc699q4Oeq0yaTtKbG9gPvEe6N/U7g/+rY1PCg2z9Dn3E9zj32Z9jyMbVt4 MMv8O2kPzxHE+zX79w6yin2Z9yvsx/Se2F7MTxDFD8bWZY/Fu4j8u+eXMvEeG9tXY+TfN7+CqXOP 5D1T2xvj98o79khtn4yR/wDtgzTH2PtoP/Q3zK9lQtzyPrdPUGfOIvIfCWfgeSI8wn8mPAZyyh/+ c+Gx/pbwRH9bON9/LWyHnNcw7yW8bmkd8Xry3whPD0jhWZyLAqawA+sitg60vIjYIjuc5wK9KDdp awTzRXmL28dy4F1rq8u66swvsf6TDc6bgb5hF895oH+4qLM969N6CwwKlwQGhxdyvwMZ4dLAiHAZ cjiPh8YQGBNeERgbrkC7L8s/Wr8CE7U8Hlvjy+N0tD5jrF3yced4OA/H6Ive9QX5NJCvPe0lO3hM ndQ1T8bnSs6PsRwZnxNJF3ZYh+vIB4HpIWtwZ/RAcHe0gYnPNjzfONfsix6BjHJW4FjEHDwQPRE7 vwQbomcCZeH9yGN07ggeiZ7DmYJyWmB7+GKgNFwbOxMET0RbkNN4/+dzA+e6M9E23qOD56LXgi3R G4H94ZvBtgVS8NoCU/DGgl7zpQV955sW9J/fa8EgnMm0fIm2fDbTzk0488TOKGxLs8F18/suGMz5 kvvVebaLncOu3c7BoNgZRjt7sC0+j83vvyCDzzvzBy0YEWsPfRoP/k3+wjqhsc0fvGAMZHxujJF2 TryDup4FtbPfHaT5teu5rpP4LBajrue62Bmtm7PZ/AxBX3o247NX/PmLz1yxc1fcGYv7iraso/nk rrVF6y8wK7zurnXlCG+MnbECrvDmQFG4inNRTC9QEt7OcR1YGN6FeIrlAdbhNUfxh+eK8MFARbgR /LrwscDG8Cmm+PUW2Bw+yzkiUBU+j/jcFb581zmGKFAbbgdRPDJhHXLeOhjR49kYSYitQV4TgVOR xMDZSHLn+uMcdD6SilxzMTIkcDmSGWiPZPHeEyMeL9+xsP5ozIGbkexifWQcbFP+KE6I5GKcmn6x OVJQnBiZWpwcmVGcGpnNuah4SKSwODPiKc6KBIqzI2He/7AHcn6iM0HxuMii4tzIEs7HxQWR5biz 0F5YPDWysnhGZE3x7Mh69ldxYaSy2BPZwveE4nBkB/upeFGkhvWLl0TqipdH6otXRg7zGZDzfyw3 F6+JNBWvjxwHkT3eZzi2iysjp9nvxVsizcXVkQscZ8U7Iq3IYTSPxTWRK6iri1yHjfpIB+fy4sNR ubgp2rP4eLRP8eloUnFzNKX4QjStuDWaXnwlOpz9W3w9Ohp5jMffEc3hZ1COTuB4CPaM5gX7RK3B pOi0YEp0Zmf80Bmczx/BtOicYHpUCQ6P+iDXcm5wdDQYzIlGMX+0ToIToouDedFlQWu0vDNWY/eA 2B5FfHBadBXrBGdG17JM0ks683JzhST98y8o/0B/QWmVrtz+O4DSLhWpyWqqOkTNVLPUbHXcdFnN VQvUqYQz1NlKuyhqKpNaqHqUm6KoATWsLlKXqMvVleoadb1aqW5Rq9Ud01epNWrd9H1qvXpYbVLN WlkDOq6eVhO10qxeUFvVK+p1tcMlu3q6+riSXCmuNFe6a7hrtCvHNcGVp+pjhTSsrmmuma45aoIo LsXlcwVJL4oeco9Yk+v4ffQG/s7fu5pie/L/le+gNlobU6g8iO+gffEd9CF8B/0KvoMmSR7JJ/WT iqgk42vow/gaOhBfQ7+Kr6Gp+Br6CL6Gfg1fQwfja+ij+Br6GL6GpuNr6OP4GpqBr6FD8TU0k9Zc ozRcaqIyEl9Ds/A1dBS+hn4dX0PHSJ9If5G+IV2ikoNvok/hm+g38U10PL6JTsA30W/hm+i3dYN0 g6RcfBN9Gt9E8/BNdBK+iebjm+hkfBMtwDdRC76JWnU/0L0o2XVLdUulZ/BNdBq+iX4H30SfxdfQ GbTSfys9p9uj2yPNwjfR7+Kb6PfwTXSuvEL+ieTALw0WyrvlPZJC6/qg5JJb5L9IHlq/7eRLnbRQ Kr0dq04asfOE84zznLPF2UblmvMGOd6k9FL6Kv2VQSgupUgpURYqpVTKlBVKhbJO2ahsVqqU7SiD lQxlhDJGGYsyEZiv2AmnK7MUBxeOG/1QipthWtz0xfs5YvQ0R49R9HCsyOT/LIoejhUTYqUHRcrT FEP8zfw+io5ZFEMcH/cjPnrhO3lvGtc8iiSOhj4UC6spnjgO+lIUbKV44ghIlN6i8hVEQBIioB/N /wGKW/4ePoDm/EOKMJ71hzHrKfgGPpBm/qI0CHOcqutDc/wIZjcN8/o1zOhg3VydQ3oUM/oYzWhQ StdFaUYz8JV7qG4lzWImZnEYZnE4vmk/ofutbrc0QtIljEkYGzcfGfKDzoyuRVmkLHGOcI6JFWWI c6xWJnYtynJnvtMuirLSOd05XVlDki5FWa9UOmdRcVBxcVG24FnkLIkVpdq58O6i7ICFhc5SrZSJ otQ4VzhXKHWEFXcXpd65zrmxs2xmXa1UaWV71+Ld7t3l3OWsjRXXZed+rRzsWry1zsbYu7z7nceo bCZJl6KOdrY7T1Hh953l4klXzPQ8jxYoatvd1p0HPXmwcDDmWedFUbwHnZedl71VhO13F28jje9m Z7Er+s6SIEo3njqsNClmJbGzHFeSUU7f9kSsKM1KqjIkVjDjF5TMLqWV6IqShZJN5bom71BlwnGd I7I7S9WeSu7dRe2jFKhJylRlBhc1RZktipqmBEhSqBSq6UphnJ3Oog53XlQ8nSWghGNFeN95lmaE 4lvNQezmqxPUPI4x1cqeUKdxfKgziZuD0WaqiupDj3wYq7DEkXIMs9ToPeU9i2g4D+9fhKdb1SCt nRHkvzHOsWrUWaUuJi+b1WXUv3J1FcWyQ11L8b5Q3aDo1U0UyxWF5epWJZveu4ripIx0t6k71d3O m+o+9YDaQD3m+K9Qj2CUDpqxw84y9QRp2NUz6jmyxasWI4KmWCs8u2XO6WoL9b+NxnyN5CtIbwyt uhXqDeJGqHNcknOsy+Tq5err6u8a5BqMtTxdFFeGawSvV9cY11gqE135tFqLxIp12V3T8TZ6k2uW s8zl4DXpIsukWeQqcS10lbrKnOtcK7T1xyuwylXhKqJYMyPekql2nVKgZLs2Ksmuza4q13ZltmsX zS/NlrrKVeva7zpInstUcqlP65QmV6PrGGmfonJWyXLVIgJ5lJgr1qNCEcNecp0nuqjk0hqucLWT POy66da7zroT3PRud6I72Z3qHuLOJF/73Fkc7+5s9zh3rrvAPZVjnDyLOXfPUNMp2rLds11F7kIq HndAGceF6sLuLPciGkGBMoNqliiz3cs5TgkL3Svda9zr3ZWuwe4tzovuasXj3kHxGOCxuWvcdfTO QorQMI/Pe9m5y9vuUSgz7PfepPk5S+PJpXip8Ol9CZQFqnxmyhQHXevcrb5EZ39nbWGDe6ov2ZfK 65pihrzlG+LL9GW5qnzZvnEUoZw52imbsXeqvLXeWqHhrPAc8eWSLc53iGBoiixDEUy2jvkKnOt8 U53bfTOcBxU96dVSfy77ZhO3yz3bV+jcr+a4szw5Po8v4AsjC2qZzLfIi8zqzvYe8x7zLfEtpzx3 XuQ630rfGryN3uRb77zoq+RsRnjZV+nb4qv27fAk+Siju2eLzIXcleC96KvzrVRm++q5J+56mieO ndnuw+4mjh9R1FXU74Pu45yT3KdpjpuVqTQ7FyiuMikfZLpbyddb3FeUce7r7g6n3SN7KO84z3v6 eJIKGwobPCk0g1sobi47F3rSPOme4Z7RnhzPBKXQdZb97tylZHvyPFbnZc80z0zXec8cWj0rKMH4 lAC9/yztjxc8E2gFmylnFVJN0BP1LFaSPcs85Z5VnrXOUiXBs8GzybPVecyzzbPTs1sxe/aRVbPn gKfBeYosn/UcoT6ZqS8nPGc85zwtnjbPNepjI9lOcF4mzRteyWtyrvD2omzTl9aSneKmP7XJpFjJ 9g6i+G31DnZu96S7W92t6ip3s/Os65g3wzvCO5j8oPeO8Y71TnQ1evO9du907yyvw+vy5isF9Cxy tXtLvAtJu9Szyt3kLfOuUMLeCu8670bvZs8qb5Wq4DQ17J83zH+gG6ZHCuK/akji/5uMo0rSPa+X Eh1bqFRT2UGlhkqdo24WFUe9o37uqbmnHIepNDmaIDtO5TQVljVTuUCF2s1sm9nmaKVyxcF3WL3Z bp5C7+iDG42EG40edxkDzrwy7jJG3GJMOPP2wC0mAbeY+3BzuR83l14485px5n0AZ94+uLM8iNvK Q5Kuj9IngDHhvzt0jJZ0Dis9c+g5TX4wf6sj716ooICe24h2fgHtFlQwW1D+vnukA0QN3dARQQVh ep64NypYQs8zGp3TqEXQ5LPiWbCeqJL4NqJrd1NBNT1vfDkV1BDVkV1JIxNRrzsJY+tCk/t2of5/ Bw0iGtwNZXRjl2lEFxpzb2Qnv08eSzTxCyhfkP2EoMn2e6TpRLO6IYcgO83bZNe9kZ3mdnKRRiUa LRRkbxFPWzM9jxGVEpXdTXaKgckrvpzs1zQbFRqtI9rYhTZ3Q1VdaPvfQbuIaruh/UQHu6HGLnTs 3qjgAj1PObA+uiWqK2gluqLpnb9Hukh0uRs6pdnsoGf7vZFFpufN21Sgv02dOn20ZxJRCtUl3H5X PFnStPebv5ws6UTD72xfkNiFkrshbjuanqn0zNGeE7rvzxdRwRCizG4oiyi7Gxp3J1ny4vJ3fL6N 5Ustj1msjs78YpnmuDN/xOIkfl41f3f6aGacb+fc2afOnBKfA2JrWFtbvGfEYn5K/y4x3S7qLQqR jygocgTvL5bFQs5jsiwjKhf51cHzRXnSspZog9gDLJu0/H5DxLuFfBLLzxba0yw7xXgtuzU/kE3O l2wTxHZpPi2UFy3kOwv1wcJ2WzT/av7kttgnY3vYuTg/kx2rJGxwnZX2C2svrV9d56nLHHXuKbF5 Khd7o7Wv6Ju1f1z7G2Is+PdObe+jf1sHabJtcbS7G+q6Lx/phk7E7a9xe2wntcVRl/21c7/87+yT gxx37oUZjtt7YNx+15mziKwTtSftW1a7tsYof1hpT7LSHmSl/cfq0uS0hnn/wLrNE+vJSvuMtUTk IutCbV1o6yCWFzm22A7nOeSn2BopF3mL23fmwK5rq8u6iuWXzrVVrvW/TJvzFbfbQ5/Wm5X2Jus6 0W8r7UlW3oPOajmJx0B7kHW71u7LclDXPN6dTqzP3eTjzrqE2/SFue7L8mnqnXRXnozPlVlxOTIu H0I3VdPJFj7gHD2F4mdKhiA+2/B885lmyghNRrFiyyWe85h2fplCZyNru5bHaE6ncGyViXxmY9+z v7QzwZR8LZfx/r9Oy3Mcf7RHTyF7U8iejfo7heJmCtmbQnE2hW1SjE0p1fJnLF9u185msXNTye08 CluaDfSxTORL9KtrHu6SgzvPMLE8zONkW1xHMTWlIq79Cm08Y4S/cOaisU1Zp8nGxlF+N9T1LOjo hjS/dj3XdVJpHHU918XOaP+ds9kux53nr/2O2+eu+DOWQ2tbG+eTrmuL1p+10XHXurIec3Sesay8 rs+KXNSZr86LuLZe1OIpJmeddi3++El5xaatOxutMZtZUPx6syWKHGFLFvFpG9LNOYbIlqlRliDk QbafrT3H3V6DvCZstNfZpsatP9KzzRDrzUZ7tK2QyCP2nhghH1ULP/GYbQGisGabxmFbpI1T07fR nc62nGgl0RoHcpFtPRHd4WxbiKrF/seEPElnAtsOohqRj211Ik55L7TVEx0matL8dZzotLgn2C4I P9lahb6N9g7bdaIOcQbk/B/LzXbaA+w9BbE97DMU2/Y+wu92OoPaU0Sc2dOEH3ke7ela3XDNxmiR y+10RrTT+dDOuYfOY3Y6h9npXGWn85RdEf61+7Q8RuO3B7VnVMSDnc5CdjoD2WmPsK+6HT+cu/k8 YKezkJ3OQvZNmlzLuXY6D9i3Cfu8TuzkIzudAez74mI1dg+I7VHE2w8IHXuDkPF/jdG7vvd7//yv Mf6RvpXJGfIB/ouqvkH6tST1SCUaQpRJlEWUTTQu7plLVEA0lWgG0WyiQiIPUYAoTLSIaAnRcqKV RGuI1hNVEm0hqtZoB1ENUR1RPdFhoiai40SniZqJLmjvbP2C5xWi6xqxfockJchCntCTqI/Wt1bt SWNISCJKIUoT8s5nOtFw0deE0bfHnJBDNIEoj8gq7CRME+9LmEk0h0jR5D6iIFFU2E1YTLSMqJxo FdFaog1Em4i2Em3TnjvjnjH93UT7tOcmrd2+uPoDRA1ER4hOEJ0hOnf7yf5JaCFq+zueMV9cE378 ewlzEE9TBbF9zFezptvShW6I/+187BlrH7N7n4molzbfJL+v7+3nff2JBkm/tuRb7JbpllkWh8UF KrKUWBZaSi1llhWWCss6y0bLZkuVZbtll6XWst9y0NJoOUbllOWs5bzlouWypd1y06q3JljN1kRr MijVOgT/zqSSZc0mGmfNtRZYp1pnWCqssy1V1kKrxxoAha2LrEusy60rrWus662V1i3WausO+neN tc5abz1sbbIet562NlsvWFutV6zXrR022dbT1seWZEuxpdnSbcNto205tgm2PJuV60k+zTbTNsem 2Hy2oC1qW2xbBiq3rbKt7ZY22DbZtlqKbNu0spNKd/xuKvtsB2wNxB/RygnbGdA5Ki1U2mzXbDfs kt0E6mXvS3vCgG5/cUHSfnEhAb+40BO/uNALv7hgxi8u9MEvLvTFLy4k4hcXkvCLC/3wWwsDzKnm kdLD5lHmXGmY2Wn2SOPNReb50tPmsPkFyWIuNb8oPWMuM78kfce82vyO9Kx5r3mftMR82HxJWoZf X9j6/3HPdLq+uiD+e5Va/r/Jp2VpRJklbZxGuRoVxPFMtGrSZmg8683W+EKNPBpR1k2jrJtGWTeN sm7ack13pabPsjVx/16vPSs12hL3zmrt3zukoQUNVI4UnCg4U3COSgvwXEEblWsFNyySxWTpJUpB g6Wvpb9lkGUwSTNIPsgywjKm4JxlrGUirUmsyoJrtC7tFgfN1QP4pQ0Jv7Ghx29sGMxZ5ixJNj9t zpOM5slmm9QDv7fRyzzXXEjz4DXPkwaaS8whKdW8yPwDKc28zPxDaYi5zlwnpZvfNb8rPW5uNbdK Gf+Pres6vit/m3AWRYeu437wPcGPBD8S/Cg5n3C0MQx5IeQ/B7+SMMv4Fvh88KLtSPBT0fYJwuGQ j5YDsMNts2B/tjyK0fhd/m+fjIuIT5QnMhojhDuh8zq/93Pwn+9FH5ZBPg/8KPCjwI8WvdVwEXA+ dMjm5/9LHkrYrI1oKGq/i15hpPKTGJcXPfcwbzgFPgG1Elq9AYkfbS2QPAB+PNougLUH0JPxQCN0 xkDHRTgC/AjwWXIO5D7wY2ABcuAo1Gah9hvyU4zGeehJDjSZH2W4Ah3hh5WwVgdrPBdPyFWQC8wG ToOOAps1sEne0D/Db9QPMzoIXzLS6tZHwY8HnjKWEJayjk4PfBn66KdeYjS4oPmy0Um4FTYfZInu JPO6q6hdDf2nof8z8ImwdhXYDP0b8r+TXC+/RzhNPs5vYV73KSQu+SThWNaR2hl1BcC/AfcyGgzQ nAw7z7K+7mNYqAL/JmonQf8W9DPAXwDWA9+G/iW5mDStxn8j/jrHrd5kfJf4DpbrCo0NhOdkigR9 MutIl4xLCf+LUXdBkxAasmAnGZiCtipwNbCffAu1zxP/PqP+DPg64BHgy/JsniPTJWANsBpYDmxj 7NGf3jVazCA0XzLxb6gUgh8P7K1hNbAcyG37QfMAandAcgqSUkg2iXlnnrAGWA0sB7YBWX8yNBej lSTQ+ApHBfiX0fOt4GuBWzVJNbAc2AbMpbHsN5YjijyMePtJ4FW0Xa1hDbAaWA5kC6vhjZ+xjmE9 8Gfo81VgM+w0c591l4yNhNeAl4yvAYPAuUBEgrGVLPTDfF2HZjPwooZLEQP1HBuQdMBCByx0wEIH ouIcas9Bck6T1BIaMJZHjAcQM43AIHAu8CgjIqFZxBjzFGls7Sj4S3Sm5z6QRJ+jIY1Ff4ijVJ8C SQokKVjdKWyZ8D1gLSJzG41xkYhPWK4Artba8roIIeb78f+Jm971GjAInAt8D9gKZJtn0PYMvHEE 1o6Afxn86xqy9xrQz2d6sLXeAkWkgd8q0PgOZjaIeeTaq+Avmb7JHhbIvZIgoTstYzLkRzCzRyDZ iTUyBJiKLDQS+e0lUzrhi5B/glx0Dfwa3kF0f0ZO6y3yIWvqehrdhA8hm5UB+8Eb26GTibXwAfhn gFVaDqT9RQf7+h6MpqM8+6afsDeMyKWyg31i2s28KZN5QwtiuwpxkoXobUSr3cad3Fbejl5xrU/k cxNnzqGMtDaPY00dxzri1fEo+NWo/bM2xhD640LbX0H/V/AzMoyxhf3DSLmaUczXMBPtj/oo9HuD PwD9Ui17VCMPlPPugDXogvxl4IPAR/GWk8BbPfJ5Nntsw3u59mmeZVq5zCdqyDa/ruXkSuL7IyaP QpIKPG16mOcX+fZ1xPNzyNu7OIsajyEmj7CmMR2xl8ASmjuO4UTO57pGsYrprkw7AublGHuY8kAt YqwWq1Lge1gvtcD3sINwrk7mtuTPd9FqKVbQUsQhvyXCvTJM5lrDZJFVZDqr6AZijU9Eq92mz5Af WD+be0uRzJILvNIpwj/gnQU9z9Lyz1Jo8lu2AFcD602PMW/6KVbuFN5lsHLPoLZOQ7FCmZ9uGora Vkha0X/28BjTUc516O1rvBvq/oA9MRm9/Rzyt+DzgeBTMZZzfFLST5XZfpNsJmzh06N+ACPN11Jk FZ61DRhjJa81w0jsg48zGlJlkuh/D8uvQvMqLP8H+P8APwn2G9nzhGy5AH0OMEo7wF8EPmfsKfG5 gu0/hZnKgIUmsf/yOYrOCc8j+3GEr8Dp5aLswyg43r6G2g3o+VG8ay+sJfNI5T+yN4zwifwZ5jfK +7shia0ZPmBefgp8HsbbhlF8hlzxGVZiMvqJbK+v4x4aRmPs92m95Z6kgc+U6eyqO4RR/1am06Bu Avp2GG0R7focuYjXOFpN5zOwfrrhr4Rr5afJ8jjM4y5Z4fjUv0r8cVj7REO29jrsfB02s2SZ8GNG irqBEp/KyAOGHvDDL9GqBFiBGGiR2XvbYSEd+HPYsYOPYOyvwc8TMUYfWn0CPAP0ssfolMWjWMan VuLv46jAHuSHtUL0czrsmIzrOANo0cijewf9uWEazGi8CvwAuBfyNGAB5wRx5mRN/QhgjvEk9hHm 88QpFHaOAg/BziHYOQQ7f4K+C/ouluiDkIyFxC5OrcxL7dwTwg+AeyFPA8/6vcXJFm/ZKxDnqMmw M5nb6p8F/6zg2Q7hXsjTgAMhSUH84LwBmx/D2jVgFfBN4DaZd8BJsDkJNifB5iTYnASbk+ClSWzZ kMGahgx4oB4W6sG/Df5tHgV5tRL9Z/yNGC/z1LdK2KlEq6uwwJJs9PMzDRuwsrgP04xPYLXy7CyV +bS5X7sd8Fvek09gzeJ2wJqSOMmfx9l+AG4B+cDfw9oA2G8HngBuQ9uZwDy03Q35J8BGmaLUlMbj MlUzyj7WkZuMe2il412mEiPvU7PhqyA88Dfom9mrpmqs65Ho7VHEycfACu2echKzcxAxeRKzdhKe QXzyKiMPDOGZMvYj3Ig7kR6ag6B5FHwZ3j5WxBvm4g2WGAyYKQPkk6H/MfAzYBXwIE7yVaYLeAtL bvG80Pwyf0FDzDX43SJyWEKRUIAZLMCM0z1aKjP8ke6VduP9jCa6t37+Pq/Ez9830iwbXsVJqYF9 Ij/J+46sMm94C/g/IK/i85j8OrIi9OlszOeir6KtBeeiedD8Hd835UOcpQ24Pxqe5fuy3Ae1v0Gr XzD2eBjyJFi4CdwGfQfipJTnwvA2+9ZwFvwk4ChGOZXnSE5DbJRD/11E1IeMxi3QGYWoSGZNw48x s38F70Pt46jtj2jJhQVxV90GzMe7xuNU8Dp2wDz2mOFj7CDlyI0HsGsc5POJYRNOpKuwB23G+XAx JC/hVNMGO/uAx4EfAD+EnfPAJuAC7E0fYp/dzWj8HfhS4B5k13bsQT/i85s8FKe4DzW+BlgNLAe2 cS3fvIwX4f/J0OwFfNL0L4TiRoYbomGPhtXAciBbeAuaC9HqbZYQsmQqS4xzEBWzcdZdALQAgzgZ luD8mYc7KU6w8hDEzzt4FzQN5ZxLZUgIeRQtsPyohjXAamA5kKwZH+c7qeldxMwhYxK1uh/WNgGd QNxP5USM/QXwNRrWAKuB5ajlcb3AvpL3Mt9joOkV4Ey2j1ayhuwf3BEM29gPhvE49S3W8DVgEDgX iFjik5upJ+b9e9DM49xofNR4iPhPjb8jfAXyExoGgXOB7wGf4HhD7UFIDkLyYz7rGn7NK1T3A5yl BwG/CVyAs2Uq7kFP4uyaiVPxKkTUAkTsKj4H6vNg+TfgX8DtdRf69hHkH7Ed2YL+n2WJ/LCGrwGD wLlAXl+Pca/kr/Id1vRLEfO8IvTnYe1+4CacEJZgHSXi/DAf8b8RtR9q+BowCJwLfA865E/5EX6L 8Xf8XZGQdfag1R7wifBAO7x02liNtTCIawXixnqBb6xyC0uMe7kncg34T8HLiBMZ+ouNlzALAvn2 +j7fXskbHBVN8hL0jSNWAr8HPd+DWpFFxwHvNyYSSjxfxgGmZ4jfzHLjI4jkj4AvaLmUM08dculq 6KyA/htYcX/FOrofGTUbGXgD+Hc4A1NcUSvjfszLQdjE7dWwBpb9sDYUfA3ff+mGy7VBaNYxJuzl CE+QcNv6OSzjm0kPke3/HbebcqzQi1hBb2N1fB2I27HhTVj4JaxJ8kvUqg52fst9k/GdSsaNmOaC 91AVd+EQ82ShDXgc67oNeByrtQ14HL39DfE/xRt3w0s3+QxgeBXZ6RBQRt/e4Tuy/K/AMKMBX04M DablvN9hFa8G/zb0X0fbn2Kll7PE5OFsYJoH+e+g3wx8FrjJ1M7YYxbvdND5BUdOj4fBJwFHwdpN 6K9Fn3vy7iD35e9U8hPGZMQP83rum7GVZ1/ui7WzWNw3EQ/bjIc5Tlguf6zdqfmLZTXuOE9iXU/i PaJHPubuA8zUU8ybehp7U+117Fl7+EZM0cs5IZdre+RjZ9nEq4nyVS3wPeSlWiDvoQX4jjQU8rOQ n4X8U8jPQ/4h5LNh7SO8Rdy8FmNnPA7cw+81NvOITPgea9iJG/dm7HHrWV//b3y/piw3Fx7+DH3m vPQk37VNvbHq27C69zGSJxuRZ55ATxibUHs/zkX388mH8uHnWAuvIWNwbSmwXMse3Ook8sa7fO8m nQ2Qb0D/ka9MLxJfgz4/LT9M+D8Z5VT4fwdG+ifMThQ6z2maLBmEe9DveYzyg3xHNuCrskHc2k7h 1nYYOfn78EMK5n0Y7mWvIFr6GykXmRLQ6jOcEH7N93GjT6abhbwKOTaAtgG0XQm+it+l/wbeWIh5 eR23fgUj+hFuuMexImRIfsq3cnko+vld6F/GG9ErYxn4xXw3NxSDFzp+WBgD/B6fl+jcyKtyj9yP 9wX08BPEubhNfwuRMAljf8JQR+OaxXZMYeAiRnmT/CYyJ6+IbzNvXGhciF6xP6dDR/y9Yy+ymZFr DSHexYw62OkD/+9BD3/B927DafCf8m3dMBL8JL6tG36FsTzAPTFiBcnPyQNIUon+LzF8SviigSJB vsh/5TH9K86Ez/NtnUbH/XmY7+yGFbAZ0pB92Bv4HN/TjXuA/8L3CMP/5rGbkuCBAtzBz6GVg+/p hq+A34faa+jPX9DDnZD/J/6WkcqeMaXj7eOAczHeIuAY7WzJu+oAtGrkm7v+j3xzN/wI/hmA74fN 6OHzwALMzo8xjxaeNYpeQv2bkKSgnxtwi1kNHC943FBWY62txk1nNd+qqJZuIsbHcKLeD80fAt82 voR8yLwZaBEICxZYsMDCJGi24a43lCXyUEhOQrJBphnXoa1+MHA57svfwX35O7iFPYn73St8V6JI IH29B5of4o1JOH8Og7Vh3FbOBb9UICRL2RrhXsjTgAOxs5NnjEcxOp9Mt0LDRth8EvbF6MYBv893 T+o/RgGbQ2FzKEbahpG2sa/k59iyKdd4DPhDjiJY2CEQ/ikEnw8/jDdZ4SvGKbi/n+b7O43Cyt++ 5KN4rxUr6E+wcBXWrLxbca8o8zC+Kj9KOEdeRvKFyKi4L9P9mmt/DEyBZJxcRnxQ5r4NgwT5Vh6I ufgr8D8ZDQ2MxiZGeRhwKbc1DsdbvgKbk4E5wC2wVi58BQufAtPh4ReAfs54PQ6xBxLs8Od13Pvm 4Su9n/keJux6z3Ot8TF4uAGaueBV5nscYmsJdj6ZGDtwH3wS4xKxkY1ZzsW8bASfCAtjofMr/j5g cLD/5WTMwg7ExiO8ixku8OgMb4LvA74UOmeBw9AqDZiI2UzitsbNPOPGLZCPguYvMcs/Zl7/V0ie NI0BruV4g+YAnk2Kk5eQAxmPwOY28I+iz4nw4fdZTprX0dvrWKH4S/2tNySdZLj1e/Bv8t+ygVm3 fgn+cWA5/5Vcq30DuBn6i8AL7A9cDbloux38dljbBvwIko/An4IOyfXP3OIvosOALwGjwPHAU8BS Rp2eUboGSRZQYjS4wL8M3Ap8UOP5rwYn0fYqJKuBT6PVz8AnorYZeAMSvEU/DZJPwQv7Y/H2duCH qP0bcC+sGaAzGfgs5B9rPPehCpI3IZkE/hZaZYC/AKwHvg28BE0r+OvgTeA7gP2B5zoy+GSI/kBf +i+WGIRnUoDJLNFh1LrngO9DfgZ8HfAIdIT3nun4FlkYLeaCef14YCVwk5gF8FlACfgycGsHn073 C/+zRPdr4FXU/gGW14vRge8nPA+dDug8IsYCSTN6dQH8UW0s38K4EqjtIrRdzBIJ/tG9CM2sDjtG sQE934DebkDfGFdDchV4CZJHGCXBpwCTgefxxiHAVOBI4Cd4l4jANeD/DEzumEg4HfxDmNkyEZMs 128Hn9nBt+8PwOdAjqjQ92A0IdJMCxjlPbDwOXvA5Gfe2IC53io8c+tV/msj9H8iYgPW1qAPn0Hn b/DVM7wqaU31R/wzVohZ/vwKrziMNKqhHphK2A84HliK2lJYK2UJ+ZPleZBnASUNU3lfAP+yhqxp h7dPap5PxSxUApl/muWGn6H2Glp9HT0UEX4NI4L/dafFjGCkr4t4Bq9AZxe8dExkD/aVfBweE+s3 EXwKPFMP/fqOCfxVCnwUdiLgX2M0YBUbJiMCr8Nvq1GL2dQNhPwS+1B3E302wXvJGFECvNTBSHEl eB4jfKX7CVDE4fMapqJtJeyw/vuweQy1bwDhT+kyRn0R+BrwD7ceIvwcY+wJyVvgB4JPxaxNBd+E nregdgDzlDGqSDIBtSHgBtRWwgOIdsNI8GKlJ7PH9I9DLlbE74GvwrIKCyosn9C8xLzIbI1Y1wew Wj/BLCCr6GR4/inYEZmwCfiXW6PYk+AbRA6E5v9h78vDoyi2vk/X6Z5KpmeKiAEBESObgIoBAiIi CiKbyBJBkU3ZFyMihEVEQHYisggqsgnIJpuiKMomIoR9EdlB9n0nBMSQTN6qX/e9n+Tz+a73u/d9 /3if+/Dw69OnTp2q+tWpUzM1PZMUWBbxciBa+Rl6rD57ANbOesi/ZdfU/fT2kRnINrsNV/YTkGtA fxl+foOMTCiigQ8BC3trFjbrgUv97FReI3YKawNslngrGogMIMaDpSqw2QX08gbiVmBf0Kzq9xSM tW/NAXYDermiBPBjYA/okyFXA3ZGBL4F/ef+XmDieaAvGwa8vaM57JFDRGtvT8FsBsB/PuBY4Hbg CiDyubUY85UNeTkwA3V3ePMFGUxaVyC3B9YDSzchh1G6EnJtYOPITdND6E/A5xjgQuACf/16bZnI X4/Iv4kV0RhYE/o1kCvC/l14w75jrUPrEcQGdkYLmZzzw3IlogWydRPZeA/kBdA3gezlVcx+YB4i KgY4CBkGr08CheDNy0iN0dtvsiebz5jgITvyHsar0UoFZiAPJyKTLAS2hGUG8nAIY/H2qVg/r8Yh tk1mqAxNZbBXGVnlJvRh8LDSR5N7GZa1fTQe5qJ0oY9x2HeSwGEc+mnyUhxKtwC/Qd0GOGNMxxl+ QZw0Fgx8rS1D/tM15umUingmJwtnyyXNU47WdoNiHj7/XYf3njihsk7Z5smc1XhHhk9bRPWAa1Y6 PsHZZmTxI+Q0ex/eq+IzL/P6nJqK4mZezIkEl7I7mdbtz8xrDCOLy/Y1E40GOc2eTeZ8SVvSIYNW R9SqZdCZhzONALC03desTXiYa+vXvdwcHjJNaaARaiUCE/B8wi1glF3AzDi/bRjjtcbGyGKA+YaL SDLIXfkwvGlL2mDQKuzVgmanQfuiQT0KgzP4fTMK+KluThVEqucHpU0MOgPh4RbwMDAF+BWb85xS BsUKNu/u48z7enELmtxOU/TTPEUWMhraaWQ6ZFDbG3mDsXcqw08casWzeX6vOE8ws88z0LcF5kwb tb4CVoKmhLF3VqHWSb8nprQJNFO5j8k20Ffx0TxHZPveZhiW0LdvjWwdRX9YWAaddPOrN5CFEEZj rUKpeQK5nHUcT8yap9oaiBSNj5hTF7FCjDZZVwwzPRezzLo2shgqhmrsJ8yn28LYW2OBiQb5Ndh8 KPCsoxij8VEeoXEx5Id5Dvxo2boOS9QVz6LuaMh3w9t1E6XWEbSeIe42a1mYqGgi8qGfMSb+BT7l FwGtqSpymbUsHjRr2dhb9YANDdINg8zwUAveGov8JmeK7fBp5JvihNk1IC+AZV14iKDu/ZBPA3+0 DMNL0IfzVhFtWdoyJ5w6L2pNpmU+Zc6y0s1eIOJNXhUD8Km9+WXZC9ZR0x+DVlWR12jEd2bnsk6Z PRdYEFjaoPamkU5AHgPMbR2G5WGz0iEfsvqY3QQ+t1szNY63Dpr9yPSEzsDDDdMTkUlknkK3rxoM xEI+BjmMp9NdyI9B/wU02o89PaB92k2B1YEXDfJZ4EKDTgj6TIPCBr4PTQnYtDAY2AvLUsC6KC0M uTXkJrA8DQ30dopBWQjygyj9AZgODVrhzZDbQR4AbADNQGBvgxZ6K6qgdCPko+hPADZjgfNQug7y YsiXgPWBL0OPEXEW6nretgAHATsBd8MyATLGxbfR4puQ16I/e4DnofkM3tqiVkVYboL+AciLIE8B J99B7gX8FFgStaZLvfsE7vVmx8j2RWC2N0dGdkLQZEJ+2psjaD7wZsrI3ALYGtgV3lp684Va0ps1 yOAkcMWbNdgvBJ5GaWGDshA0P6Bvj8JyJLCzxw9afwY9XO1xYjR6TzSyxxh4tmcAK6NFsG1dQymY FCvgAVHnjAemwn4acCfweSBGbXuRNgX97Af7YvAAzh2FPiB+RHHEXjTsT8JmPuSnYOnFWDWgMhg1 39SNyoN+MmxqwsNSYCz092LUJcDMJth/iFKsEXsXahVFW+CWx3vrDhzuRV1wa6cAH4Sfr2ETD//g U1RF3SXQY5U5Xqx2RFveSizkxR78bIUMSzECtS7AZhzQixCwx928SEa7D4CrRQata9BMQlteHJYH PgFsiLo7IJeDh7LAM8DfoR+KttpAfgF+MC4HrTsVYDkKfiZABvMC+cGeCewJbAwbr8VfgF6ELEfp a0DMC+dHi28AwbyExr6OFvtA7+U0rEHbW91YuU4uaHIDkRkYUcHwJrxMhawirsIede1k4OfAudB7 uREyb4dmPeTDaB1xxVg7Ig21EHWOt5q8Ea2ETRD2k6Hx5n0V9InAAkD0mZEzA8Ph0+sVosI+CMSa shEbFnoe6I9ab8M+AzJWot0XuA96zCmDf6c59MhRNrKWjXgQyOp2e+Ay2KcjZgYgfrx8NQ+IXORg HfEgaLzMeRl1vTnFvDNmKoBY4mZArDUeA0T0ym0GoxAVDvYvB9EeANsSYw+g1IY9I0fx48D6pnUi 8x7Enh4xnxY1BVYHXjTIZ4ELDToh6DMNChv4PjQlYNPCYGAvLEsB66K0MOTWkJvA8jQ00NspBmUh yA+i9AdgOjRohTdDbgd5ALABNAOBvQ1a6K2ogtKNkI+iPwHYjAXOQ+k6yIshXwLWB74MPUbEWajr edsCHATsBNwNywTIGBffRotvQl6L/uwBnofmM3hri1oVYbkJ+gcgL4I8BZx8B7kX8FNgSdS9F3Wz YfM05A9Q2hVyS+glEGMJXAE+itKRwM7AZ1BrNdotiB56Pcd47RnAyqiLUVvXUIoRiRWoi9l3xgNT YT8NuBP4PNDroTfj3rj6AYvBA8buKPjEPIriiIFo2J+EzXzIT8HSm+tqQNSKQmlUHvSTYVMTHpYC Y1H6IWREpr0LNkXhGcww+s9fozQefsCMqAr9EugRvY4XAx3hzYtwL1a3Qg8bMQKaCygdB8TsCPDA 3YCT4M2bx/LAJ4ANUboDcjnUKgs8A/wd+qHw2QbyC/CDnjtoxakAy1HwMwEyuBJYWfZMYE9gY9h4 Lf4C9OZ0OUpfA4JJzo8W3wCCPQmNfR0t9oHeywaIXttbF4h5Jxc0uYFYU4x5ZHgT3hrHehRXYY+6 djLwc+Bc6L2sApm3Q7Me8mG0jkhgRLhIQy3EiePFvDeilbAJwn4yNN7MroI+EVgAiD4zsk1gOHx6 vcK82weBWAU2Zt9CzwP9Uett2GdAxtqx+wL3QY85ZfDvNIceq9tGJAhkQrs9cBlsENW2l0kuQ/Zm CrPJ4D+ACOFmQMQ8jwEi9uQ2xD/m2kE+dxCrAXAoMaIASm3YM/IDP26QDor9ZE5FtunSot45Bo/S mlp4393enDbwDJwk1EbpVPPdWI4zz6fxBJylCKMR56AfZfTmAQsy37YwmuYGnZ0G7dLQp6NuV5Se NRjoBrk9sBa8XfYs0W4T/zSjKJkzCvPecCo0Q/wTj9L4bp05RamD85MMnIfE4mxkAfQzTV2xA5r2 KP0IsoCHy8CewLkYe8igGAAGGpkTEpGKU4sEyAm81NQ1NpSN84q7/fMTjXTM2Dhl4ScRtarjhKSS 0Vh325O1Pq9/NrIAZyALcB6iMfJBtjmnapC9zeReyE3Me1uxw8jWs5CborQ65JWQ98GyL+QoyJVQ +hNqnYcmt+cNmuMR807/YdjkRq14YGuU7vEQpQUgZ6D0E3goCv0s6CtALoXSAOQOkId5fTCytd/r A0p7GzmSmH1TR0JxaL6i/BoPQJ5qZM6F9/LZBrkKMA2aDMgTYHnEoLPToG1BL4ALUBpl0EqHfBkY D3uCzShgKeBglPZEH8ZDbg15Llq8AJs+kDegNAl+gvC/BjjT77npSWdovoNmBTAFiJFyLZQqaAZE luOvsBvPqyLmJDAOnrv4fTD6Q2aOuIpBOoS6i4Bj4A0nHuIkNI2MjV08Yp5VewqlVSNzNEaortbH wKaM0YirXp/heYbpQ+A+aFYa2RoDfWJksYlPY2+vRekeU6rHbmYnBM+J0OeDz9Ho/73ZGbqfA9Hb G+jbAVPL6YqxnIZ+GqKun6llVUBbfSAXhp/4SCY+Qcg0fAJTDOpXUwaPQlMQNqch5zbIz6BXCZi1 VLTVG57bo4dHDQZscFvCi5DsxibqjI3IbTTm93d0hsQqs2PMWAL5YH/ayE4N2ISgaerFIdguiFZC YCa3YcwailE3iZiz2ST0cC7kYOQlE2MRc9p5N7AeWk8FG89Cbm0srXTUiod8E5ap8DAG8kjo94CN LdAXh+Y6SsdCcwDexkLzFCyvGNQZB/PlxSH6XxdjOYY+HEUkeJE83oxavws4DJYw78ABmKl02Efg oTTaqoTSeMTPUegrGtT53cxLbd/G4EnEwE543uHx77Nhel4dYzkKrvJCHwY2gWWS324m1kUmYi8N keBZGt4KGVnHdhoi2di0BI6B5iVYFkBbBWC5DbVSYTMR+B1K6/nrt6weSwB9XoIxboW+IPAH9Kej Z4nxdvFGbSx1FOHUGhEV8FmdgagGG4YZqyM8f4Q8sArsrfHbMn7KYqbyepkKtS6j1hpYRhDt8bBc gsiMNXKgMOVCpC3HjJv+T/ZWtL9GjLfmmKOiwFfRw4t+xsuPvca0ssVfsxN06ZfeWjbedLb8CL0q i1peXjWeB+OU+DK1RVy1NXt6dkMtv4ioOw8b5AH21tFI1K0nNiPyl2M2zRhXe7kRlv2hbwTmxxvU eWk5coXJKt6MzAVGoTQOo66G8R4GjgJmwnN1zNfTwMLAOr6NyXL9/Hk0mW2cyZk6HpZjNc1BVGTi k9xMxGom4jkTc2HkW+BtgL+L5YfGjHoiRlrZ28WQcy5jdlYYlIgiiV2Gz8KyLRB7HF01cahfA/+K HJiGHGgyTCP0sxKiNB4xvANRjVykLWfA0th/AX0SLGtBfg76mej5HsgLoK8R2QXsitWXZl6Tm1Yi E7KPY74SzWrFnD6PcRX29rXIT/i8Po/pLXo+EGOJg2ViBK95ULcgFdI+C/gzq+WshcYzEX7njWzz PR3/pNEgBaEPGj2R0USamaesI03Nk/ARfB8kEoRcBnIZyOXMc9qRBPMsvdZ3hX4e5FfM82PmyXwt r4N8GfJFI5tv8ei6y8yv3ECfYJ4G1H7m47dZbuD3bVYYNN8jIDLfc4/Emm9zRGLN90EiXwWSzK/c yHfNr9wYOWulkSMDA6PNr9zIq8Z/4KRBeQXyQeNfnoV8G7Jn0xBYDpatgG3N796YvmUd9foc+Bj2 MyB7tc6jz+nQF4U+xqB8GqMrDbyC8Q5G6RKghP4xWFZDWxeh3wSfZaGpBGY8TQZKm8E+BS1uAksZ wP5ovSosH0JdYxkPOR5y2cAG6G9Bfgh+PH1x9ORFyCUhvww/ew1GScj4JZ+oKJQ2g2YEvH1vfgMH Hh6DhzKQy0AuZ74vr+1/hpwXmAe1nkWfy6LPrTHLUzDSGyhF3wKzoXkFuA6YjtJ7ND4qv4D8JXyu gjwSNl8Dx0G/BPJOyNdND82vcOjemjgsh8/lOSsbMngzn6RHymSdM/3JwlyYT961Js2UZq00THqa SH9gHBC14KFM1lpYom4WRp01BfJJ+PwJ8h7Il1GKiMraD80Z+DFP4BAFreFR54nbvNUtiWI7dGv3 GvVLapXchb4i/c7vhcRqcaTfWWRnUx4KUYAKUhHKTaWpPD1OT1MdeolaaB8N6W16l9pQJ3qDetAw 3z5Mku6jonQ3PUoVtJeq9Bw1oZa61UTqSwN15uhMXaknDcffGPTqKIrSOaMYxVI8PUZPUDWdnV+m V0jQC/QODaJ29Bq9Sb1oBOUlrt2gQS2qk1j/+Thq3SjxuTiaAC/34DdD79e5ubj2WIYq0zNUk56n pvQqMZWiRtSPBlN7SqJu1JtSUCea4uhBMjvdk1Sd6tFD9B70+ShG8/AAFaAS2m85qkhV6FmqRfWp GbXS/X6YGlN/GkId6HXqTm/RSL8Hd5FLheleKqk9JNBTVINqUwNqTq3JoUfoRRpAQ6kjdaFk6mN+ y7RN2e5t+EVgS2B7YBdgT2C/Nq2SknkocAxwInAmcBHwuzaturfjNcANwG3AXcADwKNt2rzelU8D 0w3aAhgDLAR8GFipbVKnDnYNYF1gYtsub7xuNwG2BLYFdgZ2BfYE9m3frVUbeyBwJPAj4DTgPOAS 4CrtuJW9AbgNuAt4IKlLj9fto8DTwIvANOAtYMSgYye90SbJCQJjgPmAhXRhN6cosBQwHlgBWBlY DVjrDeOnHrARsCnwVWB7YBKw2xvd2nZxegP7AQd3NfoU4BjgR8DJwBnAucBF3fUcOUuAy4BrgBuA 24B7unfq0t45BDwOPAu8DEwHZnR/vU3XAAGDwFhgIWAJYNnu3ePLBCoDqwPrAhsBmwPbaiwbSAIm A/sCBwNHAsdrLBeYDJwJXABcAlwBXKsxIbAFuBO4D3gYeBJ4vnuP1t0DV4E3gZkGpQBGAVX3Hl27 y1hgAWAcsDjwYWDZZM2krAisAqwOrANsAHwRaF6NC517Yv+JK+t1fi8V/P+SLPxw6P8bHZ0xHJ1F JUX92+5s3HmypbNeTgz/RWSd51z85vK/Ilk6e/855v7LKDAjQns1dzjtMfuDeZX4l/Guv4z3/V8Y 85cxDj1lXK0/oBnBH3XqHyLrnSov5fsnpXsgCb0/Ff6nrkWo6D91LUbF/4mrpXfSf4z/mBNL7+D/ GHP9JSyjX20k611/PM2kJbSWdtFJSrdsK9YqaiVY1a1GVlsr2RpsjbdmWkustdYu66SVLmxRSNQV fUSKmCjmiWVikzggzosMDnIBLsWVuA435c7ch1N4Is/Ta9C0FeXFLNfLcd86x/3IHPej/nBv5ygP 6GW+j6T1h/tgwp33oRl31lc37/Qf2/TO+zx0p/88sTnui+ewr5XjvnmO+xzjyXPgzvu8JXLcN8hx 3/vO/hecdmf5fSvuvC/2cI770n+41+uvWHyO8oG4Fzo/5PZG+GAD71rCG7mtYy6vzlXFfe0O/3rA v570r1f/zLpUgn+t4l9r+ddGd/aiVMqdo3yowp33pSN32j/a5M77MjlmoWzZHPcJOe535LjfmeP+ Yo77y3fel8v9hyjTQoXYHPcV7rSvUDHHfc7yOjnu6+a4r3fnLD5eR6PSzLSxPqT21mRk29b6H+mV Op4sJ8a5C3tFbgqEaqvUUC21Vq1Wa7QmYF2yLmm7q9ZVsqw0K42EdcO6Qayqqqpkq2fUM3rfNPEg +Fk28yVEbpFHa8w3iJTpD4d1zdL6Pq9+N9KNJlMqHaUMK1b3IUr3KjbUkESoVihRY+3QCxrN6GJ0 To7T7xbi9XueyuossYjRfTqHa6rS77REHn1/AddUtYeEvtunMVUd0LhBj9VEaAEqrI7qvq7Wpcdw TVXH9XWNvj+Ba+ofLE/6lqd8y9O+5Rnf8m/9fQ79rYv+Po/+/q2kHkrqo6TBH0vUJvRwC3q4DT38 W8kOlOxEyS6UCJJC/9PLzBXmye0YEaNZzaNZ5VCNUE3N+mq1mgK6T2s0U0xmx7cYJ0z6fwldf6Ae 1UB9m8vKRf2tAtZ9NAB/z3Kw1dRqTkOsJOt1Go6/YZlivWkl03tWipVCo60J1ic0xrpmXaMPrJvW TRpn3bZu03gTGvShCIgAfSRCIkQfi7vEXTRB5BV56RNxr7iXJooioghNEiVFSZos4kUDmiKSRQ9a JXqJXrRaZ/8+9KN4R/SjNWKwGExrxTAxjNaJ8WI8pYqPxce0XswUe2kDh3XUZHICJ1CEq3F1yuba XNsSPIWnWGwn29Mt22njtLHKOu2cdlY5p4PTwUpwOjmdrPJOd6e7VcHp4fSwHnN6Ob2sis4vgeHW 48EXgq2sK8FhrmVFQjGhZ8VboWahqeKLcNtwZ3E93D88UmQooaI4Sj2gHuBcqogqwjGqmCrGd6kH 1YOcW5VUJflu9ZB6iGPVI+oRzqMeVY9yXlVGleF7VIJK4HyqgqrA+VVFVZELqEqqEt+rKqvKXFBV UVX4PvW0epoLqWqqGt+vqqvqHKdqqVr8gGqpWnJh8yeFuYhqr9pzUdVRdeRi6nX1OhdXb6g3+EH1 pnqTS6geqgeXVL1ULy6l3lJv8UOqv+rPD6t31bv8iBqihnBpNVwN50dVikrhePW+ep/LqNFqNJdV H6gPuJwar8ZzgvpIfcTl1QQ1gSuoiWoiP6Ymq8lcUU1VU/lxNU1N40pqhprBT6iZaiZXVrPVbH5S zVVzuYqap+bxU2qBWsBPq0VqEVdVi9Virqa+Vl/zM+ob9Q1XV0vVUn5Wfa++5xpquVrONdUqtYpr qR/Vj1xb/aR+4jpqnVrHz6n1aj3XVRvVRn5ebVabuZ7aqrZyfbVdbecG6mf1MzdUv6hfOFHtVrv5 BbVX7eVGar/az43VQXWQX1RH1BF+SV1Sl7iJuqqu8ssqTaVxU5Wu0rmZuql+4+Y6eFshfxEyl2Vl WBk6i2Vb2Tp7OEK/D8A6c7DOAlhnUhQQBShKFBaFKVqUECUoyLV0dnOd1k5rCjltnbYUdto77Uk5 HZ2OlMvp5nSjGCfZSaa7nJ5OT8qt4lQc3a0Kq8J6jRdVRSmPKq6KU15VQpWge1QpVYryqYfVw5Rf lValqYCKV/H4nfpyVFCVV+XpPvWYeowKqcfV43S/ekI9QXHqSfUkPaCeUk/pbGXybxHk36KqpqpJ xVQL1YKKqzaqDT2o2ql2VEJ1UB2opEpSSVRKdVFd6CHVVXWlh1WySqZHVE/Vk0qr3qo3Par6qX4U rwaoAVRGDVaDqawapoZROTVCjaAENVKNpPJqlBpFFdRYNZYeU+PUOKqoPlQf0uPqY/UxVVKfqE/o CTVJTdL5eoqaQk+qT9WnVEVNV9PpKfWZ+oyeVrPULKqq5qg5VE19rj6nZ9R8NZ+qq4VqIT2rvlRf Ug31lfqKaqolagnVUt+qb6m2+k59R3XUMrWMnlMr1Uqqi/z3PPJfPZ0711J9nTtTqYHaoLNnQ7VJ Z9tEtUVn2xfUNp1tG6kdOss2Vjt1ln1R7dJZ9iW1R+8ZTdQ+vWe8rA7oPaOpOqwOUzP8RnxzdUVd oRbqmrpGLdV1dZ1eUTfUDZx7ee+vLEpAri2pY8uxWlgttLqd1Y4se6m9lEQgK5BFHFUlqorOw/+e 6NM58D/R95/o86OvAKKvlHm1ZXUKHPxPjP0nxv5NMWY5nfXr+RirsEjgGnYTKkiVqBrVoURqqt8v dNav3/voV5Yp9AFNpBk0j76iZbSGNtFOOkDH6Tyl6Vf2ZAWsUHRv4uju0cnRb+HaI7oPrj2j38a1 V/Q7+pqspX64Jkf3x7VH9ABce0a/i2uv6EH62kPbDcY1OXoIrj2ih+LaM3oYrr2iR+hrT22Xgmty 9Hu49ogeiWvP6Pdx7RU9Wl97absxuCZHj8W1R/QHuPaMHodrr+i+JHTpQI09oodr7Bk9SmOvf4GR DzHy7tEf+cx87DMzwWfmE5+ZiT4zk3xGJvuMTPEZ+dRnZJrPyHSfkRk+I5/5jMzyGZntMzLHZ2Su z8jnPiPzfUYW+Iws9BlZ5DPyhc/IeD3+7tFTwchMMDLvX2Rksc/IVz4jX/uMLPEZ+cZnZKnPyHd+ rHzvM7PMZ2a5z8wKn5mVPjOrfEZ+8Bn50Wdkjc/ITz4ja31G1vmMrPcZ2eAzstFnZJPPyGafkS/B yLeIlNVgJPVfZGSrz8g2n5HtPiM7fEZ+9hn5xWdkl8/Ibp+RPT4je31G9vuMHPAZOejHyiGfmV99 Zg77zBzxmTnqM3PMZ+SEz8hJn5FTPiOnfUbO+IxsASM7wcg+RMrxf5GRcz4j531GLviMXPQZueQz csVn5KrPyDWfkTSfkes+Izd8Rm76jPzmM3LLZ+R3n5HbPiOZPiNZPiMRP1ayPWaC5DETtDxmgsJj Jsg+M2fByGUwkg5GMkykmL/TaPqN07QmVNLaKT7lulyf23MH7syvcXfuwb34LX6Hh/MITuH3eCS/ r98FH+cTfJJP8Wk+w2f5HJ/nC3yRL/FlvsJX+Rqn8XVO5xvhCubvKFk7rB26ganm27n8HD9Hgutx PWJuy+3I5o7ciQLcjbtRFCdzMkVzT+6pXwn05t7kcl/uSyHux4MozJN4Et3Ny3grxYbLh8vjlKEA Be1C9v12nP2AXdguYhe1i9nF7QfNyHSPbuB03Xu9UtA/m3jIlOk63tm1xUl/tyjhWzxszqY4SZeQ HWubXwArYZcg9w/1vHZj7Tx2XvseO5+d3y5gfvtO2/6fdgUVpVx2bvtu27EDtrSj7Gg7aLt2yA7b ys5lx9jmvMvWY+uvO2nqCPtJuwqF7Kp2VVK6rALl49k8lxfwF7yW13Eqr+cNvJE38Wbewlv/jHFz WsazeJb2OMd8r5nn83zN9yLWeVQz95Nu7zhf+Lv3Wdpqvi5dxst5Ba/kVfwDr+YfeQ3/9GdzDO+z ebb2PpfnmicyeYH2/gXr7Kx7uFV7N+Mw3ktT7J96/ZNxgLPjPmem3l+MLtQz0aDrOV3EEhpEg2kI DaVhNJxG6HX9Ho3EXxcdTWNorF7l42g8fUgf0cc0gT7Ra34STaYpNJU+pWk0XWeAz2gmzaLZNIfm 0uc6H8ynBbSQFtEX9CUt1tnha1pC39C3tJS+o+91rlhOK2glraIfaDX9qDPHT7SW1lEqracNtFHn kc20hbbSNtpOO+hnnVV+oV20m/bQXtpH+3WOOUiH6Fc6TEfoKB3TGecEnaRTdJrO0Fk6p/PPBbpI l+gyXaGrdE1no+uUTjfoJv1Gt+h3yqDblElZFKFsHcaWaCgSxQuikWgsXhQviSbiZdFUNBPNRQvR UrwiXhWtRGvRRrQV7UR70UF0FJ1EZ/GaSBKviy7iDdFVvCmmiX1ivzggDopD4ldxWBwRR8UxcVyc ECfFKXFanBFnxTlxXlwQFzkoLonL7Ior4qq4JtLEdZEuboib4jdxS/wuMsRtkSmyRERk6xRknrZn ttnhAEuO4mhuyIn8Ajfi5tyCX+VW/Dq/yYN5CA/lYTyOP+HJ/CUv5q95CX/H3/M23s47+Gfeyb/w Lt7Ne3gv7+P9fIAP8iH+lQ/zET7Kx+wn7Mrm77bau+zd9h57r73P3m8fsA/ah+xf7cP2Efuofcw+ bp+wT9qn7NP2Gfusfc4+b1+wL9qX7Mv2Ffuqfc1Os6/b6fYN+6b9m33L/t3OsG/bmXaWHbGznbCT W1aV1eQzsrp8VtaQNWUtWVvWkc/JuvJ5WU/Wlw1kQ5koX5CNZGP5onxJNpEvy6aymWwuW8iW8hX5 qmwlW8s2+l87/a+D/tdJdpavyST5uuwi35Bd5Zuym+wuk2UP2VP2kr3lW7KP/tdXviP7yf5ygHxX DpSD5GA5RA6Vw+RwOUKmyPfkSPm+HCVHyzFyrPxAjpPj5YfyI/mxnCA/kRPlJDlZTpFT5adympwu Z8jP5Ew5Xy6QC+Ui+YX8Ui6WX8mv5RL5jfzW/O1X+b1cJpfLFXKlXCV/kKvlj3KN/Emuletkqlwv N8iNcpPcLLfIrXKb3C53yJ/lTvmL3CV3yz1yr9wn98sD8qA8JH+Vh+UReVQek8flCXlSnpKn5Rl5 Vp6T5+UFeVFekpflFXlVXpNp8pb8XWbI2zJTZsmIzI6iKEvOkrPlHDlXfi7nyesyXd6QN+Vvwd7B t4J9gm8H+wbfCfYL9g8OCL4bHBgcFBwcHBIc6r7t9nXfcfu5/d0B7rvuQHeQO9gd6g5zh7sj3BT3 PXek+747yh3tjnEnupPcye4Ud6r7qTvNne7OcD9zZ7qz3NnuHHeu+7k7z53vLnQXuV+4X7qL3a/c r90l7jfuD+5q90d3jfuTu9Zd56a6m9zN7lZ3m7vd3eH+7O50f3F3ubvdPe4+95h7wj3lnnHPuRfc K+4197qb7t5wb7q/ubfc390M97ab6Ubc7BCFrJAIccgOOaFA6EToZOhU6HToTOhs6FzofOhC6GLo Uuhy6EroauhaKC10PZQeuhG6GfotdCv0eygjdDuUGcoKRULZYQpbYRHmsB12woGwDEeFo8PBsBsO hcNhFc4VjgnfFc4dvjscG84Tzhu+J5wvnD9cIHxvuGD4vnCh8P3huPAD4cLhIuGi4WLh4uFJ4cnh KeGp4U/D08LTwzPCn4VnhmeFZ4fnhOfi02ec7eOMvb/4VOgMipPz6VxH7++7+Xm9v+/lptyM9nNL foUOYjf9lbtyVzqsd7x36Qh/wB/QCZ7AE+gkdvZT2LdOY986g33rLPatc/wtL6Xz2CEu2o/blSzC Cbxwgk7QindinBirDM7YywaOBU5bZ2W8TLAu47z9enBYcJIQwVnBH8Q9wY3BW6IsTt1b47x9tt7t 0yia8lFhvefX06+AJuodYJXOzroJdwgJtRHSAkjmM5oYyksF3fX6fq+7QeN+d6PGg+6Wv9vu1dKP FKVfT+SjQvoVQCnv0yN3v9G7BzVudn/VuNU9onG7e8nUVHmMR5XXeFT3GI/wlQWvf/uMJlrfrVNB jeuVe0dJLpTEoOSuO0ryoSQ/SgqgRFC0nrV4PXcVhflrSU+IJ0iIGqIGsagtapMt6ov65ATHBcdR ILg0uJRk8GrwqvYnnLni5/+mPfbOHfZ/9/76P7PDmj30r+6b/517Zm7ZVrb/L/a+AyqKZV23qmd6 GHqaJgw5KEkkCPSQBAVBkCRKliSKJAEFQUQUsxi2mANBURBQTBtzwISKEXMWFBOYxZxQELjVBbpx 6z5n3/Peuee9te6qRf3VPUNP//VXfd/3d/X0SMVLTUQMxDGnK+LMAZjN/BAzLcQ8GYI4kmPHdm6M /ZusOOmf8OHPbLgC8eAfDNiZXf5fY8PvbId4cTni786s2BepD057tCsPTnf4IuXxpUN3NCPVEYoU RyHWHKuR4mhCozYIjdQIblx+404i6UfepOVoeVqBFtOKtBKtTKvQqrQarU5r0Jq0Ft2F7kpr0zq0 Lq1H69PdaAO6O21IG9HGv2TbWb/mW0aaoRjR32Ldsp95l5Fl5Bj5n9j3lKhKdBpz8LlfsnA14uGb olrRHdG9b3zMKDMqmJNf/iUrt/zMy4wqo8ao/0vs/AM30y3/A+zsDQmohFJZdWgIFKEvDAR6eM3d EA6FscAExsE4YAkTYAKwgiNhErCGyXACsIWTYA7oB/NhARgKd8OLIIpIJdLAZCKdmAymEVOJ6WAO MYP4DcwjsogFYDGxiFgKcvDq+Qoil0Boj3P8Qh7NUwCreYo8RbCOp8wzBut5PXjm4CBPwusHjmDG v4YZ/zrO3m7wS/gXwXNSnpSHquQn8hNUIz+Tn6E62UQ2QQ0B6i6oKcgSLIBagkWCZVBXkCNYDrsL 8gUF0ESwWrAJmgvKBLtgb8EewUnYT1AluAQHCW4IbsChgpuCWhghuCO4B6OQNmiBsYI2pA0ypWyk esO9Ug5SjvCQ0EhoDCuFPYTm8JhQIpTAU0IboQ2sEtoJ7eBpbv0MnhE6CZ3gWaGz0BmeE7oJ3eB5 oafQE14QDhAOgBeFgcJAeEkYLAyGl4VhwjB4RRghjIZXhQnCBFgjjdJ+eJOKoqLhLSqWioe3qRFU GrxPpVPpsAHx7Er4AvHsYfgR8exn2CoiRIMJKdEQ0QQikl5N1xNTZRbI5BPH2u9vQdnoFrziMgQO 79izp9MeCHoBQYf2MECaxgq9XooKV29BqqAUW26romOrAm3dQYW7y8YEmqBRYwbNEN3ZQlt0THfo jsjFC3oBPlwOl+O7bKpAJKlOapCapBbZhexKapM6pC6pR+qT3UgDsjtpSBqRxqQJ2YM0Jc1Ic5Il JaQFaQmvwmvwOrwBq2ENvAlvwVp4G96Bd+E9eB/WwXr4AD6Ej+Bj+AQ+hc/gc9gAX/B5fD7vE6+R 95n3hdfEa+Z95bXwWnlt/yf7+MgVPoGvNPDxtxXk8bUfVVR4QBMVPuq57sjTHoC7L80cFSHq1V5I J9qjQoE+qIhAP+AKaOCFCgOCUZEFoSAM6cOhqCiAGFTEIB4VRTAGpAElkAEmABUwFRU1NDsJoA5l oRzQQHNUHWjBLrAL6ILvjumK5qsv0EbzNQzo4FVdXTxT9WAiTAT6+H6ZbnAsTAcGcDKcjOZ0FswC RnAenA+M4WK4GPRAMzgfmKIZvBuYwSOwEpjDk/AUkMBz8BywxNebrPDMs8Gauj++6jQUX3Ua9v1a 2PGOa2GmqKe0CAkhQYrRhrDhvhtG9EOKsT/RHylGf8IfKcZgIhiQSPfEAgFSPCORYpxDzQVCaj61 GIioddR6IEdtpMqAAnWDqgbK1E3qNlCl7lEPkJaeJJoCdBB7zAT6HDMAI8QMxcCEw3FgjnD8BpAg 9L4DrBGC3wM2CMMfgJ4Ixx8BW5RbPQF2CMufgV4IzxtAb4TpL1GMuPu/ehPh33050+GLGfKlyw++ 2BF26L2cRzzCF+UyfOwRiT0SIH0XBqSwX0Kk3kYDaewXhf2SwX4pYL8UqS3UNuTRDmoP0MA+amMf dakn1DNgQDVQr5FfnKdm2FMJ9tQGe2qL+K8U5QfrUZbhiL12xV67I176BLwQK7WgzITzyJMY0bH6 yn3LMQZ7ZM75CP3xvAff9wB8LZOA8dDp+z4CBsIeaEvx+/vQDPhFX9gT9qgvuB7h4xiTuF8EuF+k cL8Icb9II907BFC4d0Q46jTuIxkqlAoFDMrMpwBZlH0tRbHPplYCTZSD7QH61F7qMLBBmdhr0Id6 S30GsUhD/AaSkFpYDCYgdVAGMhH37wY5iOtvggIc+7049vsQg9eB/XgEHMAj4CAeARV4BBzCI+Aw HgFHELO/BpWI3d+Co4jhW8AxxOcCcAFpHFVwA+kaHXAXaRlj8BipEhF4hdSFPHiLOF4dZQAICVGG NBoALoMEztxVBuDH3bcFAkQTaVdwAf2PFlyB73Lk/REREIX7lcWjzrdTRNg/IgICQZ/v+wjghFfP