From nobody Mon Apr 2 19:36:27 2018 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F85012DA46; Mon, 2 Apr 2018 19:36:20 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Brian Carpenter To: Cc: stir@ietf.org, draft-ietf-stir-rph.all@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.77.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152272298002.14080.1507992564810377229@ietfa.amsl.com> Date: Mon, 02 Apr 2018 19:36:20 -0700 Archived-At: Subject: [stir] Genart telechat review of draft-ietf-stir-rph-03 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Apr 2018 02:36:20 -0000 Reviewer: Brian Carpenter Review result: Ready Gen-ART *Last Call* review of draft-ietf-stir-rph-03 I am the assigned Gen-ART reviewer for this draft. The General Area Review Team (Gen-ART) reviews all IETF documents being processed by the IESG for the IETF Chair. Please treat these comments just like any other last call comments. For more information, please see the FAQ at . Document: draft-ietf-stir-rph-03.txt Reviewer: Brian Carpenter Review Date: 2018-04-03 IETF LC End Date: 2018-04-06 IESG Telechat date: 2018-04-19 Summary: Ready -------- Comments: --------- This is a well written draft and I have no technical comments. The draft says it extends RFC8225. Some people would say that needs an Updates: 8225 header. Nits: ----- 8.1. Normative References [I-D.ietf-stir-passport] Wendt, C. and J. Peterson, "Personal Assertion Token (PASSporT)", February 2017. Is now RFC8225. [I-D.ietf-stir-rfc4474bis] Peterson, J., Jennings, C., Rescorla, E., and C. Wendt, "Authenticated Identity Management in the Session Initiation Protocol (SIP)", February 2017. Is now RFC8224. From nobody Wed Apr 4 08:08:33 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1701E12D95E; Wed, 4 Apr 2018 08:08:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.449 X-Spam-Level: X-Spam-Status: No, score=-2.449 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pr0PAYQlM2Ne; Wed, 4 Apr 2018 08:08:30 -0700 (PDT) Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com [IPv6:2a00:1450:400c:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99E87126FB3; Wed, 4 Apr 2018 08:08:27 -0700 (PDT) Received: by mail-wm0-x22f.google.com with SMTP id r131so43436467wmb.2; Wed, 04 Apr 2018 08:08:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=KGyt2d15rUwP1cDpYUU3x0vIeyR2KUZrLNS6CY7RGCE=; b=FRf8EUAJHR/+co9XDpEBFUhgeVpchUfosbea0awVecAiHAiXcIfgoNvmiD9/SZ1oIT JAqfXF/K3XKuP5UjcR/WtmvEmvBm8Whn8EF7ykFUHWDoXIubvNd6w4r9VtqU4cHw28di zoMtAHI2uHh2HOFsZ6ty/LiYceHDaKxaxyqIWe8WuY1cGX5W2afQ5kID32oj+GnycPOr 4pwPu/bvzxu1J7YWJ7/TCYOw2RVBMAqAyRt3ktvUgO+PuluVJbedbwcJZe9bkvRfeIZW l3wYaK9q3n3RIJtpYvhEDswRjmlFAkfDvQ4dU8HoLjWJKkTykwHbTfj6vRV66rzxi171 29uA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=KGyt2d15rUwP1cDpYUU3x0vIeyR2KUZrLNS6CY7RGCE=; b=pkRBrjksormfU7EShTyZY781td5qGUgGaJb/KL9dcrfKtvTpeagzRUyI3OQqNtAINJ q9FIsa7sCZsFSGDjOJdaAsZRgJLeQMu/BB6vWn2k3zX+cJb7TeDn/5gEt/KA1VvEt6BI 6M/6hnjhJdgbo7CR1xPCMC8PXOzxwEl/kYwu+9myPBG2mnY5oiAuX7Q75m1w/ev5CgPe k/BdTCiEKLyZyFteNKPmAxKXiiEN1DoY/ZtSkuGjryZMRYbYBX/yeglK2NmrnX26VycN O2BTGJkLbMbgoX7iivhkGPVKESkSlEh/t5jtH5LXEkngJs+yUmzwGNPbSqsxAmH/7W5x J5gQ== X-Gm-Message-State: ALQs6tD1WXfxmVLGNKJzOMZigTDMmgApMh80fDBaMaCZy6T0s8E991Qv 1y4x66BWCbOMmqBs8w9teIzchBqAmTY0xBaoNms= X-Google-Smtp-Source: AIpwx4/bcj4fZi0kon/SHxA7OHIQWw2Hn2PBtAnUfNt3qm8hBDtGuG/D1nR5n9MQ+NnYgr8qDyWvboLNGTI0a9LxRRY= X-Received: by 10.28.178.136 with SMTP id b130mr8415186wmf.68.1522854506019; Wed, 04 Apr 2018 08:08:26 -0700 (PDT) MIME-Version: 1.0 Received: by 10.28.69.25 with HTTP; Wed, 4 Apr 2018 08:08:25 -0700 (PDT) In-Reply-To: <152272298002.14080.1507992564810377229@ietfa.amsl.com> References: <152272298002.14080.1507992564810377229@ietfa.amsl.com> From: Subir Das Date: Wed, 4 Apr 2018 11:08:25 -0400 Message-ID: To: Brian Carpenter Cc: gen-art@ietf.org, IETF STIR Mail List , draft-ietf-stir-rph.all@ietf.org Content-Type: multipart/alternative; boundary="001a11444914e04337056907315e" Archived-At: Subject: Re: [stir] Genart telechat review of draft-ietf-stir-rph-03 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Apr 2018 15:08:33 -0000 --001a11444914e04337056907315e Content-Type: text/plain; charset="UTF-8" Brian, Thanks for your review. We will address the comments and submit another version. -Subir On Mon, Apr 2, 2018 at 10:36 PM, Brian Carpenter < brian.e.carpenter@gmail.com> wrote: > Reviewer: Brian Carpenter > Review result: Ready > > Gen-ART *Last Call* review of draft-ietf-stir-rph-03 > > I am the assigned Gen-ART reviewer for this draft. The General Area > Review Team (Gen-ART) reviews all IETF documents being processed > by the IESG for the IETF Chair. Please treat these comments just > like any other last call comments. > > For more information, please see the FAQ at > . > > Document: draft-ietf-stir-rph-03.txt > Reviewer: Brian Carpenter > Review Date: 2018-04-03 > IETF LC End Date: 2018-04-06 > IESG Telechat date: 2018-04-19 > > Summary: Ready > -------- > > Comments: > --------- > This is a well written draft and I have no technical comments. > > The draft says it extends RFC8225. Some people would say that needs > an Updates: 8225 header. > > Nits: > ----- > > 8.1. Normative References > > [I-D.ietf-stir-passport] > Wendt, C. and J. Peterson, "Personal Assertion Token > (PASSporT)", February 2017. > > Is now RFC8225. > > [I-D.ietf-stir-rfc4474bis] > Peterson, J., Jennings, C., Rescorla, E., and C. Wendt, > "Authenticated Identity Management in the Session > Initiation Protocol (SIP)", February 2017. > > Is now RFC8224. > > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > --001a11444914e04337056907315e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Brian,
Thanks for your review. We will = address the comments and submit another version.

-Subir

On Mon, Apr 2= , 2018 at 10:36 PM, Brian Carpenter <brian.e.carpenter@gmail.com= > wrote:
Reviewer: Brian Ca= rpenter
Review result: Ready

Gen-ART *Last Call* review of draft-ietf-stir-rph-03

I am the assigned Gen-ART reviewer for this draft. The General Area
Review Team (Gen-ART) reviews all IETF documents being processed
by the IESG for the IETF Chair.=C2=A0 Please treat these comments just
like any other last call comments.

For more information, please see the FAQ at
<http://wiki.tools.ietf.org/area/gen/= trac/wiki/GenArtfaq>.

Document: draft-ietf-stir-rph-03.txt
Reviewer: Brian Carpenter
Review Date: 2018-04-03
IETF LC End Date: 2018-04-06
IESG Telechat date: 2018-04-19

Summary: Ready
--------

Comments:
---------
This is a well written draft and I have no technical comments.

The draft says it extends RFC8225. Some people would say that needs
an Updates: 8225 header.

Nits:
-----

8.1.=C2=A0 Normative References

=C2=A0 =C2=A0[I-D.ietf-stir-passport]
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Wendt, C. and J. Peterson,= "Personal Assertion Token
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 (PASSporT)", February= 2017.

Is now RFC8225.

=C2=A0 =C2=A0[I-D.ietf-stir-rfc4474bis]
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Peterson, J., Jennings, C.= , Rescorla, E., and C. Wendt,
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 "Authenticated Identi= ty Management in the Session
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Initiation Protocol (SIP)&= quot;, February 2017.

Is now RFC8224.