Fb+/jwA8ahW1Fn3yEaoKjbYvIm78or04z24/Hx18JmzHpxPoU9T/FWRF/6mEcQhgHIIYh3gYh/gY h0iMQwKMQ1IYh4QYh6QxDlEYh0QYh2iMQwzGIVmMQ3IYhxQwDokxDiliHFLCOKSCcYj7XvFR5AFN ePD2o574Z+swBKSgAjpLXWgMLWAv6Az7Q390dlFwBEyB6Ui7ZMI5cCHMRp9aBNfBMrgD7oWH4HF4 Bl5CfXMb9cNT+Ap+gE0I/AUETSgQqkQXQp8wRr1rA42R94aoL0yxDUPsx9kh0A7bobAXthGwN7bD oD22kdAB2yjYB9to6IhtDJp5nI2FfbEdDvthmwDdsE1EjMrZZOiDbT6pwln+HlIV23JSjbNMs1DE WVIspDkrWCuUwbZCyGB7SCiLbYtQDttWoTy2bUIFziL1IsbWURbizxkBjRASyCKeJ9BWD1SHIbbn tAPCA+QlGoPIRwmqh0ELVEdCS1RHQaQjkG/WqI6BNqiOhT1RPRw6c/d+QBdUj4SuqE5EeoFAXnmg OgV6ono07I/qVDgA1flwIKpXQW9UryQVAYH8VUJ1Ocld+WgWosAgT9GoRn7yUV0hRHoD+Sjg7mYS SqG6VShEdZtQGhDIN6R+hI7ACM2qcMS3iYhnJ4GZYD7IBqvAWlAGdoGDiMfOgWvgNsr8X6C53bGe h0aSKhrr+mgssdAG2qPR5AG9EUKGIb+HIy82od7KRz30O7ZDYBm2Q+FmbCPgFmyHwa3YRsFt2EbD 7dhGwh3YxsCd2MbCXdgOF2pxFvnYhbPIy67YVgi1sT0k1MG2RaiLbatQD9s2oT5nkcfdsHWEhTh+ q3HkinDkinHkSnDk1uCYrcUxK8VRXIcjtx5HbgOO3EYuHkJF3ONKuMeVcY+r4B5XxT2uhntcHfe4 Bu5xTdzjEPBlAb6rm4exAuCZDmW5r2hwT/L1xvfUGwILxMUdV6KgMh5rKniMqHKfzR0Fqn1vxXMj icNehCe5eKzgmlshg3IIoQBUQjkNxEhEYHzhOE0VZMFBMBiGwhAYBOOpEMQ+Ye3XhYmxxBRiDpHD y+dt5O1gvjItTCvThvC1gCqkVlNFVDFVQq2h1iKsraSOUseo49QJ6iR1iqpiGhmC4TF8hmQEjBQj pL5QTVQz9ZVqoVqpNhGCPdES0VLRMlG2KEeUK8oTLRetEO0RlYv2ivaJ9osOiA6KKkSHRLdEt0V3 RfdF9aKHoseip6LnoheiV6I3one0FC2kpWmKFtE0LUMztCxtQvegTWkz2pxmaQltQVvSVrQ1bUP3 pG1pO7oX3Zu2px3oPrQj7UT3pZ1pF7of7crQjAzDMAqMmFFkPjNfmCZGg9FkuDVIA5z1AZzpkUg5 eCFOG0EkItZOQxkdTUxGGZ0MvvuZwfmbLM7K5PC1V3nedt52oCDYKtgGxIJyQTlQEjQKGpFuQ7kK UOFyFaRv7lKPgBGXsSA1Mwdxdy+Us+8GLijbvgkGoIy7FgzE3O2NudsHc7cv5m4/zN3+mLsDMHcH Yu4ehLk7CHN3MObuEFErYu1QWg4xdRRm6smYqacxSoipZyA/94OwvxPRfy2C/5Y4fYsQhXsT4N6U xv2ogPtRA/ejPvbcFHtugz33w54HYo0S3J75kfiX/lC7P+Cu6zqDLp3H/59H8V+Px/axg44gj0cK wCOFhyMswPFkcDxlcTzlcDzlcTwVcDzFOJ6KOJ5KOJ7KOJ4qOJ6qOJ5qOJ7qKG4qQKPj7EUk0+ns GaQ3O2YsN+fxOAV4nEI8Tgk8Tnkd/0uTsp3+VxWpku8o8G2mY+TAswCPZBKPZCk8koXtWSx8Cz/B 5g41IE8oExqEHmHE8ySjyVgyjkwgx5BjyXGMDqPHdGO6M0aMCWPKmDMSxoqxYWyZXow904dxYpyZ fowHM5SJYYYz8UwSk8yMZsYy45gMZioznZnFzGHmMguYRcxSJpvJZZYz+cwqppApYkqYtcw6ZgOz iSljtjDbmZ3Mbqac2cccYA4xlcwx5gRzijnNnGXOMxeZy8xV5jpTzdxkapl7zEvmDfOO+cB8+t+7 yv/3nsv/S/dcEkAOaf7hpJhpRpzv+LfuKUczEY4Q3O50B7CQu1em466af3iPzPf7aNAxCAdi6Pec vX2PF0KgbzkvAT+ARqTRrQlb9A4XtM+H8COCiFAinIhBWJWCUG8yt6b1q8KtY3Uu6Cg/FtufC7fq 1blwa2S/LC5/Km7cCtoPxefnwq2mdS7Il78oiA9+KMjnH0vorwrijx8K6qUfy1Bc/tiO+VOJQ2XE X5SUXxVR648FsdaPRe1PRffH0uFf+/niI/zvtYm/uDYBwV3En/aI6z2Qyg7Ez0H59vQT7kkoc8Fi kIuynxKwAWxB+c9+cAScRBnQFVCD+o/Fa73/3dr2X6p9/pX6l9c/2q+O0MjkcnkP6MvlAojrlHH2 wK1xQGiE8mgCsX0OaufCPNReDrlf7y5EmRcBd8PX3BNg4VuUr7zDv4HxEX5C7Ub4BXNmM2p/ha2o 3UZwv0BCEHw05khCgNpSBPfUVBGB8m9CBv+ehxyBcmxCgVBEbSVCGbVVuN/nQLyqgdqahA5q6xIo cyP0uV/+QBxrhNrGhDFqmxAmqN2D6AG4XzQxRW0zgvslnpXEStReRaxC7QKiALULee74Ka6egMfr T4q558SRyF9SnXTlnmxIugMe6UFGcs/pJhNQewT3q8CIq8eh9njuiVHkLHIWas8mjwDuF44rUfuo ECGzkEBZJCE0kB4JoHSiNFJ60kkyGwGU2SSDsl6Z32UqUfuozAnUPomUKmS6IJ3BQ2qyDWd4CJVl CVnD9u8448gQIKrjm7l/aBCINQjEGgR2+gYpxBoEYg0CsQaBWINA/L0PiDUIxBoEYg0CsQaBWINA rEEg1iDtZ0hgJQKxEoFYiUCsRCBWIhArEYiVCMRKBGIlArESgViJQKxEIFYiECsRiJUIxEoEYiUC sRKBWIlArEQgViIQKxGIlQjESgRiJQKxEoFYiUCsRCBWIhArEYiVCMRKBGIlArESgViJQKxEIFYi ECsRiJUIxEoEYiUCsRKBWIlArEQgViIQKxGIlQjESgRiJQKxEoFYiUCsRCBWIhArEYiVCMRKBGIl ArESgViJQKxEIFYiECsRiJUIxEoEYiUCsRKBWIlArEQgViIQKxGIlQjESgRiJQKxEoFYiUCsRCBW IhArkW/PB/n+tBBt7ul6ingv0A5nM7VDBNLGsz1mN8pAKaIoU9sT7XIlIJSIWGkBacLwCHUSsJEC ykQA+TCzJwH5RQGsH9uj0x7Nki7TNPFyjj3wAVFgDEhGIBoL0tAft7zTh9XpdDC+YvrR96f9r87P ZW5lJ0aNyMszmvIysShToyubyT/GZvJ+L+IRkCDElugU049eiHrGDJnVB59wOivz/Wwhic5rHD5N 3iC+QEwMCpCIWXluQyimgiPHxCeMiktLHiWRYxlup5RYyj82Jil5VIykC6vJ7aHESgMTolOTxyQP T9N2SU5NSU6NTEtA/6HDduVe54lV/3g9MCEp1jQgLTIpRdvXpS/bRUVGYs3asFaSnlaslW0Y2rRh 7b5vstN3/lvOTIYVca+LxPyBPr7+ku5st/bNLqNcElLiY1O1+wW4arsGePfq2detr6mrlcTF1FVi ZSHpxuq1e6T5S48CYlPTE6Jj2Uyo27mHuR+dykQohfZTRCaEoMxcqaW/aoB9EuNlkKwxeZBFWtT2 5IJZ94K++O0YeTcRDlasS3DTqr6zPuZlnOsaxaHiNI3WYdEJa4Z4b1gudTxhhUftutGX556apTN+ l9hkybmrlYO3DZA90TPda8vOGa05opBlPo+KquxL+FUv8v1zG7JOrq4s+rTeJ4g6njCvblj96v0f h2t5ucSY65a/2fV60owT8nK+J4t/G3N+WMXX2bkaH/h9/BwPXtjeNbVl11lXeTBoxpbpG+LCE2Qd st4fzo10VN1rtCrtyYmAkCBRS+bO8RNGB6jNKSI1wsetLbh9nj9frarRZ//N6hH68ecj1Weclw5O cNq0uSZEX7XqzLy8jM83Xpo3WBM8NI/WZEJp1CMkq4W6VItBclwxdxA5JP5C+KoRbRK+3++DNNrm 9gzAY0hLj6/KKk9T1LP6fNPfLYV66dSc3rzTZNsx652ybCD3hq78gawX61nkXuQ62yU+LS2ll7l5 dGqiWdK3OJlFJyeZp4xM4Paap6Qmx4yNThtj/j2MXBRxENGoNENvYUMEQjQxSVIKQv4Atj/r8W2b JWbbd3zAuHHjfvUBsan/4MhprJg73258mqW+HZIn/NOE5HGjxHnEocOFMyO1Eq4G3rdVqtdb0bWP uush2bl7C1T8C6YcCPZ/Fzvgw+bc27FsfnFDt2aNFzFxEcrRaaPU0hwnnf/0qI+/isnQqlNq+/vp rR6S1HbyVQ/LbXT+qGWLut8OZeIdZHqtr+Drzr17UEc8taXvsffHTzq+LN/rXiHjmT/DKaxizOpj jV8NB4wPpRd67aAW2jx7OaQ19IysoiDH/M7Kq5VJO/bNv6eVteXSAa3Flck106Mefnoz6Jx3gdb0 pOPn7zv7ij4I3nfP7j/hlJN343Lv+uwt58/aJuSsvZv52SzYXzf/do5PmvDYGv2FE6L2xNwWaM3z WGY+bnpJRkOB5+OCbepbTk8aU7oSwdgLBGPX/oAxSPXI2FKdMXEd90h0tPVnGMv4t4CFHqvTPunV O78eE6sdkBA3Ch31JyCzsLLuDGTcJjt9xv8EkHW8nfcXb/+nwLT0a7LNgTrePsMbbpdLIveXujVH K/cx++J+5dSLl6dWbDfwG1tx65ysQFF+baJa4ZGIgYFZDwf61iw4XxxZOk6cr7n+pUxa4/qgjKeG jQFXtk+Ivv8xO6/8xU33z4kO77vN2XmQOsFfv3DSLI90zUi3TWrHJ0TNqzxqvak5JPlEtGiZJztd Y+K9qZN8drknRYzX3LqnMVfs/3rf5YF2j8bc9fC2V9yUJ2N3bp5fXfjl3m8Wxj1nh20cGFbgUlGr t/+IbLWXXMGqgW/8SmZuerhqvcONNa8pVY8NTdu9S5czXoffKL4HVds8bgxuta3Okjcl97sQProg t9vmydajZsb/rq1qa9iqWSK3vfQbMA1DPRL+q4nK64RWWa2U5LnB+cdJp5Ys2Zc9v0Q1EpGWH/ey PB/hxVo3tt+f42PJSrhNUmxsKbG2szZhrdiedpbWrKnEZnikqVW0DWsaZRM13NQuxiJKEh3DWtvZ Wv0AgGfln565sks5BJ7uaWaprLxvQD7VlQ1qB0AfFkFgEYLA2a7/LQBEYxmNZDSII1hbU0uJqQUr YTEEhnWCQG8WgWAnCOzz9yDwL46d9iu8W7chYMm93rA1coggrGH4G7qm8ebMq8CPkbu89rKK4ZP5 lrYmNS4nefPGNlgu/bCxPq6FqC3V8nZxHaLh+eC+j/KbKYvezJE/k7l5bfO6jREf84ZVTTx+eNLK hJddMyvfnl843ivqY7WMZnWAwo1c/9fWFWoLi5yWFVOlpsqrjrqlCRtqP9SUetoEKsgP4u2cqNzs 3toc//WIa3i9o0KGZcnrzBN3ndSkXimdoFaGkn03XsornF7IG/y1/wN1M7LM1918flNGTRftz2Sz 0UhVxaZUfrlofX7MC/khPq6eC4zUTZsv7ZEOiLDKvq98fN/zMdZPg1/XNSgfUz0l2Nn7YuTM+j39 srLXzGYzyRUI76a3451cxmbl4v5FpZsHjAn5ICU2i/0z2EVgDKGklxpkLXvXIwaqKfNQ90vUWJUf dkp/j47ElDVpRwf9P9DBPzkZQQQKV8LwhOjItFjtvmPT4pNTE9IyOEhD0bJm7SwsJXYWFgjSLDo2 LWwllmH//hPIJH5GK4JDKwKhFUqJ3w9pmhZ3LWz9RrrHYu1L1kL7sTPPl0tlrcq6dffCsWFNS+LD CrNHG6mmTzp6v6pbejYT0sS3snl8b2vjtP3PQkQmyx4VkA/G6S5ptIqx112iNbROevFBxdavY0PU 6jLKpZau2TInVFizWuoML+RrvFGSRfWVDWe9vtaJPCx8Hjfs3ezzMDxZnL2iNuf62NoN6uXZS3aN G/zRg140ImOyYgp/ctLWxR9vpdS4lx9eaZ74hCyvkx9WlrFEcdKJG+se1k25fmzKo6VX7MFum8y7 GXVJ73eP+rza8vRZ/8ljltvUziseWZKTt3LN3aMDDdoEuXHdBFVPyh6+UrDMkayoshZ6W53JCLi+ +1C0RaiTzZFSb/5Ah9rBUpYPQw6/dgyIqXEOtQ5ukXWdpM8fWHjDNk0+T3fxhfh+aUuTr3slb5v9 4JSNc9Glr5VHwr6sidzHuo/OpZS3LTninPNabqrhiAfGXbc/PM9zHDeaf0r7q6esluuctdVnp8zZ vND0hWvtcT/+aeOvL2YX5svnDb57IWDO4/rylrKco4ZOta/5i+9Nt7S7ucO1VO83QemgLMkBgekw pq/q5K5mu/POyjcoXdcvzX6tpJjV4jWmyWLw18uW4EtoVIqUxXOz351MJ565oxOnwa5YpLxJb0Pf y9tGya+0OX7XKW1VXUhs5bAuEwbbVi06wDeYdE3Z6dGekYmbZreAwxcqO2SkH+uDQVZLls9HM+ck K8ttiLnf8CVZHjKdIJspyxzmFNQ971E38VfjOiogJ/ThWlZOIN2RgilB7gjgJ3BC+07ID+T1GnZn iL/8uEU7DthU7SAP7yrfUKNdEC7m7dHUbRKIrfdURV/Ld082CL4y6C1/u0HEjY2+8UUHr+wdde7Y s7J7aufHl4WmlQ23sjmu0SfRdoAlwyrIrDFo9QsAbVvDvGfKyHZ9mESaec/yWpBomRx4Jeb3w75b J0+wK+r5Mpon+1UsuKBscy2wd46GX1SvRwNVrpF2S/O7bxi8qeLFgUMPtLOGjU4M2lkqvpTE6E3J 4b2Md3hXE7135MA9T9nddWeyvRpLNg1Zwe5wWH/UL9FQG+p3N/EC5QXyI1MO7ZDLPEivjL+0oLf+ b5tWGKYWWEaELq74eHdZYa+oMCu7+jmDtPYJtlVmjTStTjimpmAz89Lpoltt5gnjdzyacKuhmj7S WBGtstdObFtiM3jiu1lBI7Rioipt6zcd9htekv1RYdVwXbmR78rZpabvjN449FZ0iS95u8qo59kL ttrdkibFvZ+ir6DPE053f1FamPdRtfrigeuv03Nft1yoDSrIKXL+khdSVy3RvRoR+rjPKF3w3GXm nm61N98Lg+KPxIzUmvRiz7KSqOBRZjVPQhYdl3ga3LlrZP3bR3Z0ymBF+4SKLIXJDWZrWmumFmaG +VMmlS4mN9k5q6vkmrMWPC6eNdZySmJh7RhxTFRCqfnkM7lJqz+jFGKpwygdRZ3TDvePtcwdWdC/ 5XJxwQqXcY7bbiFwPojAeW07OFORlgbqOJWW/CdgWcKytpYSCwuJnSWG5Y5NC27zPymC/5m83JEa Gq7GxhzWyh+mre28Ij0gsY/GjeRzZ98+H9mapyx3/16vtBnq5eZFFi/a7h519ta7ngpqrYOprDNb tD0/vIkvG+i1oLQiw2v0SnepWy3d7hWMnXNx05h+U6un176veGez9nS46+2tmx3uG8bnqa8vTR0T 9FYl+2GLdXZq0Y30iC7jXGfMslW+NGYwuT/Of0HpjgTzW2qi1qVpRvXp5oF3FNnQz1cWRLWcPR3h JvHd11380Im9mGokZ6h7qqe3Q5GFw+LzxbaCWeHeQZmGxqRFuVe1T/STK6ZRb10dnpQJwSe34sLL g+cbBDydsKn/O7eLPe1tC3eNCy9VKVxwVn5RkH1lmXQE7+o3eTkU9UjYP8KpX8q8TiA3m1XoDFok PjCr98c+gjtKy2WJ91WDuTl1y4f13iBJXmd/sMaUVfv+JkWCT3ehQAAYC6KAC+j7g9D8JVL6tgtN T9addS1yKeo72/HvC83vL6eioc3pQywxAztJTA8WKeZOEtP2v5NlcxPGpf2oP4tLhN+hdn2mGrht bUh22m6xe0QDYz5qg2djQ8TYlwN6m1a7bBa1nn1mKlmjd26S7/JpOkPKHMwH7C/ZELTqQcqBvbs+ Z+z2TG3s87zv1DN1tErC2dJV2qZNIt/jQedNH/S/cjDlyQaZEl5p0P29c72C3+U4r3r7/vWrB7O7 WtnvDcp/E6A3y3htpuay+mwprXf13p/nF595Ki5d4l2lcWVRao7x6KSV6p813wTciDun2xaudb5k fkX3HRnRQf1K/M5/ebYmJOjOSsK1n3nEh1tbrmVajPq6Nkf8sCHhycaSHoeqTOSY2IUraj+WNCkY SMfaZr+d0LX/gct1QU8vjc9VDT9trRxxZ5mW50LTQ5ut+mm+klNSB0PuWA/WubD8lPSrWcx8nyRG 7O0wychjVerl94lnKl+krAleGjw5e0GRhgcvrPHimjgqrdTmpam5StXj1J4KH5K328dlfvHfscBS ObYLM/eO3N2YD8kX3K5dVXmWcZy/62pzj3td5xaWUc3i7k6bH36p2zjV7YDUMPfYYU7e25xfeL/c mZ5RQ1lJJ2lOk3StZwLvPCpufuQutzlmeZuvstmkw6TOhPqcvt0Tji1blHN6Qc1KnS0y4avelGyZ HT+DHmF6IH0k0Mrd/E554iflGfr75lwcscFdYp5/+8Foh2owJcr98oU5p/eqNjGpCyrXOGwlnEa0 JazMrZfbILerp6/wxjEHNlMghfD79Tf8Vo63wvit+R+R1T1R4ocQ29qStWuX1dymJctt/ueuxf4z 9F5dnLj9Xq3HUuNJI83U6irqH5xY4afnu/nCHVVvfdlXl9dfHrA5jdWWb5C6Hpij5Jmt4bx0y/Jw 1uAWGPl0YsWLLCnZRoa//E3Wua5nLfV/K3j3IU6zx9eJT+ZoPX/ivaa4Ui/gzIIm14vSl4ZuvbTN mV/yZV3isrhqw9tuAdtmX3pk6GbWvWy2zyB/+iGvR/OIxYvZUb+9D2ULmqbcyNv5VCdvyucr4vfC 8oAk/12ui1d7gP7uw+W7Gw3fkPfwqmB6/5IvM9fLuytKZ66e+XLQ+FaYr+UrnAXkWLeX5Xf13A4c Nw1cvbXL+L6ScedW3us9Y1lxJLFbS2b718aVO+AFXa/Ati/ksaPaom/o/TvqkfX/CL1/eZXyB/T+ WXJOX94OvtMXs9MX/Bp+i6PXRv7bh2fmz3nn/y+o/7euq6K+lsubeyyc18/mzrNdm8fVXsjwGwi3 m6WNHpxEi3+/cGjior1m1xRK5idF7Q0mznpri31X3JngVB98YGtIvmadFpxddmD8u3mXXvSGr+oP LaLIqgUe9W8ClO74/L704ZMFI65Pq3yc/U5gPov3bImxvm5K86evD8evMJNplKpPOajqXbBwJJWa s7fYblWc6Qk/5nlUuKPy8nnajvVS6hZfzkn6p0scTFJFVc9THNpmUeJ7R6nIhW+q96o0eM+besLa ZOiaww0HJ4ucJ14LSNV5xZ45MD42fDBUoRSZK7cUl3+03zc8ZKep+ZMvs2af8wt6WpCSnVhmN+Da p4zDm1QnRBm9LllpZCUYpx512qFLUtfMN6JTPQ5cdNn56MuLybsfrN2QZr3X+8RoPQWDdJG9//zR YW4uigd37tw2MK5qtXPbtAydaYVK7PCnzgpD1asKdXUuuTwzeXbgg8e5HtdqLKYNMDD20I8Iex70 et3dFQVneiVXTO+eJpB/la5zeGVmZffAPdtHOGQVp0fuGlUsXnd4k/sbheSWuRaJO1rv+VXN1zs9 vKJA6zeFGMLBdGvoor0PdR7t3nYmetf4QPJaXzPfsuxtpeN/31mUO1b95tLfxGN1zS02CEcVDZ7f 7XDR65lndG40dPE5nf/K834jjE3OEk2uSqh6POr5+rwLEqM25sTg8JqBGsU1TeaFjmaDlEeeFq9p kWTy0RTmrycgZNF0+8/p5V9f0/5jha9o+nFOrnWMX2mehO68fIhO4I8tkYRhO7+qxInBb//IlyBQ MiNfnHGUeWBKbjVblHo/i/FTbdzCxnT6F1oSxAYWGU8zBANBAogGqSAZr0AOB2lAGwSCDJCCtuLQ /kjUigcZxQbT9P9ysqZlpCTHpUamxGeY/4lU+JkQmKjaRzZNnnTUemt0TPNvj2sdEx+LHealGa65 vm+Ri/vFiFNHEteOabt1+UPvftN7KPVOuRSfbv/5kYbUuLxqu0vBRkW3h03jXTlZqBixxP9czjT7 dKf9q2b5suXWxjeGhmvVKZzeDVuevardXpg0rsmlNi0qebyzRH3WiSJdepnlc51NMvfWL5xdcz55 9+YYx6Ftd2+F/tfWmL9aUTB5h/WWReekHGeJx578z5Jt/+Xgz8nf16epd0Sd9BFkVwzQmG0496l7 kPhtxSviipmh3Z69gZeKykOYTcP9VxVIb+xYyaksG8rbuXcT63l3dovflSs0vdi9p6xgDVDxTi0y CSlcOmH93DufD3H+WPiqb2ETk4ZBE5MKIo7YDJuYRIFCguBU2TdgrQDs08VIaTLWQAI5SXIjpr0Z gZbDZVgN+cEzIpaGhoYWJpYmwIYNeor8KnmoVTH1uG7JwRP8Sov0FnGba85FK69BaSWBz2F1fcxp qZaWbjWdZPGsR49qI5rWdjAal33SDteNLD2zO7BvsU3wjq1sb7k22gQ+2tq9ePsn/tm/47fPs/nZ OCe0LkRhXfZ3VgF7/h+BiRNEIifunPLJd4VYwsXp0+bfXCB66NCMbbO/WWlb/NPyDgiYujny8tXW 2ndB/1iWsWrI6nSWfl8ZuXhZZJ4YZ84Fkfdez2dZXDOMPsThG7r0esmOVz4dTazeSpyX2YJVGjI9 XMSCVzB1rrwdNf3kk11M+1/lv7kRfvNew7mc7atWGgdeCFNYHN0Umd3mPMX5yndrR6e/OrWZO6cY LFf1mPFooY4dt/qphcLu+S1MvS2Jt1RFn1iwOHl2T+xdAAB1hZN0DQplbmRzdHJlYW0NCmVuZG9i ag0KNDEgMCBvYmoNClsgMFsgNTA3XSAgM1sgMjI2IDU3OV0gIDE3WyA1NDQgNTMzXSAgMjRbIDYx NV0gIDI4WyA0ODhdICAzOFsgNDU5IDYzMV0gIDQ0WyA2MjNdICA0N1sgMjUyXSAgNjBbIDUyMF0g IDYyWyA0MjBdICA2OFsgODU1IDY0Nl0gIDc1WyA2NjJdICA4N1sgNTE3XSAgODlbIDY3MyA1NDNd ICA5NFsgNDU5XSAgMTAwWyA0ODddICAxMDRbIDY0Ml0gIDExNVsgNTY3IDg5MF0gIDEyMVsgNTE5 IDQ4N10gIDI1OFsgNDc5XSAgMjcxWyA1MjUgNDIzXSAgMjgyWyA1MjVdICAyODZbIDQ5OF0gIDI5 NlsgMzA1XSAgMzM2WyA0NzFdICAzNDZbIDUyNV0gIDM0OVsgMjMwXSAgMzYxWyAyMzldICAzNjRb IDQ1NV0gIDM2N1sgMjMwXSAgMzczWyA3OTkgNTI1XSAgMzgxWyA1MjddICAzOTNbIDUyNV0gIDM5 NVsgNTI1IDM0OV0gIDQwMFsgMzkxXSAgNDEwWyAzMzVdICA0MzdbIDUyNV0gIDQ0OFsgNDUyIDcx NV0gIDQ1NFsgNDMzIDQ1M10gIDQ2MFsgMzk1XSAgODQyWyAzMjZdICA4NDVbIDQ2M10gIDg1M1sg MjUwIDI2OCAyNjggMjUyIDY5MCAyNTAgMjUwXSAgODYyWyA0MTggNDE4XSAgODc2WyAzODZdICA4 ODJbIDMwNl0gIDg4NFsgNDk4XSAgODg2WyA5MDVdICA4OTBbIDQ5OF0gIDg5NFsgMzAzIDMwMyAz MDcgMzA3XSAgOTEwWyA0OThdICA5MThbIDIyMSA0MDFdICAxMDA0WyA1MDcgNTA3IDUwNyA1MDcg NTA3IDUwNyA1MDcgNTA3IDUwNyA1MDddICAxMDg5WyA0OThdICAxMDkzWyA0OThdIF0gDQplbmRv YmoNCjQyIDAgb2JqDQpbIDIyNiAzMjYgNDAxIDAgMCAwIDAgMjIxIDMwMyAzMDMgNDk4IDAgMjUw IDMwNiAyNTIgMzg2IDUwNyA1MDcgNTA3IDUwNyA1MDcgNTA3IDUwNyA1MDcgNTA3IDUwNyAyNjgg MjY4IDAgNDk4IDQ5OCA0NjMgMCA1NzkgNTQ0IDUzMyA2MTUgNDg4IDQ1OSA2MzEgNjIzIDI1MiAw IDUyMCA0MjAgODU1IDY0NiA2NjIgNTE3IDY3MyA1NDMgNDU5IDQ4NyA2NDIgNTY3IDg5MCA1MTkg NDg3IDAgMzA3IDAgMzA3IDAgNDk4IDAgNDc5IDUyNSA0MjMgNTI1IDQ5OCAzMDUgNDcxIDUyNSAy MzAgMjM5IDQ1NSAyMzAgNzk5IDUyNSA1MjcgNTI1IDUyNSAzNDkgMzkxIDMzNSA1MjUgNDUyIDcx NSA0MzMgNDUzIDM5NV0gDQplbmRvYmoNCjQzIDAgb2JqDQpbIDI1MF0gDQplbmRvYmoNCjQ0IDAg b2JqDQpbIDYwMF0gDQplbmRvYmoNCjQ1IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVu Z3RoIDI1MDg1L0xlbmd0aDEgNTYyMTY+Pg0Kc3RyZWFtDQp4nOx8e3yM19b/Wvt5Jhm5yEUQiUlm jFyYRNxFDJlI4pYiCBLVSkKIqqJBVUtSrV6Colctp5zeW1WT0EpQ4tCLlmrVpRfnoKV6qqo3zoXk +X33npkIbU/7/t73j/fz+/VZWd+9n33fa6+99tpjBjERtQDo1Dlr1OCBO/Y2vE5Ut50o6tjArOwB EQHBo4luzSIS1w3MHT4q6rEtl4hmryBKHTlw1Oj+fqadPxG9cgqNHBk+KqVriOP6HkRcg1YLx2QN ze9aPTSBKHopUdgjE6cXzSyOHdmdKNmKMk9PnDvb+nLzkgii9Fwi/6WTZ06ZXhXesytRpz1Epo+n FJXNJAc1Q/+oQ6FTbr598j38oh/RgGMov7C0pGjSiWO9F6EtJ/J7liIh4FWBOM/Ge/vS6bPnJTlb LsPYI4na3HrzjIlFZY/MqiYaNh7vt0wvmjcz1AiMRvlVKG+9pWh6yQOfXhdCNGUfUUD2zBllsxvi Sc4/QubPvLVk5vZ1y2OJuq9BfhVJ2Zlsg7744k9ZE0KcF8zNzCSfZ+JGFMnw4CPlVsP/3yv0S2YH Xpup8vJB6PdS/RMQ+n7D3zioX2rM8T2aTAl6nXqTUO+CQilFjkQ7iX5Vir6fV5CJzKYnTd3QpMUT akU0WYSbTMJfayaESej6Cepo1NG8TDUCPHlDM63kIiut0880LJQjEVNcxIZhoHax/pCcKen6fpoi SyOUAz7LAbSNToEb+KS4gZPpc1rBDtrK++lLOo2c9bSbjtAeDqeP6Ay34P2cSsVUQo9wCzpKYTSW yukpyqe1VEHTUGM9FSAWSZ2olDaB86mWltMozDOOcmkiHRZ96QusKzSLt9MKSkaNhahxlBZADm/Q ZtqJ0bSkm2kl8iqQe4AeouupD6Wi10fpHD8qnPwIyoSBytG+7GkUWrpC61HPQ1u9JFvz0fVeuswj MIo7aTnPUKNWYuFtnI5+wjHW6WipmB4BjyM39LUnvUAnOZHjqS9mM5O+5LOY5wNUhbGMwszKUU+O qRQcTiuN7zH/z7ie49DOaox8IiTvT9NEHjWnFnQJknTQCbQVhjlIzof0PFSqaJSirexEn05OE8RV vJX78CFIbwz6rIVkDtM54TTq6S60/ij6S8bqNee5PJonejVOrssCtClLl2Oekhcap8Ue9LlC8VN4 r0fvFYor0LKPO0FukkshtXzUkyzbWY4VkTwKUpSMUSguxwzHQV6vcTStog/oDuM0hyPenAQv8LFE egmyeoJWCIvcIMIiLBI97Ht4AXJlac+2+JX4rz9iii8CCvHyq1jveOxCDSPJoBrMUmB+azkE426G VUEy1msb8gRP5an0KnRDysgnOZ+UPJJa0MjToLvTqB/kvK0Jv4Eam6FZOyErnzwrvPL0ydQjz/mN svRxHPRdrulR1X84NC6XZmJXynQfIx/65aT7MfoglAukaGGGfmxjM7mMy5hPhnERZuIQ/aB2agl6 PKx2aQGkIffowxjHJOjNHoxhInqwkBO5E6kYq7aEt9FY1mkAj6EltEmEQFMyKI+GcDbG/i7GPRZr mE1zOBGxleA5SpPLQbVKj9eTHfIPo9soCb3IEUhrMYTyjUt0KyWCbkOJSIzIM4pyjCJJjaOAOuDk 0tXajYV2t8J4V0B2d0CvxiGMwFsaaB51o1jUXwmWluR5jP82zHMoDSAbKAetP0+LqD3djVoPora0 J2/AImymbsa3WLF5qDENPa/CDu9CpSKOh/BgHiza8xbQKl6FWI5oL3pCq1cJp7aEankfdPspbknP 0Dq+jQdjdUu5DGu1mepgNRZj/7Wl4Yj/QP+mv9HT9Ca9QvtoHVZ5MXJ30j+wvl+h/KNKP+uQV6v4 A0W+lktgaa+0u1i1KVtsbI9vw4psRsorIpOXciG357f5bboksKn4GD8OPsbPgN/lz/gTngTL9hOX cx73YjP7cwI9htJfiiH8If/IwZzAYVjZK/vvXaEJFho/zc/yep7OI5G2hou5ELoXp4oEkp8qGYpx yGcFJC/3lnwCQPJ5GZbyO3oc/B1KPYW9AMJIpJ32pD/Od/NhjPxFfhflLVgHR2Poi/8PPBj7GnXC EUVglwfQe5DQ49D8Ot7O/1TjVMYCce/8+B2+p3GuvjTvXH8WPsUjJCsZSPbzyKYxvPYJ8srHG3IU 1rdJ6JMttPeICjdjv8t8M81SYTVXq/QGaLV8/xFjlQ/mo+byMs1V71OwRxfRn2kNLAlYtMFqQy+o iK6DRD6DbgRDA56BJG6Af2DCOrwLOozVuBu5spc1tIa/5gt8Aft7Gr/GP/EXHC8mQmpu7JsMiucT SPmCv+VdaPFtSOEp9HUUfsP7tJ9vgs/2IO2n7cqbe5QegAaG0bfQ9u2gt+lJ2I97+QbQDtB2fpKP X5F2oxSkpkg5W5Q+EA8E5dOP9Cn/E+v1PpKkPYXdxBiewK7dw+9xHezgm9DcWnZgZ0TyjZylLaB3 VP21/AY/x7vVHncoSlRkNNIeSKDp+xXqj9LgxvPz93LTs+OX+DSskjwzfKfD7+VrT46mPFH5HR6W Y5B9/EodTuEIugCGLYR9joAdnad4GqgY9SXnQrM7wLbK864/xoy2oA9L+XoexDtBgxTdpnaR1ESf Nl6zi35v+Ku77Td24S/y4+DVTXbor/G1O/c3dvDPduxvhXJH+9gEko/Panp3+c9CnzX9jbDROvxK 6LMWvxU2yhNWBV7njyqOEPxO47r+Godgl3qtqXf9PZZIhuM8JE8c3CbycarU8ToRgFMuggJEtGjL 05BSxvt4NmgDdZFWQURz3bWr4JM6LHm1kp6Gk34NbfHZuaaM9tLgyy0W4SIaY3iQ/sXByhd5XPkq LeEHhUPfRsD70MHSi26F3GTFssR6+McypYJew069Fd1W4D7SErvpC+XdbYMVbIlU6dk5sbtaod4m 5dntge/0ECyr9Jed2GV9UUp6yn9W9Bm8kT3QuYcoGXeaM1SCG4UZFIDxmLFf/UEB6As7l1Ma/UCf zyl79tmAP9NS6IqnrswLwAikt3mt7fHYmK1XeaCSfXbA592vB3l82nvpjBqxrxW54xOvsj/StpTi DtdReWA3ISbvc8PUCV9K94EWgNbTsyg7GufRFHoDvqT0kLfhVhkGybX0Si8NJYbhlFlJZYrWQ0LH gA+CDuCeJelDjE7eB2uwHvJOmIG3c7iZLaUN0LDN4PXo9Q70KmdQS7fAs6tQOQFeKm6MvYTbZDho OidzR1AyfYXTkOEb4dbG9aK5aI77lkvdAufTfNETJ8p2oBPn1HZ5FqgSqxQ5eR1uXt14KBdwD3bh 3YnbHxB3IHl3S8fe6cNO1D6MMA0k+4jT2qi2PC2cudKanKusA39+Kx9Sfdpka6pmovxcxHMvhNxe gA/XHG8vcwzvFoT+tmOciWjdLOtBqw6jRc/5dhNv8W6gBLx15lyO59bcmzWsxIeQQh+cAD08s4QG D4Q3S+CV1BVntVzrpViHtSAXbgRLcSrLlfPoyhzIuhY3kd3qzn4XtGa7im1GvfX0L+hOIt7TsM8f g1/eW9nPMHnjggXsgHNFhrdjR1pwo5A9RWF1JcfAv3fRBNSLwExl7XK0uRlSdopgEUwMSkS7Y2my 2rlx1B07dIU6uVrD75c38gDso7HY3/IGtxx2NwgkTzETbJXk043nnR33iWlekiUiKZbTGneR3H1y D+DkUzVkP7shB9m/ZN+OuAseVxJ2hY9lSwJtzcbOCMWM5K4eATsYoPZrhJITxgVfJYeP4QZSA9/k Y+4LPAV+ThtMn1MEj+GFWEek0El4W8/hfT3eVuGd+DvcUlJAco3/ynd4rYXPhnns2Hp50/8Z/5In shZ288qt9mqWHoq0INL6+LjpZwaSI6EVPvZ9htD0s4SmvEnZyuRGS9T0c4Zr2fe5w7WfPzTlUOiM ZN8dWXoskqWV8n1OIXk06qcibQXmWnwNNXmMaCOam1DTPOyBq+maeiKYT8MqPKY44JqPAqXermxC ss4a0B5jjzqbmhIZs0HR2GNXExnfGGNAC0HRhr8cuxojxsIVvF61O1bdy+f81hx/ay6/p+8mJHed vLuHYY/2hBygl03aFl6apnz+RFjgCCVd+eGo/NwAeZ6cRgm8C5LhRJCsCY8G1i2xyXh8bTpFIqzC E9BV3yM/U4yHfUujL+VnArjPPo19cwr2eDsscR/0v5//7iVpYQfzKdjTNNwQZKlI0dzbjtTSPrh/ xEET5acIklbQFmbsowOwUvL0WgReD22zc3sl/efpbtDzNAYjisQpJE+sc6jlRt4qvE1DngU25yQd we07jFvBGrdWt/PJ8MQvcWs6RN/DUwqHZbiOe7KdA+mvapdrdJAaYLc7w153AWmw5Ymw4X1g0Z3g eOT2QVvXQb8voGYB1cMzt+KUy4Wdb400mdJFplxZac0Kv+pefohvR90bcC/cIaLg2/vutb4njYJh t2Jw4lvg68Qg7zhVY0QOyCi9sZT0SMulBYXnOxAUpmxQBXbuAchgnrYE6xDN61DKrrwsSaugtbWw ZbfxKjqGu+Dn6laxH7rwKcb5P3WLaHpX9/qV196/f9Wr93nq14S++/i19/KfedY+T/za2wbh3NsB lCf6apx3BdD2czSM28DnJPiZp6B9Y6gncCFWNKTxU/JkpYtV0KUSlB+HNVmINUhF2/7q80f5rwpL oR29OQS34C48CaTBU8gVnXkOqBjesRPrtwee1WGkR0B3IjiPhyntGcQtcFu/wLMUdedMqVn8DTRs v/If4qF9PbCm8lwsx6lwjZVBSx4K8tC1lo1NoKbp0mN/A7ujI2x5iDqLpAeRhzAEMWnD1yvapj6x 89l2eQ7j5OaxHqJdtAvri72Lucu9OhvlZ8I3yVe+tjzF5KklTwHP7fYOfotP4ObhVF5bBc6pCi73 fIrO87gUtnQeqILjcGJVqFNlDk7kUsjcRFGQRDKfBC0AnVXkRD+n6EX4l5voLz4tYfmYNI3hYFKk 6ZvAOvqn2YAH4Gc0UDNqhjtGgMJACgTCRwEGAy9TcwoGhigMpebAMAqBBxKusAWFKm8kDNgS+G/s yXBga2oBjKQI41/UhloBoxRGU2tgW+A/sX8jgTHUBhir0ErRxj9gJyW2o7ZAO1mMi/CkJMYpjKcY YALFGhfg90jsQDZgR+BPsALtgElkByYr7ETtjR8pheKAnRV2oXhgV0owfoD16wjsTg5gD+D30PIk YC9KBqYq7E2djO9gdyT2oRSgk7oA+wLPUz/qCkynbkCX+lw3g7oD+1MPYKbCLOppnMMe6wUcQKnA gdQbOAj4DQ2mNOAQ6gPMAZ6l68gJHKpwGPUDDqd042vom8QR5AKOpAzgKODfoaP9gaMVjqFs4yto 80BgvsICGgQcR4ONM/BRJI6nIcAbFN5IOcaX2PPXAQtpKLCIhhmnsYOGG/LTeImTKBdYQiOMU/B0 JU6hkcBShVMpz/gCd6/RwGkKb6Yxxufw3ccCb1E4g/KBM4EnYYMKgLfS9cAy4AnskfHAOXQDcK7C 2+hG4zh2SCHwdioCzqdi4B000fgb3UmTgAuoBLgQ+FfsyMnACpoCvEvhIio1juH8k3gP3QRcTNOA 9wI/ww3tZuD9NB34APBTqqRbgEsULqUZwGU00/gElnMWcDndClxBZUDcEI2PsZdnAx9W+AjNMY7C PswFPqbwcZoHXEW3G0dw+kp8ku4Erla4hhYYh+lPtBD4lMK1VG4conV0F/DPCp+mRcBn6G7jI9xe JT5H9wCfV/gCLTYOYpffC3yJ7gO+TPcbH8LePAB8ReEGqgS+CvyANtISoJuWAqsUVtODxgHYiOXA zQpfoxXG+/S6wi20ElhDDwFrgfthXx8GbqNHDfl56uPGPtjKVcAd9ARwp8I6etJ4DxZQ4l9oNXA3 rQHuoT8Z79Kb9BTwLVoLfBu4l96hdcC9Ct+lPwPfo6eNd2ifwv30LPB9eg54APg2fUDPAz9UeJBe MN6ij+hF4CGFh+kl4BFab7wJSy7xY3oF+InCT2kDvNvP6FXgMYV/pY3GbvobVQOP0ybgCdoMPEmv GX+BjZX4Bb0OPKXwNG0xdsGPqwGeUfgV1Rp19HfaBvxa4VnaDvwGuBMW/g3gt7QDeF7hd7TT2AGf qg74A+0C/kh/Md6gnxReoN3Ai7QH+A/gdvonvQn8F70D/LfCS7TX2EaXFdbTu8AGes/YSobCpjY9 QNn0gP8vbXriHzb9D5v+h03/b9j0VX/Y9D9s+v8qm/7/kp+e9V+06Tl/2PT/aNNn/WHT//DT/6NN 3/q/yqaT+txOclvvt3THe76dy8WkwzrJf58yk0C8HazLJOzBdfKbtLC7jW/GF16aeO33fNmPrnwp WAjyftu3SQF0rZvodz+dfzl54FVvo39/e/+lR/u/q/bflqIrI8+V3q+vs09a79RePbp369qlc0qn 5CRHxw6JCfFx7e3tbNbYGEvb6Kg2ka1btYxoER4WGtI8OCgwoJnZ38+ka4IpKds+oNDqji906/H2 QYOS5bu9CAlFTRIK3VYkDbi6jNtaqIpZry7pQsnJ15R0eUq6GktyqNVJzuQka7bd6t6fZbfW8LgR +Ygvy7IXWN3nVHyoiq9Q8WDEbTZUsGZHlmZZ3VxozXYPmFtamV2YheaqAgMy7ZklAclJVBUQiGgg Yu7W9plV3Lofq4honZ1WJcgcjEG5o+xZ2e429iw5ArcWl100yZ07Ij87K9pmK0hOcnPmRHuxm+z9 3SEOVYQyVTduv0y3v+rGOlXOhpZYq5LqKpfWhFJxoSNokn1S0fh8t1ZUIPsIc6DfLHfr+acir7yi 8fDM/Pua5kZrldmRU63ytbLyPqt73Yj8prk2iQUFaAN1RdyAwsoB6HophJgzyorexOKCfDcvRpdW ORM5K8/8SuzZMqXwJqu7mb2/vbTypkIsTVSlm0bebquOinLV4miMyrZW5uXbbe70aHtBUVbbqgiq HHn7pjYua5urc5KTqkLDPIKtah7ijQQFN42UNOapmCouYzkjGyXLckT2wVAIt3WiFSPJt2NOqRJK UqlyYiqK4Slg1HJPwopMdTfLLKwMTZPpsr7bFBdqt1ZeIGiA/dw3V6cUeVP84kIvkIxKPWlUNeT7 4m6Hw92xo1QR/0ysKcbYT733SE6aWyOm2meGWhFAfJQL2RYVpKVA/DabXOAlNS4qxou7YkS+591K xdHV5EpxFLhFocyp8+W0HC1zKnw5jdUL7dDkzWozt3Sb4xv/QkJbtcguTXNzq/+QXeLJzxllzxkx Lt+aXVnolW1O3lVvnvzUxjxvzN0iM1+LFt6YiNZULpRyfGNh+ZIf5Nbj8OenlHpSjb8ZWqlS2DrA HVo4yIMFATbb76xUY3wna6ngSjXvMN1pjqvf+1z1ftXwgio1DFiPFzl54yorA67KGwALVFk5wG4d UFlYWVRjVBTbraH2ylotXouvnJld6FvRGmPrkmj3gKUFmEQpp0FbBfWvsvP9I6pcfP+ocfm1oTDB 9+flVwsWmYX9C6raIy+/1gqbq1JFY6p8s8o3ymFoerUwq6zoWtj2CpWrqwT1PrGGSaWZfWlME2uE Jy1UpeFJ3gonuE6rqx7dzVWDIE0Fm5q371ohw8BgFVY365aekaLV0UzwRvABsE4TgOXeFI1igelg mbpc5a/TtpEbXAf+ACxTtiJlK1K2ImUrUtK1GmJti/Z6dftYdL15U5v2Xc9nRGmbyAALbaW2BBer WO1GbzjBGy5H2BHhCm+4TFtS3Sc2JKMZ3pnOAw2wwNzWVA8c3rVWRXo5VWS1L2X1JqTEZrTR1mBU azCqNRjVGozqPJDR6mqkr0b6aqSvVumriVVTtg7epryRNdUhrbwpiGQEaAXaGNzVYrV8bzhWG1Pd NXZnRqE2Gk1vVLhOywMuVzhB4XCF5Sq3XMVnqPgMFU9X8XRvXGJKE4xVGCJRG6mNwv0yVhuhDVFh rpaNe2isNhzvMhymDVbhUG2gCq9DeiTCHJQLRzhEU9+30QbjPQvhILzLcKA2oDortnPGTLxPQJ5A fzI9C2PIwpiyICSZshy8DnxcpUwAloMPgDVVkrUsUCYoQ8tADRfacCHHRZrmAqWD+mn9kNMXZfsC XZpTzdGJUk705ISsnGjZieVxYnmc5K85gVatB3UGu8C54EKwCe0koV4SxpWEHpK0ZNzNYzWbWEoR CK3eMFYskd9x0mLEkuqYWFdGM7GZcsGF4JngCrG52hQekhGBcrJsCng4eAK4HLwWvBFspnRPjitQ pIt0bbgYrunQ7g6bnM6uKuzW0xO2tXjCoKiuIRm3ah0gpg60FqxhyB0w5A6Yqu8tFiygOgm0E3wA fBwsBZ4AYSRAGAmYYALqJ6hSfqrcebAB1qBECWj/6jImVTsWnNKkFZmaiJREvCWiTiLKJiL1OJBV DZmfC14O3unNa6eUuZ1SznZoqx1GmwJMV7EQYKzWrlo0C6mBfDktJKMX5D4cjEyxDNJcBrktkxoi 5CZOQU66t8Ry8EawSasFdQAlgBJB7UA2kBWEFdRisHorQMtBD4KWgZaClmA1IjY6djrEhB4zepT3 WN5jbY+NPXb28N8mikCFotAVQK1a4SQMDzNHZYQKHZeQYP63wg0Kb1XoUtjaFTU++NT44HfGBz8x PvjR8cH544OHjQ8eMD44ZXxwDRe7WjuCP3MEr3AEj3EE93QE93AEd3MEd3AEZ4RxAY+lYNqhsL/C rgrbKbTw2OpgaradryebGRrPCZttd8WettXoXB17t63GjGCR5+16T9BHJr4e29k2JTbJkxLvCdrb 3tDRAo3mV8ifHa4k/73+E/xd/r39O/kn+yf6J/jb/WP9I8zh5lBzc3OQOcBsNvuZdbMwkzmixjjh csjbUYRfqAz8dIm6iofKb/2oixTLr/2aBQ0hdwstR+SM6s857rqJlFNsdV8cZa/hAJypJnt/dofn UE5e/0h3L0dOjb8x0p3qyHE3y70+v4r5wQK8ucX9OLLy8mvYkEmLo6X7WkvMSYuXRXvDggJZJ79K 52XLCqjV3PTI9PB+Yb0HZP0CFHrRceWJdDR9wUgs7sdyRuW7X7YUuLvKiGEpyIHkpLdbK1JFz+ys WtFLBgX5tQEVIjV7pEwPqMgquFKOrEjPqiWbDFQ5sspyZL2mXIzoJcvFycBTLkaVi7mqXFVfW3ZW lc3mK9NXlel7dZkpV5eZospM8ZbRPGVsTcr4nyCbKmPzP/GzMjG/o0zcL5ZpIs2S/o7/8HAtDeEj VZnz5VWh0J5dAi50L5lbGumuKLZaaymTj3hvEfGFxRNLZVhUUsNH7CVZ7kx7lrVqyPyf57vny+wh 9qwqmp+dl18131WSVT3ENSTbXpRVsGlgUccNV3X3gK+7qo5Fv9BYkWyso+xr4IZfyN4gswfKvjbI vjbIvga6Bqq+lNZDLc3UvwC+qQo3icAAKHBhtK2gf6vQmf2UNvexRS6M3qoTv0iBcNWDcO0LBsus 5IzkDJmFXSazmssboTcrcmEfW/RWftGbFYrkMHt/isyemoW/sjJv5Hf+lZWVzb6x7MYyGaq/stlz wHKZ5Be9ZxNmkBGkzrdYWGNpm5eAlyobrZWVFcwmtaZlc0i2NlvClcYbY3PQMpc1VQIqu/aRmuEg D6O5sjmMUrLgHK/alMmfA6EZkoP0tkKknwE/RNEIY7RinNhkHPfy5/LX1jK/od4wxFEUzvOy58kD Paowj4d6QppEh9T3qh9HWjd+n14iF4Ug/RBpTJxPTnqYbqPDNNr4Hqk2eobOUxL1plKjQX2ProEX 0DPs+WVrKn0kv0smnJpDPwvj2JE7a+t5ESWjlTx6jFrTAbTY0QjA+yZhEU7UyqP3tAnmJKOz8QPX 6XuNYnqaneKI/irto3PcTqeGu40lxmpjDTWnnzRL/W6jizEdtUZTIc2hOzGCCnqK9nOB6Ct2Gg+o 3y+XIHULvccOKFQhPLqRKH0PraJa2kEH6GM6zcwhnMgV/BEfMlH9noY9xmCj2JhB2TSMcqkCuRaO 4wwxThunbdCO1n/RcMKIQdt5NJfm0R20XP22+yh9Qp+xJgJEnhitbaBo6qt+dbwSMnsKktxLx9nM 3TmNXXwvvyLm6lr9HpzwOrWEBAcp6a+k1ZDpc7SR9tAH9CHa/F59m7INFn80j+cFvJgf5Ef4OX6F X+WzwiQ+1jTtLv0t/WzDESPAeNJ4Cf1GU1uywtdNwhpch/XcT19jfh05idP5oHCIJI31oPqGhm7G QKPceNM4SnZKQNm+8GuzaSiNxahvp7tpG72FuvvpffqS/gEpaRzA4ZCFle08kkfxHIxiA5/netEK 65cqbhbV4pDm0PbrY/VX6zc3tGyobjjfYBjrDbex29in1rcn+snECtxAM7HF5Iq9hn7epFP0d7qA Pvw4FmMdxDmY7yq0f5wvQ53MYqF4RRjwfldoe/U2+qqGYQ3TG1Y1bDK6G0OhWxqcrjbUHZQGbZLf oytT33l9Rv3uYhO05wh9y5Ecw515MI/hfC7kUp7BM3kW38F3Qqov8Wbexkf4M/4WV0c/0RJycoiJ YpF4WGwWe8QRcUojbRTuMLO0O7SHtc3aB9pXeqiepHfWh+qF+u36fBNcMr9W5n2XW1+eXl9c/2T9 7oZODVkN0xqWNOxqONLwuRFo7DROwxXtjDEW0BSMcQHmfy89SGuhHy9jjCfpDJ3Fmv8AWWjcjKMw 4li1bpkY91CMfCxcpsmgUr4J8q/g9VzN27mOd/Fefo8P8jE+j8tzS9EJ1Ae7YLSYjDk8KdYLt/gE dEH8C9fyJK2r1g23ikLM5j7tfsznce2YdloXeku9iz5KL9ffNmmmSabHTKtNe0zvmL72C/W73msj rlgQ+RnsPrFL76fdTOtwO9C0r8VB4eQF4hK/ICy8C71ZcN/KFZmiD3yjbdDy6RThv9rP5mcTERTq XyjbEE+IZG2sHq8F0Wz5iwsxTtwrCul53k6XxCBo2lxtv1gnJmir9Yf0fnwU94tdOolgvkgZlMH9 sHYf0SysULK2UZe/uSSTWbtsmi6Cjfv0MyahHYQd7MtCe5fH8TnOFa0grT7iQbLjPZTPIRyMHfgJ NL8WbmeqfkJbKoaIz5B2Mz3MuzDHbXSz2MZPY11SsR9v5Vxeo3WhhTwL0uhNN4lHqJ2YKdpBn0fT j7yIW2LnXsLatBeTSdeCxUQ6JAqw6h9wuOjEC6Gn02kJV1IS13Md7RMrqSeXaDsut6lPFHz5HFdp g6iKL+l79b1wvi9BkhZorhkO90no9Gr08hbZtHhoTSqZBO5x2E+F2Oth4gLfKW6mqbxK+zs/JzJo OJVoZWIAP9ZwQc/QukFiW2FNMv16m8nkNFn07ljxM9RP/f6J/Er146ZFMq59pP1kFBi2hgmm5g3H aD6kMwjWbQn20iD6lFvxjTxCN0SObhhjaL3YqB8zWnMQ2+hDAzus4TV2cnvDyrOMQB4BDb9R/v8j +hJ9sT5HvxNn0yVYzXvpIXqS/oLT5FmcWwmQ43WQ5njYnqk4IzpTV+qB2fWj/rBKg5GXS2NgTwth JSfTLTQLlvdP9ApV4YTKgTxuRL3JdBPSy3BC3UELsf/vo6WwAY/R8/SheFmsxR33fvGmmCum0qf0 qfa25uIxdEh/QC+nUbgDj+AW6LkXVikW9ZYaH6G3DhQN698duxR6b5w1jhgv1h9Ae8/LX3v59aez fpmUSMP5oh7FJtg3yFCfYpL/NOFPA6r8/Gs4aLNgMukyolGAnwmR1zVNRDXzl2mvM7UxD78j0jEs 9Cfn0HrnsNCLzqGh9bjUO+udkrt07hZmC4uzhdmm6HTZqtVddpnoEln1Ouyns8bn4nOTCSdRLA13 hRwJPB0ozP4BFMotZkeh+S2uFsEUFdjq1dB+HNDP8iquUf7sv10MxunQwMMo0hF68YZzp06FnjpF 6ennQs9xWHhv/HXpDLOo+fnZ28UnaPE9uvfs1rVVywhNoZ8dqUgSW+JF67Dw1iJOpNjtnUoSHH37 dZSgP1Q/zhoVZRXPRwa269TJHnDZ3NeR5OzbMdkp70cB4gVtl35Q/Y6wsKq5qUbc6wrggGbyf6sJ ONpsq3iWAsUOV5A1bGfYgbDjYefDTGFbuRUJsWOTGXu/Rjz7WmfzDNzLtosncJp/z7meefx0LrQe s/npHGTnDHVCnpiGzTuLKxH0NcDP2qaN1Y+nqGhklNWkH2yIio+NjecvPSHGEomVrINnlSoSXGmf W76MEQNoSGodTuWP+OO2H1ou0kW+aAmIowRLQkx86sC2Y9u+GFMbc4gO8SHL1/yVJTg/hoPCMVxX i7UhHBISGyJCOrQICQlvYQmKjZPpodQut51o1yG+Xbu4eEtsSg+ZGNi1W8+uXXv0tKQEmtS7uZtu Npt0S2B0S09jkRwSGRspIjtEREa2jLBEd0qU6c3JkYsTq0OCw5GYYOlUYyxxtbUwWdtaLDEsIlhi TCpRjCUmAkmQo8UVGBOH2cbEtLXEs3wf0rZtdGovobWMjxadUhJ6xqekBAYG6S3ig8zxCamplpgY S6+eMQkuOG6xCRMSZiRsTNiZYEpwJXTonuAK7xGSsDzhg4QTCd8hrUacdLW0xPIEFsv5gPxuud62 rS7E/2Hv6gOjqo793Hv23Cy5IYQkJCGB5LJJNgE2u4EEBESNiohAAAFpQEBCEkggJCGE8CFFRFTk IUYEiogUESlSRESllIdUKdJUKUWKlFKkSClFip+NllII73fmbpINHz61tvpHOMycOXPnzPmamXvO 3b1ZR9tt+oysqAhLOCId8QMjfhvxp4iPIxwRrbvvKmUvGJX9IVYvtnXYhzEtu/vs/6MmoziqY8fJ MWGnYuEdNjcMXnJRrXTPMJWB7skLf/FD5sGcH5bejg//cPfDTm9MR/nDsN0dYyjs4g3h3X0xWtjn o2p2B5YmNypeu3BlNZhZ+eRRNBmbosSWfh9pxz6SkdEy0U9oWp33XCmirxpT+1rYU/GxsfG1byl8 exeF9+HO1n1fQmxsQmZvhWvfjo+LTXgqXLtH/9OFqOiI8JiY8IhocSY6IiL6okc/qPJAvvp0d/al Pzl+qs4G1IHe33pHh8IO2Ept0zfBXKQmfZqUuuZyxscoVlicLzouLibaFR8c5UptNip4m5b3cmq7 kCjkWZarXWQ8hZiRQepBR3RCM2uO2jVrWqwnud2cMC1sm7bw5Y4d5sRs0zwPwh0nf4hQNmoyQlpP tU433aRW5CT+1yC+dL/23HZK77c5aki/zUl3jsh5OdQZ7uzWbTj12xziZ/0c54WzW6zIlO2XzpH7 0l9fTnQmte7G/4bTKK1ubhO7KGdX84vQFV23CBGZ7kSX0SoyKqNzV4depub0zcXvl78zY8Y7U44u 43LZ4aXLDh9etvSw46//mqSm8ifVM45Pm/6nmdXakRgUL1SvPnp09Y/few8R4qeIECPENJzXWmVF zgrVPM0GBk8InxH+SPgy4+mIoDYuNalmQnViQoIr0dUmrtV2fRPFaFlZzdhxXXEdk5XEwNQBSamp yUmujmZoJH9ILIOa41YUGRoWnJR8PXU0gm8Ka+cIanV9nOt6OGhwi6BPgvSg2DSKtJJaJA5KnJNY lbg68ZNEI7G15+Ii24nse8mpUYiF2coTbvrwQ3U3scM7ILq71rJ7969k8DW7XzL0W4eqx0+XXn85 LilT23bp+JaWsZk4nQ7vlI7FaelfnFcjIkOjwtvwWqjXclp17epfDwRet5r7oJbtru4fur722dv6 3d86Ijg0IjGz9XVP/UKrUOtxcVJ8bOuEt59SWIw9uOSugtiI1kERibE5P63NVOsTHd4yWt+hloa3 o9f50+P1f7PqW016n6+Vvrh2Er9oSk2pKTWlptSUmlJTakpNqSk1pabUlJpSU2pKTakpNaWm1JSa UlP6viX+vKWHvrP+RcwJ9S9lahTFJUXrFKqlU91brSO0G/20I0BGUgz/Io6iDWqjbfbTQbSnXsZJ 6bTOTzeDzF4/3VxfoZ2uf0Ozi2Oun9bIdPzMT+sUJGP9tKA02c5POwJkJIXIAX7aoFA5wk8HUV69 jJNiHO/66WaQKfTTzbVsWane0nUItBVi/JJp9X2QMON3TBvM/zPTQcz/mGkn05eYbuafQ5u259Cm 7Tm0aXsObdoRIGPPoU3bc2jT9hzatD2HNm3PoU3bc6jo4ID+m6pvQS2YDgnghyo6KIHpMNW3IB/T EaDDg25gOjJAvhWP0aajAvitue5ApuO4LVtn2wCZhAA6ieVHMd2B6YlMpzE9Q9HOgP47A9oKCeCH 1I3lebKoM2YknbqBGkqFVMDv/5ZSCaCCZlAZc25FqRy0wrngF7GEF1dupmIkiwaDNx71K2gKlwqQ q7/+VwmcD0mlYSrKRcy1aADyaciLWD4XUMG688GfhLycJoJXSuO+Qb+U1hLWaNe7C6UilFRPLBoC KpdLdssl4PpYg8W6C/09zOMel3C/iljay+MaD24x9/Dy/vS4xih78CyUQ0Nd/7pAVycki1KhpQht lePKFB5vBbWnYVeVz7hMv619EEakvrvcB9emcb/UKPvhWgVSMUsO53oWz+wM5FN5dewZsldgHLdU wTOiymVcbxLPW93MjeW6dbN6G+a1P9bfrlsecKWMR5OPVvJYo70a07itPOCrt2uXlWweej2VLSGf ZUuB8/l6Gc/8jPp1s9sq8mvI8+sqYKys07pi5EqimKlU1GuPXNnb2Pq2rtavkit0f/VZatCez5rG g1fO1mTbVV691V599A2W3Lhf1wfMgRqJPZYKbq/OH5R+e6z5bBtq5KXsY1cfqT3TuY1mtcDvF5d7 h5rVCshN5Zqqt5U8moJ6PUqyGBJfukbPW53T07tZQwsLrOzSktKKGWUF1q2l5WWl5bkVRaUlXuvm 4mJrcNH4woop1uCCKQXllQX53ltLp5YXFZRbAwqmWUVTrFyrojw3v2BSbvlEq3TcNXVZRSVWBa7d VVJUUZBvDanIrShA5ZJ8X2m5VYor5VZe6dSSCqie4h1cMH5qcW55nZ4eAU32qCwon6L0dfF26mSl ZhfllZdOKR1X0X5YAz/DLw/xQUOyh/YpnZZbnm/1K6ioKC4oH1461ZqUO8OaOqUAHcIAxpWWVFi5 U6yygvJJRRWqc2NncFdvu6v/zbhazoWy8tL8qXkVahjTCovyCgPqIi8qySuemo+qFaVWftGUsmI0 gLGhVhEE8iBVUFLhtay6xktLimdYqUXtrYJJY1WtBl0lddJX7RKL5xeVjLfKC6ZgrvLU1AY0z5Ps 13U99yC1CK1UFExS61BehFbzS6eVFJfmBjaKTufaXcUc1y9H6dSKsqkVVn5BZVFegZIpLCguu2xE CIKl7IK5MLYSGHupckCtOQxsAsofcICuu26HfuU0HCbFCvGSeA0budfEz8V2sTFAl5Iuqi+/z7oL GrVV0Egb63PEOzo5+jlud9wA3B3SuXAK5W72TaJQ26w9g/2aCgI3Q77cf3vJrdsz4l9tIn+3/LK/ tuHftamdUpL62UD7r6FQCLZ1vXhvNxr4EHjqt30EHdYXkqY/qj9JQl+hrwD9lP4U6JX6StBP66tA /1j/BPSn+jnQ/xSSNGGIIBLCKZygmwnsskSwCAHdXLQkXYSLKHCiRTQ4MSIWdJyIA91GtAHdVnQF fZ3oDcnbRT9w+ot7Qc8SPwR/trgP9BxRA/pzcQH0RYf6IyuaQ1f7RbWjcwSr/ZWjOXZKwhHliAYd 40ArjjhHG9BtHYmgkxxu0CkO7LUc6Y5OoDs7MkF3cXQFfZ0D+y7HjY4s0Dc77gDd19EPdH/HANAD HQNBD3L8AC3mOMaBHu8oBj3JcS+uznLcB3qO4xnQa2QKaTJVdiQhPcbNpBm3GH1IGHcYfUH3M4aA HmoMBX2XkQN6uIE9sFFkTCDdmGhgP2YUG8WgJxmTQJcYlaCnGdMgM92YDs4MYw7o+4254D9gPAa6 yvgR+Mudb2HH9rbzAxLOM2Zz0sxQE3NuRpvoj5lqdgDd0ewEurOZQbqZad4Ouo+Jvpl3mP1BZ5vY SZqDzEGg7zTvBD3YHAJ6qDkc9IiQftj59Q/JJj1kQMiL6uVNv6UpCIa7HCSRW547liILC8aWU+fi 3IoSuhFXtLsG97IokgiWp9u2ypTGvwNHXNL49zL1/kP7WBQ1eGC2RW2YT42wVEGaLMYdGGdOmjhp Io1gPLb+7KQ3olpiZ29gF+9Uf+ONTNh9cwqlFmhP/ZpjBHrWir1AcG/sPB497w0XHAbfUN+Vr6TZ /JbJMlpFG2kn7aVjdIo+oi+0EM2jZWo9tV5af22oNlLL14rtWdG6Qo+G/BzaRx5ioRfIQ3vaeZh9 ntLC1ttyLbPQQ+ThkSgHIc+y+eFj/PkBO4/cznKO6OLoOdFLotdzyYg5FvNZa6N1bGtv61vs67G7 Yg/Fnomtta/HbY7bHXc47mwbahNp62m7xM7j59h5wgiWdFqZVh9rtFVhLbBWW1utvcxtnrQjaX/S yaRzySHJVnJmcp/kkcllyfOSlydvtHvtzuffPdDcC2xt7sV2nlJs5+1n2nmHzbacZ6c/38OWoHlq +fcaHdT5Xxn/+cTvIaroRRy3nByxghGlIsjkCNTcYeDEGQ4/TqUI9uBI+O5AijMGw4Mt+O4wchk5 8OAk+FkrSoaXDKM0Mwe+kk5as17N1qgzEqJqZyJPbwA8zLsP+WBADuiDyBF3PfmASsB8wE6idERC 7xHQZf7rPQBZfsDZNuMW5LMAiwBLAHMBKwCrAev8+UbAFsA26DqOfDcA0cF7Cvl+5GehZz2gD2AA APeMDJzWM8YgHwcoBmwCvALYDngdsEeP84R4U9NW+cZ5krxehg7eLE8HX7nnFm++b7pvdprTe95z zHs+LdY7WoGn2DvXM4ZhiWeMb57nFe9OBWmdvR8xhHpH+xbYsmluwCnvibSDvls88dCtIMYPm1BP Qbi3ByAz7TjkjkBuBOpXoZ1wyITX9cfbH/0Z7ZvuzU/bAJ07cD3d25uhD/jLUO4KWsEAlFc26ud8 9HNNQHkRQznocQyLPAcAs70bGeZ5N6ZtRb4efVvv7+PrgD3e3X54i2EvaAUHQB9g3lGGY6CPBZRP glbwyf8Dx7yn/fAW2n3LMx20ggugN7EOex0wv2mRGN9J9OkY5t2/Lmmey+Z/mC88bSSgwhefNhPl Vb50hrXet3zQn7bB19WzybfJM9Sev7TNgeALqRt/2ilfH7V+yAfwOtp28QrWpDfDMX+/LNQD1K+v va496tcxcD43Nej19PT29m0PWLfL11Gtvb3+E9Du61jzwQxDvWW+PShfLn9l/RzY817Ur0T9A5jT uX5Y5IfG5QY7WcGgyuVcXg1YFygPmw2UX8fyC2A7Cqq8W/ywjWGBH5bh2jK+bvNXejf6DqO8BvlK f34M+XbM03a/7b3un7svgzo5vz/W2+dh737AoQD7PcTQYL+HGPZ4TzAcg7yCOvs9A9s7E2CnX7BN nk7TQV9gu228/ifZJnqzTcIWr7h+BjRiCscGN19nO663Z6dNw55rGC6PK3V2fiPKJ1EG7TuDci+U P1HXfZTW2fdFWqgvxLfAd4FluwHq4hHodB3lvt7R6U5V9hnpus9Ii/WFpLkB3XyUrqeH2vKq7Jcf BHn4XdpYX3h6LPxqDvxqMcqFKFsoP4TycpRLUHajvNAXn96N/TAGfhgDP0xKm+nrYPtdugf2O8u3 J70zfK2rZ71vU9pWX9e0fcg3+Ho2XEf8ZT7KDfFqBexuhYqBDLvQVoPfhiu4wjY2XR3Sqi+DfX6o 8/mzyD/jmJzvq0Jf6uROebNwfSjkRiAfk3YO86eg1oYA29rfyLZOoqygLrZh3WCzNRyXutnr1Plw 52XKH9gn6u4t+zC2rVgLf+7pkOFmuMU327cMsb0r4oOCARke+FC+HTMyOnOsWuabjXjR35OO8lCU MacZ3bz9M7rVl1+5Ql7FpCrYcd29aJx/7q8aI3APXJBxI6BXRt+MQciH1c/75feIC7bv1PlUxljv aYaRoEc2XPfTV/rWZeWr+QJDnS8oP2BfyCj0LcgoyZjjS2eoQHszcQ9ofE84n7Y146G0fRkP1c1L xkJf14zF6WpOR2esBSxHeVVD+fJ7TH3suTwG+cf/H96h6RStf4wzLOHsiZLIwAk0StyPM2YsTnl3 0iLHUJz1qqRHPktL5Dr5vBYiN8ndWpjcI/doKbLa0LRUdEBqYw2n0VzLN8KMKG2CEWPEapONNkYb rcKIN67Tpho9jJu0x3DKy9eWGuOMQu2Z4MnBk7W1OJfFa8+Zd5vV2gs4I2zWQxv2i64oQBvSklYh dwFSQa9F7gVkArCfdOUAsAd04yyRtAF0lv96MCDMD9g7tg9H3h+AvaQLe00X9p8u7CNd2F+6Kv05 9pMu7CNd86FrM3LsK1049ydtRb4a+Q7omQ6IAcQDkgAdsKdPR94V0BMwGzAPsABQBViGs5UbM92D euEclYPTWTFOUXNoAS3BGWo9baEdtIf2k+6+kOJM0VMw/pRgd21KWIoDVIi7JiXcfR6U7j6TEur+ BHLnUoJxNQrUR+5DKeEpMaBOuve6L7gPgDri3oXawahhuLe5T7t3ct1N7jPuL3C11r3WfdC9AdR5 9wr3IfcJUF+4q9yvu5eB+sz9EGrvA7UEuje6cbZ2L0DNTe7toOa4C93L3SWgKt2jUXvdf9w2BT/n IKMUp38nn7nDYCPh2iyclEJou/ql5ITPAOhBQi2RhXOrhXW3sOYW7MWCjVhY48QTyNvY1xKw9084 a4MF+3J/hDwVABuxYDsWbMeCXVmwFWuwP4eNWbAbC3ZjwU4s2IsFW0nBecFdAzgPGkfYFAMAO8OK UMoIAM4RKThH4OxHKeXUMXlt8obkzclbk3ck70quTt6XfDD5SPLx5FPJZ4G3Jn/mroTEueTa5LVu h8KA2uTN7mB3mDsK8JZ7lnuue757EVZnhXs/Vu+o+4T7NP8G3ac65kGv0T8nXf8HVsTBK2Lwijix IuHUjFckmFekBa9IGK9IS6zIAIrhFWljDMOKxGMtwinBjMSKJPGKuHlF2v8XW9L4tybVKnegIMw2 PNHC6c7Cqc7C6c7Cyc7CyS7ZTUFJe5L2Jh1IOpx0LOlkcqz6hFb/u/539PEL/QvSRASsUTcGwuoE 7O0ucrC9STPCjCDja0v3wcnc+hZO3aH6o/pStPoj/Ulqxs8VQ/i5VnPnXudvKdT5jvMAhTsPOQ9R pPOw8w/UyvlH5x8p2vm+832KcZ50/oVaO087T1McP9Fqw8+pEjBfm+gVnrVw9UwFMTPb5XKluryu TFcP1xJXlqu3qz/wYFdOu7Wu0a581wRXmavSNavdvnb7XHPbbXbNb7cZqda1wpXjWuRaDcnB7dYi bbbBZf8L1NigL1/pUpoC9CzB9RxQi8FZ3Dippx06og4Z+mr9NczFG/qbFK//Sj9FicZMYybdqu4Q 1MtMMN10Gz+rjQGE+5+0RdXXd6A+7gr6On07SX0HdMVyHfVXr2PJxfOhPsGlpBDAONKs2eqJGD/B hQ60oawtq2HerDEUYY1AOmAdBhxTKWkOUt+kQUnDkkYmjU0qTCpJqkiayX1YDt3N9J/oP0EfXtBx F9Nf1F+E/i36FhL6q/qr6OH/olcSY6smJ48qmHtoIprN16r5jjeYWvqj0zcHLfEtyk5YjbQOsJEp OwXSVyurtOUy/paryKi07Rr8r5u+rI+X9+9afblaf9Z9/b5gBYLZC4m9UGMv1NkLDfZCJ3thM/ZC k70whL2wObzwA2rxla1Y03vri2HLIdgDxBK1RcwJALoKXIt/LdlAXXq745xnt114RdqAVEdvRrpS YmHbxUgL225te/yqV+20o+0p4OVIjfm72u6rp6vbng248hlzzn2JzsBe7WtbC3yQ8b+fvnzU9njt Fo806snCy8YYOLqvO65/O6l4UX//+BFiz5O4iwQ733a+Ddvc79wP23zX+S5s86jzOO4lf3b+mSL4 PhFpZpvZFG0ONAdSDN8zWn+t+JsDGAQo4QgcTeo7SmtpEUo9/VE5muV2k/rFao2ONMhpYXQepch6 ORWBn4KvYZdnt8+txXNr6rs6TvZBYh90sA8a7INB7IPN2AeD2QdNvhM2/5Y1qdkgng3Js5H8HWtS 86o+K0B0ooM8hzHMU99YU5851DbwNMNeJ61NAC+eV0nTMgN4Xe110voH8IbyKmnaBD9PJ/PfsjVl ZTHXXBuDNRFr0liTzpoEa3KyjmbXrO1Qf4cWPXsc/dO4Zwa3F3TNGkJfpFf5xyK4n45rrtHXkf3y nlytxlcbufKwFTSP19P2nNa86rbPafC+Op6Ovd9yXs9AuTX2atI2P+/b86sv99/Aq1eO/qtdVWM6 6Ld5e0yxzPuMjrLNB/C0YKoJmCObl+m3+UBef7/NB/Im+G2+jveftfhvz2b/PX/6vlq8RltpL+/F 1epQDM7aMThrt9pJ2ZF7vq9Jjdn5O+fvMLoTzhMY3V+dfyX9q+8KaQttbzinRGDXFj2LsiMOIR1V OHoo0/W5/8rRgNJlqUEy8hYbAurVXw/Qd6WuAE7k9sZJ+ajz984j33SE4bUM2VGzkeYhzY4IjwhX pYjDjMcwTrdzP40UtaCurGrYkg0y9WlexN46jQ366uRYT4CGqNnhNeE1EbMbJx7hQeepr7E/0rUk Pn1v9EeSOP5N7DXaSs2D8vJAru7UdU2dgOc24pbohdo5lIsbcQ/q+/TRKA8L5IoeIlNX+6ysRtzV YoXogHKHAK7uIFEVEOHiAsYWrq/Rn8XYntPXIeo+rz8Pv96ob8RZdbO+GSPfpm+jIIz8DXLquzH+ Zvpv9f2Ijwf031Fz/V39XWqhH9YPU5h+RD9CLfXj+nHo/LOuYqJlWoiJiWYitTKTzWRe+S+LGv/d vqiT+6OMH/8O237yO2n78e+w7cXfYdtLvsO2l36HbT/J0amzikNa3bfV2jCvA2KWRp804rn43HC0 ES9WU7vI6ka8cC0EpVca8YI19e2m1Y14Ol1AaWEgD2fBmoB9XRv/vu5swL7O5p2hkwH7Opt3gvd/ PRvxjvCZKLUR7wDvIyLreSqSq4hDvA/ReB+i8z5EYB9yDLvh49iNBDXykHqLdR5tZL0KPxHAt+mD DVam9jj1q/5oAP14Ax0o46+7NECnTb/XyHrUuFJJ/fBHlPpmII+sbYMcRqHktpD9bFSjYP5r1sH1 5UZ34dCTRC26UbZZ8n1NASeFr7jP0NZrH/Hz1HKMG9tz0kJD60GVLwebrwfAyMvKY+tpLbQQUMK5 zXNSdnD6d5iOfaetf+P0rZ2xvuru84QWxXbfm7DaIV5AJlGzsqtDSLCfzmmAkCjKdvb+5imE/p3a /1/6huf6b+RTQZtIC5pdD6p8OTTmj7lSxhnbIAu6Dup42cbR73E64YfvWfqv+5T6vvP5gLOE+nTO WVt28WRg+hp3XbXD0NhL1X2s+lK3uvuanitbMY4Hzmc8RaYzrTE/FXgC83PUG7m6y5HN/BTgIpkH nOXIBd7q6M/8Fqqu407gkY7BfFXJTOKrdzuW8FVFX+e4m+mTimb9g1nybr+8urpLbABOV2/56unG LqY/YXq0wuKgwo5ujHfzVfRWhCi+CHGsVFguZEyM1fPYXWK5wo4xTGcyvsAcpWEHa8tRtbQaWa1o P2c6sFtxwD+qaG7dzbXcMp/xQsbqe/mj1VVttOoD8G7GdosHua1uCrPkLscXTE9nzD3k1nepunov 1t9L1dV78Vr04rrHWbKKaY8fr2S+0lnFGtbK1cCzFNbnOR4AthjPlCeAz8lngTfLi5iZMgn70Beo eRYHDY/Cap5BVym+4uCqmnknj3oH4wXctwU2zX1bwDOwQF/PMzOGZ4P7qThalSjjPu9m+iDTm5kO Uf1nGQ9ru+dSJ8bKxsovdQeuvDQEuPCSWvfBl54H/ujSU2rFlSXrSy4eUbTCdL5WPZc9zxZezXR1 rdr/LVNYD1d8bZPi6+G1WxmfVmvq56helV+ElWqh6qpWzvKhtWWMb1Qc5nu4bg63nsN1c1Tr2i5/ HyxFc93R3Pp5bn0H669iPbu4FQ/LVNmS3OfztRsVn0cUbmMlD1r5zhFuMZxlYhTW3axndC3PocJ0 njlVqldalaKhExroFM/GBtbmZD35sjXPjJKs4RXp658x1cPjvFI1vII1bF01bFeh9nhtC+dRe1jD Xpbsy/NTo+yQFvJ4Y2z97EE5yne0GL5areyWjiqdaHEj9/YI81cyf7V6hqP49Apb8j75K2h4QL4K 3F7ZLUZ6hEfKFqhsldQ/7dJKxpt5D9+Z6d1M22csPslcmqBDw6Uwpg8rjBOcouczrrBrXfoHsKEk a/nJk7aWNdjnqPMs019h9IDqzk2YOxUNcpjzOeNfcN1ypl9g/AfmzGLaPg3a57qfMN7C+LeMD7Bk FePjzFnGmM+VWgzTZxi/rLBuP996zU/jdCJu4xnew96deWkYam1TGPxBzI9UtKNa0YaLOTtVTFAy tMeBU5ne5uIepvuruoqGBpxt9feNHMZZCquVFVEqQgpLvW8GnKP0KHmxXGE93xjI+GW2vWqm16q5 4ggzwJilOEHRHOFV5OllhKqrQTnM38+YaWMvx8PpTFexNrYu1tDLzznKV1nnRXWXya+dCLziooqr lRd/pu4yF3/NVxV9h2MI34Nq+R70At+blI8/LnH/1O+79DSw1/E5a76B6z7B+sepq8ZzSoOhtFUy ftW4X937mJ/P9GA1w/pg6eK72zus/wjjam7xc8a/UFfVtyT0Sql6frfRj/EtwBHGH5UGoxX7LMcE 9tbV7I/p7KH317YEzmK8l+9WESp20e85gu1S9ylgdfb7hGPCQtazQ8Vh3OkUdipM1exZo5VH03n2 69FqhkGr+1SEsii0quzfYJvvY/uU/9Scpvyd7XM0410sY7FNuhn3Yj4/X7WfmiAeKZlFjGcqjB4o fJLxDtbcR2kmuhTFrexkjN3CpdG1HyjMet5i/Abjjwj7ENRR9Ius4SbGG+w4Qeqdwoe0Egp8p7AP v1M4rP6dwnh+L1D9noKBXVkLaokrDuapPVoQNcOeKozCySRZ/6ahzs8SGr9rGB/wlqGGE4Kdh1JE Xt6kMqpgPJPxnPziovE0f1xRSS4tYrykqKSoglYwXl00pbSY1jHeCMFc2sJ4W3FpXjHtZLyb8VuT CvKLaD/jQ+VK51HGJ3jsej3W+Z1F4t2hwjIABwVgRwA2A7DwzyXxDlNhIwA7/TgUM+AmL3W96luP dr0yf15pv8dHC+1dqzYSuBnySn9eZefGATsP9kAeefM9dr3Qs/63HzfZ/Jb+txFb+t8TbDlLnelI CxnA+ivUdwbJERQS1DwoNKgFf7b0TxXdtQTN4jcHd0FLDLnIg95nUV8aih4rL3GIcPVNTaZur6f6 1FN31FN966l+TBloMZJiycKceFjLp6zhM679d65Zw7U+5xpfqL98AyuLwSwmCZwk9HMimmvFcq0o lm+t5NWpgEJEK9YTyXXVp4afolUSQSKIgvibmE4+dQpjjnGfzhYr7D/+EyyCeQ8dwvMACfGBESme UBJGlBEFN4g1cKJU3z9XEtowWi/ihSWSRKrwCK/oLLqKuWKeeEjMFwvEIlEllohlYoVYJdaIdWKD 2Cg2ic1ii9gqtoudYpfYI94S+8QBcUgcEcfECXFKnBFnxUfiE/GZ407HXTJN+mQnmSG7yOtkd3mD vFneJu+Qd8pseZccLkfJXFkgi+QkWSonyylyqpwmZ8h75Q/lffJ++YB8UD4sH5H/Ix+Vj8kn5I/k U/LH8ln5E/mifFn+TP6v/IV8Q/5Svimr5W/kO/Jd+Qf5nnxf/kV+ID+Un8rP5T/lRUMzpNHMaG60 NFoZCUY7I9FINlKM9kZHI83wGZ2MLsZ1xvXGDcZNxghjtDHWKDRjzFizjTnSHGPmm4VmsVlmVpjT zVnmHHOe+ZC5wFxkLjaXmSvMVeYac525wdxkbjG3mtvNneYuc7epPvFcL9qKtliNBJGA1UgUiaSr 3w/GanQUHWFFaSKNpOgkOpEhuoguWNP7xf3kFA+IB6iZeFA8SMHiYfEwmeIR8Qis4VHxKDUXj4nH KFQ8gdVsIZaKpRQmnhRPUkvxtHiawsUz4hmKEM+J5yhSPC+ep1bip+KnFCVeEC9QtHhRvEgx4iXx ErUWr4pXKVb9rjHFidfEa9RGvCHeoLbiTYFTrfi1+DUliN+I35Al3hHvUDvxrniXXOIP4g+UKN4T 78GC3xfvU7L4i/gLucUH4gNKEX8Tf6NU8aH4kNqLj8XH1EF8Kj6ljo5BjkHkcQx1DKU06ZEe8kok 8sl0nFLTZWfZmTrJTJlJnWVX2ZUyZDfZjTJlT9mTusgsmUVdZS/Zi66TfWQf6ib7y/7UXQ7CzqeH HCqH0vUyR+ZQTzlSjqQb5Bg5hm6U+bhL3iQLZSFlyWJZTDfLEtwxb5FlsoxuleWynHrJCllBt8lK WUm95XTcE2+XM+VM6iNn4a59h5wtZ1NfOUfOoX5yrpxL/eU8OY+y5UPyIRog58v5NFAukAtokFyI O+mdcpFcRIPlYrmYhshlchkNlSvkCrpLrpKraJhcI9fQD+Q6uY5y5Ca5iYbLLXILjZBb5Va6W26X 22mk3Ik92yj5unydRstdchfdI3fL3TQGdl1NuXKv3Etj5X65n/LkQXmQ8uVheZgK5FHskcbJ4/I4 jZcn5UkqlKflaSqSZ+VZmiA/wYlvoqyRNVQsz8lzNElekBeoxFCBvdRwGA4qM5yGkyYbIUYIlRth RhhNMSKNSFLvpcTTVMMyLKo0XNhVTjOSjCSabrgNN80wUo1Umml0MDrQvYYHe79Zhtfw0g+NdCOd ZhuZRibdZ3Q1utIco4fRg+43eho9aa5xo3EjPWAMN4bTPGOUMYoeNHKNXHrIGG+Mp4fNaDOa5put zdb0iNnWbEsLzLvNu+l/zHvMe2ihmWfm0aPmeHM8LTInmhPpMbPULKUqc4o5hR43p5nTaLF5r3kv PWHeZ95HS8wHzAdoqfmg+SAtMx8xH6EfmY+aj9Jy83HzcXrSXGoupRXmk+aT9JT5tPk0rTSfMZ+h p83nzOdolfm8+Tz92HzBfIFWmy+ZL9Ez5qvmq7TG/Ln5c3rWfM18jdaab5hv0HPmL81f0jrzTfNN 7Pt1nAMmCpdwiw4iXWSKGrFQLBbLxUqxWqwV68UrYpvYIV4Xu0W12Cv2i4PisDgqjouT4jTi5VlR 4xji+IG8Xt4kb5W3y35yiBwofyDvlvfIPDleTpSPy6XySfm0fEY+L1+Sr8qfy9egwy1/Jd+Wv5W/ k7+Xf5R/kn+Wf5V/kx/Lv8t/yH/JS+K0YQqXEWG0NjobI40xRr4Zb442x5rjzAlmiVluVpozzdnm fHOhWWUuMZebK83V5lpzvbnR3Gy+Ym4zd5ivm+o72BM5khFHMo0jmc4xTHAMc3AMkxyrDI5SQRyf nByfmnF8Cub4ZHJ8CuE41JzjUCjHoRYch8I4DrXkOBTOcSiC41Akx6FWHIeiOA5FcxyK4TjUmuNQ LMehOI5DbTj2tOXYE8+xJ4HjisVxpR3HFRfHlUSOK0kcV5I5rrg5rqRwXEnluNKe40oHjisdOa54 2OPT2OO97PE+9vh09vhO7Oud2dcz2Ncz2de7sK93ZS+/jr28G3t5d/byHuzl17OX92Qvv4G9/Eb2 8pvYy7PYy29mL7+FvfxW9vJe7OW3sZf3Zi+/nb28D/v3Hezffdm/+/EeoD97ajb74gD2xYHsi4PY 8+5kzxvMnjeEPW8oe95d7HnD2PN+wJ6Xw543nD1vBHvb3extI9nbRrG3jWZvu4e9bQx7Wy5721j2 tjz2tnz2tgL2tnHsbePZ2wrZ24rYwybACs/SFNFOJIv2/1fdeYc1sax/fLObDZAAAsGISJUigoFN 6AqK9N5FBJQuIFUEFbARBQvFRpNeRFCxgooiB+uhWJByAEFEmiiKchCVovjbjBo553pu+eP+znOf PM/mndnZdzez8/nOvrO7E0QFUUXeIQnIYSQdyULykCKkBClHriBVSA1yG6lF7iGNSAvSjnQhPUg/ MsRuFUR75B3RnuiEJKBL0eWoPmqMmqP2qDXqhLqg61AvdD26AT2EpqAZaDaaj6t2KXoerUAr0ev4 Ni2IHPor2oA+RJvRNrQTfYr2oc/RYfQNOoZ+QKfQGWQIXUoiI9IkIZIIiYnq45YryZ3kjTZTFlDW UjwpvpQASjBlIyWSEkXZTtlLSaAcpBylpFOyKHmUIkoJ5TTlHKWccoVSRamh1OK/ddP/GHHsPl8c cCcBuJME3EmBXl0a0LcQ0CcD6JMF9MkB+uQBfYsAfQqAvsWAPkVAnxKgbwmgjw7oUwb0qQD6MEAf A9DHBPSpgv5WDTCoDhjUAAxqAga1AIPaoL9dCkhcBkjUASTqAhKXAxJXABL1AIkrAYn6gEQDQKIh INEIkGgMSDQBJJoCEs0AieaARAtAoiXob60Aj9aARxvAoy3g0Q7waA/6TAfQZzoCNlcBNp0Am6tB P+kMCF0DCHUBhLoCQt0AoWsBoesAoe6AUA9AqCcg1AsQ6g0I9QGE+gJC1wNC/QCh/oDQAEDoBkBo ICA0CBAaDAgNAYSGAkLDAKEbAaHh4OlqXjzC8YAKoTLoMnQDaoBaoafQC2gM+oRHLN/iH0gRwvBI TAfBYx081viIL/cgk/hyHzKNL5NJsfhSghQAwSidFIgvVUjB+JLxEw8fgIcJ4GEKePgEPLCAhw3A QxDwEAI84BEcKZRdAlhhHGsjxwrnWJs4VgTHiuRYm79bvJYcywpYePyGq84zCMLV4S2+1zH0HUTE VQKPGnGlmIa4ccJvsMcnCNnQfEgL0ocs8WjaA1e4CDyW3sepu05ogP0KFkGYIEFQIDAJOgRjgi14 Mo5IUcDjwmPAWsyxFL9b8APcygDWQ47VyLEecawmYCEguheGm9kp+CYEU6zhftxOA2VaOKVbOdZv f9iuDWx3C18mwbfxZSoo0z6rDA2+w/YH38Xj2Az8u4Pj6THH6uRYXRzrCcfq5lhPOVYPx3oGLC5I AG8dUt9GKXTgenxvOfj+6sFec+Ba8F5bA57KxdMNIDcXxq9u8GUvx1cfsNjvPn593jcfPoGXLIXL IDJ8Fj4LzYHPwxcgAbgcroCE4MvwNUj42wy8wuxZfcC7chC4g8x+964AX3EaPo37rMDLI3A1XA2e G4bhFHA3kv1eFTtO54IQMGJDhmS+zagmDuZSk8B91ECS4O7iCnB3ke3fHLwlJQ+pgbECAQoT7w/w FocMf7dINNAiVPHUOzyG7wbl+JGdeO+Br/v6jQyDUQN2ZAmBGJGAb9kDxkuEoK93MInwEH6k7BF8 ApwP9ovidfx9HAWMU8D3wG+5zznvA+ynUoA1yLGef7dI0ezS/7Ruvo9DfZs1TLQW/xYGuZBoDcYS rSLxKMabxn/kI3DB+SzRMjyrFCYQGBSMh4Qq8SOwKAphniSyEolAJLA0YQIx3wGzw5bMyhErlNgl BumAjw3kBSZFDQKTmfpCy9kfTHqWM6KwUobjeR7dhOB6o7jnI3z3pTQGCRvzWXNZGIt4G2Mhp/MR mADDVFX8EPd78eWmtngGloID3o/xcY6WgOLHtQUcJrKKSKLCqxwYVEyQneCmkld7bvIPCPGLCA1h CGD87EwuKpe9r09waIgPQwITY+eQqXM5M0HOnnWSIY1JstcjVJEf6x0Dgn3pDhGewWFStgYrMYl5 fAx1BoZpMrQYahjDBU9qYgxOEost/68cGR9GYa+nUIlWNrb2jEWY3NekRIhBQBh7/kVDByMpIwfr pdpaxoZ0Aw2GEd1IQ43BkMNkvv4isZ/+IgffcPZ8jRiLsHB2DRNQCGER5kB4PhlmEQjQgVMxNkF3 0itfP9z11mpsw9zytL1qDVXDNTmWMXyPRmaMQqm30ookrl2WXDTx5mLpp21xeQrzL10f6va4oebz W0TQUu/2hcGqet2nrOIa9Y58qiK/UPp8ePNyh8t3LpkeTXAKSt1TnrptN52rx2HdmOqejbFbXXz6 PviTsbWunjoTrgz3Oyejcrh6npSGZU2+i3MgHx97C5HX2x4mTK4+6VyNHaiG3L06smxY4zmZNYeT ZPvzRap8Kz91ZbqJtkqY8tNHTtIepx0XLao1KE+MKGnvQaX0IdfPBjNDD7KKLuzTubF6t0nSxPrc Rq36qOonvU2x2/wcVeTeS7d0nS97dzvSV+tZQwmM4BwVsQg8eI2gmDhepeL8RBpRuFdBRc6KPjQk Nj5XrW4q9nbM+0sGoA2JyxBFMNouYRm1icf2xmHkEb3pzdPlSudvq5fPwRzZBSSJVpgFZpZvkm8U b+AfERG2VEXFOzxIOfj7eVL2Dg1WCQsMYOeqfJtQdJMK5zSyzyI4iXirVMaLYM4kbhxMFOUiEIiW mDlm+j2NwfE633awZcuWn+3AN/yfeI7AqOzjlSPyYuTvLhHuPwGJsFvJSjovn6BFiAs/1zqrL5cV l1zRFOSpCxzL3VdhrsOVpAo1v7o4IuFqKZwku91pTcuvTP2RlBlhj3YUCZ+qnN91VSlvXuVSu64n 5gLRL2IH29IqHOMEopU8j8k5r9CwCi6W5+23k3wE/eK/gOlR4GSwg5G4U21Pa7r6vnO69/i/NFEl vFWTe09bBYqGNA9La2RvHwo5m1iiT3c2yDyrX2ULJxyLh9OLPRr7RD73RraWLeeieelzB3OZR0uZ PomlRWo1XxTzCKC7vZwRFo5xDtVbNdxlURAz7UAjd34giR5+ctJi6fusCqfVV1nCGqlFReXT3KO2 V5/tGJpPac65JbApUV/xTh8uY69xGWv9IWME8pKos+1RMSfY0o+n/ixjUf8VsZDBpL9CLzp7vY+v lEOAXwh7OliOkGEamBpDU42pps4WMg1Mm5PEYnf/fwjZt+LIXxT/l8J05FOoRlUvclWhzbip0PNa sfG0N2258qRJc+3rkdpjF+TtIqs7788hCQseD5qfe8PdynH/gJVtR9KDAs/iLdRMsZIRvoiPJU5R LxQ+OjRfiPZ+9j4l/crrxyYTQbrv5PaVXyffJZYkb4sz3SzmaXxq/p1or4Sbt9RPTTuH3vWmHDXD YhfE9OzcZlNhEuy+Vezc5Y9pVPu3V5ustAc3PTW11hE+lc6nfT/Brtetadlost8w5nHSyiXHoLpL 5tqNOe0WAjnZVqN2hXtODWSX6LYVvSWLmJZOXbAuzuC3qBkVfgfVnTdtc53Rat8vSEevGcA2C6E0 uTPb1UP2+J+WEtFSmBErFLhQ/F2YPPAacfsZqMgstdo/Q2YMyz94Hlx7+PDVlMRCEU9NNcyOvVqQ iOvFcWPM8M/nRxVjsJMoVVGVoa6troSpYZraquoYnaGx3pOu5q2B0b00vNbTtX2YXgxvH0xdW0vt DwJ4T/BFQ3MFzZlQr6msSqNdtcwkS2JOXwXQBsMlMB+XwHij/0gA8baMt2S8EbtjWnRVBp2Jd8BA Al1mSaA1hovgLAlc/u9J4F/4jviZ3p0odTjcs4ww47mW5PJq/Shvx8fHe1ogO36BpuNN8xSGElW1 lDoMfkUSIl+pHhk/2ef3Ge4qFrc2MFq7wKz/mQ1tdMfB0X2CDawzx6dPnHR/n+5RF3OnZltWwIgk 6+bvD5K3Wni9b+cTa3cQakuzf6tePT85X+9oAbmYTsu+ZRzB/aprvKPYTMNRSHAVUh5DmzaZmfb/ dMPIrW+FUJRq4VvW3ad687nezL1LzlqDrjz5KD03Nhdx/WTeL6qMltmaqCRORXVISE2g04sDRYSn wolXKCWZPq8F19oYmSUtFqVPP7rM4+CulvKMdufq8Cb1F6vf9r6i3RapJZUva/Tc03fZcH9KUTzG Qq/jenf8q96RPVXlRcHVGuPPMucO1IPMc0R+/9GxJT6E+TQEr3jGfGzeHzJ5OOeFQceUvuqC7A9d sA8NxcUBP1EB6wO8PSN8pVZGRviHhgdERAExwzAtVQaTydBWZeJixvyWZLKTf6fO/isFuxi+xm0+ 5lMjnukhJaV/bLND0PIFbaH37/0+HDiTThN41rM0YrfoFZV85usvT2/pW8v8Fg51qa8m7284K2U2 PupfZmWRVFwdZbExy4Sr87NcT07kvsZTmwx3tsd2vase0zhe72b05NwZ3WcK/umiJcXhm5x+n5cy 8Fk9JTy/bbO7xBaj3XFatEebXNFrfvZJxRcDVDrnU2aORCzu26zi2C2MrZloTvL6fK/e3Zhhe3UR dUAPawxfLKCwsFbTWjefqXvoQYEWKc7N2omloIgyr1i023gPNdO9fjfSHSrjhj4YF+Q2uSbKO7yI PmU+ZtyoqaOVW7HFrXhebtI9wYNOOjfLeNyRlu8Ktg6vERdsDlsZqATCFyKKIfjXLPX6qZKwxUp8 DpGIt8B4TIjE8y00mUsgosAxfvnLyYPZXj43Maxb5A+k9mZ4LCtlhJ7Qud5Bx+ZzCgnDRF4JMuQA ReLhjAG08g9axl/G8tBzWpQ+KEf9pNhLdkhdM3Acs/2qZWaYCWaUb5C/Mn7Fv69lnNXheNNmSxBQ McdZKmaK4aI8S8W0/pMLOTYwBl+9/qN+wQRojfbynfLG516F6l1gXtrwil8lpNTs4yv3yBHLZfR2 gzOUmXsv6YwimfvbbDN2Sa8t01WxvFZY6pTdH1ZVWTERdcks/OPy4ZU7G3p55wXcK86Wok9RbO84 PaD3mzdfDxsq5StEip2eVR6wWD2Wqp/9+7u3b/rjJdV0Kp0yRx1k4hSPs8SO9qVwiY/1WU8kFjS8 oBYftq5b0HwwPFVxY3CW6ITYqEOb3/2FX9zEHxQmVi+6GOXtZFho92DyZZGzU3cWbGSo4j7eebaV xQz5dDyVOvAqYOhk4ZJf6pQE+H2Tj3W9L5wSkufx1Ur5PVrSvKqp1+nFo61pIm716jT37qPiZsn0 X86oGYq9EZgrCq3tVneVfphRy/Mmjj/RJpifaq27bbFpdnjTu6CGm6/DilYfWb09JSl/gSni8rGx yI8cUawxQleZV/c8XFNoPPSCjh9r0v5ikirNV4L/QLfAU5/x0IfGrS3zXkbdIVa0TC/pkTyQW0ae pi7SOzMw2Xtyp3EVl4eJr4ee9Xn919Yj5ZujOshqPMFiuxiSffyO3YMF04MmAmd8Mr7Y0pS31aDS 0X2pKxcF3D56MLU+qSNL+iyfW/Zo4dl4/928G+hVmwMh8bQzY7SYD7Tdslf3NW4oNWGoZD7p36jb Du3wMml6uK++UmSKPzzpZpHuOVhvw5eArLQ+gVKBCk1b7rbbuhiLxIXr99vv+k3zVwP6LfZ36Dem iV9b4Iqtropps/WbAZKqGDv594X7/0q98wqCLvR0mR5R3BaoPL+3uq//7jE7GdszD7tFrGXnvGkq abI8E4FJCb7i+s0xda5ZygL9I2cz3DD5TijwRUz16/1ccz7yEzNG99+XvKcquzdnbNxPbMmnmKF9 4sND1kUFN2UcGpKmjBp5Hq079+i8PrFw8kTQUb92hSfGDufjHw0qGCsvKou3WWXPO4Asmd5w6BAW svfdGixnakdbevkL6fQdE83Ud9xXHILtK4wO5ZlC5ibrBRctXl+aPtBCijUvnNxTImgizMPK2zOy ausMIVPcljsOEsCMR648lTGuukN3zDsnsXUlY8v9rJ5lu48WeMKXxPkufPqYdZHwcKGF45dJ9PYt Kcp39T6N10jJP1PvnwbCf1BvgdnqjedAWGzGV/GNPYTFJv1cfgu8j3v+15snSyDqDK3APL/4jOUm 53EuqrLv/4zq/1uhO17XAukHbrshhhrdLyvObOl6GGVnRbigHLHRNZiXevrhLzEHK5VbhQoTg70q V8P3rKWotse6o/X6Vledc84U6xUnxJdVbR1LePR6GeFN3y8HyWhdkmnfqMPcbpvTRwaGkjb8tuvm 85Qxkkoc8vKwouzCsOkPnwa2HlPm+8jVF3ZdxDonOZAcnlpZoJ3tR79rxz/s5baClpEgtaKPS5Q5 eZ9hvpmhqxROqRsO0/0SR6b23CJ7Jo+2V857ZZ2w86660rqimlfXt1P0Y1odwqXfYA1VW33dXAnz yML8zZ3CGe91rq53LqerDE3Gxd+3c3qRE5YSVKZt2fohquaUSLTX4reFWYvVSFtEvep1JYIlWaOU 2iVVjQblg5Ovt1/qP14aoV5pfXejjJD8ZoqOfeJGF2MD4evl5eet/Ory9L/sipLelTsXW/9CX2id aF3uQulHBi+VXlaNm95f0trB3GUpr2gq6+4y7PT2xNNjOQ1LQ6tjF0WQBN9slq7JYt1c5Hj5wgbd /QWbPStCCqgnak6ZjAqFfj7ADLo402NXlyhTv746R3yvkA+sSz+35mDlgPTgpfMN3hVbHdHWlcq2 ZSnni7eeLs9PixR9fGQvNXKhCrOUOyTfNVGuJv/tngbptlcSNvWZb8yefST4hu6nbK8LqHseMlyS /pCx+Av/XVe3DqsFBR1TKrkrlFfRAuupRZ8ZLCKOMLEEJhAwHLe/73r558MmPwaR82PvsC/XvrVf HoTBO3uEGj+AHykKgx+bvXYu+2Lw+4ZEBi5KoxfcfQ/2WnZqPveJXZvboHo6Wuk55jNrE16GE+aY r7jrZ//8xf6vsyjw/01+4B+cwiB/KKpAfpfsX8LqGBUW6hfuGeYfpfKnToXIIkCKS6/8mtyikjA1 Dwm+mZla2b8tfGB1wLOHW2qrBCOvW1QN7rSP5DE+hQQUjG048LnciPFyHnGn1+MMAVPGHIWh/LKy 4QVen5UPyoZ2ur6P6MzwD29dkTaTR04QkzyhfGUdLyLbtNcuvsfxy+jZRwsgu30Fviav+WSlhp9s e2i4Rzwy/ddnD8P8l56ChKzcprjtJ2TWL69uNYjenh7oqSQ+mIRpE1m696PThnhytDyv8ht4v/eY TOeVVV7Qsl1iNCn4oKfmYMZAclOruNnB5teXJI/pPd0zYXhTXuhXrlXymTpH/XXfl7gdf5639ba5 8xrjtWWR88y2mwgZvnLEyqblYggmxD15ZgUsWAFjwbI/zhGJwYLn4lmCoFUm/21XAT+/IzGrTa7F RGY3ScqPOysEfOecNShjDrh7wGSoMZmqWkxNl39okaERt2xk1J48VUEjGlUn41JWzI1N/5Nes9uK ae1z8SJhSua6X9Kf+S63KVv2QCeTegyyct25Wbs/m9Bn1bTNsvHm4akp/ukVHuNuLic9jReSaW3U ws7MlHWGoxU29ePbbp628EuKplH6J9flFjT1rdrRsXFEKNL5dfraWzLRS5Hi65tU6W8GDZW3ChDr zO6syjGvrKAP6/GaOSZLVg4qUksGPOYkCGQOqS97l9WySL9Xbnlzj0dR/jKfD7UabsW7luxw306R LB9J1W9zdtE5pJX3OKOEu3BM8UrmyW5Cb0deorw0k3RlQM7RfPWtTLP0EG2zJWlvAwQyTZRLVS9f FFqYrXSieeUOH/peLW0V9NQvFuHNS8b9tiJMMQkr8xux0P8B0RWS8w0KZW5kc3RyZWFtDQplbmRv YmoNCjQ2IDAgb2JqDQo8PC9UeXBlL1hSZWYvU2l6ZSA0Ni9XWyAxIDQgMl0gL1Jvb3QgMSAwIFIv SW5mbyAzOCAwIFIvSURbPEY1RjA3ODcyRjE1M0M5NDdBRUJCMzA5RjQxOERCNDFFPjxGNUYwNzg3 MkYxNTNDOTQ3QUVCQjMwOUY0MThEQjQxRT5dIC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDE2 OD4+DQpzdHJlYW0NCnicJc69DsFgHIXxt70Dn0ViMFhwAyIR3VjManEHJBLugFliq0hs0pgYbDYJ i8RiVWwi6BWo9vmf4fymkxylgvi+FnREqZCmcALtAboBUQtimuBBPC+cIbGDpCl0BB+MBqTKwhPS V8i8oDiB0hxqUzAXYN2h/YGuDb0ljOTn+At2BWZ1WDuw2cIhC8cCuBe4yfydE37grUL0fgsGVRg6 wl5wlfoDHgkrlw0KZW5kc3RyZWFtDQplbmRvYmoNCnhyZWYNCjAgNDcNCjAwMDAwMDAwMDAgNjU1 MzUgZg0KMDAwMDAwMDAxNyAwMDAwMCBuDQowMDAwMDAwMDc4IDAwMDAwIG4NCjAwMDAwMDAyMDUg MDAwMDAgbg0KMDAwMDAwMDQ4MiAwMDAwMCBuDQowMDAwMDAwNTM1IDAwMDAwIG4NCjAwMDAwMDQ2 OTcgMDAwMDAgbg0KMDAwMDAwNDg2NSAwMDAwMCBuDQowMDAwMDA1MTA0IDAwMDAwIG4NCjAwMDAw MDUxNTcgMDAwMDAgbg0KMDAwMDAwNTMyOCAwMDAwMCBuDQowMDAwMDA1NTY1IDAwMDAwIG4NCjAw MDAwMDU2OTcgMDAwMDAgbg0KMDAwMDAwNTcyNyAwMDAwMCBuDQowMDAwMDA1ODg3IDAwMDAwIG4N CjAwMDAwMDU5NjEgMDAwMDAgbg0KMDAwMDAwNjIwMSAwMDAwMCBuDQowMDAwMDA2Mzc3IDAwMDAw IG4NCjAwMDAwMDY2MjIgMDAwMDAgbg0KMDAwMDAwNjg5MSAwMDAwMCBuDQowMDAwMDExMTUyIDAw MDAwIG4NCjAwMDAwMTE0MjEgMDAwMDAgbg0KMDAwMDAxNjUzMSAwMDAwMCBuDQowMDAwMDE2ODAw IDAwMDAwIG4NCjAwMDAwMjMwMDkgMDAwMDAgbg0KMDAwMDAyMzI3OCAwMDAwMCBuDQowMDAwMDI4 MzE0IDAwMDAwIG4NCjAwMDAwMjg1ODMgMDAwMDAgbg0KMDAwMDAzNDI3NCAwMDAwMCBuDQowMDAw MDM0NTQzIDAwMDAwIG4NCjAwMDAwMzk0ODMgMDAwMDAgbg0KMDAwMDAzOTc1MiAwMDAwMCBuDQow MDAwMDQ1NDgxIDAwMDAwIG4NCjAwMDAwNDU3NTAgMDAwMDAgbg0KMDAwMDA1MDk3MyAwMDAwMCBu DQowMDAwMDUxMjQyIDAwMDAwIG4NCjAwMDAwNTczMDEgMDAwMDAgbg0KMDAwMDA1NzU3MCAwMDAw MCBuDQowMDAwMDYwNzA1IDAwMDAwIG4NCjAwMDAwNjA5MjYgMDAwMDAgbg0KMDAwMDA2MTYxMSAw MDAwMCBuDQowMDAwMTYwMzQ0IDAwMDAwIG4NCjAwMDAxNjEwODYgMDAwMDAgbg0KMDAwMDE2MTQ0 OSAwMDAwMCBuDQowMDAwMTYxNDc2IDAwMDAwIG4NCjAwMDAxNjE1MDMgMDAwMDAgbg0KMDAwMDE4 NjY3OSAwMDAwMCBuDQp0cmFpbGVyDQo8PC9TaXplIDQ3L1Jvb3QgMSAwIFIvSW5mbyAzOCAwIFIv SURbPEY1RjA3ODcyRjE1M0M5NDdBRUJCMzA5RjQxOERCNDFFPjxGNUYwNzg3MkYxNTNDOTQ3QUVC QjMwOUY0MThEQjQxRT5dID4+DQpzdGFydHhyZWYNCjE4NzA0OA0KJSVFT0YNCnhyZWYNCjAgMA0K dHJhaWxlcg0KPDwvU2l6ZSA0Ny9Sb290IDEgMCBSL0luZm8gMzggMCBSL0lEWzxGNUYwNzg3MkYx NTNDOTQ3QUVCQjMwOUY0MThEQjQxRT48RjVGMDc4NzJGMTUzQzk0N0FFQkIzMDlGNDE4REI0MUU+ XSAvUHJldiAxODcwNDgvWFJlZlN0bSAxODY2Nzk+Pg0Kc3RhcnR4cmVmDQoxODgxNDYNCiUlRU9G --_002_DM2PR09MB0446AD92D6F8149E41E0DE1E848B0DM2PR09MB0446namp_-- From nobody Sun Nov 27 09:21:38 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFFAF1294F9; Sun, 27 Nov 2016 09:21:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H6k91xeYUTmD; Sun, 27 Nov 2016 09:21:33 -0800 (PST) Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0106.outbound.protection.outlook.com [23.103.200.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CB5F0129474; Sun, 27 Nov 2016 09:21:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=JY+EkKGo+cLtze+Pgm3UnGdNL5GHFAK5Hhso3V57oEU=; b=ZNquYg+dGczglOIdmyFkz3E7sBDJ+lsQXOxRtiDDGxfW5BKNL/f6lxW7qbDI5os6oESF8FrK7jwIY1qlve94sfmXMSs/oFbwnd/iREg3VDfWn7u7CujLlAZVOUM/ooBezxGed8d33J+NQJkvJtpux1svRt12/Y8kHfqYm/Fam58= Received: from DM2PR09MB0446.namprd09.prod.outlook.com (10.161.252.145) by DM2PR09MB0448.namprd09.prod.outlook.com (10.161.252.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.747.13; Sun, 27 Nov 2016 17:21:30 +0000 Received: from DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) by DM2PR09MB0446.namprd09.prod.outlook.com ([10.161.252.145]) with mapi id 15.01.0747.015; Sun, 27 Nov 2016 17:21:30 +0000 From: "Sriram, Kotikalapudi (Fed)" To: "Alvaro Retana (aretana)" , "draft-ietf-sidr-bgpsec-protocol@ietf.org" Thread-Topic: AD Review of draft-ietf-sidr-bgpsec-protocol-18 Thread-Index: AQHSNR6CtOW/YAot7EOz/vffo+bn+6DtE+nUgAAdepM= Date: Sun, 27 Nov 2016 17:21:29 +0000 Message-ID: References: , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=kotikalapudi.sriram@nist.gov; x-originating-ip: [129.6.218.53] x-ms-office365-filtering-correlation-id: 81c3487d-69af-46b9-458a-08d416e9d3ad x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:DM2PR09MB0448; x-microsoft-exchange-diagnostics: 1; DM2PR09MB0448; 7:PylJWYvxC3dbyHi/ieo8cLHI31i2XA9M3TCAGGGm4q3JUvcPPWX3GchXkZtXjbK19jhHE5Lnzla+GpRKhXXi8OBQJ2EMwwZwvAVvfK2KR0VuSBv5JExBkHH0xZmqbpqSQaIz22KqoHrMc8N0Gn8jpAzhBSFgyqGpps89p+l/vLTLnnrYGGOAOF/vM3HByqWQl/gQUHkwotOJtMov7TdWoOqzF9k++zsxyzpJAeHsgt2XD/pHn7R3wIioldAkaiMkr662Pa9RVHkx1WjtfFKcbKecQD09IWlP9F4wscnWUOQVFJ/4QEiCVkshBTms34FBurLkcIriabwnfFscNnaucBST81qq5zVlI3dQtKOqVqdgCc/tj7V8C6jVZLKDVYytHL4vT2PHE2tgFFQrQ6sHCZYV0vCB2hTLYWT+TSZE93SjtM4IoZwVFNfvKTWFFj0LAPJ0Z//uTUNO3/LbvrDBew== x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6060326)(6040361)(6045199)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(6041248)(6061324)(20161123560025)(20161123555025)(20161123564025)(20161123562025)(6072148); SRVR:DM2PR09MB0448; BCL:0; PCL:0; RULEID:; SRVR:DM2PR09MB0448; x-forefront-prvs: 0139052FDB x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(51444003)(66654002)(189002)(45984002)(199003)(55674003)(74316002)(7696004)(8676002)(77096006)(230783001)(551984002)(81156014)(6606003)(106356001)(122556002)(99286002)(105586002)(7736002)(86362001)(2950100002)(106116001)(97736004)(101416001)(5660300001)(3660700001)(345774005)(7846002)(50986999)(54356999)(76176999)(66066001)(3280700002)(5001770100001)(81166006)(229853002)(39410400001)(2906002)(39450400002)(19627405001)(33656002)(4326007)(39380400001)(39400400001)(6116002)(102836003)(92566002)(189998001)(76576001)(68736007)(2900100001)(9686002)(39060400001)(38730400001)(6506003)(5890100001)(8936002)(2501003)(3846002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR09MB0448; H:DM2PR09MB0446.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_DM2PR09MB04460C753A2AA4249C03DD82848B0DM2PR09MB0446namp_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Nov 2016 17:21:29.8840 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR09MB0448 Archived-At: Cc: "sidr-chairs@ietf.org" , Matthias Waehlisch , "sidr@ietf.org" Subject: Re: [sidr] AD Review of draft-ietf-sidr-bgpsec-protocol-18 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Nov 2016 17:21:37 -0000 --_000_DM2PR09MB04460C753A2AA4249C03DD82848B0DM2PR09MB0446namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi Alvaro, Thank you very much for this thorough and detailed set of comments. They greatly help improve the clarity, accuracy, and presentation in the do= cument. I have worked with each of the comments and incorporated changes accordingl= y in the document. Please see version-19 that was just submitted. Many thanks to Sean Turner for his help with the updated IANA consideration= s section. My responses to your individual comments are shown below and are marked wit= h [Sriram]. Let me know if the pdf opens OK for you. Also, please let me know if I missed anything. Regards, Sriram P.S. I tried to send this message with a pdf attachment earlier to the SIDR= list. But looks like that post was not accepted by the IETF email exploder due to= the attachment, may be? So I have copied and pasted here the text from the pdf. There may be line-wrap issue -- let us see. ----------- Dear authors: Hi! First of all, thank you for taking on the duties of editing this docum= ent. I have several comments (see below). For the most part, I think they shoul= d be easy to solve as many are related to clarifications. Most of the comm= ents I classified as Major are due to the use of Normative language. The biggest concern I have with this document is the lack of an Operations = and Management Considerations Section =96 please take a look at RFC5706 (Gu= idelines for Considering Operations and Management of New Protocols and Pro= tocol Extensions). Some of the information suggested there is present in d= raft-ietf-sidr-bgpsec-ops, and (ironically) in the =93Design and Deployment= Considerations=94 section of draft-ietf-sidr-bgpsec-overview. However, im= portant items such as migration or management are missing. I would like to= see a well thought out Operations and Management Section in this document = before moving it forward. Note that I=92m not suggesting that a YANG model= (for example) is required to move forward, but I would like to see conside= rations about migration, and the impact on network operations, to mention t= wo items, all in one place in the document. I would like the authors/Chair= s/Shepherd/WG to consider even merging in draft-ietf-sidr-bgpsec-ops as the= base for this new section (or at least reference it prominently). [Sriram] Following the clarifications and additional guidance you provided = in Seoul (when you, Chris, and I met), I have added a new Section 7 (Operat= ions and Management Considerations). The topics you mention above are all c= overed in the new Section 7. Additional responses noted here below under yo= ur specific comments. Thanks! Alvaro. Major: M1. Registry Definitions M1.1. Section 2.1. (The BGPsec Capability) includes a Version field and som= e Reserved bits, but there are no IANA registries defined for how to manage= these spaces. Please define the registries and the corresponding registra= tion procedures. [Sriram] Done. Please see the updated IANA Considerations section. M1.2. Section 3.1. (Secure_Path) defines the Flags field and assigns the fi= rst bit (BTW, is that the MSB or the LSB, please clarify), but doesn't set = up the registry or registration procedures. [Sriram] It is the MSB (left most bit) and that is now clarified in Section= 3.1. Set up of the registry for the Flags field is now included in the upd= ated IANA Considerations section. M2. Error Handling =97 Several sections don't have proper error handling pr= ocedures specified. (This is a management issue that I think is underspecif= ied.) [Sriram] Now there is management and operations section (Section 7) added w= here error handling and other ops/mgmt. issues are discussed. M2.1. Section 2.2. (Negotiating BGPsec Support) doesn't fully specify the e= rror handling behavior of the Capability, and it fails open. [Sriram] See my responses below for M2.1.1. The new management and operations section (Section 7) covers this case. M2.1.1. What should the action be if the Version is not 0? [Sriram]: From Section 2.2: =93BGP update messages without the BGPsec_Path attribute MAY be sent within a session regardless of whether or not the use of BGPsec is successfully negotiated.