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

--001a11444914e04337056907315e-- From nobody Mon Apr 16 17:53:52 2018 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BB4D12E869; Mon, 16 Apr 2018 17:53:34 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Christian Huitema To: Cc: stir@ietf.org, draft-ietf-stir-rph.all@ietf.org, ietf@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.78.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152392641446.26140.16049118175653349746@ietfa.amsl.com> Date: Mon, 16 Apr 2018 17:53:34 -0700 Archived-At: Subject: [stir] Secdir telechat review of draft-ietf-stir-rph-03 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2018 00:53:34 -0000 Reviewer: Christian Huitema Review result: Has Nits Summary: ready with nits. The STIR specifications (RFC 8224, RFC 8225) define a mechanism in which the "Identity" in a SIP header points to an URI used to retrieve the JSON-encoded claims related to that identity. The claims can be verifed by cryptographic mechanisms, allowing in principle called parties to make informed decisions before accepting a call. The draft extends the syntax of the JSON tokens to make claims about the "resource priority" levels that can be used in the call. The goal appears to be better management of resource in SIP gateways, e.g., chosing which of many incoming calls would get access to a scarce resource. Or in any case that's what I understood after reading the draft. It would be helpful if the introduction explained the problem that the extension is solving, maybe with a reference to the problem statement in RFC 7340 or the threat model in RFC 7375. The third paragraph of the introduction could be rearranged. As written, it mentions an extension defined in RFC 7340, which had me puzzled for a time, as that RFC is a problem statement and a list of requirements. As far as I can tell, the extension uses the mechanisms for "Extending PASSport" defined in section 8 or RFC 8825. Why not say that, instead of a vague assertion that "The STIR architecture allows extensions". Or, define what you actually mean by the STIR Architecture, arguably the combination of RFC 8824 and RFC 8825. Looking at security issue, it appears that the proposal reuses for resource priority the mechanisms defined by RFC 8824 for generally verifying claims. That seems reasonable. My main concern is with the levels of indirection. The security mechanisms will verify that a claim is authentic by verifying that it is properly authorized by the specified authority. But at that point, the gateway will have to verify that the authority behind the claim is actually authorized to consume the resource as specified in the resource priority header. This is potentially more complex than verifying an identity claim. Section 7.2. of the security consideration explains that, but I am curious to see whether that will work in practice. Please update the references. [I-D.ietf-stir-rfc4474bis] has been replaced by RFC 8224. [I-D.ietf-stir-passport] has been replaced by RFC 8225. From nobody Mon Apr 16 19:27:16 2018 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8993012D86C; Mon, 16 Apr 2018 19:27:09 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Ben Campbell To: "The IESG" Cc: draft-ietf-stir-rph@ietf.org, Russ Housley , stir-chairs@ietf.org, rhousley@vigilsec.com, stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.78.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152393202955.26114.3853075658304497317.idtracker@ietfa.amsl.com> Date: Mon, 16 Apr 2018 19:27:09 -0700 Archived-At: Subject: [stir] Ben Campbell's Discuss on draft-ietf-stir-rph-03: (with DISCUSS and COMMENT) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2018 02:27:10 -0000 Ben Campbell has entered the following ballot position for draft-ietf-stir-rph-03: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-stir-rph/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- Thanks for this work. I plan to ballot "yes", but I have a couple of points I think need to be discussed first. §4.2: " If the signature validation fails, the verification service should infer that the calling party is not authorized for ’Resource-Priority’ as indicated in the claim. In such cases, the priority treatment for the associated communication service is handled as per the local policy." I suspect there will be deployments where the node making these local policy decisions is downstream from the verifier. How do they know RPH verification failed? Should the verifier strip resource priority header fields for which validation failed? §7.2: o The verification of the signature MUST include means of verifying that the signer is authoritative for the signed content of the resource priority namespace in the PASSporT." I gather the intent is to leave that means to local policy, or to be specified elsewhere. I think that's a problem from an interoperability standpoint. The verifier needs a way to know whether the authorizer is authoritative for the RPH. If we want authorizers and verifiers from different vendors to be able to interoperate, it seems like at least some mechanism needs to be standardized and possibly MTI. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- General: It's probably worth updating the references to 4474bis and passport to their respective RFCs. §3, 4th paragraph: The imbedding of ABNF in the middle of a paragraph is difficult to read. It would be helpful to separate that from the surrounding text in the conventional fashion. §3, 5th paragraph and throughout: The repeated use of "r-value ="namespace "." priority value" is hard to read. Please consider giving that parameter construct a name, and using the name throughout. §3, 7th paragraph: "The authority MUST use its credentials (i.e., CERT)" Does "CERT" mean "Certificate"? I assume it's not "Computer Emergency Response Team". §4.1 : A SIP authentication service typically will derive the value of "rph" from the ’Resource-Priority’ header field based on policy associated with service specific use of the "namespace "." priority value" for r-values based on [RFC4412].: "Typically" usually implies "Most but not all of the time". Is that the intent? §4.2, last paragraph: Am I correct to guess that this is talking about valid claims? From nobody Tue Apr 17 10:55:35 2018 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C2421270FC; Tue, 17 Apr 2018 10:55:34 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: stir@ietf.org, housley@vigilsec.com, adam@nostrum.com, stir-chairs@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.78.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152398773421.11587.15591612317707451228.idtracker@ietfa.amsl.com> Date: Tue, 17 Apr 2018 10:55:34 -0700 Archived-At: Subject: [stir] stir - New Meeting Session Request for IETF 102 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2018 17:55:34 -0000 A new meeting session request has just been submitted by Russ Housley, a Chair of the stir working group. --------------------------------------------------------- Working Group Name: Secure Telephone Identity Revisited Area Name: Applications and Real-Time Area Session Requester: Russ Housley Number of Sessions: 1 Length of Session(s): 1.5 Hours Number of Attendees: 60 Conflicts to Avoid: First Priority: curdle sipbrandy ipwave modern ice secdispatch sipcore mmusic rtcweb avtcore ecrit tls acme lamps suit saag Second Priority: perc slim clue ace oauth dispatch Third Priority: tcpinc People who must be present: Russ Housley Sean Turner Adam Roach Robert Sparks Jon Peterson Chris Wendt Resources Requested: Special Requests: --------------------------------------------------------- From nobody Wed Apr 18 07:00:44 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF11612D80E; Wed, 18 Apr 2018 07:00:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ozOk1-EKu1lA; Wed, 18 Apr 2018 07:00:26 -0700 (PDT) Received: from mail-wr0-x230.google.com (mail-wr0-x230.google.com [IPv6:2a00:1450:400c:c0c::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D20521241FC; Wed, 18 Apr 2018 07:00:24 -0700 (PDT) Received: by mail-wr0-x230.google.com with SMTP id d1-v6so5134764wrj.13; Wed, 18 Apr 2018 07:00:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=eRALVOGDD7Nh/ypF8YBe4wT8tT+L3uk8I3O9MJnWrG8=; b=G2xek1jeGa0Lr4pSjiv7VE1i3GXblhgCQIS/OK13cW9A14720kpOo/TDfoKKt7IJ1c DrgOBwoHVROgqowQof/rXc+AKK21AHkC3XB52KPkxfcch9WAn4B7WieEq/8JzkPz4Ocr 0WWOVH02qjRbJGF44vIVWSkhZhtgFcigsCPkvibnBa8nH6t2VMBxOBwIeOo/QguZv4nP 2HI6YC6hfkr6nDMVL3cJLCBMpgZyexYXtCMpG9DsDm9iEB9Wa9OdF/+3Rw3GDXBfIGmm RUH45tEaso3Ahxp8uT/k2rjeJ7WWpRi6lUHcuGW2fAbsxsuGI4QJfQ41sNn4dMT/pmxd C1cQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=eRALVOGDD7Nh/ypF8YBe4wT8tT+L3uk8I3O9MJnWrG8=; b=iF4LCKAIhcQDKCxWXp/jQg3S4JEAu/jzPAPHS/PbbMDSHCKoVxyG03p2c0li15ntVy f2jKQqzrK34FZois1KZo0Rf2Y3dVlISa8W+iOJpyAOLGXWTGNPaOP8Qm1FT0j9+LLneF /1ch5FjLnh5l0zE6EASERC5GavBIlJzAvCnSIrfohDLX7tO4BF0k1BMc0b23w53XT9EN J0omuWDno2sZWkE7R/6RshSqvJh73qUo2KMOg8Gk8D13rdvaSxh7PIVkIaqXxIo3UiP6 E5vHXhuQHXtfn6/QvoJI1obaYOL0+C9rihNpDjy1mdKxL7Ffi7NjUFhJVP4+5IXiky62 c6eA== X-Gm-Message-State: ALQs6tDkU6Bno9qAE9xnQ3+KAYvvVnmJ0LeviYmlHMjaONyeXK1OOyPi rU0qfw/e/d2Yx0T7cKeSCxN4cxq5faGKeO15tpUX7Q== X-Google-Smtp-Source: AIpwx4+X38TPToVkuyoBpzLPY8rHzj+QxGacmjozAx6CKzT/nLYDvGJatFivqOLkLpnwRMo1dpSxD/TYcJf4KPX52K8= X-Received: by 10.28.208.202 with SMTP id h193mr1505527wmg.6.1524060023250; Wed, 18 Apr 2018 07:00:23 -0700 (PDT) MIME-Version: 1.0 Received: by 10.28.69.25 with HTTP; Wed, 18 Apr 2018 07:00:21 -0700 (PDT) In-Reply-To: <152392641446.26140.16049118175653349746@ietfa.amsl.com> References: <152392641446.26140.16049118175653349746@ietfa.amsl.com> From: Subir Das Date: Wed, 18 Apr 2018 10:00:21 -0400 Message-ID: To: Christian Huitema Cc: secdir@ietf.org, IETF STIR Mail List , draft-ietf-stir-rph.all@ietf.org, ietf@ietf.org Content-Type: multipart/alternative; boundary="94eb2c1940fa4d680f056a1fe041" Archived-At: Subject: Re: [stir] Secdir telechat review of draft-ietf-stir-rph-03 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Apr 2018 14:00:30 -0000 --94eb2c1940fa4d680f056a1fe041 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello Christian, Thanks for your review and comments. Please see the answers inline. Regards, _Subir -----Original Message----- From: Christian Huitema Sent: Monday, April 16, 2018 8:54 PM To: secdir@ietf.org Cc: stir@ietf.org; draft-ietf-stir-rph.all@ietf.org; ietf@ietf.org Subject: Secdir telechat review of draft-ietf-stir-rph-03 Reviewer: Christian Huitema Review result: Has Nits Summary: ready with nits. The STIR specifications (RFC 8224, RFC 8225) define a mechanism in which the "Identity" in a SIP header points to an URI used to retrieve the JSON-encoded claims related to that identity. The claims can be verifed by cryptographic mechanisms, allowing in principle called parties to make informed decisions before accepting a call. The draft extends the syntax of the JSON tokens to make claims about the "resource priority" levels that can be used in the call. The goal appears to be better management of resource in SIP gateways, e.g., chosing which of many incoming calls would get access to a scarce resource. Or in any case that's what I understood after reading the draft. It would be helpful if the introduction explained the problem that the extension is solving, maybe with a reference to the problem statement in RFC 7340 or the threat model in RFC 7375. SD> The first two paragraphs of the Introduction will be updated as follows: =E2=80=9C PASSporT [RFC8225] is a token format based on JSON Web Token (JWT= ) [RFC7519] for conveying cryptographically signed information about the identities involved in personal communications; it is used with STIR [RFC8224] to convey a signed assertion of the identity of the participants in real-time communications established via a protocol like SIP [RFC3261]. This specification extends PASSporT to allow cryptographic-signing of the SIP =E2=80=99Resource-Priority=E2=80=99 header field [RFC4412], which is us= ed for communications resource prioritization. [RFC4412] defines the SIP =E2=80=99Resource-Priority=E2=80=99 header field = for communications resource priority. As specified in [RFC4412], the =E2=80=99Resource-Priority=E2=80=99 header field may be used by SIP user ag= ents [RFC3261], including Public Switched Telephone Network (PSTN) gateways and terminals, and by SIP proxy servers, to influence prioritization afforded to communication sessions, including PSTN Calls (e.g., to manage scarce network resources during network congestion scenarios). However, the SIP =E2=80=99Resource-Priority=E2=80=99 header field could be spoofed and abuse= d by unauthorized entities, the threat models and use cases of which are described in RFC 7375 and RFC 7340, respectively. Compromise of the SIP =E2=80=98Resource-Priority=E2=80=99 header field [RFC 4412] could lead to m= isuse of network resource (i.e., during congestion scenarios) resulting in impacts to the application services supported using the =E2=80=99Resource-Priority=E2=80= =99 header field." The third paragraph of the introduction could be rearranged. As written, it mentions an extension defined in RFC 7340, which had me puzzled for a time, as that RFC is a problem statement and a list of requirements. As far as I can tell, the extension uses the mechanisms for "Extending PASSport" defined in section 8 or RFC 8825. Why not say that, instead of a vague assertion that "The STIR architecture allows extensions". Or, define what you actually mean by the STIR Architecture, arguably the combination of RFC 8824 and RFC 8825. SD> Will update the paragraph as follows: "The RFC 8225 provides a mechanism by which an authority on the originating side of a call can provide a cryptographic assurance of the validity of the calling party telephone number in order to prevent impersonation attacks. RFC 8225 also allows extensions that can be utilized by authorities supporting real-time communication services using the =E2=80=99Resource-Pri= ority=E2=80=99 header field to cryptographically sign the SIP =E2=80=99Resource-Priority=E2=80=99 header f= ield and convey assertion of the authorization for =E2=80=99Resource-Priority=E2=80=99. For= example, the authority on the originating side verifying the authorization of a particular communication for =E2=80=99Resource-Priority= =E2=80=99 can use a PASSPorT claim to cryptographically sign the SIP =E2=80=99Resource Priori= ty=E2=80=99 header field and convey an assertion of the authorization for =E2=80=99Resource-Priority=E2=80=99. This will allow a receiving entity (in= cluding entities located in different network domains/boundaries) to verify the validity of assertions authorizing =E2=80=99Resource-Priority=E2=80=99. Cryptographical= ly signed SIP =E2=80=99Resource-Priority=E2=80=99 header fields will allow a receiving en= tity to verify and act on the information with confidence that the information has not been spoofed or compromised. " Looking at security issue, it appears that the proposal reuses for resource priority the mechanisms defined by RFC 8824 for generally verifying claims. That seems reasonable. My main concern is with the levels of indirection. The security mechanisms will verify that a claim is authentic by verifying that it is properly authorized by the specified authority. But at that point, the gateway will have to verify that the authority behind the claim is actually authorized to consume the resource as specified in the resource priority header. This is potentially more complex than verifying an identity claim. Section 7.2. of the security consideration explains that, but I am curious to see whether that will work in practice. SD> Yes, the security mechanism will only verify that a claim is authentic and is properly authorized by the specified authority. To allocate the gateway resource and for other service specific authorization, providers will have specific priority treatment policies. This is specified in other organizations (e.g., ATIS) who is currently the consumer of this STIR extension (specifically to support Emergency Telecommunication Service). In this draft, we do mention that this is outside the scope of this document. Please update the references. [I-D.ietf-stir-rfc4474bis] has been replaced by RFC 8224. [I-D.ietf-stir-passport] has been replaced by RFC 8225. SD> Will update. On Mon, Apr 16, 2018 at 8:53 PM, Christian Huitema wrote: > Reviewer: Christian Huitema > Review result: Has Nits > > Summary: ready with nits. > > The STIR specifications (RFC 8224, RFC 8225) define a mechanism in which > the "Identity" in a > SIP header points to an URI used to retrieve the JSON-encoded claims > related to that identity. The > claims can be verifed by cryptographic mechanisms, allowing in principle > called parties to make > informed decisions before accepting a call. The draft extends the syntax > of the JSON tokens to > make claims about the "resource priority" levels that can be used in the > call. The goal appears > to be better management of resource in SIP gateways, e.g., chosing which > of many incoming > calls would get access to a scarce resource. > > Or in any case that's what I understood after reading the draft. It would > be helpful if the > introduction explained the problem that the extension is solving, maybe > with a reference to > the problem statement in RFC 7340 or the threat model in RFC 7375. > > The third paragraph of the introduction could be rearranged. As written, > it mentions an extension defined in RFC 7340, which had me puzzled for a > time, as that RFC is a > problem statement and a list of requirements. As far as I can tell, the > extension > uses the mechanisms for "Extending PASSport" defined in section 8 or RFC > 8825. Why not > say that, instead of a vague assertion that "The STIR architecture allows > extensions". Or, > define what you actually mean by the STIR Architecture, arguably the > combination of > RFC 8824 and RFC 8825. > > Looking at security issue, it appears that the proposal reuses for > resource priority the > mechanisms defined by RFC 8824 for generally verifying claims. That seems > reasonable. My > main concern is with the levels of indirection. The security mechanisms > will verify that > a claim is authentic by verifying that it is properly authorized by the > specified > authority. But at that point, the gateway will have to verify that the > authority > behind the claim is actually authorized to consume the resource as > specified in > the resource priority header. This is potentially more complex than > verifying an > identity claim. Section 7.2. of the security consideration explains that, > but I am curious to see whether that will work in practice. > > Please update the references. [I-D.ietf-stir-rfc4474bis] has been replace= d > by RFC 8224. > [I-D.ietf-stir-passport] has been replaced by RFC 8225. > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > --94eb2c1940fa4d680f056a1fe041 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hello Christian,