=94 [Sriram] Based on the above, there is a possibility that BGPsec is not succ= essfully negotiated but BGP is session is established =96 I think that is w= hat you are calling fail open. If the intersection of BGPsec capability adv= ertisements from both sides does not include Version 0, then BGPsec Version= 0 has not been successfully negotiated. But a BGP session is still negotia= ted and BGP (unsigned) messages are exchanged. I have now included this wor= ding in the new ops/mgmt. Section 7. M2.1.2. "=85a BGP speaker MUST NOT advertise the capability of BGPsec suppo= rt for a particular AFI unless it has also advertised the multiprotocol ext= ension capability for the same AFI [RFC4760]." What should happen if it do= es advertise an AFI that is not covered by the multiprotocol extension capa= bility? Or if the multi-protocol capability is not advertised at all? To= clarify: if the multi-protocol capability is not advertised then support f= or BGPsec can=92t be advertised either =96 does that mean that a BGP speake= r configured to use BGPsec must not use it if not negotiated? I know the a= nswer is =93yes=94, but I=92m trying to get to the point of provisioning an= d expectations =96 why configure BGPsec if no one is expected to support it= ? [Sriram]: See response to 2.1.1 above. Also, during early phase of deployme= nt, small groups of (consisting of 2 or more) ASes are likely to coordinate= and deploy BGPsec over contiguous regions (ASes). These regions will grow = over time and conjoin. Also based on clarifications you provided in Seoul,= I have also included error handling considerations for the case when BGPse= c resets and some necessary condition (like 4-byte ASN or MP-NLRI capabilit= y) got dropped in the meantime. M2.1.3. Missing the four-byte AS capability results in BGPsec not working (= "BGPsec has not been successfully negotiated"), but the ability of exchangi= ng routes is still there, leaving the system in a fail open state and poten= tially breaking the chain of ASNs. Personally, it doesn't seem like a good= result =97 please at least include some text about this in the Security Co= nsiderations section. [Sriram] Even though BGPsec is not successfully negotiated, the ability of = exchanging routes is still there =96 BGP messages are exchanged though not = BGPsec; it so the chain of ASNs in not really broken (they are not contiguo= us for BGPsec but still contiguous for BGP). This observation is included i= n the new Section 7 (ops/mgmt. section). M2.2. The definition of the BGPsec_Path Attribute (and its details) don't h= ave clear error handling procedures defined (RFC7606). Section 4.3. (Proce= ssing Instructions for Confederation Members) does say this: "(As discussed= in Section 5.2, any error in the BGPsec_Path attribute MUST be handled usi= ng the "treat-as-withdraw", approach as defined in RFC 7606 [RFC7606].)" (i= ncluding the parentheses). However, 5,2 only says: "BGPsec speakers MUST h= andle these errors using the "treat-as-withdraw" approach as defined in RFC= 7606 [RFC7606]." Note: "these errors" is not the same as "any error". P= lease discuss error handling in a more prominent place. (Hint: it may fit i= n a fault management discussion in the Operations and Management Section.) [Sriram] s /As discussed in Section 5.2, any error in the BGPsec_Path attr= ibute MUST be handled using the "treat-as-withdraw", approach as defined in= RFC 7606 [RFC7606]./ As discussed in Section 5.2, any syntactical or proto= col violation errors in the BGPsec_Path attribute MUST be handled using the= "treat-as-withdraw" approach as defined in RFC 7606 [RFC7606]./ [Sriram] Section 4.3 has been updated accordingly. M2.2.1. There are multiple places in the BGPsec_Path Attribute that could e= nd up in an error, everything from setting bits in the Flags field to wrong= Length fields. Should all errors result in the same behavior? [Sriram] Any errors that are syntactical errors or detected to be protocol = violation errors in the BGPsec_Path attribute should result in the same beh= avior (see above comment). I think the updated Section 5.2 enumerates them = reasonably well now. But bit errors that may result in change in the value = of an ASN or a signature would not fall in that category. M3. Section 4.1. (General Guidance): "When propagating a received route adv= ertisement to an internal peer, the BGPsec speaker typically populates the = BGPsec_Path attribute by copying the BGPsec_Path attribute from the receive= d update message. That is, the BGPsec_Path attribute is copied verbatim=85= . Note that when a BGPsec speaker chooses to forward a BGPsec update messag= e to an iBGP peer, the BGPsec attribute SHOULD NOT be removed, unless the p= eer doesn't support BGPsec." The first part of the guidance says that a ne= w BGPsec_Path attribute is created by copying the received attribute (which= is then presumably removed), but the second part says that the received at= tribute SHOULD NOT be removed. Please clarify so that there is consistency= -- I understand that the result is the same, but the description is not an= d we should try to avoid confusion. Parts of Section 4.2. (Constructing th= e BGPsec_Path Attribute) also talk about actions like "=85and there is an e= xisting BGPsec_Path attribute, then the BGPsec speaker prepends its new Sec= ure_Path Segment (places in first position) onto the existing Secure_Path",= which hint at propagating a received BGPsec_Path attribute (and not creati= ng a new one). [Sriram] Yes, agree. We=92ll remove redundant and confusing statements and = simply state the stuff in the first set of quotes as follows (here we avoid= using the word copying which causes some confusion): [Sriram] When a BGPsec speaker chooses to forward a BGPsec update message t= o an iBGP peer, the BGPsec_Path attribute SHOULD NOT be removed, unless the= peer doesn't support BGPsec. In the case when an iBGP peer doesn't support= BGPsec, then the BGPsec update is reconstructed to a BGP update with AS_PA= TH and then forwarded (see Section 4.4). In particular, when forwarding to = a BGPsec capable iBGP peer, the BGPsec_Path attribute SHOULD NOT be removed= even in the case where the BGPsec update message has not been successfully= validated. M4. Section 4.2. (Constructing the BGPsec_Path Attribute) says that "The AS= number in this Secure_Path segment MUST match the AS number in the AS numb= er resource extension field of the Resource PKI router certificate(s) that = will be used to verify the digital signature(s) constructed by this BGPsec = speaker [I-D.ietf-sidr-bgpsec-pki-profiles]." However, there is no extensi= on field or certificate in I-D.ietf-sidr-bgpsec-pki-profiles with that name= . Please be precise with the names. [Sriram] Modified as follows: The AS number in this Secure_Path segment MUS= T match the AS number in the Subject field of the Resource PKI router certi= ficate that will be used to verify the digital signature constructed by thi= s BGPsec speaker (see Section 3.1.1.1 in [I-D.ietf-sidr-bgpsec-pki-profiles= ] and RFC 6487 [RFC6487]). M5. In 4.2: =93BGPsec speakers SHOULD drop incoming update messages with pC= ount set to zero in cases where the BGPsec speaker does not expect its peer= to set pCount to zero.=94 This text seems to assume some kind of configur= ation/provisioning. Note that Section 5.2. (Validation Algorithm) also has= similar text about receiving an UPDATE =93from a peer that is not expected= to set pCount equal to zero=94. [Sriram] A peer that is an Internet Exchange Point (IXP) (i.e. Route Server= ) with a transparent AS is expected to set pCount =3D 0 in its Secure_Path = segment while forwarding an update to a peer (see Section 4.2). Clearly, s= uch an IXP SHOULD configure itself to set its own pCount =3D 0. As stated i= n Section 4.2, =93BGPsec speakers SHOULD drop incoming update messages with= pCount set to zero in cases where the BGPsec speaker does not expect its p= eer to set pCount to zero.=94 This means that a BGPsec speaker SHOULD be c= onfigured so that it permits pCount =3D0 from an IXP peer and never permits= pCount =3D 0 from a peer that is not an IXP. Added the above paragraph in the new Section 7. M6. In 4.2: =93If the received BGPsec update message contains two Signature= _Blocks and the BGPsec speaker supports both of the corresponding algorithm= suites, then the new update message generated by the BGPsec speaker SHOULD= include both of the Signature_Blocks.=94 Why is this =93SHOULD=94 not a = =93MUST=94? When/why would a speaker remove one or the 2? If one is remo= ved, should there be a requirement that the one that was used to successful= ly validate the update be kept? Note that Section 7.2 later talks about th= e problems of removing signatures=85 [Sriram] See below. M6.1. Note that later in this section the text says that =93a 'Valid' BGPse= c update message may contain a Signature_Block which is not deemed 'Valid' = (e.g., contains signatures that BGPsec does not successfully verify). None= theless, such Signature_Blocks MUST NOT be removed.=94 Taking this =93MUS= T NOT=94 along with the =93SHOULD=94 above, the door is open to remove the = Signature_Block used to verify the validity and just forward the one not us= ed (which may itself not be valid). [Sriram] Your observations are right. Therefore, we made the following chan= ge (SHOULD --> MUST): If the received BGPsec update message contains two Si= gnature_Blocks and the BGPsec speaker supports both of the corresponding al= gorithm suites, then the new update message generated by the BGPsec speaker= MUST include both of the Signature_Blocks. M6.2. Section 5.2. (Validation Algorithm) opens this door even more when sa= ying that =93If at least one Signature_Block is marked as 'Valid', then the= validation algorithm terminates and the BGPsec update message is deemed to= be 'Valid'.=94 The text here doesn=92t require that both Signature_Blocks= be verified, but implies that as long as the first one is valid then the s= econd one doesn=92t really need to be verified. Is that the intent? [Sriram] Yes. There is no problem with early termination since both algori= thms are in use in parallel and either one can be used for verification. In= fact, it helps with route processor performance to terminate early on a = =91Valid=92 outcome after successfully verifying one of the Signature_Block= s. [Sriram] We have added a para in the new Section 7 on performance enhancem= ent during BGPsec update validation. M7. Section 5. (Processing a Received BGPsec Update) talks about =93duplica= te update messages=94 (one where =93it differs from the first update messag= e only in the Signature fields (within the BGPsec_Path attribute)=94). [Sriram] ECDSA P256 algorithm produces a different set of signature bits w= hen it signs the same data again at a later time. M7.1. =93With regards to the processing of duplicate update messages, if th= e first update message is valid, then an implementation SHOULD NOT run the = validation procedure on the second, duplicate update message (even if the b= its of the signature field are different).=94 Even though a discussion abo= ut non-deterministic signature algorithms precedes this text, the validatio= n is still not run. How can the validity of the Path be guaranteed in this= case? Should this be the action for all algorithms or only ones known to = be non-deterministic? [Sriram] Definition of duplicate update for BGPsec: A BGPsec update is a du= plicate if it is identical to another update in the Adj-RIB-in, including S= KIs and Algorithm ID, but not including the signatures. If the first update= message (having the *same SKIs* as the duplicate) is *Valid*, then the dup= licate=92s validity state need not be computed. If validity of the duplica= te were computed and found 'Valid', then it gives the router no new informa= tion. Alternatively, if it were found 'Not Valid', then it only implies tha= t some bit errors occurred in the signatures. Therefore, the BGPsec speaker= should keep the 'Valid' original update and ignore the duplicate. However,= if the original update were 'Not Valid', then performing validation of the= duplicate is relevant and SHOULD be done. [Sriram] Added a paragraph in the new Section 7 (Operations and Management = Considerations) to include the above observations. [Sriram] Note that the above applies to both non-deterministic and determin= istic signature algorithms. M7.2. rfc4271 (in Section 9. (UPDATE Message Handling) talks about the impl= icit withdraw of a route =93if the NLRI of the new route is identical to th= e one the router currently has stored=85=94. The same NLRI case seems to b= e a particular condition of the =93duplicate update=94 described here. It = might be a good idea to mention that a =93duplicate update=94 results in th= e implicit withdraw of the original update. What happens if a third duplic= ate route is received (the first one was valid, the second one was not vali= dated), should it be validated? [Sriram] In RFC 4271, when there is a duplicate update, the NRLI and path a= nd all other attributes are identical. There is no implicit withdraw. The r= outer keeps what it already has. In the case of BGPsec, a router keeps the = original if it was valid, and ignores the duplicate. It checks the validity= of the duplicate only if the original were invalid. M8. Section 5.1. (Overview of BGPsec Validation) says that "BGPsec specifie= s no changes to the BGP decision process." However, Section 5. (Processing= a Received BGPsec Update) also says that "a BGPsec speaker MUST utilize th= e AS path information in the BGPsec_Path attribute in all cases where it wo= uld otherwise use the AS path information in the AS_PATH attribute." I'm a= ssuming that the Decision Process is included in "all cases". Even though = 5.1 refers to the use the validation state in the decision process, please = make sure that it is clear that the decision process is modified by the use= of the different attribute. [Sriram] I agree that making use of validation state in BGPsec implies a ch= ange in the decision process. So we will remove the sentence that says "BG= Psec specifies no changes to the BGP decision process." M8.1. Please specifically include a section (or text somewhere) about how t= he information in the BGPsec_Path attribute is used in the Decision Process= . For example, how should the "number of AS numbers" in the path be calcul= ated for 9.1.2.2. (Breaking Ties (Phase 2)) in rfc4271? The text talks abo= ut the "effective length" being the sum of the pCount values, but the "effe= ctive length" (at least with that name) is not what is used in rfc4172 =97 = please be clear and consistent. [Sriram] Done the following: s/ effective length of the AS path/ length of = the AS path/ [Sriram] Paragraph in Section 3.1 updated as follows: [Sriram] The pCount field contains the number of repetitions of the associa= ted autonomous system number that the signature covers. This field enables= a BGPsec speaker to mimic the semantics of prepending multiple copies of t= heir AS to the AS_PATH without requiring the speaker to generate multiple s= ignatures. Note that Section 9.1.2.2 ("Breaking Ties") in [RFC4271] mention= s "number of AS numbers" in the AS_PATH attribute that is used in the route= selection process. This metric (number of AS numbers) is the same as the A= S path length obtained in BGPsec by summing the pCount values in the BGPsec= _Path attribute. M8.2. [minor] Section 3. (The BGPsec_Path Attribute) reads: "The informatio= n in Secure_Path is used by BGPsec speakers in the same way that informatio= n from the AS_PATH is used by non-BGPsec speakers." This is pretty much th= e same information that is in Section 5, but with more specificity. It wou= ld help if the more specific case was the one normatively called out. [Sriram] Made the change -- more specific language (Secure_Path as opposed = to BGPsec_Path attribute) is now used in Section 5 also. M9. Section 5.2. (Validation Algorithm). RFC4271 also specifies a series o= f validity checks when an UPDATE is received (Section 6.3) =96 should that = check be run before or after the algorithm specified here? The algorithm f= ocuses on verifying the validity of the BGPsec_Path attribute (and not the = whole UPDATE), so I=92m assuming it should be executed instead of checking = the AS_PATH. Please include some text about the interaction/changes. [Sriram] Section 5.2 has been updated to reflect the above comment. M9.1. Section 5.2. (Validation Algorithm): =93=85then the BGPsec speaker M= UST treat the update message in the same manner that the BGPsec speaker wou= ld treat an (unsigned) update message that arrived without a BGPsec_Path at= tribute.=94 What exactly does this mean? If the BGPsec_Path attribute is= not received, then the AS_PATH should be =96 does the text imply that the = AS_PATH should be reconstructed? I guess it should be if the update is to = be propagated =96 but the question is while the update is being processed, = which AS path information is used, the one in a reconstructed AS_PATH or th= e one in the BGPsec_Path while assuming that all the signatures are correct= ? [Sriram] Changed the wording. The corrected wording in Section 5.2 is as fo= llows: [Sriram] Next, the BGPsec speaker examines the Signature_Blocks in the BGPs= ec_Path attribute. A Signature_Block corresponding to an algorithm suite t= hat the BGPsec speaker does not support is not considered in validation. I= f there is no Signature_Block corresponding to an algorithm suite that the = BGPsec speaker supports, then the BGPsec speaker MUST strip the Signature_B= lock(s), reconstruct the AS_PATH (see Section 4.4), from the Secure_Path, a= nd treat the update as if it was received as an unsigned BGP update. M10. In Section 7.2. (On the Removal of BGPsec Signatures): =93=85the prot= ocol specifies that a BGPsec speaker choosing to propagate the route advert= isement in such an update message SHOULD add its signature to each of the S= ignature_Blocks.=94 I believe the reference is Section 4.2 (please add it= ). However, that Section doesn=92t use normative language (=93For each Sig= nature_Block corresponding to an algorithm suite that the BGPsec speaker do= es support, the BGPsec speaker adds a new Signature Segment to the Signatur= e_Block.=94) In any case, the =93SHOULD=94 in 7.2 is out of place because= it is referencing a fact (pointing at the other section) and not being use= d normatively =96 if you want the =93SHOULD=94 to be normative, then it sho= uld be back in 4.2. [Sriram] Yes, agree. Fixed the wording per your suggestion in both places (= Sections 4.2 and 7.2). Added reference to Section 4.2 in Section 7.2. M11. The Figures (which are not numbered) in 4.2. (Constructing the BGPsec_= Path Attribute) and 5.2. (Validation Algorithm) present the sequence of oct= ets to be hashed. I=92m guessing that the order of the Signature and Secur= e_Path Segments may be important, is it? The order in the Figures is not c= lear to me, if the order is important, please be clear about it; if not, pl= ease also say so. [Sriram] Yes, the order of the Signature and Secure_Path Segments is import= ant. I have put in additional wording for clarifying/rationale and emphasiz= ed that the order is important =96 in both sections. [Sriram] Figures are numbered now in the document. M12. The mandatory addition of Secure_Path and Signature segments in a Conf= ederation results in the inconsistent authorization chain mentioned in Sect= ion 4.3. (Processing Instructions for Confederation Members): =93For a sign= ature produced by a peer BGPsec speaker outside of a confederation, the Tar= get AS will always be the AS Confederation Identifier (the public AS number= of the confederation) as opposed to the Member-AS Number.=94 It seems to = me that this discontinuity in the ASN list breaks the =93cryptographic assu= rance that=85Every AS on the path of ASes listed in the update message has = explicitly authorized the advertisement of the route to the subsequent AS i= n the path=94 because there is no way to verify that the Member-AS in the f= irst Secure_Path segment is in fact the one peering with the external neigh= bor. I realize that the risk may be minimized by an =93internal trust=94 f= actor, but I would like to see a discussion about this issue in the Securit= y Considerations. [Sriram] See the new second paragraph in Section 7.4. The security consider= ation that you mention here about with the way confederations are handled i= s described and discussed there. M13. What about replay attacks? There is no mention of the risk or potenti= al mitigation anywhere. Please include in the Security Considerations sect= ion. [Sriram]: Added a new paragraph and reference to ietf-sidr-bgpsec-rollover = in Section 8.4. Minor: m1. The use of SKI, Subject Key Identifier without a qualifier (field, exte= nsion) is confusing at times. Please expand SKI on first use. An example= : (from 3.2) =93The Subject Key Identifier contains the value in the Subjec= t Key Identifier extension of the RPKI=85=94 The first mention should incl= ude =93field=94, like similar text in 4.2. [Sriram]: Done. m2. Section 4. (BGPsec Update Messages) says: "A BGPsec speaker that is not= a member of such a confederation MUST set the Flags field of the Secure_Pa= th Segment to zero in all BGPsec update messages it sends." While only one= flag is defined, the correct statement is "=85set the Confed_Segment flag= =85". [Sriram]: Done. m3. Section 4.1. (General Guidance): s/"A BGPsec update message MUST advert= ise a route to only a single NLRI."/"A BGPsec update message MUST advertise= a route to only a single prefix." This section contains other places whe= re the NLRI term is not used correctly. In short, the NLRI in a BGP Update= contains one or more prefixes =97 so the text should talk about a single p= refix, not a single NLRI. [Sriram] Replaced =93NLRI=94 with =93prefix=94 in all places in the docume= nt where appropriate. m4. In between the text above, the following is written: "However, in the c= ase that the BGPsec speaker is performing an AS Migration, the BGPsec speak= er may add an additional signature on ingress before copying the BGPsec_Pat= h attribute (see [I-D.ietf-sidr-as-migration] for more details)." Because = I-D.ietf-sidr-as-migration is marked as Updating this document, I suggest y= ou remove this text (and the one in 4.2) -- note that the statements made i= n this document are not normative anyway and I-D.ietf-sidr-as-migration can= stand on its own by clearly specifying what is needed for AS Migration. [Sriram] Yes, good suggestion =96 removed the text. Done. m5. In 4.2: =93To prevent unnecessary processing load=85a BGPsec speaker SH= OULD NOT produce multiple consecutive Secure_Path Segments with the same AS= number. This means that to achieve the semantics of prepending the same A= S number k times, a BGPsec speaker SHOULD produce a single Secure_Path Segm= ent =96 with pCount of k...=94 Given pCount, I=92m wondering why these SHO= ULDs are not MUSTs, especially given the expected additional load. [Sriram] We had thought about it. Decided to leave it as SHOULD rather than= MUST. Most implementations will do it right. We thought -- just make it a = strong recommendation rather than enforce strictly. m6. Section 4.3. (Processing Instructions for Confederation Members) explai= ns the process of adding Secure_Path and Signature segments that may or may= not be used at all (given that the verification is optional), only to remo= ve them later. Why isn=92t the process of adding Secure_Path and Signature= segments optional itself (instead of just the validation)? [Sriram] In a confederation, the update is crossing AS boundaries and ASNs = of the members are included (cannot be omitted). It was felt that it is no= t a good idea to have mixed signed and unsigned segments. Also, the same se= curity risks may exit (e.g. illegal path shortening) between confed ASes as= do between regular ASes. m7. In 4.4. (Reconstructing the AS_PATH Attribute), what should happen if t= he Confed_Segment flag is set to zero and the most-recently added segment i= n the AS_PATH is of type AS_CONFED_SEQUENCE? Theoretically this can=92t oc= cur because it means that someone accepted an update that it shouldn=92t ha= ve, but please include some text about this case being an error. [Sriram] This comment is related to m11. Added a new error check in Section= 5.2 that reads, =93If the update message was received from a BGPsec peer t= hat is a member of the BGPsec speaker's AS confederation, check to ensure t= hat the Secure_Path segment corresponding to that peer contains a Flags fie= ld with the Confed_Sequence flag set to one.=94 This takes care of m7 and m= 11. m8. Section 5.1. (Overview of BGPsec Validation): =93It is expected that BG= P peers will generally prefer routes received via 'Valid' BGPsec update mes= sages over both routes received via 'Not Valid' BGPsec update messages and = routes received via update messages that do not contain the BGPsec_Path att= ribute=85(See [I-D.ietf-sidr-bgpsec-ops]=85=94 I read this piece of text a= s saying that routes in Not Valid updates are expected to be used (even tho= ugh they are not valid). Besides the fact that I-D.ietf-sidr-bgpsec-ops do= es recommend using Not Valid announcements (in Section 7), are there other = reasons for this document to expect their use? [Sriram] If only a =91Not Valid=92 update is available for a prefix, then t= he update is used since otherwise the prefix would be unreachable. Both BGP= sec and RPKI/origin validation are expected to depref invalid updates rathe= r than ignore them. This is driven by operator policy and can vary. Hence, = we are deliberately not using any normative language here. m9. Section 5.1 contains these references: =93=85the trusted cache could de= liver the necessary validity information to the BGPsec speaker using the ro= uter key PDU [I-D.ietf-sidr-rtr-keying] for the RPKI-to-Router protocol [I-= D.ietf-sidr-rpki-rtr-rfc6810-bis].=94 The reference to I-D.ietf-sidr-rtr-= keying seems to be related to the =93router key PDU=94, but that is defined= in I-D.ietf-sidr-rpki-rtr-rfc6810-bis, so it looks like the first referenc= e is not needed. [Sriram] Yes. Fixed. m10. In 5.1: =93As discussed in Section 4, when a BGPsec speaker chooses to= forward=85, it SHOULD be forwarded with its BGPsec_Path attribute=85=94 = That =93SHOULD=94 is pointing at a fact, not acting normatively in this sen= tence so please change it to =93should=94. [Sriram] Yes. Fixed. m11. Section 5.2. (Validation Algorithm) mentions this check: =91update..fr= om a peer that is not a member of the BGPsec speaker's AS confederation, ch= eck to ensure that none of the Secure_Path segments contain a Flags field w= ith the Confed_Sequence flag set to one.=94 I=92m sure that the check for = the flag set if the peer is a Confederation peer is also needed, but not me= ntioned in this section (where the normative MUST for the validation algori= thm) is present. Section 4.3. (Processing Instructions for Confederation M= embers) does say this: =93=85when a confederation member runs the algorithm= in Section 5.2, the confederation member, during processing of a Signature= Segment, first checks whether the Confed_Sequence flag in the correspondin= g Secure_Path segment is set to one.=94 I would like to see the full algo= rithm specified in one place (even if, like in Section 4.3, pieces of it ar= e explained elsewhere). Also, the text in 4.3 says that the check is perfo= rmed =93during processing of a Signature Segment=94, which is fine, but pro= bably late in the process (compared to the text in 5.2 that seems to requir= e the check when the updates are received). [Sriram] Thanks for catching this. It is all fixed now. Wording changes hav= e been made in Section 4.3 to say that the check is made during error check= ing rather than =93during processing of a Signature Segment=94. Also, in th= e error checking list in Section 5.2, we have added a new check that reads:= =93If the update message was received from a BGPsec peer that is a member = of the BGPsec speaker's AS confederation, check to ensure that the Secure_P= ath segment corresponding to that peer contains a Flags field with the Conf= ed_Sequence flag set to one.=94 m12. In Section 7.4. (Additional Security Considerations), please add a ref= erence to point at =93appropriate transport security mechanisms.=94, and/or= point at the Security Considerations from rfc4271. [Sriram] Done. Nits: n1. In several places the text uses =93we=94 (for example: =93we expect=85= =94). It=92s just a matter of style, but using the third person may be mor= e appropriate (for example: =93it is expected=85=94). [Sriram] Done. Changes made per your suggestion. n2. The use of =93Target AS Number=94 is inconsistent: sometimes the =93num= ber=94 is capitalized, others it isn=92t, and sometimes it is not even ment= ioned. [Sriram] Now the document used =91Target AS Number=92 consistently. n3. I don=92t think we need Section 6.2. (Extensibility Considerations). [Sriram] Leaving it as is for now. Can be removed later if there seems grea= ter conviction about it during the IESG review process. --_000_DM2PR09MB04460C753A2AA4249C03DD82848B0DM2PR09MB0446namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