Thanks for your review and= comments. Please see the answers inline.

=C2=A0

Regards,

_Subir

=C2=A0

= -----Original Message-----
From: Christian Huitema <huitema@huitema.net>
Sent: Monday, April 16, 2018 8:54 PM
To: secdir@ietf.org
Cc: stir@ietf.org; draft-ietf-stir-rph.all@ietf.org; ietf@ietf.org
Subject: Secdir telechat review of draft-ietf-stir-rph-03<= /p>

=C2=A0<= /span>

Reviewer: Christian Huitema

Review result: Has Nits

=C2=A0<= /span>

Summary: ready with nits.

=C2=A0<= /span>

The STIR specifications (RFC 8224, RFC 8225) define a mechanism in which the "Identity" in a SIP header points to an URI used to retrieve the JSON-encoded claims related to that identity. The claims can be verifed by cryptographic mechanisms, allowing in principle called parties to make info= rmed decisions before accepting a call. The draft extends the syntax of the JSON tokens to make claims about the "resource priority" levels that c= an be used in the call. The goal appears to be better management of resource i= n SIP gateways, e.g., chosing which of many incoming calls would get access t= o a scarce resource.

=C2=A0<= /span>

Or in any case that's what I understood after reading the draft. It would be helpful i= f the introduction explained the problem that the extension is solving, maybe wit= h a reference to the problem statement in RFC 7340 or the threat model in RFC 7= 375.

=C2=A0

SD> The first two paragraphs of the Introduction will be updated as follows:

=C2=A0

=E2=80=9C PASSporT [RFC8225] is a token format based on JSON Web Token (JWT) [RFC7519] for conveying cryptographically signed information ab= out the identities involved in personal communications; it is used with STIR [RFC82= 24] to convey a signed assertion of the identity of the participants in real-ti= me communications established via a protocol like SIP [RFC3261]. This specification extends PASSporT to allow cryptographic-signing of the SIP =E2=80=99Resource-Priority=E2=80=99 header field [RFC4412], which is used f= or communications resource prioritization.

=C2=A0

[RFC4412] defines the SIP =E2=80=99Resource-Priority=E2=80=99 heade= r field for communications=C2=A0 resource priority. As specified in [RFC4412], the =E2=80=99Resource-Priority=E2=80=99 header field may be used by SIP user ag= ents [RFC3261], including Public Switched Telephone Network (PSTN) gateways and terminals, = and by SIP proxy servers, to influence prioritization afforded to communication sessions, including PSTN Calls (e.g., to manage scarce network resources du= ring network congestion scenarios). However, the SIP =E2=80=99Resource-Priority= =E2=80=99 header field could be spoofed and abused by unauthorized entities, the threat mode= ls and use cases of which are described in RFC=C2=A0 7375 and RFC 7340, respectively. Compromise of the SIP =E2=80=98Resource-Priority=E2=80=99 header field [RFC 4412] could lead to m= isuse of network resource (i.e., during congestion scenarios) resulting in impacts to the application services supported using the=C2=A0 =E2=80=99Resource-Priority=E2=80=99 header field."=

=C2=A0<= /span>

The third paragraph of the introduction could be rearranged. As written, it mentions = an extension defined in RFC 7340, which had me puzzled for a time, as that RFC= is a problem statement and a list of requirements. As far as I can tell, the extension uses the mechanisms for "Extending PASSport" defined in section 8 or RFC 8825. Why not say that, instead of a vague assertion that "The STIR architecture allows extensions". Or, define what you actually mean by the STIR Architecture, arguably the combination of RFC 882= 4 and RFC 8825.

=C2=A0

SD> Will update the paragraph as follows:

=C2=A0

"The RFC 8225 provides a mechanism by which an authority on the originating side of a call can provide a cryptographic assurance of the validity of the calling party telephone number in order to prevent impers= onation attacks. RFC 8225 also=C2=A0 allows extensions that ca= n be utilized by authorities supporting real-time communication services using the =E2=80=99Resource-Priority=E2=80=99 header field to

cryptographically sign the SIP =E2=80=99Resource-Priority=E2=80= =99 header field and convey assertion of the authorization for =E2=80=99Resource-Prior= ity=E2=80=99. For example, the authority on the originating side verifying the

authorization of a particular communication for =E2=80=99Resource-Priority=E2=80=99 can use a PASSPorT claim to cryptograph= ically sign the SIP =E2=80=99Resource Priority=E2=80=99 header field and convey an assertion of= the authorization for =E2=80=99Resource-Priority=E2=80=99. This will allow a receiving entity= (including entities located in different network domains/boundaries) to verify the validity of assertions authorizing =E2=80=99Resource-Priority=E2=80=99. Cryptographically signed SIP = =E2=80=99Resource-Priority=E2=80=99 header fields will allow a receiving entity to verify and act on the information w= ith confidence that the information has not been spoofed or compromised. "=

=C2=A0

Looking at security issue, it appears that the proposal reuses for resource priority t= he mechanisms defined by RFC 8824 for generally verifying claims. That seems reasonable. My main concern is with the levels of indirection. The security mechanisms will verify that a claim is authentic by verifying that it is properly authorized by the specified authority. But at that point, the gate= way will have to verify that the authority behind the claim is actually authori= zed to consume the resource as specified in the resource priority header. This = is potentially more complex than verifying an identity claim. Section 7.2. of = the security consideration explains that, but I am curious to see whether that = will work in practice.

=C2=A0

SD> =C2=A0Yes, the security mechanism will only verify that a claim is authentic and is proper= ly authorized by the specified authority.=C2=A0 To allocate the gateway resource and for other service specific authorization, providers will have specific priority treatment policies. Th= is is specified in other organizations (e.g., ATIS) who is currently the consu= mer of this STIR extension (specifically to support Emergency Telecommunication Service). In this draft, we do mention that this is outside the scope of th= is document.

=C2=A0<= /span>

Please update the references. [I-D.ietf-stir-rfc4474bis] has been replaced by RFC 8224.

[I-D.ietf-stir-passp= ort] has been replaced by RFC 8225.

=C2=A0

SD> Will update.



On Mon,= Apr 16, 2018 at 8:53 PM, Christian Huitema <huitema@huitema.net&g= t; wrote:
Reviewer: Christian Huit= ema
Review result: Has Nits

Summary: ready with nits.

The STIR specifications (RFC 8224, RFC 8225) define a mechanism in which th= e "Identity" in a
SIP header points to an URI used to retrieve the JSON-encoded claims relate= d to that identity. The
claims can be verifed by cryptographic mechanisms, allowing in principle ca= lled parties to make
informed decisions before accepting a call. The draft extends the syntax of= the JSON tokens to
make claims about the "resource priority" levels that can be used= in the call. The goal appears
to be better management of resource in SIP gateways, e.g., chosing which of= many incoming
calls would get access to a scarce resource.

Or in any case that's what I understood after reading the draft. It wou= ld be helpful if the
introduction explained the problem that the extension is solving, maybe wit= h a reference to
the problem statement in RFC 7340 or the threat model in RFC 7375.

The third paragraph of the introduction could be rearranged. As written, it mentions an extension defined in RFC 7340, which had me puzzled for a ti= me, as that RFC is a
problem statement and a list of requirements. As far as I can tell, the ext= ension
uses the mechanisms for "Extending PASSport" defined in section 8= or RFC 8825. Why not
say that, instead of a vague assertion that "The STIR architecture all= ows extensions". Or,
define what you actually mean by the STIR Architecture, arguably the combin= ation of
RFC 8824 and RFC 8825.

Looking at security issue, it appears that the proposal reuses for resource= priority the
mechanisms defined by RFC 8824 for generally verifying claims. That seems r= easonable. My
main concern is with the levels of indirection. The security mechanisms wil= l verify that
a claim is authentic by verifying that it is properly authorized by the spe= cified
authority. But at that point, the gateway will have to verify that the auth= ority
behind the claim is actually authorized to consume the resource as specifie= d in
the resource priority header. This is potentially more complex than verifyi= ng an
identity claim. Section 7.2. of the security consideration explains that, but I am curious to see whether that will work in practice.

Please update the references. [I-D.ietf-stir-rfc4474bis] has been replaced = by RFC 8224.
[I-D.ietf-stir-passport] has been replaced by RFC 8225.