Hi Alvaro,

Thank you very much for this thorough and detailed set of comments.

They greatly help improve the clarity, accuracy, and presentation in the= document.

I have worked with each of the comments and incorporated changes accordi= ngly

in the document. Please see version-19 that was just submitted.

Many thanks to Sean Turner for his help with the updated IANA considerat= ions section.

My responses to your individual comments are shown below and are marked = with [Sriram].

Let me know if the pdf opens OK for you.

Also, please let me know if I missed anything.

Regards,

Sriram

P.S. I tried to send this message with a pdf attachment earlier to the S= IDR list.

But looks like that post was not accepted by the IETF email exploder due= to the attachment, may be?

So I have copied and pasted here the text from the pdf. 

There may be line-wrap issue -- let us see.

-----------

Dear authors:

Hi!  First of all, thank you for taking on the duties of editing th= is document.


I have several comments (see below).  For the most part, I think th= ey should be easy to solve as many are related to clarifications.  Mos= t of the comments I classified as Major are due to the use of Normative lan= guage.


The biggest concern I have with this document is the lack of an Operatio= ns and Management Considerations Section =96 please take a look at RFC5706 = (Guidelines for Considering Operations and Management of New Protocols and = Protocol Extensions).  Some of the information suggested there is present in draft-ietf-sidr-bgpsec-ops, and = (ironically) in the =93Design and Deployment Considerations=94 section of d= raft-ietf-sidr-bgpsec-overview.  However, important items such as migr= ation or management are missing.  I would like to see a well thought out Operations and Management Section in this d= ocument before moving it forward.  Note that I=92m not suggesting that= a YANG model (for example) is required to move forward, but I would like t= o see considerations about migration, and the impact on network operations, to mention two items, all in one place i= n the document.  I would like the authors/Chairs/Shepherd/WG to consid= er even merging in draft-ietf-sidr-bgpsec-ops as the base for this new sect= ion (or at least reference it prominently).

[Sriram] Following the clarifications and additional guidance you provid= ed in Seoul (when you, Chris, and I met), I have added a new Section 7 (Ope= rations and Management Considerations). The topics you mention above are al= l covered in the new Section 7. Additional responses noted here below under your specific comments.

Thanks!

Alvaro.

Major:

M1. Registry Definitions

M1.1. Section 2.1. (The BGPsec Capability) includes a Version field and = some Reserved bits, but there are no IANA registries defined for how to man= age these spaces.  Please define the registries and the corresponding = registration procedures.

[Sriram] Done. Please see the updated IANA Considerations section.

M1.2. Section 3.1. (Secure_Path) defines the Flags field and assigns the= first bit (BTW, is that the MSB or the LSB, please clarify), but doesn't s= et up the registry or registration procedures.

[Sriram] It is the MSB (left most bit) and that is now clarified in Sect= ion 3.1. Set up of the registry for the Flags field is now included in the = updated IANA Considerations section.

  

M2. Error Handling =97 Several sections don't have proper error handling= procedures specified. (This is a management issue that I think is underspe= cified.)

[Sriram] Now there is management and operations section (Section 7) adde= d where error handling and other ops/mgmt. issues are discussed.

M2.1. Section 2.2. (Negotiating BGPsec Support) doesn't fully specify th= e error handling behavior of the Capability, and it fails open.

[Sriram] See my responses below for M2.1.1.

The new management and operations section (Section 7) covers this case. =

M2.1.1. What should the action be if the Version is not 0?

[Sriram]: From Section 2.2:

=93BGP

   update messages without the BGPsec_Path attribute MAY be se= nt within

   a session regardless of whether or not the use of BGPsec is=

   successfully negotiated.=94

[Sriram] Based on the above, there is a possibility that BGPsec is not s= uccessfully negotiated but BGP is session is established =96 I think that i= s what you are calling fail open. If the intersection of BGPsec capability = advertisements from both sides does not include Version 0, then BGPsec Version 0 has not been successfully neg= otiated. But a BGP session is still negotiated and BGP (unsigned) messages = are exchanged. I have now included this wording in the new ops/mgmt. Sectio= n 7. 

M2.1.2. "=85a BGP speaker MUST NOT advertise the capability of BGPs= ec support for a particular AFI unless it has also advertised the multiprot= ocol extension capability for the same AFI [RFC4760]."  What shou= ld happen if it does advertise an AFI that is not covered by the multiprotocol extension capability?   Or if the m= ulti-protocol capability is not advertised at all?  To clarify: if the= multi-protocol capability is not advertised then support for BGPsec can=92= t be advertised either =96 does that mean that a BGP speaker configured to use BGPsec must not use it if not negotiated?  = I know the answer is =93yes=94, but I=92m trying to get to the point of pro= visioning and expectations =96 why configure BGPsec if no one is expected t= o support it? 

[Sriram]: See response to 2.1.1 above. Also, during early phase of deplo= yment, small groups of (consisting of 2 or more) ASes are likely to coordin= ate and deploy BGPsec over contiguous regions (ASes). These regions will gr= ow over time and conjoin.  Also based on clarifications you provided in Seoul, I have also included error = handling considerations for the case when BGPsec resets and some necessary = condition (like 4-byte ASN or MP-NLRI capability) got dropped in the meanti= me.

M2.1.3. Missing the four-byte AS capability results in BGPsec not workin= g ("BGPsec has not been successfully negotiated"), but the abilit= y of exchanging routes is still there, leaving the system in a fail open st= ate and potentially breaking the chain of ASNs.  Personally, it doesn't seem like a good result =97 please at l= east include some text about this in the Security Considerations section.

[Sriram] Even though BGPsec is not successfully negotiated, the ability = of exchanging routes is still there =96 BGP messages are exchanged though n= ot BGPsec; it so the chain of ASNs in not really broken (they are not conti= guous for BGPsec but still contiguous for BGP). This observation is included in the new Section 7 (ops/mgmt. sec= tion).

M2.2. The definition of the BGPsec_Path Attribute (and its details) don'= t have clear error handling procedures defined (RFC7606).  Section 4.3= . (Processing Instructions for Confederation Members) does say this: "= (As discussed in Section 5.2, any error in the BGPsec_Path attribute MUST be handled using the "treat-as-withdra= w", approach as defined in RFC 7606 [RFC7606].)" (including the p= arentheses).  However, 5,2 only says: "BGPsec speakers MUST handl= e these errors using the "treat-as-withdraw" approach as defined in RFC 7606 [RFC7606]."   Note: "these errors&= quot; is not the same as "any error".  Please discuss error = handling in a more prominent place. (Hint: it may fit in a fault management= discussion in the Operations and Management Section.)

[Sriram]  s /As discussed in Section 5.2, any error in the BGPsec_P= ath attribute MUST be handled using the "treat-as-withdraw", appr= oach as defined in RFC 7606 [RFC7606]./ As discussed in Section 5.2, any sy= ntactical or protocol violation errors in the BGPsec_Path attribute MUST be handled using the "treat-as-withdraw" approach= as defined in RFC 7606 [RFC7606]./

[Sriram]  Section 4.3 has been updated accordingly.

M2.2.1. There are multiple places in the BGPsec_Path Attribute that coul= d end up in an error, everything from setting bits in the Flags field to wr= ong Length fields.  Should all errors result in the same behavior?&nbs= p;

[Sriram] Any errors that are syntactical errors or detected to be protoc= ol violation errors in the BGPsec_Path attribute should result in the same = behavior (see above comment). I think the updated Section 5.2 enumerates th= em reasonably well now. But bit errors that may result in change in the value of an ASN or a signature wou= ld not fall in that category. 

M3. Section 4.1. (General Guidance): "When propagating a received r= oute advertisement to an internal peer, the BGPsec speaker typically popula= tes the BGPsec_Path attribute by copying the BGPsec_Path attribute from the= received update message.  That is, the BGPsec_Path attribute is copied verbatim=85. Note that when a BGPsec speak= er chooses to forward a BGPsec update message to an iBGP peer, the BGPsec a= ttribute SHOULD NOT be removed, unless the peer doesn't support BGPsec.&quo= t;  The first part of the guidance says that a new BGPsec_Path attribute is created by copying the received attrib= ute (which is then presumably removed), but the second part says that the r= eceived attribute SHOULD NOT be removed.  Please clarify so that there= is consistency -- I understand that the result is the same, but the description is not and we should try to av= oid confusion.  Parts of Section 4.2. (Constructing the BGPsec_Path At= tribute) also talk about actions like "=85and there is an existing BGP= sec_Path attribute, then the BGPsec speaker prepends its new Secure_Path Segment (places in first position) onto the e= xisting Secure_Path", which hint at propagating a received BGPsec_Path= attribute (and not creating a new one).

[Sriram] Yes, agree. We=92ll remove redundant and confusing statements a= nd simply state the stuff in the first set of quotes as follows (here we av= oid using the word copying which causes some confusion):

[Sriram] When a BGPsec speaker chooses to forward a BGPsec update messag= e to an iBGP peer, the BGPsec_Path attribute SHOULD NOT be removed, unless = the peer doesn't support BGPsec. In the case when an iBGP peer doesn't supp= ort BGPsec, then the BGPsec update is reconstructed to a BGP update with AS_PATH and then forwarded (see Sect= ion 4.4). In particular, when forwarding to a BGPsec capable iBGP peer, the= BGPsec_Path attribute SHOULD NOT be removed even in the case where the BGP= sec update message has not been successfully validated.

M4. Section 4.2. (Constructing the BGPsec_Path Attribute) says that &quo= t;The AS number in this Secure_Path segment MUST match the AS number in the= AS number resource extension field of the Resource PKI router certificate(= s) that will be used to verify the digital signature(s) constructed by this BGPsec speaker [I-D.ietf-sidr-bgpsec-pki-= profiles]."  However, there is no extension field or certificate = in I-D.ietf-sidr-bgpsec-pki-profiles with that name.  Please be precis= e with the names.

[Sriram] Modified as follows: The AS number in this Secure_Path segment = MUST match the AS number in the Subject field of the Resource PKI router ce= rtificate that will be used to verify the digital signature constructed by = this BGPsec speaker (see Section 3.1.1.1 in [I-D.ietf-sidr-bgpsec-pki-profiles] and RFC 6487 [RFC6487]).

M5. In 4.2: =93BGPsec speakers SHOULD drop incoming update messages with= pCount set to zero in cases where the BGPsec speaker does not expect its p= eer to set pCount to zero.=94  This text seems to assume some kind of = configuration/provisioning.  Note that Section 5.2. (Validation Algorithm) also has similar text about receiving an UPDAT= E =93from a peer that is not expected to set pCount equal to zero=94. =  

[Sriram] A peer that is an Internet Exchange Point (IXP) (i.e. Route Ser= ver) with a transparent AS is expected to set pCount =3D 0 in its Secure_Pa= th segment while forwarding an update to a peer (see Section 4.2).  Cl= early, such an IXP SHOULD configure itself to set its own pCount =3D 0. As stated in Section 4.2, =93BGPsec speakers = SHOULD drop incoming update messages with pCount set to zero in cases where= the BGPsec speaker does not expect its peer to set pCount to zero.=94 = ; This means that a BGPsec speaker SHOULD be configured so that it permits pCount =3D0 from an IXP peer and never permi= ts pCount =3D 0 from a peer that is not an IXP.

Added the above paragraph in the new Section 7. 

M6. In 4.2: =93If the received BGPsec update message contains two Signat= ure_Blocks and the BGPsec speaker supports both of the corresponding algori= thm suites, then the new update message generated by the BGPsec speaker SHO= ULD include both of the Signature_Blocks.=94  Why is this =93SHOULD=94 not a =93MUST=94?   When/why would a sp= eaker remove one or the 2?  If one is removed, should there be a requi= rement that the one that was used to successfully validate the update be ke= pt?  Note that Section 7.2 later talks about the problems of removing signatures=85

[Sriram]  See below.

M6.1. Note that later in this section the text says that =93a 'Valid' BG= Psec update message may contain a Signature_Block which is not deemed 'Vali= d' (e.g., contains signatures that BGPsec does not successfully verify).&nb= sp; Nonetheless, such Signature_Blocks MUST NOT be removed.=94   Taking this =93MUST NOT=94 along with = the =93SHOULD=94 above, the door is open to remove the Signature_Block used= to verify the validity and just forward the one not used (which may itself= not be valid). 

[Sriram] Your observations are right. Therefore, we made the following c= hange (SHOULD --> MUST): If the received BGPsec update message contains = two Signature_Blocks and the BGPsec speaker supports both of the correspond= ing algorithm suites, then the new update message generated by the BGPsec speaker MUST include both of the Si= gnature_Blocks.

M6.2. Section 5.2. (Validation Algorithm) opens this door even more when= saying that =93If at least one Signature_Block is marked as 'Valid', then = the validation algorithm terminates and the BGPsec update message is deemed= to be 'Valid'.=94  The text here doesn=92t require that both Signature_Blocks be verified, but implies that as long a= s the first one is valid then the second one doesn=92t really need to be ve= rified.  Is that the intent?

[Sriram]  Yes. There is no problem with early termination since bot= h algorithms are in use in parallel and either one can be used for verifica= tion. In fact, it helps with route processor performance to terminate early= on a =91Valid=92 outcome after successfully verifying one of the Signature_Blocks.

[Sriram]  We have added a para in the new Section 7 on performance = enhancement during BGPsec update validation.

M7. Section 5. (Processing a Received BGPsec Update) talks about =93dupl= icate update messages=94 (one where =93it differs from the first update mes= sage only in the Signature fields (within the BGPsec_Path attribute)=94).&n= bsp;

[Sriram]  ECDSA P256 algorithm produces a different set of signatur= e bits when it signs the same data again at a later time. 

M7.1. =93With regards to the processing of duplicate update messages, if= the first update message is valid, then an implementation SHOULD NOT run t= he validation procedure on the second, duplicate update message (even if th= e bits of the signature field are different).=94  Even though a discussion about non-deterministic sign= ature algorithms precedes this text, the validation is still not run. = How can the validity of the Path be guaranteed in this case?  Should = this be the action for all algorithms or only ones known to be non-deterministic?

[Sriram] Definition of duplicate update for BGPsec: A BGPsec update is a= duplicate if it is identical to another update in the Adj-RIB-in, includin= g SKIs and Algorithm ID, but not including the signatures. If the first upd= ate message (having the *same SKIs* as the duplicate) is *Valid*, then the duplicate=92s validity state need n= ot be computed.  If validity of the duplicate were computed and found = 'Valid', then it gives the router no new information. Alternatively, if it = were found 'Not Valid', then it only implies that some bit errors occurred in the signatures. Therefore, the BGPsec spe= aker should keep the 'Valid' original update and ignore the duplicate. Howe= ver, if the original update were 'Not Valid', then performing validation of= the duplicate is relevant and SHOULD be done.

[Sriram] Added a paragraph in the new Section 7 (Operations and Manageme= nt Considerations) to include the above observations. 

[Sriram] Note that the above applies to both non-deterministic and deter= ministic signature algorithms. 

M7.2. rfc4271 (in Section 9. (UPDATE Message Handling) talks about the i= mplicit withdraw of a route =93if the NLRI of the new route is identical to= the one the router currently has stored=85=94.  The same NLRI case se= ems to be a particular condition of the =93duplicate update=94 described here.  It might be a good idea to mention that a = =93duplicate update=94 results in the implicit withdraw of the original upd= ate.  What happens if a third duplicate route is received (the first o= ne was valid, the second one was not validated), should it be validated?

[Sriram] In RFC 4271, when there is a duplicate update, the NRLI and pat= h and all other attributes are identical. There is no implicit withdraw. Th= e router keeps what it already has. In the case of BGPsec, a router keeps t= he original if it was valid, and ignores the duplicate. It checks the validity of the duplicate only if the= original were invalid.  

M8. Section 5.1. (Overview of BGPsec Validation) says that "BGPsec = specifies no changes to the BGP decision process."  However, Sect= ion 5. (Processing a Received BGPsec Update) also says that "a BGPsec = speaker MUST utilize the AS path information in the BGPsec_Path attribute in all cases where it would otherwise use the AS pat= h information in the AS_PATH attribute."  I'm assuming that the D= ecision Process is included in "all cases".  Even though 5.1= refers to the use the validation state in the decision process, please make sure that it is clear that the decision process is modified by= the use of the different attribute.

[Sriram] I agree that making use of validation state in BGPsec implies a= change in the decision process.  So we will remove the sentence that = says "BGPsec specifies no changes to the BGP decision process."

M8.1. Please specifically include a section (or text somewhere) about ho= w the information in the BGPsec_Path attribute is used in the Decision Proc= ess.  For example, how should the "number of AS numbers" in = the path be calculated for 9.1.2.2. (Breaking Ties (Phase 2)) in rfc4271?  The text talks about the "effective leng= th" being the sum of the pCount values, but the "effective length= " (at least with that name) is not what is used in rfc4172 =97 please = be clear and consistent.

[Sriram] Done the following: s/ effective length of the AS path/ length = of the AS path/

[Sriram] Paragraph in Section 3.1 updated as follows:

[Sriram] The pCount field contains the number of repetitions of the asso= ciated autonomous system number that the signature covers.  This field= enables a BGPsec speaker to mimic the semantics of prepending multiple cop= ies of their AS to the AS_PATH without requiring the speaker to generate multiple signatures. Note that Section 9= .1.2.2 ("Breaking Ties") in [RFC4271] mentions "number of AS= numbers" in the AS_PATH attribute that is used in the route selection= process. This metric (number of AS numbers) is the same as the AS path length obtained in BGPsec by summing the pCount values= in the BGPsec_Path attribute.