_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

--94eb2c1940fa4d680f056a1fe041-- From nobody Wed Apr 18 07:04:46 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F07AB12D778; Wed, 18 Apr 2018 07:04:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.739 X-Spam-Level: X-Spam-Status: No, score=-1.739 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dNAJtGoYim3s; Wed, 18 Apr 2018 07:04:42 -0700 (PDT) Received: from mail-wr0-x22c.google.com (mail-wr0-x22c.google.com [IPv6:2a00:1450:400c:c0c::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C6AC124D68; Wed, 18 Apr 2018 07:04:42 -0700 (PDT) Received: by mail-wr0-x22c.google.com with SMTP id d1-v6so5177750wrj.13; Wed, 18 Apr 2018 07:04:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=gongXMJ86S9Qb4wXZDR9VhyuGVR1yWOv5tDymjlsifg=; b=RhioxdJ7FV2K1WFd094H857faF7VBEdRG7Y+l+Mrri/ILpx6yx4Jqr22wUDh/uLk/e AHM6vpZo3002Ee87oYtwyzer/uRzV1omJoIW0v52yteFh1pslQo+7UUplwopH8RfT1e1 s1bcJKuQFpx4dwQLuixKff3nRq1Vxu5TYq1kHJQFTx8ooOtf6UYZimlneHoDutBDdKNV 11XvDjHCXbhP8Y+6gIOCfSO5fFyyEJ0XFlEI1E8ihZVRNilWmfXMpDAKBHrv4KnNDxDR 8hUqvmT+Ab/xfcoRfMwO0e+KLnQllvTuzQpQowuUp+XMWQhknaUh9c0J//1nKpUME2Sj aCDA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=gongXMJ86S9Qb4wXZDR9VhyuGVR1yWOv5tDymjlsifg=; b=blWS7i4MRA9vrZMhl49wp5lgUTVvdZ0TMq4aG6aMRLpESS2aRl4shAjrcudOF4loQT a4YnRWDtdnWI38soBP5fekIMwbVOJmgCXxJfnqmQ74dMePFBsdDb74dP+XG1inpONLqI 3AfdWzD1beQhX+3UATHY76/GOy4nqMvIZQZNkEPe7aVfedQYsLuFbieD1XGKWq3GRMuU tB9jbl8V8DZzDwhTdj8ezdM4Iq/jHM/WQ6a91LJxczMkS7xEF9IXM8/5wFs8H8UOde1o BrvG9k7owCNM3mMsOP16eD4JfZB4sJ5IBTTGcvVsEjcM7PMWS852fewE8AIRV3NpwGes 8DeQ== X-Gm-Message-State: ALQs6tBAjSDtaaUP702kx645R3BGtdB4ldy2wJN42HUAOWxniHxRRLS6 N6Ln2tQhRLftNdBi8kYgXuEqDDEIipTYaFmexOTFrw== X-Google-Smtp-Source: AIpwx4/y5O3efUKKt0/dFaj8wAJNXAVr1K/oKxMBbul3dRmx9aEwfZQoyPdnUKNuFCbdmlfZIptx/7Xj6O+Q2Y3yz5U= X-Received: by 10.28.146.200 with SMTP id u191mr1951289wmd.115.1524060280783; Wed, 18 Apr 2018 07:04:40 -0700 (PDT) MIME-Version: 1.0 Received: by 10.28.69.25 with HTTP; Wed, 18 Apr 2018 07:04:40 -0700 (PDT) In-Reply-To: <152393202955.26114.3853075658304497317.idtracker@ietfa.amsl.com> References: <152393202955.26114.3853075658304497317.idtracker@ietfa.amsl.com> From: Subir Das Date: Wed, 18 Apr 2018 10:04:40 -0400 Message-ID: To: Ben Campbell Cc: The IESG , IETF STIR Mail List , rhousley@vigilsec.com, STIR Chairs , draft-ietf-stir-rph@ietf.org Content-Type: multipart/alternative; boundary="001a114307d6a70930056a1fef3f" Archived-At: Subject: Re: [stir] Ben Campbell's Discuss on draft-ietf-stir-rph-03: (with DISCUSS and COMMENT) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Apr 2018 14:04:45 -0000 --001a114307d6a70930056a1fef3f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello Ben, Thanks for your review and comments. Please see the answers inline. Regards, _Subir -----Original Message----- From: Ben Campbell Sent: Monday, April 16, 2018 10:27 PM To: The IESG Cc: draft-ietf-stir-rph@ietf.org; Russ Housley ; stir-chairs@ietf.org; rhousley@vigilsec.com; stir@ietf.org Subject: Ben Campbell's Discuss on draft-ietf-stir-rph-03: (with DISCUSS and COMMENT) Ben Campbell has entered the following ballot position for draft-ietf-stir-rph-03: Discuss When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-stir-rph/ ---------------------------------------------------------------------- DISCUSS: ---------------------------------------------------------------------- Thanks for this work. I plan to ballot "yes", but I have a couple of points I think need to be discussed first. SD> Appreciate it. =C2=A74.2: " If the signature validation fails, the verification service sh= ould infer that the calling party is not authorized for =E2=80=99Resource-Priority= =E2=80=99 as indicated in the claim. In such cases, the priority treatment for the associated communication service is handled as per the local policy." I suspect there will be deployments where the node making these local policy decisions is downstream from the verifier. How do they know RPH verification failed? Should the verifier strip resource priority header fields for which validation failed? SD> We will clarify the last sentence of the paragraph as follows: =E2=80=9CIn such cases, the priority treatment for the associated communica= tion service is handled as per the local policy of the verifier (e.g., the RPH may be stripped and call can be treated as an ordinary call)." =C2=A77.2: o The verification of the signature MUST include means of verifying that the signer is authoritative for the signed content of the resource priority namespace in the PASSporT." I gather the intent is to leave that means to local policy, or to be specified elsewhere. I think that's a problem from an interoperability standpoint. The verifier needs a way to know whether the authorizer is authoritative for the RPH. If we want authorizers and verifiers from different vendors to be able to interoperate, it seems like at least some mechanism needs to be standardized and possibly MTI. SD> Yes, you are correct that the end-to-end architecture is specified outside of IETF. This is currently done in ATIS where the verifier can verify the authorizer=E2=80=99s certificate even if they are from differen= t providers. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- General: It's probably worth updating the references to 4474bis and passport to their respective RFCs. SD> Will update. =C2=A73, 4th paragraph: The imbedding of ABNF in the middle of a paragraph = is difficult to read. It would be helpful to separate that from the surrounding text in the conventional fashion. SD> How about the following? "The "rph" claim will provide an assertion of authorization, "auth", for information in the SIP =E2=80=99Resource-Priority=E2=80=99 header field bas= ed on [RFC4412] and the syntax is: Resource-Priority =3D "Resource-Priority": r-value r-value=3D "namespace "." r-priority Specifically, the "rph" claim includes assertion of the priority-level of the user to be used for a given communication session. The value of the "rph" claim is an Object with one or more keys. Each key is associated with a JSON Array. These arrays contain Strings that correspond to the =E2=80=98r-values=E2=80=99 values indicated in the SIP =E2=80=99Resource-Pr= iority=E2=80=99 header field." =C2=A73, 5th paragraph and throughout: The repeated use of "r-value =3D"nam= espace "." priority value" is hard to read. Please consider giving that parameter construct a name, and using the name throughout. SD> How about the following? =E2=80=9CThe following is an example "rph" claim for a SIP =E2=80=99Resourc= e-Priority=E2=80=99 header field with an r-value of "ets.0" and with another r-value of "wps.0". Note: Will change the rest accordingly. =C2=A73, 7th paragraph: "The authority MUST use its credentials (i.e., CERT= )" Does "CERT" mean "Certificate"? I assume it's not "Computer Emergency Response Team". SD> Yes CERT implies Certificate. We will change it to 'Certificate' =C2=A74.1 : A SIP authentication service typically will derive the value of= "rph" from the =E2=80=99Resource-Priority=E2=80=99 header field based on polic= y associated with service specific use of the "namespace "." priority value" for r-values based on [RFC4412].: "Typically" usually implies "Most but not all of the time". Is that the intent? SD> No that is not the intent. Will delete =E2=80=98typically=E2=80=9D. The= sentence will read : SD> =E2=80=9CA SIP authentication service will derive the value of "rph" fr= om the =E2=80=99Resource-Priority=E2=80=99 header field based on policy associated= with service specific use of the "namespace "." r-priority " for r-values based on [RFC4412]. =E2=80=9C =C2=A74.2, last paragraph: Am I correct to guess that this is talking about valid claims? SD> This statement is valid for both valid and invalid claims. The policy will determine how claim will be treated. On Mon, Apr 16, 2018 at 10:27 PM, Ben Campbell wrote: > Ben Campbell has entered the following ballot position for > draft-ietf-stir-rph-03: Discuss > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-stir-rph/ > > > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > Thanks for this work. I plan to ballot "yes", but I have a couple of > points I > think need to be discussed first. > > =C2=A74.2: " If the signature validation fails, the verification service = should > infer > that the calling party is not authorized for =E2=80=99Resource-Priorit= y=E2=80=99 as > indicated in the claim. In such cases, the priority treatment for > the associated communication service is handled as per the local > policy." > > I suspect there will be deployments where the node making these local > policy > decisions is downstream from the verifier. How do they know RPH > verification > failed? Should the verifier strip resource priority header fields for whi= ch > validation failed? > > =C2=A77.2: > o The verification of the signature MUST include means of verifying > that the signer is authoritative for the signed content of the > resource priority namespace in the PASSporT." > > I gather the intent is to leave that means to local policy, or to be > specified > elsewhere. I think that's a problem from an interoperability standpoint. > The > verifier needs a way to know whether the authorizer is authoritative for > the > RPH. If we want authorizers and verifiers from different vendors to be > able to > interoperate, it seems like at least some mechanism needs to be > standardized > and possibly MTI. > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > General: It's probably worth updating the references to 4474bis and > passport to > their respective RFCs. > > =C2=A73, 4th paragraph: The imbedding of ABNF in the middle of a paragrap= h is > difficult to read. It would be helpful to separate that from the > surrounding > text in the conventional fashion. > > =C2=A73, 5th paragraph and throughout: The repeated use of "r-value =3D"n= amespace > "." > priority value" is hard to read. Please consider giving that parameter > construct a name, and using the name throughout. > > =C2=A73, 7th paragraph: "The authority MUST use its credentials (i.e., CE= RT)" > Does "CERT" mean "Certificate"? I assume it's not "Computer Emergency > Response > Team". > > =C2=A74.1 : A SIP authentication service typically will derive the value = of > "rph" > from the =E2=80=99Resource-Priority=E2=80=99 header field based on pol= icy associated > with service specific use of the "namespace "." priority value" for > r-values based on [RFC4412].: > "Typically" usually implies "Most but not all of the time". Is that the > intent? > > =C2=A74.2, last paragraph: Am I correct to guess that this is talking abo= ut > valid > claims? > > > _______________________________________________ > stir mailing list > stir@ietf.org > https://www.ietf.org/mailman/listinfo/stir > --001a114307d6a70930056a1fef3f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hello Ben,

Thanks for your review and= comments. Please see the answers inline.

=C2=A0

Regards,

_Subir

=C2=A0

= -----Original Message-----
From: Ben Campbell <ben@nostrum.com>
Sent: Monday, April 16, 2018 10:27 PM
To: The IESG <iesg@ietf.org>
Cc: draft-ietf-stir-rph@ietf.org; Russ Housley <rhousley@vigilsec.com>= ;; stir-chairs@ietf.org; rhousley@vigilsec.com; stir@ietf.org
Subject: Ben Campbell's Discuss on draft-ietf-stir-rph-03: (with DISCUS= S and COMMENT)

=C2=A0<= /span>

Ben Campbell has entered the following ballot position for

draft-ietf-stir-rph-= 03: Discuss

=C2=A0<= /span>

When responding, please keep the subject line intact and reply to all email addresses includ= ed in the To and CC lines. (Feel free to cut this introductory paragraph, however.)

=C2=A0<= /span>

=C2=A0<= /span>

Please refer to https://www.ietf.= org/iesg/statement/discuss-criteria.html

for more information about IESG DISCUSS and COMMENT positions.

=C2=A0<= /span>

=C2=A0<= /span>

The document, along with other ballot positions, can be found here:

https://datatracker.ietf.org/doc/draf= t-ietf-stir-rph/

=C2=A0<= /span>

=C2=A0<= /span>

=C2=A0<= /span>

--------------------= --------------------------------------------------

DISCUSS:

--------------------= --------------------------------------------------

=C2=A0<= /span>

Thanks for this work. I plan to ballot "yes", but I have a couple of points I thi= nk need to be discussed first.


SD>= Appreciate it.

=C2=A0<= /span>

=C2=A74.2: " If the signature validation fails, the verification service should infer=

=C2=A0=C2=A0 <= /span>that the calling party is not authorized for =E2=80=99Resource-Priority=E2=80=99 as

=C2=A0=C2=A0 <= /span>indicated in the claim.=C2=A0 In such cases, the priorit= y treatment for

=C2=A0=C2=A0 <= /span>the associated communication service is handled as per the local

=C2=A0=C2=A0 <= /span>policy."

=C2=A0<= /span>

I suspect there will be deployments where the node making these local policy decisions is downstream from the verifier. How do they know RPH verification failed? Sho= uld the verifier strip resource priority header fields for which validation fai= led?

=C2=A0

SD> We will clarify the last sentence of the paragraph as follows:

=C2=A0

=E2=80=9CIn such cases, the priority treatment for the associated communication service is handled as per the local policy of the verifier (e= .g., the RPH may be=C2=A0 stripped and call can be treated as an ordinary call)."

=C2=A0<= /span>

=C2=A77.2:

=C2=A0=C2=A0 <= /span>o=C2=A0 The verification of the signature MUST include means of verifying<= /span>

=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 that the signer is authoritative for the signed content of the

=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 resource priority namespace in the PASSporT."

=C2=A0<= /span>

I gather the intent is to leave that means to local policy, or to be specified elsewhere. I thi= nk that's a problem from an interoperability standpoint. The verifier need= s a way to know whether the authorizer is authoritative for the RPH. If we want authorizers and verifiers from different vendors to be able to interoperate= , it seems like at least some mechanism needs to be standardized and possibly MT= I.

=C2=A0<= /span>

S= D> Yes, you are correct = that the end-to-end architecture is specified outside of IETF. This is currently done in ATIS where the verifie= r can verify the authorizer=E2=80=99s=C2=A0 certificate even if they are from different providers.

=C2=A0

=C2=A0<= /span>

--------------------= --------------------------------------------------

COMMENT:

--------------------= --------------------------------------------------

=C2=A0<= /span>

General: It's probably worth updating the references to 4474bis and passport to their respective RFCs.

=C2=A0

SD> Will update.

=C2=A0<= /span>

=C2=A73, 4th paragraph: The imbedding of ABNF in the middle of a paragraph is difficult = to read. It would be helpful to separate that from the surrounding text in the conventional fashion.

=C2=A0

SD> How about the following?

=C2=A0

"The "rph" claim will provide an assertion of authorization, "auth", for information in the SIP =E2=80=99Resource-Priority=E2=80=99 header field based on [RFC4412] and the= syntax is:

=C2=A0

Resource-Priority =3D "Resource-Priority": r-value<= /span>

r-value=3D "namespace=C2=A0 "."=C2=A0 r-priority

=C2=A0

Specifically, the "rph" claim includes assertion of the priority-level of the user to be used for a given communication sess= ion. The value of the "rph" claim is an Object with one or more keys. = Each key is associated with a JSON Array. These arrays contain Strings that corr= espond to the =E2=80=98r-values=E2=80=99 values indicated in the SIP =E2=80=99Reso= urce-Priority=E2=80=99 header field."

=C2=A0<= /span>

=C2=A73, 5th paragraph and throughout: The repeated use of "r-value =3D"namesp= ace "."

priority value" is hard to read. Please consider giving that parameter construc= t a name, and using the name throughout.

=C2=A0

SD> How about the following?

=C2=A0

=E2=80=9CThe following is an example "rph" claim for a SIP =E2=80=99Resource-Priority=E2=80=99 header field with an r-value of &qu= ot;ets.0" and with another r-value=C2=A0 of "wps.0".

=C2=A0

Note: Will change the rest accordingly.<= /p>

=C2=A0<= /span>

=C2=A73, 7th paragraph: "The authority MUST use its credentials (i.e., CERT)"<= span>

Does "CERT" mean "Certificate"? I assume it's not "= Computer Emergency Response Team".

=C2=A0

SD> Yes CERT implies Certificate. We will change it to 'Certificate'

=C2=A0<= /span>

=C2=A74.1 : A SIP authentication service typically will derive the value of "rph"

=C2=A0=C2=A0 <= /span>from the =E2=80=99Resource-Priority=E2=80=99 header field based on policy associated

=C2=A0=C2=A0 <= /span>with service specific use of the "namespace "." priority value" for<= /p>

=C2=A0=C2=A0 <= /span>r-values based on [RFC4412].:

"Typically"= ; usually implies "Most but not all of the time". Is that the inten= t?

=C2=A0

=C2=A0

SD> No that is not the intent. Will delete =E2=80=98typically=E2= =80=9D. The sentence will read :

=C2=A0

SD> =E2=80=9CA SIP authentication service will derive the value of "rph" from the =E2=80=99Resource-Priority=E2=80=99 header fiel= d based on policy associated with service specific use of the "namespace "." r-priority=C2=A0 " for r-values based on [RFC4412]. =E2=80=9C

=C2=A0<= /span>

=C2=A74.2, last paragraph: Am I correct to guess that this is talking about valid claims?

=C2=A0<= /span>

SD> This statement is valid for both valid and invalid claims. The policy will determine how claim will be treated.

=C2=A0



On Mon,= Apr 16, 2018 at 10:27 PM, Ben Campbell <ben@nostrum.com> wrot= e:
Ben Campbell has entered the following= ballot position for
draft-ietf-stir-rph-03: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/<= wbr>statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-iet= f-stir-rph/



-----------------------------------------------------------------= -----
DISCUSS:
-----------------------------------------------------------------= -----

Thanks for this work. I plan to ballot "yes", but I have a couple= of points I
think need to be discussed first.

=C2=A74.2: " If the signature validation fails, the verification servi= ce should infer
=C2=A0 =C2=A0that the calling party is not authorized for =E2=80=99Resource= -Priority=E2=80=99 as
=C2=A0 =C2=A0indicated in the claim.=C2=A0 In such cases, the priority trea= tment for
=C2=A0 =C2=A0the associated communication service is handled as per the loc= al
=C2=A0 =C2=A0policy."

I suspect there will be deployments where the node making these local polic= y
decisions is downstream from the verifier. How do they know RPH verificatio= n
failed? Should the verifier strip resource priority header fields for which=
validation failed?

=C2=A77.2:
=C2=A0 =C2=A0o=C2=A0 The verification of the signature MUST include means o= f verifying
=C2=A0 =C2=A0 =C2=A0 that the signer is authoritative for the signed conten= t of the
=C2=A0 =C2=A0 =C2=A0 resource priority namespace in the PASSporT."

I gather the intent is to leave that means to local policy, or to be specif= ied
elsewhere. I think that's a problem from an interoperability standpoint= . The
verifier needs a way to know whether the authorizer is authoritative for th= e
RPH. If we want authorizers and verifiers from different vendors to be able= to
interoperate, it seems like at least some mechanism needs to be standardize= d
and possibly MTI.


-----------------------------------------------------------------= -----
COMMENT:
-----------------------------------------------------------------= -----

General: It's probably worth updating the references to 4474bis and pas= sport to
their respective RFCs.

=C2=A73, 4th paragraph: The imbedding of ABNF in the middle of a paragraph = is
difficult to read. It would be helpful to separate that from the surroundin= g
text in the conventional fashion.

=C2=A73, 5th paragraph and throughout: The repeated use of "r-value = =3D"namespace "."
priority value" is hard to read. Please consider giving that parameter=
construct a name, and using the name throughout.

=C2=A73, 7th paragraph: "The authority MUST use its credentials (i.e.,= CERT)"
Does "CERT" mean "Certificate"? I assume it's not &= quot;Computer Emergency Response
Team".

=C2=A74.1 : A SIP authentication service typically will derive the value of= "rph"
=C2=A0 =C2=A0from the =E2=80=99Resource-Priority=E2=80=99 header field base= d on policy associated
=C2=A0 =C2=A0with service specific use of the "namespace "."= priority value" for
=C2=A0 =C2=A0r-values based on [RFC4412].:
"Typically" usually implies "Most but not all of the time&qu= ot;. Is that the intent?

=C2=A74.2, last paragraph: Am I correct to guess that this is talking about= valid
claims?