M8.2. [minor] Section 3. (The BGPsec_Path Attribute) reads: "The in= formation in Secure_Path is used by BGPsec speakers in the same way that in= formation from the AS_PATH is used by non-BGPsec speakers."  This= is pretty much the same information that is in Section 5, but with more specificity.  It would help if the more spec= ific case was the one normatively called out.

[Sriram] Made the change -- more specific language (Secure_Path as oppos= ed to BGPsec_Path attribute) is now used in Section 5 also.

M9. Section 5.2. (Validation Algorithm).  RFC4271 also specifies a = series of validity checks when an UPDATE is received (Section 6.3) =96 shou= ld that check be run before or after the algorithm specified here?  Th= e algorithm focuses on verifying the validity of the BGPsec_Path attribute (and not the whole UPDATE), so I=92m assuming= it should be executed instead of checking the AS_PATH.  Please includ= e some text about the interaction/changes.

[Sriram] Section 5.2 has been updated to reflect the above comment.

M9.1.  Section 5.2. (Validation Algorithm): =93=85then the BGPsec s= peaker MUST treat the update message in the same manner that the BGPsec spe= aker would treat an (unsigned) update message that arrived without a BGPsec= _Path attribute.=94   What exactly does this mean?  If the BGPsec_Path attribute is not received, then the AS_PATH= should be =96 does the text imply that the AS_PATH should be reconstructed= ?  I guess it should be if the update is to be propagated =96 but the = question is while the update is being processed, which AS path information is used, the one in a reconstructed AS_PATH or t= he one in the BGPsec_Path while assuming that all the signatures are correc= t?

[Sriram] Changed the wording. The corrected wording in Section 5.2 is as= follows:

[Sriram] Next, the BGPsec speaker examines the Signature_Blocks in the B= GPsec_Path attribute.  A Signature_Block corresponding to an algorithm= suite that the BGPsec speaker does not support is not considered in valida= tion.  If there is no Signature_Block corresponding to an algorithm suite that the BGPsec speaker supports, then= the BGPsec speaker MUST strip the Signature_Block(s), reconstruct the AS_P= ATH (see Section 4.4), from the Secure_Path, and treat the update as if it = was received as an unsigned BGP update.

M10.  In Section 7.2. (On the Removal of BGPsec Signatures): =93=85= the protocol specifies that a BGPsec speaker choosing to propagate the rout= e advertisement in such an update message SHOULD add its signature to each = of the Signature_Blocks.=94   I believe the reference is Section 4.2 (please add it).  However, that Section does= n=92t use normative language (=93For each Signature_Block corresponding to = an algorithm suite that the BGPsec speaker does support, the BGPsec speaker= adds a new Signature Segment to the Signature_Block.=94)   In any case, the =93SHOULD=94 in 7.2 is out of place because it is referen= cing a fact (pointing at the other section) and not being used normatively = =96 if you want the =93SHOULD=94 to be normative, then it should be back in= 4.2.

[Sriram] Yes, agree. Fixed the wording per your suggestion in both place= s (Sections 4.2 and 7.2). Added reference to Section 4.2 in Section 7.2.&nb= sp; 

M11. The Figures (which are not numbered) in 4.2. (Constructing the BGPs= ec_Path Attribute) and 5.2. (Validation Algorithm) present the sequence of = octets to be hashed.  I=92m guessing that the order of the Signature a= nd Secure_Path Segments may be important, is it?  The order in the Figures is not clear to me, if the order is = important, please be clear about it; if not, please also say so.

[Sriram] Yes, the order of the Signature and Secure_Path Segments is imp= ortant. I have put in additional wording for clarifying/rationale and empha= sized that the order is important =96 in both sections.

[Sriram] Figures are numbered now in the document. 

M12. The mandatory addition of Secure_Path and Signature segments in a C= onfederation results in the inconsistent authorization chain mentioned in S= ection 4.3. (Processing Instructions for Confederation Members): =93For a s= ignature produced by a peer BGPsec speaker outside of a confederation, the Target AS will always be the AS Co= nfederation Identifier (the public AS number of the confederation) as oppos= ed to the Member-AS Number.=94  It seems to me that this discontinuity= in the ASN list breaks the =93cryptographic assurance that=85Every AS on the path of ASes listed in the update message= has explicitly authorized the advertisement of the route to the subsequent= AS in the path=94 because there is no way to verify that the Member-AS in = the first Secure_Path segment is in fact the one peering with the external neighbor.  I realize that the = risk may be minimized by an =93internal trust=94 factor, but I would like t= o see a discussion about this issue in the Security Considerations.

[Sriram] See the new second paragraph in Section 7.4. The security consi= deration that you mention here about with the way confederations are handle= d is described and discussed there.

M13. What about replay attacks?  There is no mention of the risk or= potential mitigation anywhere.  Please include in the Security Consid= erations section.

[Sriram]: Added a new paragraph and reference to ietf-sidr-bgpsec-rollov= er in Section 8.4.

Minor:

m1. The use of SKI, Subject Key Identifier without a qualifier (field, e= xtension) is confusing at times.   Please expand SKI on first use= .  An example: (from 3.2) =93The Subject Key Identifier contains the v= alue in the Subject Key Identifier extension of the RPKI=85=94  The first mention should include =93field=94, like simila= r text in 4.2.

[Sriram]: Done. 

m2. Section 4. (BGPsec Update Messages) says: "A BGPsec speaker tha= t is not a member of such a confederation MUST set the Flags field of the S= ecure_Path Segment to zero in all BGPsec update messages it sends."&nb= sp; While only one flag is defined, the correct statement is "=85set the Confed_Segment flag=85".

[Sriram]: Done. 

m3. Section 4.1. (General Guidance): s/"A BGPsec update message MUS= T advertise a route to only a single NLRI."/"A BGPsec update mess= age MUST advertise a route to only a single prefix."   This = section contains other places where the NLRI term is not used correctly.  In short, the NLRI in a BGP Update contains one or more p= refixes =97 so the text should talk about a single prefix, not a single NLR= I.

[Sriram]  Replaced =93NLRI=94 with =93prefix=94 in all places in th= e document where appropriate.

m4. In between the text above, the following is written: "However, = in the case that the BGPsec speaker is performing an AS Migration, the BGPs= ec speaker may add an additional signature on ingress before copying the BG= Psec_Path attribute (see [I-D.ietf-sidr-as-migration] for more details)."  Because I-D.ietf-sidr-as-migration is marke= d as Updating this document, I suggest you remove this text (and the one in= 4.2) -- note that the statements made in this document are not normative a= nyway and I-D.ietf-sidr-as-migration can stand on its own by clearly specifying what is needed for AS Migration.

[Sriram] Yes, good suggestion =96 removed the text. Done.

m5. In 4.2: =93To prevent unnecessary processing load=85a BGPsec speaker= SHOULD NOT produce multiple consecutive Secure_Path Segments with the same= AS number.  This means that to achieve the semantics of prepending th= e same AS number k times, a BGPsec speaker SHOULD produce a single Secure_Path Segment =96 with pCount of k...=94&nbs= p; Given pCount, I=92m wondering why these SHOULDs are not MUSTs, especiall= y given the expected additional load.

[Sriram] We had thought about it. Decided to leave it as SHOULD rather t= han MUST. Most implementations will do it right. We thought -- just make it= a strong recommendation rather than enforce strictly.   

m6. Section 4.3. (Processing Instructions for Confederation Members) exp= lains the process of adding Secure_Path and Signature segments that may or = may not be used at all (given that the verification is optional), only to r= emove them later.  Why isn=92t the process of adding Secure_Path and Signature segments optional itself (inst= ead of just the validation)? 

[Sriram] In a confederation, the update is crossing AS boundaries and AS= Ns of the members are included (cannot be omitted).  It was felt that = it is not a good idea to have mixed signed and unsigned segments. Also, the= same security risks may exit (e.g. illegal path shortening) between confed ASes as do between regular ASes.

m7. In 4.4. (Reconstructing the AS_PATH Attribute), what should happen i= f the Confed_Segment flag is set to zero and the most-recently added segmen= t in the AS_PATH is of type AS_CONFED_SEQUENCE?  Theoretically this ca= n=92t occur because it means that someone accepted an update that it shouldn=92t have, but please include some text = about this case being an error.

[Sriram] This comment is related to m11. Added a new error check in Sect= ion 5.2 that reads, =93If the update message was received from a BGPsec pee= r that is a member of the BGPsec speaker's AS confederation, check to ensur= e that the Secure_Path segment corresponding to that peer contains a Flags field with the Confed_Sequence flag set to o= ne.=94 This takes care of m7 and m11.

  

m8. Section 5.1. (Overview of BGPsec Validation): =93It is expected that= BGP peers will generally prefer routes received via 'Valid' BGPsec update = messages over both routes received via 'Not Valid' BGPsec update messages a= nd routes received via update messages that do not contain the BGPsec_Path attribute=85(See [I-D.ietf-sidr-bgpsec= -ops]=85=94  I read this piece of text as saying that routes in Not Va= lid updates are expected to be used (even though they are not valid). = Besides the fact that I-D.ietf-sidr-bgpsec-ops does recommend using Not Valid announcements (in Section 7), are there oth= er reasons for this document to expect their use?

[Sriram] If only a =91Not Valid=92 update is available for a prefix, the= n the update is used since otherwise the prefix would be unreachable. Both = BGPsec and RPKI/origin validation are expected to depref invalid updates ra= ther than ignore them. This is driven by operator policy and can vary. Hence, we are deliberately not using any = normative language here. 

m9. Section 5.1 contains these references: =93=85the trusted cache could= deliver the necessary validity information to the BGPsec speaker using the= router key PDU [I-D.ietf-sidr-rtr-keying] for the RPKI-to-Router protocol = [I-D.ietf-sidr-rpki-rtr-rfc6810-bis].=94   The reference to I-D.ietf-sidr-rtr-keying seems to be related to the =93ro= uter key PDU=94, but that is defined in I-D.ietf-sidr-rpki-rtr-rfc6810-bis,= so it looks like the first reference is not needed.

[Sriram] Yes. Fixed.

m10. In 5.1: =93As discussed in Section 4, when a BGPsec speaker chooses= to forward=85, it SHOULD be forwarded with its BGPsec_Path attribute=85=94=    That =93SHOULD=94 is pointing at a fact, not acting normativel= y in this sentence so please change it to =93should=94.

[Sriram] Yes. Fixed.

m11. Section 5.2. (Validation Algorithm) mentions this check: =91update.= .from a peer that is not a member of the BGPsec speaker's AS confederation,= check to ensure that none of the Secure_Path segments contain a Flags fiel= d with the Confed_Sequence flag set to one.=94  I=92m sure that the check for the flag set if the peer is= a Confederation peer is also needed, but not mentioned in this section (wh= ere the normative MUST for the validation algorithm) is present.  Sect= ion 4.3. (Processing Instructions for Confederation Members) does say this: =93=85when a confederation member runs the algorit= hm in Section 5.2, the confederation member, during processing of a Signatu= re Segment, first checks whether the Confed_Sequence flag in the correspond= ing Secure_Path segment is set to one.=94   I would like to see the full algorithm specified in one place (even if, li= ke in Section 4.3, pieces of it are explained elsewhere).  Also, the t= ext in 4.3 says that the check is performed =93during processing of a Signa= ture Segment=94, which is fine, but probably late in the process (compared to the text in 5.2 that seems to require the= check when the updates are received).

[Sriram] Thanks for catching this. It is all fixed now. Wording changes = have been made in Section 4.3 to say that the check is made during error ch= ecking rather than =93during processing of a Signature Segment=94. Also, in= the error checking list in Section 5.2, we have added a new check that reads: =93If the update message was re= ceived from a BGPsec peer that is a member of the BGPsec speaker's AS confe= deration, check to ensure that the Secure_Path segment corresponding to tha= t peer contains a Flags field with the Confed_Sequence flag set to one.=94

m12. In Section 7.4. (Additional Security Considerations), please add a = reference to point at =93appropriate transport security mechanisms.=94, and= /or point at the Security Considerations from rfc4271.

[Sriram] Done.

Nits:

n1. In several places the text uses =93we=94 (for example: =93we expect= =85=94).  It=92s just a matter of style, but using the third person ma= y be more appropriate (for example: =93it is expected=85=94).

[Sriram] Done. Changes made per your suggestion.

n2. The use of =93Target AS Number=94 is inconsistent: sometimes the =93= number=94 is capitalized, others it isn=92t, and sometimes it is not even m= entioned.

[Sriram] Now the document used =91Target AS Number=92 consistently.

n3. I don=92t think we need Section 6.2. (Extensibility Considerations).=

[Sriram] Leaving it as is for now. Can be removed later if there seems g= reater conviction about it during the IESG review process.