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

--001a114307d6a70930056a1fef3f-- From nobody Wed Apr 18 18:44:53 2018 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EB91D126C89; Wed, 18 Apr 2018 18:44:51 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Benjamin Kaduk To: "The IESG" Cc: draft-ietf-stir-rph@ietf.org, Russ Housley , stir-chairs@ietf.org, rhousley@vigilsec.com, stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.78.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152410229195.28672.4848182467373812893.idtracker@ietfa.amsl.com> Date: Wed, 18 Apr 2018 18:44:51 -0700 Archived-At: Subject: [stir] Benjamin Kaduk's No Objection on draft-ietf-stir-rph-03: (with COMMENT) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Apr 2018 01:44:52 -0000 Benjamin Kaduk has entered the following ballot position for draft-ietf-stir-rph-03: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-stir-rph/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- I support Ben's discuss. Thank you for working with the secdir reviewer to address those comments; I think it will really improve the document. In a similar vein, I wonder if this document would be easier to read if it used less formal description terms for protocol elements that are currently referred to by using the actual protocol element (with quotes around the name). For example, "SIP resource priority header" instead of "'Resource-Priority' header field", or "priority indicator" instead of "'namespace"."priority value"'. I'm a little confused why the new registry created in Section 6.2 is tied to the "resource priority header" (rph) name, when the discussion in Section 5 has some potential envisioned use cases that are broader than resource priority. As Ben notes, there are some stale references. Please double-check the referred section numbers as well; in particular "Section 10.1 of [4474bis]" does not exist in the only February-2017 verions of that draft. Section 7.2 uses "authority" in a couple of different senses; it might be easier on the reader to refer to the authority (protocol participant) as being "authoritative for the content of [stuff] that it signs". From nobody Wed Apr 18 18:58:43 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA6E8127333; Wed, 18 Apr 2018 18:58:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cooperw.in header.b=hlrWACIO; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=a+PuNBrw Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hy6aTlCPlpBB; Wed, 18 Apr 2018 18:58:40 -0700 (PDT) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DBD98126579; Wed, 18 Apr 2018 18:58:39 -0700 (PDT) Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 4C8CD21924; Wed, 18 Apr 2018 21:58:39 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute7.internal (MEProxy); Wed, 18 Apr 2018 21:58:39 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cooperw.in; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc; s=fm2; bh=20+9FwUqCjOTJSKVAPg7izTf9ToN0 we6mKQ3b7/p0JA=; b=hlrWACIO8GTEjbG5uHmYNCfbhWJchxzbd2D1q4rOr/Pzs QS4Qzh9GgkNI46hs/vVJye8UZhbABcKRfZL1oh1ZdzXvNNthQty5swZhR6+mngkd XKGtiew4Hu648BBXNGqaiWCwY2t3BepkBBCRa07Pz7PXSaHryVCeRCe6IGWYhyyl LVOLjDh11xBIdX2ds1KId/C/q1Nmd+wjy7RQUdbe/lSLHIY3YGflDye72dj2dlZg vxxhW63YMdGXOluUhJ+GWVODfOioSAaMPIDuUf1vYx+WvxndNKaECvpYVZINIBpu QGnjRodZ9qZKBS+mgqvh488vugqCd/5ONuwKNglXA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=20+9Fw UqCjOTJSKVAPg7izTf9ToN0we6mKQ3b7/p0JA=; b=a+PuNBrwYAEMpnafZi/Ti/ 0FPpJA5YYX0uWmq6r9nNyTKDoGKmefwQB7hx+d+K6uhH6dnHo8Q7jpYirI43ku8x 1H96K0no5L3ahrY9xVZHisjyo5itJDRQR+8B+h7+CiEPTNVxPxZFlXvOjkfcQ0Te 0gJBMSW7lNkPoMfdviMHjoJo5gBtjUTnVJDj1HdqngH5BXHrS8tTfsUugBXUlnm+ A0b/ONVHMXPNdAGHTno8P7UQjmlX6N9QBD18LpcvZamzFNxODHtPhK35XYMOcAMQ pEymszSsRswPeV293PyAFwgQfzYiuQSM78LFhF7jK1dY6TBVPfbP5jY9UJZV69CA == X-ME-Sender: Received: from rtp-alcoop-nitro2.cisco.com (unknown [173.38.117.67]) by mail.messagingengine.com (Postfix) with ESMTPA id DE59CE4445; Wed, 18 Apr 2018 21:58:38 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Alissa Cooper In-Reply-To: <152272298002.14080.1507992564810377229@ietfa.amsl.com> Date: Wed, 18 Apr 2018 21:58:38 -0400 Cc: gen-art@ietf.org, stir@ietf.org, draft-ietf-stir-rph.all@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <0555611D-C34E-4EB2-AC4C-479604F260DC@cooperw.in> References: <152272298002.14080.1507992564810377229@ietfa.amsl.com> To: Brian Carpenter X-Mailer: Apple Mail (2.3124) Archived-At: Subject: Re: [stir] [Gen-art] Genart telechat review of draft-ietf-stir-rph-03 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Apr 2018 01:58:42 -0000 Brian, thanks for your review. I have entered a No Objection ballot. Alissa > On Apr 2, 2018, at 10:36 PM, Brian Carpenter = wrote: >=20 > Reviewer: Brian Carpenter > Review result: Ready >=20 > Gen-ART *Last Call* review of draft-ietf-stir-rph-03 >=20 > I am the assigned Gen-ART reviewer for this draft. The General Area > Review Team (Gen-ART) reviews all IETF documents being processed > by the IESG for the IETF Chair. Please treat these comments just > like any other last call comments. >=20 > For more information, please see the FAQ at > . >=20 > Document: draft-ietf-stir-rph-03.txt > Reviewer: Brian Carpenter > Review Date: 2018-04-03 > IETF LC End Date: 2018-04-06 > IESG Telechat date: 2018-04-19 >=20 > Summary: Ready > -------- >=20 > Comments: > --------- > This is a well written draft and I have no technical comments. >=20 > The draft says it extends RFC8225. Some people would say that needs > an Updates: 8225 header. >=20 > Nits: > ----- >=20 > 8.1. Normative References >=20 > [I-D.ietf-stir-passport] > Wendt, C. and J. Peterson, "Personal Assertion Token > (PASSporT)", February 2017. >=20 > Is now RFC8225. >=20 > [I-D.ietf-stir-rfc4474bis] > Peterson, J., Jennings, C., Rescorla, E., and C. Wendt, > "Authenticated Identity Management in the Session > Initiation Protocol (SIP)", February 2017. >=20 > Is now RFC8224. >=20 >=20 > _______________________________________________ > Gen-art mailing list > Gen-art@ietf.org > https://www.ietf.org/mailman/listinfo/gen-art From nobody Thu Apr 19 02:47:10 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C163E12D82F; Thu, 19 Apr 2018 02:47:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.867 X-Spam-Level: X-Spam-Status: No, score=-1.867 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, T_KAM_HTML_FONT_INVALID=0.01, T_SPF_HELO_PERMERROR=0.01, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PAdDJCh9i7Es; Thu, 19 Apr 2018 02:47:00 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E1A6127058; Thu, 19 Apr 2018 02:47:00 -0700 (PDT) Received: from [10.0.2.111] (ip-32-232-239-173.texas.us.northamericancoax.com [173.239.232.32]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id w3J9kpZH014774 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Thu, 19 Apr 2018 04:46:53 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host ip-32-232-239-173.texas.us.northamericancoax.com [173.239.232.32] claimed to be [10.0.2.111] Content-Type: multipart/alternative; boundary=Apple-Mail-A5FC2A1D-B1C1-4DC5-833C-7C383A436734 Mime-Version: 1.0 (1.0) From: Ben Campbell X-Mailer: iPad Mail (15E216) In-Reply-To: Date: Thu, 19 Apr 2018 11:46:51 +0200 Cc: IETF STIR Mail List , rhousley@vigilsec.com, The IESG , draft-ietf-stir-rph@ietf.org, STIR Chairs Content-Transfer-Encoding: 7bit Message-Id: <5716BD0B-CF7B-46BF-87A4-0C33E4EDE553@nostrum.com> References: <152393202955.26114.3853075658304497317.idtracker@ietfa.amsl.com> To: Subir Das Archived-At: Subject: Re: [stir] Ben Campbell's Discuss on draft-ietf-stir-rph-03: (with DISCUSS and COMMENT) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Apr 2018 09:47:09 -0000 --Apple-Mail-A5FC2A1D-B1C1-4DC5-833C-7C383A436734 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable > On Apr 18, 2018, at 4:04 PM, Subir Das wrote: >=20 > Hello Ben, > Thanks for your review and comments. Please see the answers inline. > =20 > Regards, > _Subir > =20 > -----Original Message----- > From: Ben Campbell =20 > Sent: Monday, April 16, 2018 10:27 PM > To: The IESG > Cc: draft-ietf-stir-rph@ietf.org; Russ Housley ; st= ir-chairs@ietf.org; rhousley@vigilsec.com; stir@ietf.org > Subject: Ben Campbell's Discuss on draft-ietf-stir-rph-03: (with DISCUSS a= nd COMMENT) > =20 > Ben Campbell has entered the following ballot position for > draft-ietf-stir-rph-03: Discuss > =20 > When responding, please keep the subject line intact and reply to all emai= l addresses included in the To and CC lines. (Feel free to cut this introduc= tory paragraph, however.) > =20 > =20 > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > =20 > =20 > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-stir-rph/ > =20 > =20 > =20 > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > =20 > Thanks for this work. I plan to ballot "yes", but I have a couple of point= s I think need to be discussed first. >=20 > SD> Appreciate it.=20 > =20 > =C2=A74.2: " If the signature validation fails, the verification service s= hould infer > that the calling party is not authorized for =E2=80=99Resource-Priority= =E2=80=99 as > indicated in the claim. In such cases, the priority treatment for > the associated communication service is handled as per the local > policy." > =20 > I suspect there will be deployments where the node making these local poli= cy decisions is downstream from the verifier. How do they know RPH verificat= ion failed? Should the verifier strip resource priority header fields for wh= ich validation failed? > =20 > SD> We will clarify the last sentence of the paragraph as follows: > =20 > =E2=80=9CIn such cases, the priority treatment for the associated communic= ation service is handled as per the local policy of the verifier (e..g., the= RPH may be stripped and call can be treated as an ordinary call)." Can you envision a case where it would make sense to leave RPH verifiers whe= re verification has failed? That seems like a dangerous practice worthy of a= t least a SHOULD NOT. > =20 > =C2=A77.2: > o The verification of the signature MUST include means of verifying > that the signer is authoritative for the signed content of the > resource priority namespace in the PASSporT." > =20 > I gather the intent is to leave that means to local policy, or to be speci= fied elsewhere. I think that's a problem from an interoperability standpoint= . The verifier needs a way to know whether the authorizer is authoritative f= or the RPH. If we want authorizers and verifiers from different vendors to b= e able to interoperate, it seems like at least some mechanism needs to be st= andardized and possibly MTI. > =20 > SD> Yes, you are correct that the end-to-end architecture is specified out= side of IETF. This is currently done in ATIS where the verifier can verify t= he authorizer=E2=80=99s certificate even if they are from different provide= rs. Is it the intent that this extension only be used with the ATIS framework? I= f so, some scoping language early in the document would be helpful. > =20 > =20 > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > =20 > General: It's probably worth updating the references to 4474bis and passpo= rt to their respective RFCs. > =20 > SD> Will update. > =20 > =C2=A73, 4th paragraph: The imbedding of ABNF in the middle of a paragraph= is difficult to read. It would be helpful to separate that from the surroun= ding text in the conventional fashion. > =20 > SD> How about the following? > =20 > "The "rph" claim will provide an assertion of authorization, "auth", for i= nformation in the SIP =E2=80=99Resource-Priority=E2=80=99 header field based= on [RFC4412] and the syntax is: > =20 > Resource-Priority =3D "Resource-Priority": r-value > r-value=3D "namespace "." r-priority > =20 > Specifically, the "rph" claim includes assertion of the priority-level of t= he user to be used for a given communication session. The value of the "rph"= claim is an Object with one or more keys. Each key is associated with a JSO= N Array. These arrays contain Strings that correspond to the =E2=80=98r-valu= es=E2=80=99 values indicated in the SIP =E2=80=99Resource-Priority=E2=80=99 h= eader field." Works for me. > =20 > =C2=A73, 5th paragraph and throughout: The repeated use of "r-value =3D"na= mespace "." > priority value" is hard to read. Please consider giving that parameter con= struct a name, and using the name throughout. > =20 > SD> How about the following? > =20 > =E2=80=9CThe following is an example "rph" claim for a SIP =E2=80=99Resour= ce-Priority=E2=80=99 header field with an r-value of "ets.0" and with anothe= r r-value of "wps.0". Works for me. > =20 > Note: Will change the rest accordingly. > =20 > =C2=A73, 7th paragraph: "The authority MUST use its credentials (i.e., CER= T)" > Does "CERT" mean "Certificate"? I assume it's not "Computer Emergency Resp= onse Team". > =20 > SD> Yes CERT implies Certificate. We will change it to 'Certificate' > =20 > =C2=A74.1 : A SIP authentication service typically will derive the value o= f "rph" > from the =E2=80=99Resource-Priority=E2=80=99 header field based on poli= cy associated > with service specific use of the "namespace "." priority value" for > r-values based on [RFC4412].: > "Typically" usually implies "Most but not all of the time". Is that the in= tent? > =20 > =20 > SD> No that is not the intent. Will delete =E2=80=98typically=E2=80=9D. Th= e sentence will read : > =20 > SD> =E2=80=9CA SIP authentication service will derive the value of "rph" f= rom the =E2=80=99Resource-Priority=E2=80=99 header field based on policy ass= ociated with service specific use of the "namespace "." r-priority " for r-= values based on [RFC4412]. =E2=80=9C > =20 > =C2=A74.2, last paragraph: Am I correct to guess that this is talking abou= t valid claims? > =20 > SD> This statement is valid for both valid and invalid claims. The policy w= ill determine how claim will be treated. I don=E2=80=99t understand what that means for invalid claims. Are you sayin= g that local policy could mean you use an invalid claim anyway? If so, why b= other verifying it? > =20 >=20 >=20 >> On Mon, Apr 16, 2018 at 10:27 PM, Ben Campbell wrote: >> Ben Campbell has entered the following ballot position for >> draft-ietf-stir-rph-03: Discuss >>=20 >> When responding, please keep the subject line intact and reply to all >> email addresses included in the To and CC lines. (Feel free to cut this >> introductory paragraph, however.) >>=20 >>=20 >> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html= >> for more information about IESG DISCUSS and COMMENT positions. >>=20 >>=20 >> The document, along with other ballot positions, can be found here: >> https://datatracker.ietf.org/doc/draft-ietf-stir-rph/ >>=20 >>=20 >>=20 >> ---------------------------------------------------------------------- >> DISCUSS: >> ---------------------------------------------------------------------- >>=20 >> Thanks for this work. I plan to ballot "yes", but I have a couple of poin= ts I >> think need to be discussed first. >>=20 >> =C2=A74.2: " If the signature validation fails, the verification service s= hould infer >> that the calling party is not authorized for =E2=80=99Resource-Priorit= y=E2=80=99 as >> indicated in the claim. In such cases, the priority treatment for >> the associated communication service is handled as per the local >> policy." >>=20 >> I suspect there will be deployments where the node making these local pol= icy >> decisions is downstream from the verifier. How do they know RPH verificat= ion >> failed? Should the verifier strip resource priority header fields for whi= ch >> validation failed? >>=20 >> =C2=A77.2: >> o The verification of the signature MUST include means of verifying >> that the signer is authoritative for the signed content of the >> resource priority namespace in the PASSporT." >>=20 >> I gather the intent is to leave that means to local policy, or to be spec= ified >> elsewhere. I think that's a problem from an interoperability standpoint..= The >> verifier needs a way to know whether the authorizer is authoritative for t= he >> RPH. If we want authorizers and verifiers from different vendors to be ab= le to >> interoperate, it seems like at least some mechanism needs to be standardi= zed >> and possibly MTI. >>=20 >>=20 >> ---------------------------------------------------------------------- >> COMMENT: >> ---------------------------------------------------------------------- >>=20 >> General: It's probably worth updating the references to 4474bis and passp= ort to >> their respective RFCs. >>=20 >> =C2=A73, 4th paragraph: The imbedding of ABNF in the middle of a paragrap= h is >> difficult to read. It would be helpful to separate that from the surround= ing >> text in the conventional fashion. >>=20 >> =C2=A73, 5th paragraph and throughout: The repeated use of "r-value =3D"n= amespace "." >> priority value" is hard to read. Please consider giving that parameter >> construct a name, and using the name throughout. >>=20 >> =C2=A73, 7th paragraph: "The authority MUST use its credentials (i.e., CE= RT)" >> Does "CERT" mean "Certificate"? I assume it's not "Computer Emergency Res= ponse >> Team". >>=20 >> =C2=A74.1 : A SIP authentication service typically will derive the value o= f "rph" >> from the =E2=80=99Resource-Priority=E2=80=99 header field based on pol= icy associated >> with service specific use of the "namespace "." priority value" for >> r-values based on [RFC4412].: >> "Typically" usually implies "Most but not all of the time". Is that the i= ntent? >>=20 >> =C2=A74.2, last paragraph: Am I correct to guess that this is talking abo= ut valid >> claims? >>=20 >>=20 >> _______________________________________________ >> stir mailing list >> stir@ietf.org >> https://www.ietf.org/mailman/listinfo/stir >=20 --Apple-Mail-A5FC2A1D-B1C1-4DC5-833C-7C383A436734 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable


On Apr 1= 8, 2018, at 4:04 PM, Subir Das <s= ubirdas21@gmail.com> wrote:

Hello Ben,

Thanks for your review and c= omments. Please see the answers inline.

 

Regards,

_Subir

=  

--= ---Original Message-----
From: Ben Campbell <ben@nostrum.com>
Sent: Monday, April 16, 2018 10:27 PM
To: The IESG <iesg@ietf.org>
Cc: draft-ietf-stir-rph@ietf.org; Russ Housley <rhousley@vigilsec.com>= ; stir-chairs@ietf.org; rhousley@vigilsec.com; stir@ietf.org
Subject: Ben Campbell's Discuss on draft-ietf-stir-rph-03: (with DISCUSS and= COMMENT)

 

Ben Campbell has entered the following ballot position for

draft-ietf-stir-rph-03= : Discuss

 

When responding, please keep the subject line intact and reply to all email addresses include= d in the To and CC lines. (Feel free to cut this introductory paragraph, however.)

 

 

Please refer to https://www.ietf.org/= iesg/statement/discuss-criteria.html

for more information about IESG DISCUSS and COMMENT positions.

 

 

The document, along with other ballot positions, can be found here:

https://datatracker.ietf.org/doc/draft-ie= tf-stir-rph/

 

 

 

----------------------= ------------------------------------------------

DISCUSS:<= /span>

----------------------= ------------------------------------------------

 

Thanks for this work. I plan to ballot "yes", but I have a couple of points I think need to be discussed first.


SD> Appre= ciate it.

 

=C2=A74.2: " If the signature validation fails, the verification service should infer<= /span>

   that the calling party is not authorized for =E2=80=99Resource-Priority=E2=80=99 as

   indicated in the claim.  In such cases, the priority t= reatment for

   the associated communication service is handled as per the local

   policy."

 

I suspect there will be deployments where the node making these local policy decisions is downstream from the verifier. How do they know RPH verification failed? Shou= ld the verifier strip resource priority header fields for which validation fail= ed?

 

SD> We will clarify the last sentence of the paragraph as follows:

 

=E2=80=9CIn such cases, the priority treatment for the associated communication service is handled as per the local policy of the verifier (e.= .g., the RPH may be  stripped and call can be treated as an ordinary call)."


Can you envision a case where it would make sense to leave R= PH verifiers where verification has failed? That seems like a dangerous prac= tice worthy of at least a SHOULD NOT.

 

=C2=A77.2:

   o  The verification of the signature MUST include means of verifying

  &nbs= p;   that the signer is authoritative for the signed content of the

  &nbs= p;   resource priority namespace in the PASSporT."

 

I gather the intent is to leave that means to local policy, or to be specified elsewhere. I thin= k that's a problem from an interoperability standpoint. The verifier needs a w= ay to know whether the authorizer is authoritative for the RPH. If we want authorizers and verifiers from different vendors to be able to interoperate,= it seems like at least some mechanism needs to be standardized and possibly MTI= .

 

SD&= gt; Yes, you are correct tha= t the end-to-end architecture is specified outside of IETF. This is currently done in ATIS where the verifier= can verify the authorizer=E2=80=99s  certificate even if they are from different providers.


Is it the intent that this extension only be u= sed with the ATIS framework? If so, some scoping language early in the docum= ent would be helpful.

=

 

 

----------------------= ------------------------------------------------

COMMENT:<= /span>

----------------------= ------------------------------------------------

 

General: It's probably worth updating the references to 4474bis and passport to their respective RFCs.

 

SD> Will update.

 

=C2=A73, 4th paragraph: The imbedding of ABNF in the middle of a paragraph is difficult t= o read. It would be helpful to separate that from the surrounding text in the conventional fashion.

 

SD> How about the following?

 

"The "rph" claim will provide an assertion of authorization, "auth", for information in the SIP =E2=80=99Resource-Priority=E2=80=99 header field based on [RFC4412] and the s= yntax is:

 

Resource-Priority =3D "Resource-Priority": r-value=

r-value=3D "namespace  "."  r-priority

 

Specifically, the "rph" claim includes assertion of the priority-level of the user to be used for a given communication sessi= on. The value of the "rph" claim is an Object with one or more keys. Each key is associated with a JSON Array. These arrays contain Strings that corre= spond to the =E2=80=98r-values=E2=80=99 values indicated in the SIP =E2=80=99Resou= rce-Priority=E2=80=99 header field."


Works for me.

 

=C2=A73, 5th paragraph and throughout: The repeated use of "r-value =3D"namespace "."

priority value" is hard to read. Please consider giving that parameter construct a name, and using the name throughout.

 

SD> How about the following?

 

=E2=80=9CThe following is an example "rph" claim for a SIP =E2=80=99Resource-Priority=E2=80=99 header field with an r-value of "ets= .0" and with another r-value  of "wps.0".


Works= for me.

 

Note: Will change the rest accordingly.

=

 

=C2=A73, 7th paragraph: "The authority MUST use its credentials (i.e., CERT)"

Does "CERT" mean "Certificate"? I assume it's not "Computer Emergency Response Team".

 

SD> Yes CERT implies Certificate. We will change it to 'Certificate'

 

=C2=A74.1 : A SIP authentication service typically will derive the value of "rph"=

   from the =E2=80=99Resource-Priority=E2=80=99 header field based on policy associated

   with service specific use of the "namespace "." priority value" for

   r-values based on [RFC4412].:

"Typically" usually implies "Most but not all of the time". Is that the intent?

 

 

SD> No that is not the intent. Will delete =E2=80=98typically=E2=80= =9D. The sentence will read :

 

SD> =E2=80=9CA SIP authentication service will derive the value of "rph" from the =E2=80=99Resource-Priority=E2=80=99 header field based on p= olicy associated with service specific use of the "namespace "." r-priority  " for r-values based on [RFC4412]. =E2=80=9C

 

=C2=A74.2, last paragraph: Am I correct to guess that this is talking about valid claims?

 

SD> This statement is valid for both valid and invalid claims. The policy will determine how claim will be treated.


I don=E2=80=99t understand wh= at that means for invalid claims. Are you saying that local policy could mea= n you use an invalid claim anyway? If so, why bother verifying it?

=

 



On Mon, A= pr 16, 2018 at 10:27 PM, Ben Campbell <ben@nostrum.com> wrote:
Ben Campbell has entered the following ballo= t position for
draft-ietf-stir-rph-03: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-= stir-rph/



------------------------------------------------------------------= ----
DISCUSS:
------------------------------------------------------------------= ----

Thanks for this work. I plan to ballot "yes", but I have a couple of points I=
think need to be discussed first.

=C2=A74.2: " If the signature validation fails, the verification service sho= uld infer
   that the calling party is not authorized for =E2=80=99Resource-= Priority=E2=80=99 as
   indicated in the claim.  In such cases, the priority treat= ment for
   the associated communication service is handled as per the loca= l
   policy."

I suspect there will be deployments where the node making these local policy=
decisions is downstream from the verifier. How do they know RPH verification=
failed? Should the verifier strip resource priority header fields for which<= br> validation failed?

=C2=A77.2:
   o  The verification of the signature MUST include means of= verifying
      that the signer is authoritative for the signed content= of the
      resource priority namespace in the PASSporT."

I gather the intent is to leave that means to local policy, or to be specifi= ed
elsewhere. I think that's a problem from an interoperability standpoint.. Th= e
verifier needs a way to know whether the authorizer is authoritative for the=
RPH. If we want authorizers and verifiers from different vendors to be able t= o
interoperate, it seems like at least some mechanism needs to be standardized=
and possibly MTI.


------------------------------------------------------------------= ----
COMMENT:
------------------------------------------------------------------= ----

General: It's probably worth updating the references to 4474bis and passport= to
their respective RFCs.

=C2=A73, 4th paragraph: The imbedding of ABNF in the middle of a paragraph i= s
difficult to read. It would be helpful to separate that from the surrounding=
text in the conventional fashion.

=C2=A73, 5th paragraph and throughout: The repeated use of "r-value =3D"name= space "."
priority value" is hard to read. Please consider giving that parameter
construct a name, and using the name throughout.

=C2=A73, 7th paragraph: "The authority MUST use its credentials (i.e., CERT)= "
Does "CERT" mean "Certificate"? I assume it's not "Computer Emergency Respon= se
Team".

=C2=A74.1 : A SIP authentication service typically will derive the value of "= rph"
   from the =E2=80=99Resource-Priority=E2=80=99 header field based= on policy associated
   with service specific use of the "namespace "." priority value"= for
   r-values based on [RFC4412].:
"Typically" usually implies "Most but not all of the time". Is that the inte= nt?

=C2=A74.2, last paragraph: Am I correct to guess that this is talking about v= alid
claims?