--_000_DM2PR09MB04460C753A2AA4249C03DD82848B0DM2PR09MB0446namp_-- From nobody Sun Nov 27 10:59:06 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E768A129516; Sun, 27 Nov 2016 10:59:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yObzENncDSRt; Sun, 27 Nov 2016 10:59:02 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.kvm02.ops-netman.net [IPv6:2606:700:e:550:5c82:28ff:fe25:4960]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E5B01294EE; Sun, 27 Nov 2016 10:59:02 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id DD58C401F8; Sun, 27 Nov 2016 18:59:00 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (static-96-241-182-39.washdc.fios.verizon.net [96.241.182.39]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 91926EFE0509; Sun, 27 Nov 2016 18:59:00 +0000 (UTC) Date: Sun, 27 Nov 2016 13:59:00 -0500 Message-ID: From: Chris Morrow To: "Sriram, Kotikalapudi (Fed)" In-Reply-To: References: <148025704714.23643.17809122257545306465.idtracker@ietfa.amsl.com> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: "sidr-chairs@ietf.org" , sidr wg list Subject: Re: [sidr] Fw: New Version Notification for draft-ietf-sidr-bgpsec-protocol-19.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Nov 2016 18:59:05 -0000 At Sun, 27 Nov 2016 14:53:17 +0000, "Sriram, Kotikalapudi (Fed)" wrote: > > This new version of the BGPsec specification draft incorporates > Alvaro's (Routing AD) comments. Another email follows that provides > responses to the comments and clarifies how each of the comments were > incorporated in the revision. Great, thanks! (for getting this done in short order, and after a long week away) -chris > > Sriram > > ________________________________________ From: > internet-drafts@ietf.org Sent: Sunday, > November 27, 2016 9:30 AM To: Matthew Lepinski; Sriram, Kotikalapudi > (Fed) Subject: New Version Notification for > draft-ietf-sidr-bgpsec-protocol-19.txt > > A new version of I-D, draft-ietf-sidr-bgpsec-protocol-19.txt has been > successfully submitted by Kotikalapudi Sriram and posted to the IETF > repository. > > Name: draft-ietf-sidr-bgpsec-protocol Revision: 19 Title: BGPsec > Protocol Specification Document date: 2016-11-27 Group: sidr Pages: 40 > URL: > https://www.ietf.org/internet-drafts/draft-ietf-sidr-bgpsec-protocol-19.txt > Status: > https://datatracker.ietf.org/doc/draft-ietf-sidr-bgpsec-protocol/ > Htmlized: > https://tools.ietf.org/html/draft-ietf-sidr-bgpsec-protocol-19 Diff: > https://www.ietf.org/rfcdiff?url2=draft-ietf-sidr-bgpsec-protocol-19 > > Abstract: > This document describes BGPsec, an extension to the Border Gateway > Protocol (BGP) that provides security for the path of autonomous > systems through which a BGP update message passes. BGPsec is > implemented via an optional non-transitive BGP path attribute that > carries a digital signature produced by each autonomous system that > propagates the update message. > > > > > Please note that it may take a couple of minutes from the time of > submission until the htmlized version and diff are available at > tools.ietf.org. > > The IETF Secretariat From nobody Tue Nov 29 17:24:12 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69681129D1A; Tue, 29 Nov 2016 17:24:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.922 X-Spam-Level: X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cnp0YcAf2nhQ; Tue, 29 Nov 2016 17:24:07 -0800 (PST) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0105.outbound.protection.outlook.com [104.47.37.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C10A6129D15; Tue, 29 Nov 2016 17:24:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=GNUsqBZG9kamukSRaMNnl0J7xG91YKPt3arPrHk8KD8=; b=TgODJyOgekqyfrS/cRff7RQFEEdBAOCVuM/aa5nFzoU8JNtxefysSb6rLfsJGiDNcH3OHNqEeZVgctqSQYonPOLp4kgz3nU5ijR/XS5QARQghLTS+pue6HoSSJtj1Q+j2ija394fVEIag/+uQW4nBqjZB/wJSo2kSGYdhivtvIY= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=jgs@juniper.net; Received: from [172.29.33.83] (66.129.241.12) by CY1PR05MB2506.namprd05.prod.outlook.com (10.167.10.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.761.5; Wed, 30 Nov 2016 01:24:01 +0000 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: "John G. Scudder" In-Reply-To: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> Date: Tue, 29 Nov 2016 20:23:55 -0500 Content-Transfer-Encoding: quoted-printable Message-ID: <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> To: "Alvaro Retana (aretana)" X-Mailer: Apple Mail (2.3124) X-Originating-IP: [66.129.241.12] X-ClientProxiedBy: BN6PR01CA0060.prod.exchangelabs.com (10.172.194.150) To CY1PR05MB2506.namprd05.prod.outlook.com (10.167.10.27) X-MS-Office365-Filtering-Correlation-Id: 9cc54c2e-7915-4e47-acbd-08d418bf9167 X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:CY1PR05MB2506; X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2506; 3:/d+87Xpf2nNdT+/BB6uYj5Wt/S0oVJlPAlvtkHUHl1LNPHq0SiIJiauOzChrn/5BB/Vvrh7IWOxJqx9p3ndKETNKKd2czFkKPT8lU0A6Z0D5NNqqF2m29CGyIS0OVRuFWCciiSc3GKL2eAystl/Mb0W18/xCjROnrWtCu1rqCBnHKGKQHckRfC7UL7QkYOaySYGuNu2J1tT9kDdVxGshEepfnwpHYy5RfjMFmZvJyg2dOqPx+gVQZS97Bi9jllTQ/eXlHeYZeVUVr+Bi6G420Q== X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2506; 25: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 X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2506; 31:YhNFEPtGvsZDPXVYOdFnXXc0LE/Fgovg3SZuXf8wHFApKnntSd5Zxlh0WC2wMgxOstSN4x1jCTSnYPjKMah+Tz0/Zc31vZ6wdVXmIFEmFBzHmg0rmmlzNJrRe0m1zh2zrBvM/Jo/O+VeYVxZGkFL6z7WU3wOAPmgL7nEN7rfBu7bRzE6v4ifJ1w+n/W2mKOk7htp7aleg/5a0DuF1b7drlJnB9qHF1b0fire26KDJ7dOG5AoYIzSbpLzusmpsxGh6vYgw16VWrRBwMRiJF4DAk8RejedFp8uqTNEZoo5BzE=; 20:9QIzTjqM5cQPWtBevzUVFvpN44kAzM5LaUnVY+QwgzTpzXoFAsXuBx3CxrhdohQS5R67rAOAjwRG/WW6W2OYFPUxY0zh5cWVqAihrEHYzlt/hlOyqyf9Sy863ldcaMIjWB37YtqayP2RNdMZ4qc1ZeThl1hilj8CzHVh51fujBSPWuL8cvA0vBfkhL4Q+Y9pSLt6hRM4NiTLCtjwy1ycU4oREXJoaxtn9oaQ+Q/cdTqQO3oExBYmvVFHTwgBXzI7qMAklWI962HfPYWOP5NIiC5FzgypI7VlHjkDXgAmGu+Xu1B/lJgpCVx6M1ti5AfNuPhJqc9ZO2Yu86k2kmltLLKXEfKaGPZ5n+MTLo3YeoQJDwxPkPrYZnH+5s7Hk1+yaVYCBmWB/n1X/BisSX29BiGMisHgO8/iGHnnLpzzpCnIpX5ol6+gSLyxnUFhGk9MFzXKiwR0IVCsUh5yrVbO425YD4gBqZVGFKbHmdywat795/iCPSW18yAU4VHgtcXRQsRwksoC2uwqHYZW37xkEPbEvzfy6VtUL8fvG6kkFNIVMYLyLveUlEjACvicTUbUtGdKfn9eIkWMB+9tNL6TyLl5tifNYDorySWFOgUJtao= X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(192374486261705)(95692535739014); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(6041248)(20161123562025)(20161123560025)(20161123555025)(20161123564025)(6072148); SRVR:CY1PR05MB2506; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB2506; X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2506; 4: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 X-Forefront-PRVS: 0142F22657 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(7916002)(51444003)(189002)(377454003)(199003)(24454002)(5660300001)(97756001)(110136003)(106356001)(46406003)(105586002)(50986999)(66066001)(76176999)(42186005)(68736007)(7736002)(33656002)(47776003)(101416001)(230783001)(3846002)(23726003)(86362001)(7846002)(305945005)(8746002)(8676002)(36756003)(6116002)(39450400002)(733004)(50466002)(77096006)(39410400001)(6666003)(6486002)(50226002)(6916009)(2950100002)(4326007)(38730400001)(2906002)(81166006)(97736004)(82746002)(83716003)(189998001)(81156014)(229853002)(92566002)(57306001)(104396002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB2506; H:[172.29.33.83]; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Received-SPF: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; CY1PR05MB2506; 23:Wk9sCliuHm7pLWH8pVYxNgk+viK+aCZGlSwZEO0Jg?= =?us-ascii?Q?mesKcIs5usTV+b7GiyrDyjybPQ7F4AtYoYmWa2oc1065BKgEJ+PR9Z8Wu8rG?= =?us-ascii?Q?0UG1KYCC1PhQxdhloDBdWrmANho7fJ02xqczdXPMonwV3WDj1vMMfZQicAs8?= =?us-ascii?Q?+3PLHl0IbG+iUGm9duEY1JD3tEw/SU7Abf6/AwU2HtPx+aPZcufIu2x7JLOA?= =?us-ascii?Q?mfa5IYaE4hmBuZS+xYv9W1g0FmjqsE3k16oK+KBMpQ4LPz+3lt1QVIgTZBQh?= =?us-ascii?Q?Ccgb1B3KRwi/K7LPXngpwdOW4rcLG6T71O4p3RvgydcqIlnx7hJevWwmdqv0?= =?us-ascii?Q?1Y/9weAD4B2ACelOfWR63zjUwlnUG5qrQJ5hvlV/EufNU91jJ2Gn0dQlND+K?= =?us-ascii?Q?DNf3HrWqfTsOlI6ObJPUbPbPVq7eV6EZT6fDvNnO+C0V8FEGqtHJzS5TJ8ur?= =?us-ascii?Q?ewCjYzbwbDaZ2FLLv0cBJebsvdAlTkl5iYupWGoMPt8IZKhlVMEZMNRGcUrd?= =?us-ascii?Q?t8r9keYKomwmNHrKeE01kM7cDSnk3BaKfW5cmX/3BSNWIurf+X5i3/vcG9eP?= =?us-ascii?Q?e8JHKY0TjZdCj788Ij2pyMYwmUL6BUFG8JgVzT5IrWxIyKlUGtfo0Vu06rqV?= =?us-ascii?Q?K1EwxaZwW6sKKU9lzao1LGlNUG+ceDPmHuEceuwWyuY9PZs2ZKlORtuuOcpk?= =?us-ascii?Q?EnW27qt88eKcpXImzHZv6LT08TigmxHDEFGa4gDQ+I0MC7o/aphczGhhJCpa?= =?us-ascii?Q?afBNqxoDN+1DTL+glxTXrieXF6V1XTTrcvVhBwauHgWkAmFp1FW8s/NgG2Yi?= =?us-ascii?Q?8uoXO66d35rKjPIjC0Czql3FD2QGDHS+naIa6y1tjNSlUEB1Lb9kxH/Tbqmi?= =?us-ascii?Q?6l11ch2d6VwSdj1naXBpLwO3Y/KWyLNr1hLEeiPPmNu+1OS5fTA6PmZJQqsV?= =?us-ascii?Q?dPnS/jS90CiU88qkm8/MoQ9CmWohL3euWDzhl9L/EGSH0AKy36RGgfpDnfiq?= =?us-ascii?Q?lk0sb3iPOEbCI7BCuO17GPynBxb7ue5789DNUpUL4UiTOiuOnRlDrQ7I1KMP?= =?us-ascii?Q?xVYT/vKU/ADXpESyo9FFXH0Fxf3im8hD8Q4rH6dsKzzdojAYytEDEGFJbQG0?= =?us-ascii?Q?aQxFw75hlwuzIdQgb5BafTO4ayTAdw05xh6WUYrVHzvviaR8IIC0aIyEcdn/?= =?us-ascii?Q?lqiqN9CdZlFL+Gfbe3nyE7xmUB2Uyyltcj8nNu394rBL9zpXX6pCi6H3g/G7?= =?us-ascii?Q?c8EBcjgPav3ICVOpHpNv9YVu5Tr81uJvBDAQ05gSiAAehOYptENBXqHSdgdt?= =?us-ascii?Q?mBzCDyg8gzl/f/ICdb9yZ1gvdHLDSeaBJLAhvW/AIjEyLCQPCUHlki5bjYHK?= =?us-ascii?Q?tMRArELulxBBqCyn1bHSOCSezg=3D?= X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2506; 6:hmWAnRiUUvq7jPvXy8qqHU6zuwZRvVHYvIDo1t+Y1V9qQ4XKqddfW3bef8XRFdRsXz+ZfD9qcuSQxcVLbjw8jrcfrre+K6eoSwmi8o5pCZkFCgVImIS5DSuQ26k95pHYmKfzfjdjafFnwtcPpUVINHMf4UTL+8qI5UMxGmOVmTduTKYR7ZJfCIGkRqpwldt6xMRvhX2pkszRL6quJTBH/sRxjDu4YiVIWWs6RQ0idKtCRWcYZylRABhRSYIRwskaFAv276Sflc0RmDwtqwxfDIbDzdTKBWd/B5BtmfE7kT1EwiSI5TYLR7lUlTLQ7fTTuPyNpLJAVccC5zEfPYS/vF8eWHmekfzvsudxu/9RZhv+d8EqB9H6w0GKAjBF6VV4XCM0PNjV61PfPTaw8umnj3C6O10EpkaTgqiUFFK/yontDcSrEjsHs0Z9+sL/277HcR4atrHGRLUEUALQuDmYG1jv1Bq7Z/uuEp8DkWu2Oj8=; 5:882fjJGajFAN04+uHTabynSRnVzovcIckyu1WaDKZhQFlEyLjYYRHU4C+VGl/06qGQ5HdwL7Rc7RiVo8c7cqJ4fjh2r272DV7G2jR5kAssCw78VbZnN3K1zJyUqDKhYuKcy1bX9V+UK3hIRy5hIkN5Fb156N6c0ZBm/TMijSuNc=; 24:KUpooRywu6rzRbxTBbvRX59NY204Q90pq0TfNQDgaqxGkcVvbDh7XQ0T3Ei/upganluzd7nA3ZT7+syWsGQ3/o9DZLsH45YTIdq6BZmvrdc= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2506; 7:7I454QUiUSZ7qX239HbqGUAQc9ykmsmRe1WVX3cgkbTUelZSNdSvXvWz8TKPdgvA0LbhbdCRTdOsKYu1nfJffbXMBtC83iUpGFROX7FOooIa9+s+NlIlwg7vO2uMMGrepYJMO571CPA4TZ2vlLS66Ga3Rx8WPXIKu0rX88WZEou+je4NtPgWxsqz7Tz5ui8qYyuBVGT/ELzfVW0lHehFTnWjEzxMbgbdJQFQIf0uaj8XOu8sCnqdq7zx2NaoxtzeNrX6ubU9J5VQTB9oHgpFRKmtKVaOAJkd7vK32wLbZe45EmYy6Zrz33mxh6k1XtZW323rwHkJCUJNMBRb7fREGjZyZKdTsZoJE9+9Zxn2fHExMixOfExEhXYdmyMDJmyhZwyawdoJOhVhWnx3kzg2Ha+7kV42IOAjf4OQ/tBP5aS8ZlXQWMS50XIySp1tAVAKO9/PMZOCPgI4GUgxgKf89A== X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Nov 2016 01:24:01.4756 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2506 Archived-At: Cc: "sidr@ietf.org" , "sidr-chairs@ietf.org" , "draft-ietf-sidr-origin-validation-signaling@ietf.org" , "Sandra L. Murphy" Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 01:24:10 -0000 On Nov 13, 2016, at 1:40 AM, Alvaro Retana (aretana) = wrote: > C1. The reference to rfc7607 should be Informative. Done (in -10 candidate source). =20 > C2. [Major] Security Considerations. I think that there is one = consideration that should be mentioned in this section: Given that the = largest value is preferred (2 =3D invalid), there is an attack vector = where a router in the path (yes, even an internal router) can inject a = community indicating that the route is invalid; the communities are not = protected. This action could result in inconsistent routing or in even = a DoS. I know the document is not explicit about what to do with the = validation state (which is ok), but the clear intention (from rfc6811 = and rfc7115) is that it will be used to make routing decisions. Please = add some text about this potential issue. I started to write something about this and then realized I don't = understand what you mean. At first I thought you were saying that an = attacker that can forge an OV community can bias route selection. While = this is true of course, it's also not unique to OV (Localpref has this = property for example). It probably wouldn't be hard to write a sentence = to summarize this, if necessary.=20 However, you specifically refer to the invalid state: "a router in the = path ... can inject a community indicating that the route is invalid". = This makes me think you think there's something special about "invalid", = and I don't know what it is. You also say something about the sorting = order, which I'm also not sure why that would matter. As far as I can tell, injecting "a community indicating that the route = is invalid" is kind of boring attack -- it just makes the route less = likely to be selected by the downstream router. The "bad" router could = also just fail to propagate the route at all ("underclaiming") making it = flat-out impossible for the downstream to select it, or could use any = number of other path attribute manipulations (Localpref, AS path, etc) = to make the route less preferable. Are you suggesting there is some = fancier attack than this, or are you just asking us to acknowledge BGP = doesn't work very well in the face of an on-path attacker? By all means, if anyone has text to send, do. Thanks, --John= From nobody Tue Nov 29 17:40:51 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29A00129D31 for ; Tue, 29 Nov 2016 17:40:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.398 X-Spam-Level: X-Spam-Status: No, score=-8.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fF1hkTGO3h9l for ; Tue, 29 Nov 2016 17:40:48 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37178129D23 for ; Tue, 29 Nov 2016 17:40:42 -0800 (PST) Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1cBtt0-0002Pu-Ou; Wed, 30 Nov 2016 01:40:39 +0000 Date: Tue, 29 Nov 2016 17:40:37 -0800 Message-ID: From: Randy Bush To: "John G. Scudder" In-Reply-To: <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: sidr wg list Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 01:40:50 -0000 > > C2. [Major] Security Considerations. I think that there is one consideration that should be mentioned in this section: Given that the largest value is preferred (2 = invalid), there is an attack vector where a router in the path (yes, even an internal router) can inject a community indicating that the route is invalid; the communities are not protected. This action could result in inconsistent routing or in even a DoS. I know the document is not explicit about what to do with the validation state (which is ok), but the clear intention (from rfc6811 and rfc7115) is that it will be used to make routing decisions. Please add some text about this potential issue. > > I started to write something about this and then realized I don't understand what you mean. At first I thought you were saying that an attacker that can forge an OV community can bias route selection. While this is true of course, it's also not unique to OV (Localpref has this property for example). It probably wouldn't be hard to write a sentence to summarize this, if necessary. > > However, you specifically refer to the invalid state: "a router in the path ... can inject a community indicating that the route is invalid". This makes me think you think there's something special about "invalid", and I don't know what it is. You also say something about the sorting order, which I'm also not sure why that would matter. > > As far as I can tell, injecting "a community indicating that the route is invalid" is kind of boring attack -- it just makes the route less likely to be selected by the downstream router. The "bad" router could also just fail to propagate the route at all ("underclaiming") making it flat-out impossible for the downstream to select it, or could use any number of other path attribute manipulations (Localpref, AS path, etc) to make the route less preferable. Are you suggesting there is some fancier attack than this, or are you just asking us to acknowledge BGP doesn't work very well in the face of an on-path attacker? > > By all means, if anyone has text to send, do. you have out-sourced your security. the party to which you have out- sourced it can send you anything. get over it. as the OV signaling is vanilla bgp, there is no integrity enforcement, not even a useless checksum; any monkey in the middle can fake anything. get over it. none of this is new. you'll really love the wonderful new blackhole community. randy From nobody Tue Nov 29 18:02:33 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDA891294B2; Tue, 29 Nov 2016 18:02:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MFIWc1GKUV_H; Tue, 29 Nov 2016 18:02:30 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.kvm02.ops-netman.net [IPv6:2606:700:e:550:5c82:28ff:fe25:4960]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05E43129466; Tue, 29 Nov 2016 18:02:29 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id 12B5F40A49; Wed, 30 Nov 2016 02:02:28 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (static-96-241-182-39.washdc.fios.verizon.net [96.241.182.39]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id E42A710EECE83; Wed, 30 Nov 2016 02:02:27 +0000 (UTC) Date: Tue, 29 Nov 2016 21:02:27 -0500 Message-ID: From: Chris Morrow To: "John G. Scudder" In-Reply-To: <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: "sidr@ietf.org" , "sidr-chairs@ietf.org" , "draft-ietf-sidr-origin-validation-signaling@ietf.org" , "Sandra L. Murphy" Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 02:02:32 -0000 At Tue, 29 Nov 2016 20:23:55 -0500, "John G. Scudder" wrote: > > On Nov 13, 2016, at 1:40 AM, Alvaro Retana (aretana) > wrote: > > C1. The reference to rfc7607 should be Informative. > > Done (in -10 candidate source). > > > C2. [Major] Security Considerations. I think that there is one > > consideration that should be mentioned in this section: Given that > > the largest value is preferred (2 = invalid), there is an attack > > vector where a router in the path (yes, even an internal router) can > > inject a community indicating that the route is invalid; the > > communities are not protected. This action could result in > > inconsistent routing or in even a DoS. I know the document is not > > explicit about what to do with the validation state (which is ok), > > but the clear intention (from rfc6811 and rfc7115) is that it will > > be used to make routing decisions. Please add some text about this > > potential issue. > > I started to write something about this and then realized I don't > understand what you mean. At first I thought you were saying that an > attacker that can forge an OV community can bias route > selection. While this is true of course, it's also not unique to OV > (Localpref has this property for example). It probably wouldn't be > hard to write a sentence to summarize this, if necessary. > > However, you specifically refer to the invalid state: "a router in the > path ... can inject a community indicating that the route is > invalid". This makes me think you think there's something special > about "invalid", and I don't know what it is. You also say something > about the sorting order, which I'm also not sure why that would > matter. I read this with the implicit: "Of course 'invalid == drop'." So, if between an edge/core nodes you marked the edge -> core prefix stream (mid-stream) with 'invalid' the core may discard all routes seen and so marked. This COULD move traffic away from a single edge node (or nodes) and bias traffic across longer/other paths OR it could isolate folk behind the edge node(s). Of course, just wiping out the prefixes in flight and stitching back together the tcp session... same effect. -chris From nobody Tue Nov 29 18:08:26 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2A12129407; Tue, 29 Nov 2016 18:08:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mXzhXSmvtA-Q; Tue, 29 Nov 2016 18:08:23 -0800 (PST) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0115.outbound.protection.outlook.com [104.47.38.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14A0D1293EC; Tue, 29 Nov 2016 18:08:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=zGSDFy+0LvB8cNes86HdY70mSyp5wrhJAHxlpNmVBqo=; b=RIDq6c9X2kwV9kYEUK62WFvKiKddk8PNu06c0iu2Cjw8QHi63M4J80uFjcqmBsXvdXkOcyfJNtzOZnTrfYmInDup5+Ouycx4/yXJXmxLoq9wqXOwq1fqfLdzHGWl+Py4dGRy7UmUJQedTH4ShRcJ3VJNg++UNWZsfWQnpkSoWek= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=jgs@juniper.net; Received: from [172.29.33.83] (66.129.241.12) by CO2PR05MB2501.namprd05.prod.outlook.com (10.166.95.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.761.5; Wed, 30 Nov 2016 02:08:19 +0000 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: "John G. Scudder" In-Reply-To: Date: Tue, 29 Nov 2016 21:08:11 -0500 Content-Transfer-Encoding: quoted-printable Message-ID: References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> To: Chris Morrow X-Mailer: Apple Mail (2.3124) X-Originating-IP: [66.129.241.12] X-ClientProxiedBy: BLUPR17CA0013.namprd17.prod.outlook.com (10.164.14.151) To CO2PR05MB2501.namprd05.prod.outlook.com (10.166.95.147) X-MS-Office365-Filtering-Correlation-Id: be994d4e-463f-443e-bf8e-08d418c5c1ce X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:CO2PR05MB2501; X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2501; 3:+X6AGuE7qqo0Vm5PvcC3urQVg27GF24ZPyGL8U65JG4VDs4kBhE+qiF0aV9saqnqcoecN4RxVZqLMzx0rm/H+bmGjR1KUrGgzekxL7d1g8YMxAzmNtmJwr7dPqs8klP9FrB7kJ9Il4/leM6Hidcot+pGAVhOovYvVSgVJv/c9h7Keq4SBk/s5ZU/wfkD72LTbrnmZXaYS81FqxJz7ou0SkGskQmcmV7MABpb440dqCmGyPGwpOdzZY2GQLhB5VyKuuzXFkxqIc+2HPo+2C3QYA==; 25:ilkK+Qk2uYThmxocyk/upjU7TT+NbrSvGlYKQIWg2Q/0AIFcoMiEmQQF/66Lb9iDzqsZu9LnJfmNinNT4Uxrn039ibR5goBI/E4b4uQHwnJMtDiEPDxfldvvOFjT3pJZ/L7ZpydKo8rOg6mG5WOlXMSksHxri45kJyEYqBHCqdf6+tk0d91/4xGgpyaeufdCr6mfagwFvOHIU+1JMA9+XYKh6ia1XuieFhKWIqrSV4uigI1Tver2yeaYeaSyv2b0Vor11bnLN3aH2i2bprvn7gpbRZ5735t8Hj906UktgmJsjVOSa5IsMGnHBsqnKo27X1l+MZa54nVPhaz8jlhbgRYPtCacA9c1ssEbdDtGhe4QlDyoLAr5wugSwX4tLz8X+Rnq8R2oXybKL7F1WabMykG4k493hYZ/gOIjpH+sQltmdlGvegJuSx3RncVubXKPhu8TtlXU3ZPLTuaVHQTSMg== X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2501; 31:Ha0EGy+dV2ofpCJAu+gproqfh+FV8eq8TmX18swrUfEh+VhN6kS/yHt7f03NOqResjtA5Czoy/R9r9mImgoLdLyjlejNsQScSpnpsan+ISDNOAniGpnoZ/wqwX79ywf0uj6PL5eMa28QbEe2F/RpS7Z7wFeSbimAJ9biWQMrHzSTLAX4THQlntDMlwXeyNSxATokArY5iPNjI/fZXfZ39Hy5zX7d82telVvLxUoAOPFsrParMyfKEm25vexdV37yUjHCog9z/jHESpiKgUqXZNSJjs8Bcd8BPInrzFrkIj8=; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(6041248)(20161123560025)(20161123562025)(20161123555025)(20161123564025)(6072148); SRVR:CO2PR05MB2501; BCL:0; PCL:0; RULEID:; SRVR:CO2PR05MB2501; X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2501; 4: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 X-Forefront-PRVS: 0142F22657 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(7916002)(199003)(377454003)(24454002)(189002)(76176999)(57306001)(229853002)(82746002)(38730400001)(101416001)(6116002)(23726003)(3846002)(86362001)(50986999)(66066001)(97756001)(8676002)(81156014)(47776003)(110136003)(189998001)(6916009)(5660300001)(2950100002)(6666003)(68736007)(50226002)(50466002)(230783001)(81166006)(77096006)(733004)(6486002)(46406003)(39450400002)(42186005)(39410400001)(92566002)(105586002)(8746002)(97736004)(106356001)(305945005)(4326007)(83716003)(2906002)(7736002)(36756003)(33656002)(7846002)(104396002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CO2PR05MB2501; H:[172.29.33.83]; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Received-SPF: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; CO2PR05MB2501; 23:XXWle5cTBi6I2Q2J8S6dQk/nR3h/e6jlsCqQwdWVy?= =?us-ascii?Q?nvvfeWZEBz+6cMY+ddKaxS6GxA2GJVVeUi9b5tLKzckGhihVh0zNtssV2Aop?= =?us-ascii?Q?hyqWVvwDBFNbkJ7PjC7cla3Umzd3zEMCkhEzZ8rrnwzDSLbX2SPXmIqKvkST?= =?us-ascii?Q?heFWKAQGVMuCmVOCLY5uCddQ/OTMeGxHrVkAqTbcZRyRsUfTZcoWqPklHS2o?= =?us-ascii?Q?x3ovW2iEMIO9TsXXi0th6tPrw0hpowbmsKu13sPMQMAx/crB1NSEL1codx1A?= =?us-ascii?Q?aa+1NKJMfsqUauL4t3X7nm5pqa2OCgbSvVJWJS5+vJApkyXPc0zBNMZM4UgB?= =?us-ascii?Q?t+TVxVe/I00j7Td0eUxH/V7QqbBgyh/BJdxEpHMfjb+v4+Y1ZfKNAWVr9u+D?= =?us-ascii?Q?7eAQe491rjOmvaDZLZGOVyzpsdYwttRHbQUmvnzqsoExyBhnHBxS6QMwVpEC?= =?us-ascii?Q?AWoMD/+KwvrlQaWaAvqK0gt6wo+iWQcDi26gdp4OrUE5/c2a+tb87bbQS6w0?= =?us-ascii?Q?wI46ejVxBzV+uHAChGPrW6pvDps1FWeKazlXgyknSLoVCvyAXLhAaCaUzk6z?= =?us-ascii?Q?/1O+G7CnwQ885oxWZ7IEOaKmXW0m7Y6gewzysRx9rpBxNW32a38Iji2cfnp+?= =?us-ascii?Q?tpJNziVy2bCAa4Gf9fUWWtLzVn4GkFUWtRQy0uYiN5GUzbA7Pv1M9Hx3lZVY?= =?us-ascii?Q?HHcE5z2s6tBvqAkY7t45sYMO7DGWPoIAvjdSf3K8Nnhp/1uJCUptb3JG95OR?= =?us-ascii?Q?VdmCl2zKZe5+s6k+diC3F78ufW3o9Nr09JocwtLFJr+jtA+mzEeB76sXhtLy?= =?us-ascii?Q?JTRCmNzqb3m02b6gm274LH5aw+F/70xdlZLfSSPZdz5jpYB6sTIKQVjYYXRw?= =?us-ascii?Q?xbbBgf/V46MuOZVkl0RAMRkUOtrKyfw7ACY8famHgrhgb32WrQIWAwDihDkp?= =?us-ascii?Q?LhrqTW1vTpvDXMkFu75su7k2o+Q01iOGsB64zlHGYf8a5CjcJgc1WIQXGsI4?= =?us-ascii?Q?Is4zSwryvJLrUxid5PX2W6DHp9UbMrVgI51yJpVnWYK871DRoFzhVsekw4ol?= =?us-ascii?Q?nObqauCICfPbKd93pMvk6qpBa+8ssCRnqJmKzwF6pcBRkhJiyFd+XvQ7SIdC?= =?us-ascii?Q?Pd852haTM7Dzd38SoZQk9JEUjAsES1LRUh0PB80VElnypa8CBLrzLJ+9tDvy?= =?us-ascii?Q?627TP5bvCpdy5c6IRxV4kuimEts2nQ80wcLmSscUl83AaaI3C0ALEnPpg5UP?= =?us-ascii?Q?E+yhy3XpYbwHGLEmQBCq8Cu+SAKNSXKv6UlWLCTx3cYFtVH09c4s65hzGigw?= =?us-ascii?Q?nDCtG+2ajW/xsmwKpYhN+yZ/QnPy3iUcu32k38dFCXZ?= X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2501; 6:Yol9O9YACs0u9MyuOwQbHyXIqveMpfM7IvMLTheP71nQTfzwpuMe6QCnCQ5yYkWXBrAFxC0I2Ag/HE16ZPt93gCS9qAklraxKXiDH8MdkguNsksLxQ2mwD9TQOUcADzdDyxpsUUGGlAjHl+BtONbB10CI16rRlblWPtNQ9UXgfLJ0gF4NXecf34aPJqyqwjuCYNseN+lO/GWMBF5lqhNJB7N81kAXuhElfBrCvOn3r1mofgmOzQd6mOMbNAC4sov4Fhrl/Eo27vvbUcibVK0cbIZg80U69vpzRWg5Sm0JDIWZQJYdEMKEcEOqnwIf+Y10DGwUvrSmT6cgPbOsYixBN7+DHTT9IwFGwXfGBsz0VgdC4bCsLjRd32KHMmSPj9KCEe/9NmY5qLy31IoCIXfk8Lljz8rezYX45FT98RcMPXQ6OSS/8H785krRqm/PL1ZSPdVOVXGVYvmw46Nf2a8LwohTULKxLG/vUAo8wNw7RXvCpRj6vEpAx3DTar6CUdr; 5:1WeQL98eaWEdnnWTQoD7FyxlDyEV2qCoY0FK2gVRAPDb3mjPdS4X7BddPN4oY2fHAEULgFD9xDtoKJc3O+Q4F2D8JJbVFir4EMLM4YBS6kJFyiTfP7smtq/51jr2NH3MFDeymabkYEimwxMzyVuE/Q==; 24:aTcikBV/mtxpyfIBezITYRnMZGGmPhD12p+lyfr2wp1IVena3PHCvBmPwaW2Wbpn68P3iGSAyc0XNRHBs9Pw7w9RL/Tt9b6C1kHb1j4BY04= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB2501; 7:xmuZfwnDn808Af1BVXOolsqO0D1F+RFh4evtIvwjuF2m57b8IkHiBYeyDxhZ7C+bHEQVleLTCoqcITaqwGfSOTBWuecwog3T1eY6xguZOHeLAfC8teUMWZLsuOGViYgPRL8BfsUYi9eXNRKyXgtxy61ll5jEp3pA86DUUwmFkGboxL9199QBqcqFifWqdlnFYV9HgUgdzZbF3+muegwJZcYd3U1toGMCQK0/EOFroEFaXedQFXsEoWtFTDIp6OCA4ykn4wTRQiRF1xC0Bdrx4VjmL+C5P7d9eOFHSmmODxG6Kbcf2CQGpF6K/eJwql6/bDlZiyb1RClnaEyut7qODY75zjbWgV9SYgks7pbU/xcwLD8WMICCQVHYn54aKd2WJwEmieROhsLmL4wRSs0HgWS5SrEy94U6vMl1NiBUq66P39psz05YW7QlATIiplwRsu3JmSTDKa7JxhXnSEyvdQ== X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Nov 2016 02:08:19.3398 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR05MB2501 Archived-At: Cc: "sidr@ietf.org" , "sidr-chairs@ietf.org" , "draft-ietf-sidr-origin-validation-signaling@ietf.org" , "Sandra L. Murphy" Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 02:08:25 -0000 On Nov 29, 2016, at 9:02 PM, Chris Morrow = wrote: > Of course, just wiping out the prefixes in flight Right, exactly. The OV "attack" is just a baroque version of = underclaiming, only it's an inferior version because there's a greater = audit trail. > and stitching back > together the tcp session... same effect. Not sure why you have to stitch back together the TCP session? I thought = you were supposing the "attacker" was the edge node, it can just apply = an export policy towards the core. --John= From nobody Tue Nov 29 19:21:28 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A97B129C71; Tue, 29 Nov 2016 19:21:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8U9Mn2aXOgjd; Tue, 29 Nov 2016 19:21:26 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.ops-netman.net [192.110.255.59]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0185129CD8; Tue, 29 Nov 2016 19:21:25 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id 9630640A48; Wed, 30 Nov 2016 03:21:24 +0000 (UTC) Received: from morrowc-glaptop4.roam.corp.google.com.ops-netman.net (static-96-241-182-39.washdc.fios.verizon.net [96.241.182.39]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 635A110F28B9A; Wed, 30 Nov 2016 03:21:24 +0000 (UTC) Date: Tue, 29 Nov 2016 22:21:23 -0500 Message-ID: From: Chris Morrow To: "John G. Scudder" In-Reply-To: References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: "draft-ietf-sidr-origin-validation-signaling@ietf.org" , "Sandra L. Murphy" , Chris Morrow , "sidr-chairs@ietf.org" , "sidr@ietf.org" Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 03:21:27 -0000 At Tue, 29 Nov 2016 21:08:11 -0500, "John G. Scudder" wrote: > > On Nov 29, 2016, at 9:02 PM, Chris Morrow wrote: > > Of course, just wiping out the prefixes in flight > > Right, exactly. The OV "attack" is just a baroque version of > underclaiming, only it's an inferior version because there's a > greater audit trail. yes. > > > and stitching back > > together the tcp session... same effect. > > Not sure why you have to stitch back together the TCP session? I > thought you were supposing the "attacker" was the edge node, it can > just apply an export policy towards the core. > say the case is inside your network, between the edge node in NYC and the core nodes in BWI, something on the fiber path just removes/adds information to the bgp stream. baroque. From nobody Wed Nov 30 05:38:34 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88B8912947F for ; Wed, 30 Nov 2016 05:38:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.398 X-Spam-Level: X-Spam-Status: No, score=-8.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8c-5ET_6psGv for ; Wed, 30 Nov 2016 05:38:32 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 55654129971 for ; Wed, 30 Nov 2016 05:37:27 -0800 (PST) Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1cC54e-0000Uu-Rb; Wed, 30 Nov 2016 13:37:25 +0000 Date: Wed, 30 Nov 2016 05:37:24 -0800 Message-ID: From: Randy Bush To: Chris Morrow In-Reply-To: References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: sidr wg list Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 13:38:33 -0000 >>> and stitching back together the tcp session... same effect. >> >> Not sure why you have to stitch back together the TCP session? I >> thought you were supposing the "attacker" was the edge node, it can >> just apply an export policy towards the core. > > say the case is inside your network, between the edge node in NYC and > the core nodes in BWI, something on the fiber path just removes/adds > information to the bgp stream. < pedantry > the point is the tcp 'stream' does not have to be hacked in any way. the hack is at a layer above. randy From nobody Wed Nov 30 06:07:36 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C1FC129573 for ; Wed, 30 Nov 2016 06:07:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zC-5eInKfFlE for ; Wed, 30 Nov 2016 06:07:26 -0800 (PST) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0135.outbound.protection.outlook.com [104.47.34.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A35321298B9 for ; Wed, 30 Nov 2016 06:06:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=nKK3YJQvvEnZT+pqjDMCVTT3D4cAVzwDsb/vNO0sffM=; b=MXG8b09h+PjPiW/pUF2a/yskt9CyXCJD11M0HqWq+8EefVi632WqqsYMf/mD5Pu2BRfrKg8DNYlrFDezL1aRJOXo0ejSB9hCKuwfVMqn1wM+jwMLgc7z/Z+pNlyMTiyFLpbgo1GBjCTWzsw4jQX5aEvpi7YUIuJFrQJb+Y+4/Pc= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=jgs@juniper.net; Received: from [172.29.33.83] (66.129.241.12) by SN2PR05MB2510.namprd05.prod.outlook.com (10.166.213.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.761.5; Wed, 30 Nov 2016 14:06:28 +0000 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: "John G. Scudder" In-Reply-To: Date: Wed, 30 Nov 2016 09:06:21 -0500 Content-Transfer-Encoding: quoted-printable Message-ID: <1E8CFD67-61BA-4CD3-8A96-CF38D283BD08@juniper.net> References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> To: Randy Bush X-Mailer: Apple Mail (2.3124) X-Originating-IP: [66.129.241.12] X-ClientProxiedBy: DM3PR13CA0005.namprd13.prod.outlook.com (10.164.193.15) To SN2PR05MB2510.namprd05.prod.outlook.com (10.166.213.19) X-MS-Office365-Filtering-Correlation-Id: 78ca20aa-a4b3-4c30-2633-08d4192a14fd X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:SN2PR05MB2510; X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 3:lneUAFILZtcGxgbHoqc1llwEhD1z3K1eK9R1ZlPdcdG+gYg3rlvX2lhvLWCFln3Oi+8gPluIWjkwemhhjPVYwtxHX0jCj4Os9gZcFtJv0qsYFXPcAZk2F86awXC4P8hdaRPqBfjOvlt3xRJjB3X4EWReLDCrDJFalkh7+hf4sY98AB7qGE4jzzezLuRyAa9ginrkQ4uBLCPyVJLs/60PIPccuqFW3O/4PzNk1G7/U3/jrTDH35MEjpzthgb1doVZv8pbJ4iEnsMBoNYdYxqSvA== X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 25: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 X-LD-Processed: bea78b3c-4cdb-4130-854a-1d193232e5f4,ExtAddr X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 31:unPNcNCisYvKyJ914dJpaPPGVrSXG6JLSTzyyuUicS67RIRr5Arqfjr6dVXm5nK2+i2VyMYSpTaHzvGY6GsT6CrAyesU3fG3YJPqQ5RskrKwfkDrexSiS1vnrN/jmst1/kD6hcilysYgVFXHOfV2r0Ujx/vnA2hNRRETWh+fIX8o/Ur4laCh2JG2vHRHcr+WeMZEEQorEmzKeC/xQbXYpwxelTdMtY2Pi7Kvlh70BJojFg4hLr2egGGxsi4NbGD75NsokC88F2N4ucMG1sModceIT3b8yHK9Cwgm3LLHfb4=; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026)(6041248)(20161123558021)(20161123564025)(20161123560025)(20161123555025)(20161123562025)(6072148); SRVR:SN2PR05MB2510; BCL:0; PCL:0; RULEID:; SRVR:SN2PR05MB2510; X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 4: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 X-Forefront-PRVS: 0142F22657 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(7916002)(199003)(377454003)(24454002)(189002)(77096006)(39410400001)(82746002)(46406003)(97756001)(38730400001)(97736004)(81166006)(8746002)(83716003)(8676002)(81156014)(50226002)(6666003)(50466002)(23726003)(47776003)(57306001)(68736007)(93886004)(3846002)(6116002)(2906002)(230783001)(6486002)(86362001)(2950100002)(110136003)(7736002)(7846002)(66066001)(4326007)(6916009)(42186005)(305945005)(33656002)(5660300001)(92566002)(189998001)(50986999)(36756003)(105586002)(101416001)(733004)(229853002)(106356001)(76176999)(39450400002)(42262002)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN2PR05MB2510; H:[172.29.33.83]; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Received-SPF: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; SN2PR05MB2510; 23:YwYFCLacQqYCqJBd05Bz+Q5U6DeltUuZ13isv+Cb8?= =?us-ascii?Q?jyq8Ub33V7Wfve9cSOD+KIYtnh/0fh8M17GF9BCZVG3POgLXRUV0cTLEw2uK?= =?us-ascii?Q?ONX115fVHQbgX7EnLtlTjTqlTw5dbqcM56ybaPeJnRuWIqBLhvU4o43eVE/w?= =?us-ascii?Q?ENNgjYEPeUJCoiqhblLgfRu8lrYpXwDQwSQNrADIitjuVtELp8DuhBxybqcI?= =?us-ascii?Q?Bx4hlj+sfYW8ne1F2C2ydQKO+Jh79Usk6UHHSEO9BukFoOryoGNnEwsTE2PQ?= =?us-ascii?Q?OFbHkHXrD0NjCQtN4vJD9bF4OLGfG4u0wc4+YR3vX69bhb+5BUw2L8jbc8Ku?= =?us-ascii?Q?gjJSgWcol3CnKoqThreIE7hRkho/nPC9PaFliWQT2giUZZye/Jl45i/kc5ic?= =?us-ascii?Q?BX4z2wf3wPECbV5xI/rsc2w24Qv1RsyuuE8o5AUOYAiH6MsrRDmoI9lN7sEy?= =?us-ascii?Q?RwvmhqSBTD0LEsnorc3BpvXYnXKiGT6cwsGsji7sO9hwMPAuq9f77XwV3A7n?= =?us-ascii?Q?EbbmBQP4/QCZKdfQjdp2a+f+ZKOrFCRha71bjSJvU/0uxlM4ExRW9BrCYwta?= =?us-ascii?Q?04gD2Oc2lKDKrVQRdCyLJe5U1uW6Sb4pefNtT6tQJVGHiej/6GD7jP2Ox0pu?= =?us-ascii?Q?7HGjOu5k+ah5R4av6KHg7PbqAhuOrw58fnkY+B0jvHeZdOTCa67MdysJo/h2?= =?us-ascii?Q?y9mENKkuIUZ0K9R9ra+EQ603jg9L5eqJgSsspBZfaawkFe7hq5wYWl6qNs2N?= =?us-ascii?Q?RtaAokNMOuptqZ/sS5PhFR/Ex4SOOW5+7QrFhdmFm5CnhpqeNtwUcVsQdgYs?= =?us-ascii?Q?8xqOC4yAr6i4JSfXWOKNrinTEhqiAsF/Qzuo27VKwm28Ga+GNo9EHJ6SjJN5?= =?us-ascii?Q?/3SoNX1HAkRofZ0yGVautty4gDr5XYIouyL1H+nfu908U5PGsS33dAF8dvwA?= =?us-ascii?Q?kfLXi46Gaed+Cwgyqr/MggStoTuWJoqlnVnUI82HGCOafmuPnChYjq4QflLD?= =?us-ascii?Q?k+xto8xSojxjy74iuAAnb4MbT2oRhVSRG9TFHrxL8DRw8beosV3Bo4jcjI6z?= =?us-ascii?Q?uS0FSI0niFayndO17EKlIt+sZGnUXktVy2bqw1hfmFyoP/AAe6+uJRnJSuyc?= =?us-ascii?Q?KhBr82MwBZ2VOpKSEygEbzoze3T1zKb6IH1qFZBHIMvMmKAsrX7va/sJi+Ui?= =?us-ascii?Q?8bbWJWjHtjIrCUXFu2ezMuv7b3XD9Z+sXtGkJRc4QY7fKPinALY+eOZ7h3t0?= =?us-ascii?Q?i9EokUwFaNkAf3zPj0ai23h9STaSH+ey6v/vixEPEQuNotEA/oPa9O4VrR8d?= =?us-ascii?Q?r1bXJ/OkBX2PDzfkSEhfwidk7d5ZwvdEm/LUwGwHEhY2jFi6WQFjJ2l5LQbL?= =?us-ascii?Q?IfD9A=3D=3D?= X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 6: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; 5:cjuZeUSjOWx3k42vNS5BTGXYsZh6CYs2R1Yk1cIarSYcbeWlKeveDF7d80dFt/Gm2H+7bi5Vtl4UeyXhFNXigVe+MEZ6VLGmohuKI5+oQ0pxZYkxn2CQ2RnLPXXg/Cw1XXcuOKcMKz+/G5kR09sMUg==; 24:vNQMOFNuwGlh1E6dJUHtlqbt/Mgxe70KK5NQ0Dqti8DFCg++rRUjWyPDiJEznIsVpTSabeloh6lskSc93m09f1Lx5bm2g8WNbm9Hl5JZKr0= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2510; 7:EWdAcHdDifrz2xbw+t1AXjU22whgoF0L7DBuJqpNCCxW4uzAGQ/otZzkhcFWFk8dcyFsViXww6DCnYN8pDL6KvNQ/HRbP36sR8NHY1W5uB6e8XXq06ZWUGSgs+Gmj18Ahv6jpcPiBbGaEbjKjJUXYXUOosp9UG6k2LGcEOF8tsYFrbY/F3JJtf7H2FPRoBFidq9PhjK5u94Mtdpsg7XA7DNd7iOyNHpknk9mXsZJ+QdK2W9WnR08kXDNW1YrRJsq1BY/8QJhcPS6C06FJQsjUJNdDEb1hELZ4X8rBmep76PmvFptOtPxJq7l+nk1FYRVRwhLfw2+9rnDAAm//aV6uhKs0KJSQ1+ZNutPf9Tu3eZkwYD3FijMcshIRb9LBemd+odlCi55BG3/blZoN7QdSI96ebjpcKLI7jzequME529DIY/o+Sz5WvMw58ZYOos7IlXWSU6vvSmxzJB/0T6OAg== X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Nov 2016 14:06:28.9581 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN2PR05MB2510 Archived-At: Cc: Chris Morrow , sidr wg list Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 14:07:35 -0000 On Nov 30, 2016, at 8:37 AM, Randy Bush wrote: > the point is the tcp 'stream' does not have to be hacked in any way. > the hack is at a layer above. I agree. I also agree with your earlier On Nov 29, 2016, at 8:40 PM, Randy Bush wrote: > none of this is new.=20 I guess I will wait for Alvaro to answer, but so far I'm not seeing the = need for anything more than a couple lines that remind the reader of the = basic (in)security properties of BGP, maybe an RFC 4272 reference. --John= From nobody Wed Nov 30 06:20:11 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4056B129495 for ; Wed, 30 Nov 2016 06:20:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.398 X-Spam-Level: X-Spam-Status: No, score=-8.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o5gRa8MQnOoU for ; Wed, 30 Nov 2016 06:18:08 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 495A41294EB for ; Wed, 30 Nov 2016 06:18:07 -0800 (PST) Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1cC5i0-0000bH-Hv; Wed, 30 Nov 2016 14:18:04 +0000 Date: Wed, 30 Nov 2016 06:18:03 -0800 Message-ID: From: Randy Bush To: "John G. Scudder" In-Reply-To: <1E8CFD67-61BA-4CD3-8A96-CF38D283BD08@juniper.net> References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> <1E8CFD67-61BA-4CD3-8A96-CF38D283BD08@juniper.net> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: sidr wg list Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 14:20:09 -0000 > I guess I will wait for Alvaro to answer, but so far I'm not seeing > the need for anything more than a couple lines that remind the reader > of the basic (in)security properties of BGP, maybe an RFC 4272 > reference. section 4.5 of 4593 is relevant, or all of sec 4 i am kinda sad that 7132 is not too good on this From nobody Wed Nov 30 07:42:23 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 442851295D5 for ; Wed, 30 Nov 2016 07:42:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.398 X-Spam-Level: X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id se2lMC7d3CbK for ; Wed, 30 Nov 2016 07:42:19 -0800 (PST) Received: from relay.kvm02.ops-netman.net (relay.kvm02.ops-netman.net [IPv6:2606:700:e:550:5c82:28ff:fe25:4960]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78A4A1295C3 for ; Wed, 30 Nov 2016 07:42:14 -0800 (PST) Received: from mail.ops-netman.net (mailserver.ops-netman.net [199.168.90.119]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by relay.kvm02.ops-netman.net (Postfix) with ESMTPS id 2F47740A62; Wed, 30 Nov 2016 15:42:13 +0000 (UTC) Received: from donkey.her.corp.google.com.ops-netman.net (unknown [104.132.12.87]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by mail.ops-netman.net (Postfix) with ESMTPSA id 06113785FF4; Wed, 30 Nov 2016 15:42:13 +0000 (UTC) Date: Wed, 30 Nov 2016 10:42:12 -0500 Message-ID: From: Chris Morrow To: Randy Bush In-Reply-To: References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.3 Mule/6.0 (HANACHIRUSATO) Organization: Operations Network Management, Ltd. MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: Chris Morrow , sidr wg list Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 15:42:21 -0000 At Wed, 30 Nov 2016 05:37:24 -0800, Randy Bush wrote: > > >>> and stitching back together the tcp session... same effect. > >> > >> Not sure why you have to stitch back together the TCP session? I > >> thought you were supposing the "attacker" was the edge node, it can > >> just apply an export policy towards the core. > > > > say the case is inside your network, between the edge node in NYC and > > the core nodes in BWI, something on the fiber path just removes/adds > > information to the bgp stream. > > < pedantry > > > the point is the tcp 'stream' does not have to be hacked in any way. > the hack is at a layer above. sure. but in the case where you own both sides you'd assume that the goes-inta == goes-outa on a single stream... ideally you also backstop that with some protections (tcp-ao, of course!), but... really. From nobody Wed Nov 30 08:16:19 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA7BC12940E for ; Wed, 30 Nov 2016 08:16:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.398 X-Spam-Level: X-Spam-Status: No, score=-8.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CXRHIoby7ix6 for ; Wed, 30 Nov 2016 08:16:17 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FB4C129667 for ; Wed, 30 Nov 2016 08:10:35 -0800 (PST) Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1cC7Sq-00015G-C5; Wed, 30 Nov 2016 16:10:32 +0000 Date: Wed, 30 Nov 2016 08:10:31 -0800 Message-ID: From: Randy Bush To: Chris Morrow In-Reply-To: References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: sidr wg list Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 16:16:18 -0000 > ideally you also backstop that with some protections (tcp-ao, of > course!) and cash will fall from the sky From nobody Wed Nov 30 08:36:13 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC4AA129A71 for ; Wed, 30 Nov 2016 08:35:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.022 X-Spam-Level: X-Spam-Status: No, score=-0.022 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iujyWjnwJb5v for ; Wed, 30 Nov 2016 08:35:16 -0800 (PST) Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0130.outbound.protection.outlook.com [104.47.42.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79298129979 for ; Wed, 30 Nov 2016 08:20:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=b0SxWrBZw87RuLHh+xLWz6pTg8hZVtXF3AGqpRaJwFw=; b=J9ESOPXfhXx1FwJxEKoguKLR83AbQOBZG5S04LNEJON+BVI3FumnnJuQ+imZpGs2eEDLJmMRCRtI4loIXOC7oM3T/lODoViGxO7S1JwHwBKACfOiKHWSk8RfFhZ7WBXgfoq2QiY7Slvo1xOeMihP7bHjzl3/FGFqxOneb2/o7/A= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=jgs@juniper.net; Received: from [172.29.33.83] (66.129.241.12) by SN2PR05MB2509.namprd05.prod.outlook.com (10.166.213.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.761.5; Wed, 30 Nov 2016 16:20:47 +0000 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: "John G. Scudder" In-Reply-To: Date: Wed, 30 Nov 2016 11:20:41 -0500 Content-Transfer-Encoding: quoted-printable Message-ID: <22535C38-689F-4508-9A9C-2DD0A2E6BFC0@juniper.net> References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> <1E8CFD67-61BA-4CD3-8A96-CF38D283BD08@juniper.net> To: Randy Bush X-Mailer: Apple Mail (2.3124) X-Originating-IP: [66.129.241.12] X-ClientProxiedBy: SN1PR17CA0056.namprd17.prod.outlook.com (10.163.3.152) To SN2PR05MB2509.namprd05.prod.outlook.com (10.166.213.18) X-MS-Office365-Filtering-Correlation-Id: 0ff9183f-e93a-420c-c2ed-08d4193cd83a X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:SN2PR05MB2509; X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2509; 3:+V0fbGEGE5qzFy6eIi84JrEjEya33npLXDuwErpddlnVKJo2i4Cxb+8k7Mblxy/LDpwDw3deFiallfu6jAqV08goMSQeMvvPvm8sAfSNwz1UMpyDepERbNcEe06MGfSYq+ebYSbC+zKizLxkSeQRShlLrHcMYWNcjw4FcybPjIfBTx8O122WbgCINkAaS381/MM0tA1m5nGIrNJx4FrG1jdu8X8szJTEaGGWjfOVlLHTSZQh5YGxICYTn9Gm88wElHIiYIP0vzuuMjFzLVRHnA== X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2509; 25: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 X-LD-Processed: bea78b3c-4cdb-4130-854a-1d193232e5f4,ExtAddr X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2509; 31:3SEOLTgZYKLpWGf9BCk3OVTIR5dKaM2i68taiidd08VFo6H6+mRfAVirGRDnlhsHQ9vf6UZeC10qfuCc3SyZFFBnsMEQhhhcZTRuyEZLN/wuc1d8Thl9aTLvgQmlje0ux3d2bHEiO4Flety19Nimwj0BEgOOUQijJ0SK/2foSqU272Z73DJfjwJr4nmOTE2e5D3sxXtk8jrjgQlteMkgqA9GiMoDmtGyng0KhP2Hhg55eHid9cl01TI7rdHV3FVtsfa+AW8t5IflJPDJq7adP6Tzp9RucNUX/kx+Tsp5Z6ZjOUSfFFug+4maukYrYJ3c; 20:zo0ADJIuAixNKoUAGck65OmHYEH3MoOhNniMP0rB7wiAc/LkUGUz/ryVc+nqHfYw8d/C70bfN44kT4GS6HwBcmFnyba8RGf3CdkkTG/yrQlewaJGoOKbXnnbQSONsvY3ofyBkRDkqikjjyW34TMJTo5fZilnk+59SVTyeaee6kZX7uB9cLKJjTFSa818vZZ7rDCKyU1ahiXHpaOwjkgb+Hj+Cjkip4dWmzB0yV7GTZVQyRDxFdxe1rKKLOVBlQT3sb/KiIY9spW3v9cN48Fy3IkvsNk3XMH8/3Bnz6gK4cTGdg9vHaZcjcumuDLhfkMaKSvQn3F9AUGLV2XIsvBCzv3bIKnQIprecG57gYPlS/jFCV/tXazpslvo1tmT0axuKtVvhkFAvoA4bFYgA7YGM7VOcC1fBMfpfBCEY4yCYU9cibl+9aLRvsT+H0tq94KDplWkt6fx8B2t9wciv/Ea8Hr8yrLzQO5uLF2WOR2cP0P1p8iulUghZt/gczgzItfJl1sxQ39iENLj0c9AntC9mL3TrBCE8FWj8JhFvt1cbKwKZQFnhQGzl2OhQvSh4GIEqxVEnYXoFYCXV1ByxzonZgBb5UhfYONENhJ5zzPeuB8= X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(192374486261705); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026)(6041248)(20161123555025)(20161123562025)(20161123564025)(20161123560025)(6072148); SRVR:SN2PR05MB2509; BCL:0; PCL:0; RULEID:; SRVR:SN2PR05MB2509; X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2509; 4: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 X-Forefront-PRVS: 0142F22657 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(7916002)(199003)(189002)(377454003)(24454002)(6666003)(2950100002)(92566002)(68736007)(76176999)(50986999)(8676002)(229853002)(8746002)(81166006)(36756003)(47776003)(42186005)(33656002)(81156014)(38730400001)(6916009)(7846002)(6486002)(7736002)(50466002)(46406003)(77096006)(230783001)(2906002)(39450400002)(189998001)(82746002)(93886004)(83716003)(3846002)(733004)(110136003)(39410400001)(305945005)(4326007)(105586002)(6116002)(66066001)(101416001)(23726003)(86362001)(106356001)(97756001)(97736004)(57306001)(50226002)(5660300001)(104396002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN2PR05MB2509; H:[172.29.33.83]; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Received-SPF: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; SN2PR05MB2509; 23:U5Nxn+y3MSlpGbn7mcF3fhDh1iBSvuLXnKR1zCrKl?= =?us-ascii?Q?SZMHCGmvK/+fUZJeJ3ps56HYx0j089LdEoHEuDN3qsnLiRH4UJ5WFKXhcKlQ?= =?us-ascii?Q?NdaV+b/9Qatm28f8rXJnSeCBx3u1EcAmJ9NK7s0rRUv/0D0tkPgEfnDkoHON?= =?us-ascii?Q?xTo/ZEDmjNfap83iJRmgAdx0KJ3cThjv5y444dlkUq+S3MyeSPsECguCsDQX?= =?us-ascii?Q?d/2EkoTRUPReYGTNf9YMI8e1VeWeskl2X24S8vpOg/2fduqJhUVav+luhiwo?= =?us-ascii?Q?X0mLSsdjKJMZcj+BRWIseDu8YCZB/Ih8jKtQ0jYBsBpQoT1IOKX/8zpwldwX?= =?us-ascii?Q?3hNYSxcKe97+exm0x+ZWTtWHqjlo1oPediLeXlAhA0VAL0xH0Odp4/di8yTl?= =?us-ascii?Q?M5beIBEFhegwD5Z8+dhfUPXcTsrIEsV7tNgOENlGFbKxyOSLUutm86wxs59q?= =?us-ascii?Q?YiftMAwrOx29TJyycxptwdqYJdOb8w40V1RH+dmgb6l8Dkd8UadAbW6vmSKw?= =?us-ascii?Q?Ypw4fkoYXEPFESKyUfT7WSh46Z2GEyXoP0+iFkCfSn/tOpavdPmzCXQ6Y8Ae?= =?us-ascii?Q?sBagVuV3nnP/pHaUxBDK+FGXH/zrdkrx2ndyd/R7KsTGY1JN4UI7G0y1K+eq?= =?us-ascii?Q?iDae1a2WJS11mxb2oL9oOcRqfxzFJhP+lhthVkkpDi1uqcwEl1iIYkMHuFdc?= =?us-ascii?Q?qSYJ1aEdUr0LJvx8z2m6RtBVtbsmu7D2Hwl6sMFwFd/cWhhxLjobVKce8stU?= =?us-ascii?Q?USqtd3gwJ+CUH5A0ifronx+1LJxEC9OibZfI8/jyZmPVKMJkfJ+ANEJUcHsp?= =?us-ascii?Q?niIcDWOhn38C377sv8PdLLLY6YDhyDPDPKLteaDYpHn4ahm6kDPLct0cEcSK?= =?us-ascii?Q?t70tAPlYJh3jvQ8TnmEkAOFGzzjVRPuBvNsqFST14RTRkGfEuFODy9FU8TDh?= =?us-ascii?Q?8TvfKIwj1HvvkrmOFvR/ThHwqZQeMhZN7JvOYLphbTJyLxsWqLUQnfnoR/bP?= =?us-ascii?Q?KqXFTm2sqnVO/jclg77QBFKxRwQAB1GIK9H9mq7mkQLNCKLjtSdTQJtG3iQ9?= =?us-ascii?Q?DScw4uny/REfVGoOCsVvbdftPIIElZbXqEDskMykLqCD4IzSx+docbASFZ7+?= =?us-ascii?Q?I2s/EL6UJfn6aMXw9BTzM5ZrT2BTXIWbmYyA++SFfiSJdWAMnOlIANzOh19W?= =?us-ascii?Q?9Bg9kVSmwCuoXMNBHYi1eU5KF+WubTECKo421hPqsc6EtziGub5HiQLVvvck?= =?us-ascii?Q?eDmWjNI+FMncfm9drxvh2D8QEDTWxmUOS0zlaTz/zyLEktkiRCvZRJTs/HIM?= =?us-ascii?Q?9rG4nClopOG9zpdm6JjEm0jsbxE5q1y8exvGLVGlsKB4kq18KXBQlpTNTXfy?= =?us-ascii?Q?FoUMw=3D=3D?= X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2509; 6:DwQ6jIaf25QFfK55A77C6M0/Np6/B9DnP4AogdS2fsAJ2SmdeCj/Rogpsc4IY/QphKKGTm9rpKS+BxB4tTitw9DB2ILGKC2k5sm3cgq0guRSQSa8N9jVkIaQXwVggxSvitBEv9Yq+9D/nqyTxlgsCVCVyI96Jw9lQEazq+4kUgI0vgWyylNmSQ0FWx2Fd2/zoI+h9C33nv0REsxUbUBOxw1uSIpFrkRxL/c3Jh92QrZzsElc/pXjBYsGOFDp4L6VFY8SC2C64itEKNtqBX+2vLMheIX4twZv+ZxLsm4L+f6cWw4HqlhlxpglJRJPiZV/odn80mxkwrTt70uQ8XDXK+IsPPLru2l+sDlEk+NYvGNXb2uWp0wLSe3M4872RiBlk7KdYeywSKQAJacVc//+8lQ6LBI2rJJ6HdLmc6F9JMKb8kmBrLi+h5tbsVU78FctP2AgsIuQrBkWcIufbbeVb6j1gTi2QU4hHQkqjih/pJDOR3aoFNvwAGLxygYuP7U6; 5:T0WuDIU7rzZimRk/eKqGF8Dvi1ZVU1DS0kRnOc0uONob97xKHQ86qfGaO4HK2q8P/pkhG8cszFKSPlgbFG9LiZ1BRZdvHhQ0Rmbhe4oEHR5uzltFxeNV6bVNso3TVcQo5PYIqYgxDD8MnITdA9gPZyODVsQlaYib92RhBVID3eQ=; 24:axUhMaJOk7gBZVkOsXeM0vxd+iw8auxHdKcigDSqLCB+YI1hWSyla4CjTT5miATID25NkHHwVU7jvpSHhrMwqZksIOUI15bebQ/f6kw8O1Q= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; SN2PR05MB2509; 7:xLvUdRLRHPjKyLfYdoQMQ14sGShnvLCXxyo7v+E2QetRMxVQD6M+unO6EFj/YH1zyXMChVjsr5zEE7pcyCLKmIoBt67NHbz59t3cAD3fuvdl9/5s0ok2Rq1HvpLqu7pLXsR8R4UyOdngJJ8f+JGEzmUEPbfAVfyGJxFuaFS+joyJ1ckaTTIQIjld/JOL/gil31MnNL8SJ8qwaQNUjp+4QqOmF0UzjiJvDy0v84Pse5gjzXpM2SyVREMIFatfYdWH7HCdMn6gNx2gkuLeU7h1L7UIBSVXsny5pC/TnDKoJNYW0qyMoHID2lx1P/QmMK9uDpUSu77eMhx7+YF9kJbIEBVDDg2UgUUcfKBJtaH5RUudMTEtET0BLcRrcmHYPlwsXMLT14/9RV2IJhCPPR9r9adyFSGt733uw49PuPMWjIBWN3Hu+C2BlYCU57OYYX6KPqnKBgHb0QwbI4ORWH+Hwg== X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Nov 2016 16:20:47.7733 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN2PR05MB2509 Archived-At: Cc: sidr wg list Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 16:35:31 -0000 On Nov 30, 2016, at 9:18 AM, Randy Bush wrote: > section 4.5 of 4593 is relevant, or all of sec 4 Thanks, used in the text below. > i am kinda sad that 7132 is not too good on this I looked there first but it's a *path* security threat model so can't = really be blamed for not covering this. Candidate new security section below. I'd appreciate an ack from Alvaro = that this addresses his concern before I publish. --John 6. Security Considerations Security considerations such as those described in [RFC4272] continue to apply. Since this document introduces an extended community that will generally be used to affect route selection, the analysis in Section 4.5 ("Falsification") of [RFC4593] is relevant. These issues are neither new, nor unique to the origin validation extended community. The security considerations provided in [RFC6811] apply equally to this application of origin validation. In addition, this document describes a scheme where router A outsources validation to some router B. If this scheme is used, the participating routers should have the appropriate trust relationship -- B should trust A either because they are under the same administrative control or for some other reason (for example, consider [I-D.ietf-sidr-route-server-rpki-light]). The security properties of the propagation path between the two routers should also be considered. See [RFC7454] Section 5.1 for advice regarding protection of the propagation path. (all the refs above are in the "informative" section)= From nobody Wed Nov 30 08:57:23 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB226128AB0 for ; Wed, 30 Nov 2016 08:57:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -15.517 X-Spam-Level: X-Spam-Status: No, score=-15.517 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-2.896, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nuu_fDyf9diY for ; Wed, 30 Nov 2016 08:57:20 -0800 (PST) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FBF9120725 for ; Wed, 30 Nov 2016 08:57:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=16144; q=dns/txt; s=iport; t=1480525038; x=1481734638; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=E8c/TXKIZB/pwcgo7tTJiXn1gKqNK9aD1ROCp9J2eQo=; b=IHlIm+EYDpmGs8PPHA64hQWYLTE6sKcV1dEyXmjMG8vHqWU/eURzkGN6 OLwUd7xmw4G/5x9UKgpbnO3L1oN7F2AAcToUv7bcbTyySomztZZnhZk24 9aRjoeW/oaR9I9ensYAq+pMn27JeGM4AUqRXmM+fyEWzO5g3c7iXgABOR A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AUAQCcAz9Y/4UNJK1dGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgnNFAQEBAQEfWIEDB40+pl+FH4IIhiICGoFiPxQBAgEBAQEBAQF?= =?us-ascii?q?iKIRpAQEEI08HEAIBCD8DAgICMBQRAgQBDQUUiFmtB4IpL4sWAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBHIY+gX0IglaEMy2CbS2CMAWUboVpAZEOkDKNc4QLAR43gRc?= =?us-ascii?q?wAQGFIHKFbyuBA4ENAQEB?= X-IronPort-AV: E=Sophos;i="5.31,574,1473120000"; d="scan'208,217";a="354033081" Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 30 Nov 2016 16:57:17 +0000 Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id uAUGvHw2015206 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 30 Nov 2016 16:57:17 GMT Received: from xch-aln-002.cisco.com (173.36.7.12) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 30 Nov 2016 10:57:17 -0600 Received: from xch-aln-002.cisco.com ([173.36.7.12]) by XCH-ALN-002.cisco.com ([173.36.7.12]) with mapi id 15.00.1210.000; Wed, 30 Nov 2016 10:57:17 -0600 From: "Alvaro Retana (aretana)" To: "John G. Scudder" , Randy Bush Thread-Topic: [sidr] AD Review of sidr-origin-validation-signaling-09 Thread-Index: AQHSPXjONv4V5/cl2U+lT6vbr4sK26DxOniAgAAKxICAAAGagIAAFHSAgACsHQCAAAgXgIAAA0WAgAAiQ4D//7ZnAA== Date: Wed, 30 Nov 2016 16:57:16 +0000 Message-ID: References: <88A45E79-880B-4F82-9FAA-80C05627A49F@cisco.com> <917E9000-8F1F-4E4F-BDEC-767E3510A71A@juniper.net> <1E8CFD67-61BA-4CD3-8A96-CF38D283BD08@juniper.net> <22535C38-689F-4508-9A9C-2DD0A2E6BFC0@juniper.net> In-Reply-To: <22535C38-689F-4508-9A9C-2DD0A2E6BFC0@juniper.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.117.15.4] Content-Type: multipart/alternative; boundary="_000_C6DFA103D0634572A673CA6D07394429ciscocom_" MIME-Version: 1.0 Archived-At: Cc: sidr wg list Subject: Re: [sidr] AD Review of sidr-origin-validation-signaling-09 X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 16:57:22 -0000 --_000_C6DFA103D0634572A673CA6D07394429ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkhDQoNClllcywgdGhlIHRleHQgYmVsb3cgd29ya3MgZm9yIG1lLiAgQW5kIEkgd291bGQgYXNz dW1lIGl0IHdvcmtzIGZvciBUZXJvIGFzIHdlbGwuDQoNClRoYW5rcyEhDQoNCkFsdmFyby4NCg0K T24gMTEvMzAvMTYsIDExOjIwIEFNLCAiSm9obiBHLiBTY3VkZGVyIiA8amdzQGp1bmlwZXIubmV0 PG1haWx0bzpqZ3NAanVuaXBlci5uZXQ+PiB3cm90ZToNCg0KT24gTm92IDMwLCAyMDE2LCBhdCA5 OjE4IEFNLCBSYW5keSBCdXNoIDxyYW5keUBwc2cuY29tPG1haWx0bzpyYW5keUBwc2cuY29tPj4g d3JvdGU6DQpzZWN0aW9uIDQuNSBvZiA0NTkzIGlzIHJlbGV2YW50LCBvciBhbGwgb2Ygc2VjIDQN Cg0KVGhhbmtzLCB1c2VkIGluIHRoZSB0ZXh0IGJlbG93Lg0KDQppIGFtIGtpbmRhIHNhZCB0aGF0 IDcxMzIgaXMgbm90IHRvbyBnb29kIG9uIHRoaXMNCg0KSSBsb29rZWQgdGhlcmUgZmlyc3QgYnV0 IGl0J3MgYSAqcGF0aCogc2VjdXJpdHkgdGhyZWF0IG1vZGVsIHNvIGNhbid0IHJlYWxseSBiZSBi bGFtZWQgZm9yIG5vdCBjb3ZlcmluZyB0aGlzLg0KDQpDYW5kaWRhdGUgbmV3IHNlY3VyaXR5IHNl Y3Rpb24gYmVsb3cuIEknZCBhcHByZWNpYXRlIGFuIGFjayBmcm9tIEFsdmFybyB0aGF0IHRoaXMg YWRkcmVzc2VzIGhpcyBjb25jZXJuIGJlZm9yZSBJIHB1Ymxpc2guDQoNCi0tSm9obg0KDQo2LiAg U2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMNCg0KICAgU2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgc3Vj aCBhcyB0aG9zZSBkZXNjcmliZWQgaW4gW1JGQzQyNzJdIGNvbnRpbnVlDQogICB0byBhcHBseS4g IFNpbmNlIHRoaXMgZG9jdW1lbnQgaW50cm9kdWNlcyBhbiBleHRlbmRlZCBjb21tdW5pdHkgdGhh dA0KICAgd2lsbCBnZW5lcmFsbHkgYmUgdXNlZCB0byBhZmZlY3Qgcm91dGUgc2VsZWN0aW9uLCB0 aGUgYW5hbHlzaXMgaW4NCiAgIFNlY3Rpb24gNC41ICgiRmFsc2lmaWNhdGlvbiIpIG9mIFtSRkM0 NTkzXSBpcyByZWxldmFudC4gIFRoZXNlIGlzc3Vlcw0KICAgYXJlIG5laXRoZXIgbmV3LCBub3Ig dW5pcXVlIHRvIHRoZSBvcmlnaW4gdmFsaWRhdGlvbiBleHRlbmRlZA0KICAgY29tbXVuaXR5Lg0K DQogICBUaGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgcHJvdmlkZWQgaW4gW1JGQzY4MTFdIGFw cGx5IGVxdWFsbHkgdG8NCiAgIHRoaXMgYXBwbGljYXRpb24gb2Ygb3JpZ2luIHZhbGlkYXRpb24u ICBJbiBhZGRpdGlvbiwgdGhpcyBkb2N1bWVudA0KICAgZGVzY3JpYmVzIGEgc2NoZW1lIHdoZXJl IHJvdXRlciBBIG91dHNvdXJjZXMgdmFsaWRhdGlvbiB0byBzb21lDQogICByb3V0ZXIgQi4gIElm IHRoaXMgc2NoZW1lIGlzIHVzZWQsIHRoZSBwYXJ0aWNpcGF0aW5nIHJvdXRlcnMgc2hvdWxkDQog ICBoYXZlIHRoZSBhcHByb3ByaWF0ZSB0cnVzdCByZWxhdGlvbnNoaXAgLS0gQiBzaG91bGQgdHJ1 c3QgQSBlaXRoZXINCiAgIGJlY2F1c2UgdGhleSBhcmUgdW5kZXIgdGhlIHNhbWUgYWRtaW5pc3Ry YXRpdmUgY29udHJvbCBvciBmb3Igc29tZQ0KICAgb3RoZXIgcmVhc29uIChmb3IgZXhhbXBsZSwg Y29uc2lkZXINCiAgIFtJLUQuaWV0Zi1zaWRyLXJvdXRlLXNlcnZlci1ycGtpLWxpZ2h0XSkuICBU aGUgc2VjdXJpdHkgcHJvcGVydGllcyBvZg0KICAgdGhlIHByb3BhZ2F0aW9uIHBhdGggYmV0d2Vl biB0aGUgdHdvIHJvdXRlcnMgc2hvdWxkIGFsc28gYmUNCiAgIGNvbnNpZGVyZWQuICBTZWUgW1JG Qzc0NTRdIFNlY3Rpb24gNS4xIGZvciBhZHZpY2UgcmVnYXJkaW5nDQogICBwcm90ZWN0aW9uIG9m IHRoZSBwcm9wYWdhdGlvbiBwYXRoLg0KDQooYWxsIHRoZSByZWZzIGFib3ZlIGFyZSBpbiB0aGUg ImluZm9ybWF0aXZlIiBzZWN0aW9uKQ0K --_000_C6DFA103D0634572A673CA6D07394429ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iVGl0bGUiIGNvbnRlbnQ9IiI+DQo8bWV0YSBuYW1lPSJLZXl3b3JkcyIgY29udGVu dD0iIj4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iO30NCmE6bGluaywgc3Bhbi5Nc29IeXBl cmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNv cmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRp b246dW5kZXJsaW5lO30NCnNwYW4uYXBwbGUtc3R5bGUtc3Bhbg0KCXttc28tc3R5bGUtbmFtZTph cHBsZS1zdHlsZS1zcGFuO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDsN Cglmb250LXdlaWdodDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0Kc3Bhbi5tc29JbnMN Cgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJbXNvLXN0eWxlLW5hbWU6IiI7DQoJdGV4 dC1kZWNvcmF0aW9uOnVuZGVybGluZTsNCgljb2xvcjp0ZWFsO30NCi5Nc29DaHBEZWZhdWx0DQoJ e21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2Ug V29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAx LjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0t Pjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBiZ2NvbG9yPSJ3aGl0ZSIgbGFuZz0iRU4tVVMiIGxp bms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OkNhbGlicmkiPkhpITxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPlllcywgdGhlIHRleHQg YmVsb3cgd29ya3MgZm9yIG1lLiZuYnNwOyBBbmQgSSB3b3VsZCBhc3N1bWUgaXQgd29ya3MgZm9y IFRlcm8gYXMgd2VsbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDYWxpYnJpIj5UaGFua3MhITxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNhbGlicmkiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OkNhbGlicmkiPkFsdmFyby48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpD YWxpYnJpIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0I1QzRERiA0LjVwdDtwYWRkaW5nOjBpbiAw aW4gMGluIDQuMHB0O21hcmdpbi1sZWZ0OjMuNzVwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj5PbiAxMS8zMC8xNiwg MTE6MjAgQU0sICZxdW90O0pvaG4gRy4gU2N1ZGRlciZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRv Ompnc0BqdW5pcGVyLm5ldCI+amdzQGp1bmlwZXIubmV0PC9hPiZndDsgd3JvdGU6PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj5PbiBOb3YgMzAsIDIwMTYsIGF0IDk6MTggQU0sIFJh bmR5IEJ1c2ggJmx0OzxhIGhyZWY9Im1haWx0bzpyYW5keUBwc2cuY29tIj5yYW5keUBwc2cuY29t PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90 ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0I1QzRERiA0LjVwdDtwYWRk aW5nOjBpbiAwaW4gMGluIDQuMHB0O21hcmdpbi1sZWZ0OjMuNzVwdDttYXJnaW4tcmlnaHQ6MGlu IiBpZD0iTUFDX09VVExPT0tfQVRUUklCVVRJT05fQkxPQ0tRVU9URSI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 Q29uc29sYXM7Y29sb3I6YmxhY2siPnNlY3Rpb24gNC41IG9mIDQ1OTMgaXMgcmVsZXZhbnQsIG9y IGFsbCBvZiBzZWMgNDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3Rl Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+VGhh bmtzLCB1c2VkIGluIHRoZSB0ZXh0IGJlbG93LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXIt bGVmdDpzb2xpZCAjQjVDNERGIDQuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQ7bWFyZ2lu LWxlZnQ6My43NXB0O21hcmdpbi1yaWdodDowaW4iIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJVVElP Tl9CTE9DS1FVT1RFIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+aSBhbSBr aW5kYSBzYWQgdGhhdCA3MTMyIGlzIG5vdCB0b28gZ29vZCBvbiB0aGlzPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj5JIGxvb2tlZCB0aGVyZSBmaXJzdCBidXQgaXQncyBh ICpwYXRoKiBzZWN1cml0eSB0aHJlYXQgbW9kZWwgc28gY2FuJ3QgcmVhbGx5IGJlIGJsYW1lZCBm b3Igbm90IGNvdmVyaW5nIHRoaXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj5DYW5kaWRhdGUg bmV3IHNlY3VyaXR5IHNlY3Rpb24gYmVsb3cuIEknZCBhcHByZWNpYXRlIGFuIGFjayBmcm9tIEFs dmFybyB0aGF0IHRoaXMgYWRkcmVzc2VzIGhpcyBjb25jZXJuIGJlZm9yZSBJIHB1Ymxpc2guPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6 YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4tLUpvaG48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPjYu Jm5ic3A7Jm5ic3A7U2VjdXJpdHkgQ29uc2lkZXJhdGlvbnM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6Ymxh Y2siPiZuYnNwOyZuYnNwOyBTZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzdWNoIGFzIHRob3NlIGRl c2NyaWJlZCBpbiBbUkZDNDI3Ml0gY29udGludWU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7IHRvIGFw cGx5LiZuYnNwOyZuYnNwO1NpbmNlIHRoaXMgZG9jdW1lbnQgaW50cm9kdWNlcyBhbiBleHRlbmRl ZCBjb21tdW5pdHkgdGhhdDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgd2lsbCBnZW5lcmFsbHkgYmUg dXNlZCB0byBhZmZlY3Qgcm91dGUgc2VsZWN0aW9uLCB0aGUgYW5hbHlzaXMgaW48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+ Jm5ic3A7Jm5ic3A7IFNlY3Rpb24gNC41ICgmcXVvdDtGYWxzaWZpY2F0aW9uJnF1b3Q7KSBvZiBb UkZDNDU5M10gaXMgcmVsZXZhbnQuJm5ic3A7Jm5ic3A7VGhlc2UgaXNzdWVzPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPiZu YnNwOyZuYnNwOyBhcmUgbmVpdGhlciBuZXcsIG5vciB1bmlxdWUgdG8gdGhlIG9yaWdpbiB2YWxp ZGF0aW9uIGV4dGVuZGVkPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyBjb21tdW5pdHkuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2si PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvbnNv bGFzO2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgVGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25z IHByb3ZpZGVkIGluIFtSRkM2ODExXSBhcHBseSBlcXVhbGx5IHRvPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPiZuYnNwOyZu YnNwOyB0aGlzIGFwcGxpY2F0aW9uIG9mIG9yaWdpbiB2YWxpZGF0aW9uLiZuYnNwOyZuYnNwO0lu IGFkZGl0aW9uLCB0aGlzIGRvY3VtZW50PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyBkZXNjcmliZXMg YSBzY2hlbWUgd2hlcmUgcm91dGVyIEEgb3V0c291cmNlcyB2YWxpZGF0aW9uIHRvIHNvbWU8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpi bGFjayI+Jm5ic3A7Jm5ic3A7IHJvdXRlciBCLiZuYnNwOyZuYnNwO0lmIHRoaXMgc2NoZW1lIGlz IHVzZWQsIHRoZSBwYXJ0aWNpcGF0aW5nIHJvdXRlcnMgc2hvdWxkPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPiZuYnNwOyZu YnNwOyBoYXZlIHRoZSBhcHByb3ByaWF0ZSB0cnVzdCByZWxhdGlvbnNoaXAgLS0gQiBzaG91bGQg dHJ1c3QgQSBlaXRoZXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTpDb25zb2xhcztjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7IGJlY2F1c2UgdGhleSBhcmUgdW5k ZXIgdGhlIHNhbWUgYWRtaW5pc3RyYXRpdmUgY29udHJvbCBvciBmb3Igc29tZTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4m bmJzcDsmbmJzcDsgb3RoZXIgcmVhc29uIChmb3IgZXhhbXBsZSwgY29uc2lkZXI8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+ Jm5ic3A7Jm5ic3A7IFtJLUQuaWV0Zi1zaWRyLXJvdXRlLXNlcnZlci1ycGtpLWxpZ2h0XSkuJm5i c3A7Jm5ic3A7VGhlIHNlY3VyaXR5IHByb3BlcnRpZXMgb2Y8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7 IHRoZSBwcm9wYWdhdGlvbiBwYXRoIGJldHdlZW4gdGhlIHR3byByb3V0ZXJzIHNob3VsZCBhbHNv IGJlPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7 Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyBjb25zaWRlcmVkLiZuYnNwOyZuYnNwO1NlZSBbUkZD NzQ1NF0gU2VjdGlvbiA1LjEgZm9yIGFkdmljZSByZWdhcmRpbmc8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+Jm5ic3A7Jm5i c3A7IHByb3RlY3Rpb24gb2YgdGhlIHByb3BhZ2F0aW9uIHBhdGguPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9y OmJsYWNrIj4oYWxsIHRoZSByZWZzIGFib3ZlIGFyZSBpbiB0aGUgJnF1b3Q7aW5mb3JtYXRpdmUm cXVvdDsgc2VjdGlvbik8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_C6DFA103D0634572A673CA6D07394429ciscocom_-- From nobody Wed Nov 30 09:32:54 2016 Return-Path: X-Original-To: sidr@ietf.org Delivered-To: sidr@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 16474129669; Wed, 30 Nov 2016 09:32:48 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.39.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <148052716808.9698.16268406615246789675.idtracker@ietfa.amsl.com> Date: Wed, 30 Nov 2016 09:32:48 -0800 Archived-At: Cc: sidr@ietf.org Subject: [sidr] I-D Action: draft-ietf-sidr-origin-validation-signaling-10.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 17:32:48 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Inter-Domain Routing of the IETF. Title : BGP Prefix Origin Validation State Extended Community Authors : Pradosh Mohapatra Keyur Patel John Scudder Dave Ward Randy Bush Filename : draft-ietf-sidr-origin-validation-signaling-10.txt Pages : 6 Date : 2016-11-30 Abstract: This document defines a new BGP opaque extended community to carry the origination AS validation state inside an autonomous system. IBGP speakers that receive this validation state can configure local policies allowing it to influence their decision process. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sidr-origin-validation-signaling/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-sidr-origin-validation-signaling-10 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-sidr-origin-validation-signaling-10 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Nov 30 09:34:34 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4AD41295D0 for ; Wed, 30 Nov 2016 09:34:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.022 X-Spam-Level: X-Spam-Status: No, score=-0.022 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gnQ-aWBZk3oj for ; Wed, 30 Nov 2016 09:34:30 -0800 (PST) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0099.outbound.protection.outlook.com [104.47.41.99]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27BDE129604 for ; Wed, 30 Nov 2016 09:34:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ZzU1GVZYTaqZ+4rVphoo/W13mFgZDKk+vvJQ2ykohuk=; b=L+1UYcWFJnlCuoJYKSl7uld5QippZ9O5DVrmSUA8hpCEBYvoL5DMZZ6Tk0l1azIFGJ+mygTCWG/LZv0v6l2SEMeewkyZSvAhrLv9Q8zLQY2iXZWOGtqj7Otfp+9TvIhXscZI1h6ifBOLGPl4xuwYmzL/dwXjI2Q9c4s0XgSURIE= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=jgs@juniper.net; Received: from [172.29.33.83] (66.129.241.12) by BN3PR05MB2498.namprd05.prod.outlook.com (10.167.3.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.761.5; Wed, 30 Nov 2016 17:34:28 +0000 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: "John G. Scudder" In-Reply-To: <148052716808.9698.16268406615246789675.idtracker@ietfa.amsl.com> Date: Wed, 30 Nov 2016 12:34:22 -0500 Content-Transfer-Encoding: quoted-printable Message-ID: <6BE42AA4-B4C3-4B1F-B862-1214EA436FFD@juniper.net> References: <148052716808.9698.16268406615246789675.idtracker@ietfa.amsl.com> To: sidr wg list X-Mailer: Apple Mail (2.3124) X-Originating-IP: [66.129.241.12] X-ClientProxiedBy: BLUPR13CA0048.namprd13.prod.outlook.com (10.160.82.19) To BN3PR05MB2498.namprd05.prod.outlook.com (10.167.3.27) X-MS-Office365-Filtering-Correlation-Id: e2cc22b1-0db6-4b80-c739-08d4194722f5 X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN3PR05MB2498; X-Microsoft-Exchange-Diagnostics: 1; BN3PR05MB2498; 3:pB2qRTtvF84rGL3CZoSbhq++YItrdLzLNuFoB8ZIXMbP/VNOWXEPjMON5ICFPZnEycjWv63jleUPsHt1+WuG5rLq7Ywy02scaEzR5UA1rF7hWFUzTD2+QeO61xBiF+QDzqJbpaZqhg1qEI/2q1ZgHxujdA7vwETHGViZyVC1CERln256CXcMy4Wf00SmU9LJ5ZwsNbI4BLdh2EWkAwpFeJ1Yj1D6Dr6oqB09Fdfp0UlyUQjkkuaqkg2eBMBrG4u/NNNDbRZNAbPoqjP/BE86jg== X-Microsoft-Exchange-Diagnostics: 1; BN3PR05MB2498; 25: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 X-Microsoft-Exchange-Diagnostics: 1; BN3PR05MB2498; 31:yin1aC0THeCNpQTv+IEP6KG5S1DlofYss01lSGBQiq28mfS9L+/orllBxifsUahlZKtXHW7yhKSkBkGd60efT9BeNn+4+OlnkJm9BFaSNnNe9IDJWAgJ/Qr37f+bwhP6fKd76xBEZYDynM9QM7gT09d8O58/5Lo5j7UDAbRWzLOtwK2Z84OopDi6c1YogFJ01Z6CzWpvalv1e/WTpu6k1Ub/vyMQ8sL+rXsJC8nTlw3q2SLiLRPEXwPB5WDurOlSNAiy8LLt8IaNPh6sYvTxGg==; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(120809045254105)(192374486261705)(17755550239193); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(6041248)(20161123562025)(20161123560025)(20161123555025)(20161123564025)(6072148); SRVR:BN3PR05MB2498; BCL:0; PCL:0; RULEID:; SRVR:BN3PR05MB2498; X-Microsoft-Exchange-Diagnostics: 1; BN3PR05MB2498; 4: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 X-Forefront-PRVS: 0142F22657 X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(7916002)(189002)(377454003)(377424004)(24454002)(199003)(66066001)(86362001)(5660300001)(2906002)(39450400002)(47776003)(82746002)(23726003)(6486002)(83716003)(229853002)(3846002)(110136003)(77096006)(6116002)(42186005)(50466002)(230783001)(38730400001)(6666003)(733004)(2950100002)(6916009)(81166006)(4001150100001)(50986999)(97756001)(57306001)(36756003)(33656002)(46406003)(101416001)(39410400001)(8746002)(76176999)(50226002)(8676002)(81156014)(450100001)(305945005)(106356001)(68736007)(105586002)(97736004)(7736002)(92566002)(7846002)(107886002)(189998001)(42262002)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR05MB2498; H:[172.29.33.83]; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; Received-SPF: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; BN3PR05MB2498; 23:tlbvCxc0KtzxMY+ZhgGkkXVjIO/DlfrZGapIjG7t6?= =?us-ascii?Q?6lBtk8o9GMTaLUTjgpKmex3VnDiRmXrY/gnRzHjYynda9tkguLFH/zAHBgro?= =?us-ascii?Q?6ZyUo24MFkc4aDr7IocxKzgvnAOMMb4LfeAIv7wuTdmOrtCpmVzKSPGvFJBO?= =?us-ascii?Q?BWMpqFWUkxp0h8PYZF8QtsAigbx8qBtyIXkAZE1ofUAbycBP334WeSq3HIPZ?= =?us-ascii?Q?TSkhnYZQy3vc9a69xGZxUQsY56iBrX1XAO+f/Mhk2rBZ89KHpsJ4fXs1QOsx?= =?us-ascii?Q?4XfU+yFJ+BTjAJ5jS0TVVF/oOfO3g4JajXrJpHVYjzu/+NPP5jtOKtUSvQqT?= =?us-ascii?Q?c6yehF2LVVcDm8MUbHnu4yNWp+z13yIn3ndHpEhXHek/mmwOZ1Nwu1TKkXGx?= =?us-ascii?Q?BXtS3fe4qb/Bu7MW547IXzfDoL30Y6CN2gvad9fkAdyxBjxOJtF/p5ElRpxa?= =?us-ascii?Q?O98JOS5asUlUTniQ5BqWNVJAO+A9+lA5tsBQNtwtf+OcX8zB/pMefLfrzG8O?= =?us-ascii?Q?6lOzPw9Z55wOWKi87uoRcQermMPaVkH0yRs4q00nwAbSifCCM2Ix0oYtr/zh?= =?us-ascii?Q?EAcRR4oYQggInSHX+LsKF0YS4KQiqt88sjTHTs9BY/rYvBdsjKH3y21v4OVi?= =?us-ascii?Q?JoEG87/YtFZgKtewOImDAu2aGBAj2td03L7uaUHnXSebZer0aYyvevmSc7yA?= =?us-ascii?Q?rcLuD8K1hjTRXKiUkFTWLyP7+goQKOF8TiLmr+STde5baqqPkIdwT3hJ3Y/P?= =?us-ascii?Q?HJxlTRUuDyID3HqakD9GTMv4eJz+60kQTAGxj56inGAJ4S9jgpAh0QJyhSQk?= =?us-ascii?Q?PzP6gaYpnWwhqDZTUER9I2Vg63DrJ98BioKnSLFbCqVMETwfdfGgoeqUM6L2?= =?us-ascii?Q?WyW6ZA+aoTiRn3OpRxXJd8lbv42lAZ6ToxAFqYODvK7W/OstDwwOhokq+9mm?= =?us-ascii?Q?3a56HE5LlXpt2kwlAeCe82j63t5abgXbBXsNcuVHbzzYRK8MayVBmFLgcEAD?= =?us-ascii?Q?aYgJDYfoehtAB5JZE2RS1GHg2T29eCSnXFT6JGLrPcDszvF6OD0Q7/S6ZIvs?= =?us-ascii?Q?rjBWFY8togo/PUEyJaCfJJwyBx8Kw4GJA3U+ofEhkwkkHhLtQfCx5u4xr/iW?= =?us-ascii?Q?KSEB2JUD1ROhBanMYkNZVJ/KH3lU7bd+el8cPQIQxxmA7E38DJmGI3DdBgKy?= =?us-ascii?Q?wq/gxRD+E+4Ph64ewWT9XR7TT583svQNoZHCPNjQ9KsRgeTNBe3ipUF1o9Dx?= =?us-ascii?Q?6G/mz8u+f0T9IhZrLCXygXOLa+dTTLkoL07dqBV6el3v3k0HE5+74Q24GJPw?= =?us-ascii?Q?LDlwEnmB7VdB68B78XYnVJX1rU1Y0MF9HPN8pdsv2ehonUWSvK1+PR4zi4bO?= =?us-ascii?Q?UTNTgiO2qq13JH7O8KjgYk2X8ADKbV6C/okK4SMP9Kuhj+Vzo0+fDN7guHBp?= =?us-ascii?Q?bLeTUb0jA=3D=3D?= X-Microsoft-Exchange-Diagnostics: 1; BN3PR05MB2498; 6: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; 5:ItUdrj8/CZSEi4TImjoDw+zUUtTgD4uRCsGcjHr9CmjGgoaAmoQZ2JGbvkduZrmbpuaoOjn3jpUEj9UFsPGnyDygVZXvwHFroxgyiuxQqqhyrf9xMycoLEaKCJ3S6Lup2ukd4UHUhUsFzMGaWOKLMA==; 24:J+qTVOLLXGlr8j+IOUYzQiORya3ZT0pypmYwKQQEPkSU+fIQI667qQjXKCEgT6LWSKWBnbLj+un4kpo+5s77S9iwrdLQ4VVKvSOdDBGqgxI= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; BN3PR05MB2498; 7:VDOcFPz5JHpTNmVLQGOko1EApiMBSG5NeJcSNk3oy5uRRbXbHyrgS48IyTgqI45va6OtWvBb37Hl0ngmEdu3IHp6f+s6pJZ/dy36CWKTTSrGIWSClSKsY34MIz6w2iDYazPSDQt5QYytnarxneJtIPzOszAnPe8lz6Du1fEVRHzdPvXSL9/YIqaftU79qZ0p7moowCw+ytONeFTL9KYNrFbYIpFPRCxDVSxfjH1vqqTZZ07FXnal6jkQJmPbNJVbjN9/asAXA/c68a4gjlT8jUpJVvLlI+xSJqbh6bN0rGLS/qvZfE4edlhdBYEuRkbx2/iolTfe5VNgWAefCUptzuVx03GGegQ+/rwJj7akIJ8v7vvuLOr/muHL+0MgEpyMo/n/kYmv9/fz7PqWZ8sUfWMLwMXHn7zeoZjofFAiLwJfxSE5xnkp0wdbpSThDPuRJZ1bt7VrSRY30AKsuQhZ/w== X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Nov 2016 17:34:28.3705 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR05MB2498 Archived-At: Subject: Re: [sidr] I-D Action: draft-ietf-sidr-origin-validation-signaling-10.txt X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 17:34:32 -0000 Updated security section to reflect SecDir and AD review. --John > On Nov 30, 2016, at 12:32 PM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the Secure Inter-Domain Routing of the = IETF. >=20 > Title : BGP Prefix Origin Validation State Extended = Community > Authors : Pradosh Mohapatra > Keyur Patel > John Scudder > Dave Ward > Randy Bush > Filename : = draft-ietf-sidr-origin-validation-signaling-10.txt > Pages : 6 > Date : 2016-11-30 >=20 > Abstract: > This document defines a new BGP opaque extended community to carry > the origination AS validation state inside an autonomous system. > IBGP speakers that receive this validation state can configure local > policies allowing it to influence their decision process. >=20 >=20 > The IETF datatracker status page for this draft is: > = https://datatracker.ietf.org/doc/draft-ietf-sidr-origin-validation-signali= ng/ >=20 > There's also a htmlized version available at: > = https://tools.ietf.org/html/draft-ietf-sidr-origin-validation-signaling-10= >=20 > A diff from the previous version is available at: > = https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-sidr-origin-validation-sign= aling-10 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr From nobody Wed Nov 30 10:33:36 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9B02129626; Wed, 30 Nov 2016 10:33:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.099 X-Spam-Level: X-Spam-Status: No, score=-0.099 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vTJIbE_zNcOb; Wed, 30 Nov 2016 10:33:30 -0800 (PST) Received: from mail-qk0-x242.google.com (mail-qk0-x242.google.com [IPv6:2607:f8b0:400d:c09::242]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FAE21295C7; Wed, 30 Nov 2016 10:33:27 -0800 (PST) Received: by mail-qk0-x242.google.com with SMTP id n204so23012964qke.2; Wed, 30 Nov 2016 10:33:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=vLHLs9Pp8z7IcPQYb8qjIpNn81zCDx4EKpKllpQRbuw=; b=IQNEdvc2MGXqVVaHpuSoulqNCjjQJ9loPYNtwFDe9hy0iBx5akGZgHs7YqgIOQ2cxu a55k5eW/ajep6GxqgzhxHOmv3BAP4cLmw5dtbylHfPbra+a57y6vnIvFMrl5P1KIAU/b nbnSmz2WGcThHN5zdPg7gODhft0gwxwOCM2ZTTDNsp3IPuTbN8WKNtCydTTQkQmdoH9v ZIiuNEP5HRcMvhyE2GWGGAN7WnPQ8IqilY8ISvREt7tO7bsI3E6iEMvkLEbJpU1KRhr/ HJFQjp7DGTuI4X/rM3Ua/+4WWPax4GuzXLb2JpMSiS+NlbRwCYa/9nSDmTNngBBM+DBZ YOGQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=vLHLs9Pp8z7IcPQYb8qjIpNn81zCDx4EKpKllpQRbuw=; b=PZT6PxuTCUcMtGwyuJaVJtYlvsEjUyZZbdzxfjsUC9qAEiBANUqkp1hvE8BbM0Yl9w NCcTQ5m+m7tA4huDQMOr1II8kZuLHLeHwNvnrPHXJCBQK1SE3PHGovW27EC9x76dpb66 OtRcTWRrsI4/6tQdSYJN45JkiRTHZpi/PzqRRhYFhwnw4M8P8saYlk/YlJX+yMhDQDNB 2opVIrS0A9PwRpc71Z2KZM8W2/+Sez6/hV0B5DF3sOxM2I0DXeAYYV78S+POTA2Z7i8I lFYj4EOqDaZWPjoZqiD+n4SHFnkeShoF5jDa5/l9GAqbYjmfeUBlGJKRYhu0TeIBDVjW NSOg== X-Gm-Message-State: AKaTC01+d+JAIQv8qq6AgCi5Z1Ncz+zp88b3CfhtT3G2o6zJ6bEB9Y2x3FITtijQuxODoBj2VJQyuDuawkN26g== X-Received: by 10.55.78.147 with SMTP id c141mr33787687qkb.4.1480530806285; Wed, 30 Nov 2016 10:33:26 -0800 (PST) MIME-Version: 1.0 Sender: christopher.morrow@gmail.com Received: by 10.140.27.179 with HTTP; Wed, 30 Nov 2016 10:33:25 -0800 (PST) In-Reply-To: References: From: Christopher Morrow Date: Wed, 30 Nov 2016 13:33:25 -0500 X-Google-Sender-Auth: qHOdAlKuy7ziqHLQTFsigeo0nc8 Message-ID: To: Chris Morrow Content-Type: multipart/alternative; boundary=001a114a97c6c9b225054288f06b Archived-At: Cc: sidr-ads@ietf.org, "sidr-chairs@ietf.org" , "sidr@ietf.org" Subject: Re: [sidr] Current document status && directionz X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 18:33:34 -0000 --001a114a97c6c9b225054288f06b Content-Type: text/plain; charset=UTF-8 And again, restarting... post meeting and post travel refocusing :) On Wed, Oct 26, 2016 at 11:35 AM, Christopher Morrow < morrowc.lists@gmail.com> wrote: > Restarting this thread, with some updates :) > > Preparing for Seoul in a few weeks time, with the intent that we do not > meet face-to-face in Chicago, have all current 'protocol' related docs to > the IESG/done and meet instead in sidr-ops if there are agenda items at > that time :) > > Currently we have the following in IESG/pub-request status (13 documents): > draft-ietf-sidr-adverse-actions > draft-ietf-sidr-as-migration > draft-ietf-sidr-bgpsec-algs > draft-ietf-sidr-bgpsec-ops > draft-ietf-sidr-bgpsec-overview > draft-ietf-sidr-bgpsec-pki-profiles > draft-ietf-sidr-bgpsec-protocol > draft-ietf-sidr-delta-protocol (10/26 sent forward) > draft-ietf-sidr-origin-validation-signaling > draft-ietf-sidr-publication > draft-ietf-sidr-rpki-oob-setup > draft-ietf-sidr-rpki-rtr-rfc6810-bis > I had thought I sent validation-reconsidered forward for processing, I'm doing that today: > draft-ietf-sidr-rpki-validation-reconsidered > Currently still active documents (6 documents): > > draft-ietf-sidr-bgpsec-rollover > draft-ietf-sidr-lta-use-cases > draft-ietf-sidr-route-server-rpki-light > draft-ietf-sidr-rpki-tree-validation > draft-ietf-sidr-rtr-keying > draft-ietf-sidr-slurm > > (this reflects the changes since the last email, included below) > > I believe we're still planning to move (and have agreement from authors): > draft-ietf-sidr-bgpsec-rollover > draft-ietf-sidr-lta-use-cases > draft-ietf-sidr-route-server-rpki-light > draft-ietf-sidr-rtr-keying > draft-ietf-sidr-rpki-tree-validation > which leaves to be dealt with by Chicago 2 documents: > draft-ietf-sidr-slurm > > I think this is good, I believe (and of course I should be corrected if > wrong) > slurm - more work inbound and discussion planned in Seoul > tree-validation - I thought moved to sidr-ops, but don't have docs to > back that up. > > I still think this is good, I will be sending a request to the OPS-AD folk today to move: draft-ietf-sidr-bgpsec-rollover draft-ietf-sidr-lta-use-cases draft-ietf-sidr-route-server-rpki-light draft-ietf-sidr-rtr-keying draft-ietf-sidr-rpki-tree-validation to sidr-ops... If there are corrections/additions please send them along :) -chris > -chris > > On Fri, Sep 2, 2016 at 4:56 PM, Chris Morrow > wrote: > >> >> Howdy SIDR peeps, >> (+bonus ops ad) >> >> Following on the Berlin meeting we were trying to accomplish two >> things: >> >> 1) get all documents related to sidr protocols into wglc and then >> publication >> >> 2) get all documents which are more operationally focused moved >> along to an ops group (sidr-ops or something akin to that) >> >> With that in mind there are 8 documents in the publication queue: >> draft-ietf-sidr-as-migration >> draft-ietf-sidr-bgpsec-algs >> draft-ietf-sidr-bgpsec-ops >> draft-ietf-sidr-bgpsec-overview >> draft-ietf-sidr-bgpsec-pki-profiles >> draft-ietf-sidr-bgpsec-protocol >> draft-ietf-sidr-origin-validation-signaling >> draft-ietf-sidr-rpki-rtr-rfc6810-bis >> >> and 11 still in progress. Of the 11 left Sandy and I think they >> roughly break down like: >> >> Documents which should move to the ops group: >> draft-ietf-sidr-bgpsec-rollover >> draft-ietf-sidr-lta-use-cases >> draft-ietf-sidr-route-server-rpki-light - authors notified/queried >> about this >> draft-ietf-sidr-rtr-keying >> >> documents which should finish out in sidr: >> draft-ietf-sidr-delta-protocol >> draft-ietf-sidr-publication >> draft-ietf-sidr-rpki-oob-setup - pub request in flight >> draft-ietf-sidr-rpki-tree-validation >> draft-ietf-sidr-rpki-validation-reconsidered >> draft-ietf-sidr-slurm - authors recently updated >> draft-ietf-sidr-adverse-actions - wglc imminent >> >> I think if there's no meaningful discussion on change for these >> between now and 9/16/2016 (Sept 16th) we will assume this list is >> correct. For documents in the 'move' list, if progress to publication >> happens 'good!'. For all documents in the 'stays' list: >> 1) we aim to have wglc by Seoul >> 2) publication requests started on as many as possible >> >> We plan to meet in Seoul, but not in Chicago (Mar 2017) where we >> expect the ops group to exist and meet. We can progress documents in >> SIDR after Seoul, but the WG should close out shortly after the new >> year. (or that's the goal). >> >> Thoughts? >> -chris >> >> _______________________________________________ >> sidr mailing list >> sidr@ietf.org >> https://www.ietf.org/mailman/listinfo/sidr >> > > --001a114a97c6c9b225054288f06b Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
And again, restarting... post meeting and post travel refo= cusing :)