_______________________________________________
stir mailing list
stir@ietf.org
https://www.ietf.org/mailman/listinfo/stir

= --Apple-Mail-A5FC2A1D-B1C1-4DC5-833C-7C383A436734-- From nobody Thu Apr 19 11:15:43 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3E2612DA15; Thu, 19 Apr 2018 11:15:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.888 X-Spam-Level: X-Spam-Status: No, score=-1.888 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e_-1So5Sj0Np; Thu, 19 Apr 2018 11:15:32 -0700 (PDT) Received: from thumper.appcomsci.com (thumper.appcomsci.com [205.132.0.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 098CC12D887; Thu, 19 Apr 2018 11:15:31 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thumper.appcomsci.com (Postfix) with ESMTP id 11C9A695131; Thu, 19 Apr 2018 14:13:36 -0400 (EDT) X-Virus-Scanned: by SpamTitan at appcomsci.com Received: from thumper.appcomsci.com (localhost [127.0.0.1]) by thumper.appcomsci.com (Postfix) with ESMTP id 61E8669512A; Thu, 19 Apr 2018 14:13:35 -0400 (EDT) Received: from bambi.appcomsci.com (bambi.appcomsci.com [192.4.5.54]) by thumper.appcomsci.com (Postfix) with ESMTPS id 2DE0C695123; Thu, 19 Apr 2018 14:13:35 -0400 (EDT) Received: from brg-exmb1.ats.atsinnovate.com (exch.appcomsci.com [192.4.5.112]) by bambi.appcomsci.com (8.14.4/8.13.4) with ESMTP id w3JIFTWt023152; Thu, 19 Apr 2018 14:15:29 -0400 Received: from RRC-ATS-EXMB2.ats.atsinnovate.com ([2002:c004:56a::c004:56a]) by brg-ats-exhb1.ats.atsinnovate.com ([fe80::fc05:b53:7f2b:84f9%18]) with mapi id 14.03.0389.001; Thu, 19 Apr 2018 14:15:28 -0400 From: "Das, Subir" To: Ben Campbell , Subir Das CC: IETF STIR Mail List , "rhousley@vigilsec.com" , The IESG , "draft-ietf-stir-rph@ietf.org" , STIR Chairs Thread-Topic: [stir] Ben Campbell's Discuss on draft-ietf-stir-rph-03: (with DISCUSS and COMMENT) Thread-Index: AQHT1fOe4dK2bLGpWkiIvueJa6GSFKQG04kAgAFKTICAAEedgA== Date: Thu, 19 Apr 2018 18:15:28 +0000 Message-ID: References: <152393202955.26114.3853075658304497317.idtracker@ietfa.amsl.com> <5716BD0B-CF7B-46BF-87A4-0C33E4EDE553@nostrum.com> In-Reply-To: <5716BD0B-CF7B-46BF-87A4-0C33E4EDE553@nostrum.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.4.8.216] Content-Type: multipart/alternative; boundary="_000_AAC987F0CC2C7845A9FBD8A36D52E12DCBD46FE4rrcatsexmb2atsa_" MIME-Version: 1.0 Archived-At: Subject: Re: [stir] Ben Campbell's Discuss on draft-ietf-stir-rph-03: (with DISCUSS and COMMENT) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Apr 2018 18:15:37 -0000 --_000_AAC987F0CC2C7845A9FBD8A36D52E12DCBD46FE4rrcatsexmb2atsa_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQmVuLA0KUGxlYXNlIHNlZSB0aGUgYW5zd2VycyBiZWxvdy4NCg0KcmVnYXJkcywNCl9TdWJp cg0KDQpGcm9tOiBCZW4gQ2FtcGJlbGwgPGJlbkBub3N0cnVtLmNvbT4NClNlbnQ6IFRodXJzZGF5 LCBBcHJpbCAxOSwgMjAxOCA1OjQ3IEFNDQpUbzogU3ViaXIgRGFzIDxzdWJpcmRhczIxQGdtYWls LmNvbT4NCkNjOiBJRVRGIFNUSVIgTWFpbCBMaXN0IDxzdGlyQGlldGYub3JnPjsgcmhvdXNsZXlA dmlnaWxzZWMuY29tOyBUaGUgSUVTRyA8aWVzZ0BpZXRmLm9yZz47IGRyYWZ0LWlldGYtc3Rpci1y cGhAaWV0Zi5vcmc7IFNUSVIgQ2hhaXJzIDxzdGlyLWNoYWlyc0BpZXRmLm9yZz4NClN1YmplY3Q6 IFJlOiBbc3Rpcl0gQmVuIENhbXBiZWxsJ3MgRGlzY3VzcyBvbiBkcmFmdC1pZXRmLXN0aXItcnBo LTAzOiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5UKQ0KDQoNCg0KT24gQXByIDE4LCAyMDE4LCBh dCA0OjA0IFBNLCBTdWJpciBEYXMgPHN1YmlyZGFzMjFAZ21haWwuY29tPG1haWx0bzpzdWJpcmRh czIxQGdtYWlsLmNvbT4+IHdyb3RlOg0KDQpIZWxsbyBCZW4sDQoNClRoYW5rcyBmb3IgeW91ciBy ZXZpZXcgYW5kIGNvbW1lbnRzLiBQbGVhc2Ugc2VlIHRoZSBhbnN3ZXJzIGlubGluZS4NCg0KDQoN ClJlZ2FyZHMsDQoNCl9TdWJpcg0KDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZy b206IEJlbiBDYW1wYmVsbCA8YmVuQG5vc3RydW0uY29tPG1haWx0bzpiZW5Abm9zdHJ1bS5jb20+ Pg0KU2VudDogTW9uZGF5LCBBcHJpbCAxNiwgMjAxOCAxMDoyNyBQTQ0KVG86IFRoZSBJRVNHIDxp ZXNnQGlldGYub3JnPG1haWx0bzppZXNnQGlldGYub3JnPj4NCkNjOiBkcmFmdC1pZXRmLXN0aXIt cnBoQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLXN0aXItcnBoQGlldGYub3JnPjsgUnVzcyBI b3VzbGV5IDxyaG91c2xleUB2aWdpbHNlYy5jb208bWFpbHRvOnJob3VzbGV5QHZpZ2lsc2VjLmNv bT4+OyBzdGlyLWNoYWlyc0BpZXRmLm9yZzxtYWlsdG86c3Rpci1jaGFpcnNAaWV0Zi5vcmc+OyBy aG91c2xleUB2aWdpbHNlYy5jb208bWFpbHRvOnJob3VzbGV5QHZpZ2lsc2VjLmNvbT47IHN0aXJA aWV0Zi5vcmc8bWFpbHRvOnN0aXJAaWV0Zi5vcmc+DQpTdWJqZWN0OiBCZW4gQ2FtcGJlbGwncyBE aXNjdXNzIG9uIGRyYWZ0LWlldGYtc3Rpci1ycGgtMDM6ICh3aXRoIERJU0NVU1MgYW5kIENPTU1F TlQpDQoNCg0KDQpCZW4gQ2FtcGJlbGwgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxsb3Qg cG9zaXRpb24gZm9yDQoNCmRyYWZ0LWlldGYtc3Rpci1ycGgtMDM6IERpc2N1c3MNCg0KDQoNCldo ZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3QgYW5kIHJl cGx5IHRvIGFsbCBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5l cy4gKEZlZWwgZnJlZSB0byBjdXQgdGhpcyBpbnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVy LikNCg0KDQoNCg0KDQpQbGVhc2UgcmVmZXIgdG8gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9z dGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sDQoNCmZvciBtb3JlIGluZm9ybWF0aW9uIGFi b3V0IElFU0cgRElTQ1VTUyBhbmQgQ09NTUVOVCBwb3NpdGlvbnMuDQoNCg0KDQoNCg0KVGhlIGRv Y3VtZW50LCBhbG9uZyB3aXRoIG90aGVyIGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3VuZCBo ZXJlOg0KDQpodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXN0aXIt cnBoLw0KDQoNCg0KDQoNCg0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkRJU0NVU1M6DQoNCi0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0NCg0KDQoNClRoYW5rcyBmb3IgdGhpcyB3b3JrLiBJIHBsYW4gdG8gYmFsbG90ICJ5ZXMi LCBidXQgSSBoYXZlIGEgY291cGxlIG9mIHBvaW50cyBJIHRoaW5rIG5lZWQgdG8gYmUgZGlzY3Vz c2VkIGZpcnN0Lg0KDQoNCg0KU0Q+IEFwcHJlY2lhdGUgaXQuDQoNCg0KDQrCpzQuMjogIiBJZiB0 aGUgc2lnbmF0dXJlIHZhbGlkYXRpb24gZmFpbHMsIHRoZSB2ZXJpZmljYXRpb24gc2VydmljZSBz aG91bGQgaW5mZXINCg0KICAgdGhhdCB0aGUgY2FsbGluZyBwYXJ0eSBpcyBub3QgYXV0aG9yaXpl ZCBmb3Ig4oCZUmVzb3VyY2UtUHJpb3JpdHnigJkgYXMNCg0KICAgaW5kaWNhdGVkIGluIHRoZSBj bGFpbS4gIEluIHN1Y2ggY2FzZXMsIHRoZSBwcmlvcml0eSB0cmVhdG1lbnQgZm9yDQoNCiAgIHRo ZSBhc3NvY2lhdGVkIGNvbW11bmljYXRpb24gc2VydmljZSBpcyBoYW5kbGVkIGFzIHBlciB0aGUg bG9jYWwNCg0KICAgcG9saWN5LiINCg0KDQoNCkkgc3VzcGVjdCB0aGVyZSB3aWxsIGJlIGRlcGxv eW1lbnRzIHdoZXJlIHRoZSBub2RlIG1ha2luZyB0aGVzZSBsb2NhbCBwb2xpY3kgZGVjaXNpb25z IGlzIGRvd25zdHJlYW0gZnJvbSB0aGUgdmVyaWZpZXIuIEhvdyBkbyB0aGV5IGtub3cgUlBIIHZl cmlmaWNhdGlvbiBmYWlsZWQ/IFNob3VsZCB0aGUgdmVyaWZpZXIgc3RyaXAgcmVzb3VyY2UgcHJp b3JpdHkgaGVhZGVyIGZpZWxkcyBmb3Igd2hpY2ggdmFsaWRhdGlvbiBmYWlsZWQ/DQoNCg0KDQpT RD4gV2Ugd2lsbCBjbGFyaWZ5IHRoZSBsYXN0IHNlbnRlbmNlIG9mIHRoZSBwYXJhZ3JhcGggYXMg Zm9sbG93czoNCg0KDQoNCuKAnEluIHN1Y2ggY2FzZXMsIHRoZSBwcmlvcml0eSB0cmVhdG1lbnQg Zm9yIHRoZSBhc3NvY2lhdGVkIGNvbW11bmljYXRpb24gc2VydmljZSBpcyBoYW5kbGVkIGFzIHBl ciB0aGUgbG9jYWwgcG9saWN5IG9mIHRoZSB2ZXJpZmllciAoZS4uZy4sIHRoZSBSUEggbWF5IGJl ICBzdHJpcHBlZCBhbmQgY2FsbCBjYW4gYmUgdHJlYXRlZCBhcyBhbiBvcmRpbmFyeSBjYWxsKS4i DQoNCkNhbiB5b3UgZW52aXNpb24gYSBjYXNlIHdoZXJlIGl0IHdvdWxkIG1ha2Ugc2Vuc2UgdG8g bGVhdmUgUlBIIHZlcmlmaWVycyB3aGVyZSB2ZXJpZmljYXRpb24gaGFzIGZhaWxlZD8gVGhhdCBz ZWVtcyBsaWtlIGEgZGFuZ2Vyb3VzIHByYWN0aWNlIHdvcnRoeSBvZiBhdCBsZWFzdCBhIFNIT1VM RCBOT1QuDQoNClNEPiBZb3UgYXJlIGNvcnJlY3QgdGhhdCBpdCAgc2hvdWxkIG5vdCBidXQgaXQg aXMgaGFyZCB0byBpbWFnaW5lIHdoYXQgdGhlIG9wZXJhdG9yc+KAmSBwb2xpY3kgd291bGQgYmUu ICBGcm9tIGEgcHJvdG9jb2wgcGVyc3BlY3RpdmUsIHdlIGNhbiByZWNvbW1lbmQgIFNIT