On Wed, = Oct 26, 2016 at 11:35 AM, Christopher Morrow <morrowc.lists@gmail.c= om> wrote:
Restarting this thread, with some updates :)

Preparing for Seoul in a few weeks time, wit= h the intent that we do not meet face-to-face in Chicago, have all current = 'protocol' related docs to the IESG/done and meet instead in sidr-o= ps if there are agenda items at that time :)

Currently we have the following = in IESG/pub-request status (13 documents):
= draft-ietf-sidr-adverse-actions
draft-ietf-sidr-as-migration
draft-ietf-sidr-bgpsec-algs
= draft-ietf-sidr-bgpsec-ops
draft-ietf-s= idr-bgpsec-overview
draft-ietf-sid= r-bgpsec-pki-profiles
draft-ietf-s= idr-bgpsec-protocol
<= /div>
=C2=A0 =C2=A0 draft-ietf-sidr-= delta-protocol (10/26 sent forward)
<= div>=C2=A0
draft-ietf-sidr-= origin-validation-signaling
draft-ietf-sidr-publication
draft-ietf= -sidr-rpki-oob-setup
draft-ietf-sidr-rp= ki-rtr-rfc6810-bis

I had thought I sent validation-reconsidered forward for proces= sing, I'm doing that today:
draft-ietf-sidr-rpki-validation-reconsidered

=C2=A0Currently still active documents (6 documents):
=C2=A0
draft= -ietf-sidr-bgpsec-rollover
draft-i= etf-sidr-lta-use-cases
draft-ietf-sidr-= route-server-rpki-light
draft-ietf= -sidr-rpki-tree-validation
draft-i= etf-sidr-rtr-keying
draft-ietf-sidr-slu= rm

(this reflects the changes since the last email, included below)

I believe we= 9;re still planning to move (and have agreement from authors):
=C2=A0draft-ietf-sidr-bgpsec= -rollover
=C2=A0draft-ietf-sidr-lta-us= e-cases
=C2=A0draft-ietf-sidr-route-server-= rpki-light
=C2=A0draft-ietf-sidr-rtr-k= eying
=C2=A0
draft-ietf-sidr-r= pki-tree-validation
=C2=A0
which leaves to be dealt with by Chicago 2 document= s:
draft-ietf-sidr-slurm

I think this is = good, I believe (and of course I should be corrected if wrong)
=C2=A0 slurm - more work inbound and discussion planned= in Seoul
=C2=A0 tree-validation - I though= t moved to sidr-ops, but don't have docs to back that up.


I still= think this is good, I will be sending a request to the OPS-AD folk today t= o move:
=C2=A0draft-ietf-sidr-bgpsec-rollover
=C2=A0draft= -ietf-sidr-lta-use-cases
=C2=A0draft-ietf-sidr-route-server-rpki-= light
=C2=A0draft-ietf-sidr-rtr-keying
=C2=A0draf= t-ietf-sidr-rpki-tree-validation

to sidr-ops..= . If there are corrections/additions please send them along :)
-chris
=C2=A0
-chris

On Fri, Sep 2, 2016 at 4:56 PM, = Chris Morrow <morrowc@ops-netman.net> wrote:

Howdy SIDR peeps,
(+bonus ops ad)

Following on the Berlin meeting we were trying to accomplish two
things:

=C2=A0 1) get all documents related to sidr protocols into wglc and then =C2=A0 publication

=C2=A0 2) get all documents which are more operationally focused moved
=C2=A0 along to an ops group (sidr-ops or something akin to that)

With that in mind there are 8 documents in the publication queue:
=C2=A0 draft-ietf-sidr-as-migration
=C2=A0 draft-ietf-sidr-bgpsec-algs
=C2=A0 draft-ietf-sidr-bgpsec-ops
=C2=A0 draft-ietf-sidr-bgpsec-overview
=C2=A0 draft-ietf-sidr-bgpsec-pki-profiles
=C2=A0 draft-ietf-sidr-bgpsec-protocol
=C2=A0 draft-ietf-sidr-origin-validation-signaling
=C2=A0 draft-ietf-sidr-rpki-rtr-rfc6810-bis

and 11 still in progress. Of the 11 left Sandy and I think they
roughly break down like:

Documents which should move to the ops group:
=C2=A0 draft-ietf-sidr-bgpsec-rollover
=C2=A0 draft-ietf-sidr-lta-use-cases
=C2=A0 draft-ietf-sidr-route-server-rpki-light - authors notified/quer= ied about this
=C2=A0 draft-ietf-sidr-rtr-keying

documents which should finish out in sidr:
=C2=A0 draft-ietf-sidr-delta-protocol
=C2=A0 draft-ietf-sidr-publication
=C2=A0 draft-ietf-sidr-rpki-oob-setup - pub request in flight
=C2=A0 draft-ietf-sidr-rpki-tree-validation
=C2=A0 draft-ietf-sidr-rpki-validation-reconsidered
=C2=A0 draft-ietf-sidr-slurm - authors recently updated
=C2=A0 draft-ietf-sidr-adverse-actions - wglc imminent

I think if there's no meaningful discussion on change for these
between now and 9/16/2016 (Sept 16th) we will assume this list is
correct. For documents in the 'move' list, if progress to publicati= on
happens 'good!'. For all documents in the 'stays' list:
=C2=A0 1) we aim to have wglc by Seoul
=C2=A0 2) publication requests started on as many as possible

We plan to meet in Seoul, but not in Chicago (Mar 2017) where we
expect the ops group to exist and meet. We can progress documents in
SIDR after Seoul, but the WG should close out shortly after the new
year. (or that's the goal).

Thoughts?
-chris

_______________________________________________
sidr mailing list
sidr@ietf.org
https://www.ietf.org/mailman/listinfo/sidr


--001a114a97c6c9b225054288f06b-- From nobody Wed Nov 30 21:01:56 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A8B51294AF; Wed, 30 Nov 2016 21:01:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.797 X-Spam-Level: X-Spam-Status: No, score=-9.797 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-2.896, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f7vCkqmKUL7Z; Wed, 30 Nov 2016 21:01:53 -0800 (PST) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE329129420; Wed, 30 Nov 2016 21:01:53 -0800 (PST) Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1cCJVH-00053J-1C; Thu, 01 Dec 2016 05:01:51 +0000 Date: Wed, 30 Nov 2016 21:01:53 -0800 Message-ID: From: Randy Bush To: Christopher Morrow In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Cc: Chris Morrow , sidr-ads@ietf.org, "sidr-chairs@ietf.org" , "sidr@ietf.org" Subject: Re: [sidr] Current document status && directionz X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Dec 2016 05:01:55 -0000 >> draft-ietf-sidr-bgpsec-ops waiting to rev when iesg and whomever reviews are in. if someone wants an earlier push, shout. >> draft-ietf-sidr-lta-use-cases i thought this was post last call >> draft-ietf-sidr-rtr-keying i thought this was done randy From nobody Wed Nov 30 22:15:43 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 469C0129BD2; Wed, 30 Nov 2016 22:15:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MN8uF-TG1Xw0; Wed, 30 Nov 2016 22:15:40 -0800 (PST) Received: from mail-qk0-x244.google.com (mail-qk0-x244.google.com [IPv6:2607:f8b0:400d:c09::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EB191299E9; Wed, 30 Nov 2016 22:15:40 -0800 (PST) Received: by mail-qk0-x244.google.com with SMTP id y205so24960683qkb.1; Wed, 30 Nov 2016 22:15:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=G3sMe/ZLf5dlXu+v0tI5ekplrvPU4vk0B5jRh9BbcUs=; b=CtC9BgGD3QmbtEiF5CrM5Hmj2eF0pLmgvk+6+1O2z6KRoxmLgjQVurKS2B0b1mxh0u OIa1n8QGWaLsxSV1mkZGd8tL8LHsUwObtmWvAYrAMF3ExhMbciZ66Yq9ikRIxquQS+pC G1QRr79oCDybYEePHU7UAvjaOo5mwbbxg0bd/YXpEIcNpDx9dqrUCxdymQO6owz+6gC2 DSX7TIywgA7QnPf/bjJg0vWCPL/nvY0V+3VsH/CyuZTavXizNcAMzBKneBrDghsfxXtk d2SjYEIR7Nkd1tEyGiXemG9p5mpBrMDc7DFsvg33UDZuxPsZ2vObceea7a1zpeVHU5iz pA2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=G3sMe/ZLf5dlXu+v0tI5ekplrvPU4vk0B5jRh9BbcUs=; b=cVr0KikLU5ScZHuJwc1KIewB+EOEbjanRNH6az0LrdUh5hAP7bgztsiBWtYskJYWvI tVIzOX2RoejuF1xSl62KnlK0Ru6z+6U1BztUcGm96jZYpwj1rhY2pbHBQDFHLlTtFBHj cM8qUw9TmXk17ALdNBn/isfMr7UzgYQZ98yjOVegtELJo1szwlCjcFyC74ZGOtTAsjqB TxW3w+ntUJKRXBb0g8JkwYdnotlQ8KopEfnV0kUWIwfUd5EEJtaLA/1YrRq1NfbgUxFG fjXPNPn/g7Vd2SeVvzhKJkmIUWcC8WonsbsqjEG36Hp3DAFnkXWaKgbbfcSEtv1t8+LF qV0g== X-Gm-Message-State: AKaTC02AzCCEiUWk2U+VG+J/OiBdNvOmXZAou0ubvUnQkaMC99f7cCneT7whFVsvW+Pxq8U4c/a/W7/XiT5beg== X-Received: by 10.55.52.7 with SMTP id b7mr31821768qka.223.1480572939820; Wed, 30 Nov 2016 22:15:39 -0800 (PST) MIME-Version: 1.0 Sender: christopher.morrow@gmail.com Received: by 10.140.27.179 with HTTP; Wed, 30 Nov 2016 22:15:39 -0800 (PST) In-Reply-To: References: From: Christopher Morrow Date: Thu, 1 Dec 2016 01:15:39 -0500 X-Google-Sender-Auth: -3lrNSXffAB_tFuBVST2VaqjDIc Message-ID: To: Randy Bush Content-Type: multipart/alternative; boundary=001a114778e2246e87054292c075 Archived-At: Cc: Chris Morrow , sidr-ads@ietf.org, "sidr-chairs@ietf.org" , "sidr@ietf.org" Subject: Re: [sidr] Current document status && directionz X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Dec 2016 06:15:42 -0000 --001a114778e2246e87054292c075 Content-Type: text/plain; charset=UTF-8 On Thu, Dec 1, 2016 at 12:01 AM, Randy Bush wrote: > >> draft-ietf-sidr-bgpsec-ops > > waiting to rev when iesg and whomever reviews are in. if someone wants > an earlier push, shout. > > I'm not in a rush, I believe we're just waiting on process so that's fine. > >> draft-ietf-sidr-lta-use-cases > > i thought this was post last call > Hrm, I still see mail that's calling it drafts, up to version 7, but not wglc ... perhaps that's on our schedule to start though (sandy may have this, I'll have to check my notes.. or I may :) ) > > >> draft-ietf-sidr-rtr-keying > > i thought this was done > > this one maybe done, but has not hit WGLC. we can do that here, or there... I'm agnostic at this point. > randy > --001a114778e2246e87054292c075 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Thu, Dec 1, 2016 at 12:01 AM, Randy Bush <randy@psg.com> = wrote:
>> draft-ietf-sidr-bgpsec-op= s

waiting to rev when iesg and whomever reviews are in.=C2=A0 if someone want= s
an earlier push, shout.


I'm not in a rush, I believe we= 9;re just waiting on process so that's fine.
=C2=A0
>> draft-ietf-sidr-lta-use-cases

i thought this was post last call

Hrm, = I still see mail that's calling it drafts, up to version 7, but not wgl= c ... perhaps that's on our schedule to start though (sandy may have th= is, I'll have to check my notes.. or I may :) )
=C2=A0
<= blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px= #ccc solid;padding-left:1ex">
>> draft-ietf-sidr-rtr-keying

i thought this was done


this one maybe done, but has not hit WGLC. we can do= that here, or there... I'm agnostic at this point.
=C2=A0
randy

--001a114778e2246e87054292c075-- From nobody Wed Nov 30 22:59:40 2016 Return-Path: X-Original-To: sidr@ietfa.amsl.com Delivered-To: sidr@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B7B5129578 for ; Wed, 30 Nov 2016 22:59:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8BnnZklzTudc for ; Wed, 30 Nov 2016 22:59:36 -0800 (PST) Received: from gw1.turbomail.org (gw1.turbomail.org [159.8.83.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40698129502 for ; Wed, 30 Nov 2016 22:59:36 -0800 (PST) X-TM-DID: 8d649d9c55f32e5150ff44f272d49a17 Content-Type: text/plain; charset=gb2312 Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\)) From: Declan Ma In-Reply-To: Date: Thu, 1 Dec 2016 14:51:59 +0800 Content-Transfer-Encoding: quoted-printable Message-Id: <55A37339-61E6-4D44-A00C-8718A05584A1@zdns.cn> References: To: Christopher Morrow X-Mailer: Apple Mail (2.3251) Archived-At: Cc: Chris Morrow , sidr-ads@ietf.org, "sidr-chairs@ietf.org" , "sidr@ietf.org" Subject: Re: [sidr] Current document status && directionz X-BeenThere: sidr@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Secure Interdomain Routing List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Dec 2016 06:59:38 -0000 Chris, I would like to take this thread to request for comments on how to move = on SLURM. During the Seoul meeting, Tim suggested moving it to SIDROPS since SIDR = is being closed.=20 Yet I had the impression that the AD hopes keeping the list/structure = going until current work items are done.=20 Considering the only issue facing SLURM is the file format that Tim and = Rudiger mentioned in the MIC, IMHO, if this WG won=A1=AFt plan to move = SLURM to SIDROPS, WGLC is desirable to bring about inputs and comments = to conclude this work. Di=20 > =D4=DA 2016=C4=EA12=D4=C21=C8=D5=A3=AC02:33=A3=ACChristopher Morrow = =D0=B4=B5=C0=A3=BA >=20 > And again, restarting... post meeting and post travel refocusing :) >=20 > On Wed, Oct 26, 2016 at 11:35 AM, Christopher Morrow = wrote: > Restarting this thread, with some updates :) >=20 > Preparing for Seoul in a few weeks time, with the intent that we do = not meet face-to-face in Chicago, have all current 'protocol' related = docs to the IESG/done and meet instead in sidr-ops if there are agenda = items at that time :) >=20 > Currently we have the following in IESG/pub-request status (13 = documents): > draft-ietf-sidr-adverse-actions > draft-ietf-sidr-as-migration > draft-ietf-sidr-bgpsec-algs > draft-ietf-sidr-bgpsec-ops > draft-ietf-sidr-bgpsec-overview > draft-ietf-sidr-bgpsec-pki-profiles > draft-ietf-sidr-bgpsec-protocol > draft-ietf-sidr-delta-protocol (10/26 sent forward) > =20 > draft-ietf-sidr-origin-validation-signaling > draft-ietf-sidr-publication > draft-ietf-sidr-rpki-oob-setup > draft-ietf-sidr-rpki-rtr-rfc6810-bis >=20 >=20 > I had thought I sent validation-reconsidered forward for processing, = I'm doing that today: > draft-ietf-sidr-rpki-validation-reconsidered >=20 > Currently still active documents (6 documents): > =20 > draft-ietf-sidr-bgpsec-rollover > draft-ietf-sidr-lta-use-cases > draft-ietf-sidr-route-server-rpki-light > draft-ietf-sidr-rpki-tree-validation > draft-ietf-sidr-rtr-keying > draft-ietf-sidr-slurm >=20 > (this reflects the changes since the last email, included below) >=20 > I believe we're still planning to move (and have agreement from = authors): > draft-ietf-sidr-bgpsec-rollover > draft-ietf-sidr-lta-use-cases > draft-ietf-sidr-route-server-rpki-light > draft-ietf-sidr-rtr-keying > =20 > draft-ietf-sidr-rpki-tree-validation > =20 > which leaves to be dealt with by Chicago 2 documents: > draft-ietf-sidr-slurm >=20 > I think this is good, I believe (and of course I should be corrected = if wrong) > slurm - more work inbound and discussion planned in Seoul > tree-validation - I thought moved to sidr-ops, but don't have docs = to back that up. >=20 >=20 > I still think this is good, I will be sending a request to the OPS-AD = folk today to move: > draft-ietf-sidr-bgpsec-rollover > draft-ietf-sidr-lta-use-cases > draft-ietf-sidr-route-server-rpki-light > draft-ietf-sidr-rtr-keying > draft-ietf-sidr-rpki-tree-validation >=20 > to sidr-ops... If there are corrections/additions please send them = along :) >=20 > -chris > =20 > -chris >=20 > On Fri, Sep 2, 2016 at 4:56 PM, Chris Morrow = wrote: >=20 > Howdy SIDR peeps, > (+bonus ops ad) >=20 > Following on the Berlin meeting we were trying to accomplish two > things: >=20 > 1) get all documents related to sidr protocols into wglc and then > publication >=20 > 2) get all documents which are more operationally focused moved > along to an ops group (sidr-ops or something akin to that) >=20 > With that in mind there are 8 documents in the publication queue: > draft-ietf-sidr-as-migration > draft-ietf-sidr-bgpsec-algs > draft-ietf-sidr-bgpsec-ops > draft-ietf-sidr-bgpsec-overview > draft-ietf-sidr-bgpsec-pki-profiles > draft-ietf-sidr-bgpsec-protocol > draft-ietf-sidr-origin-validation-signaling > draft-ietf-sidr-rpki-rtr-rfc6810-bis >=20 > and 11 still in progress. Of the 11 left Sandy and I think they > roughly break down like: >=20 > Documents which should move to the ops group: > draft-ietf-sidr-bgpsec-rollover > draft-ietf-sidr-lta-use-cases > draft-ietf-sidr-route-server-rpki-light - authors notified/queried = about this > draft-ietf-sidr-rtr-keying >=20 > documents which should finish out in sidr: > draft-ietf-sidr-delta-protocol > draft-ietf-sidr-publication > draft-ietf-sidr-rpki-oob-setup - pub request in flight > draft-ietf-sidr-rpki-tree-validation > draft-ietf-sidr-rpki-validation-reconsidered > draft-ietf-sidr-slurm - authors recently updated > draft-ietf-sidr-adverse-actions - wglc imminent >=20 > I think if there's no meaningful discussion on change for these > between now and 9/16/2016 (Sept 16th) we will assume this list is > correct. For documents in the 'move' list, if progress to publication > happens 'good!'. For all documents in the 'stays' list: > 1) we aim to have wglc by Seoul > 2) publication requests started on as many as possible >=20 > We plan to meet in Seoul, but not in Chicago (Mar 2017) where we > expect the ops group to exist and meet. We can progress documents in > SIDR after Seoul, but the WG should close out shortly after the new > year. (or that's the goal). >=20 > Thoughts? > -chris >=20 > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr >=20 >=20 > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr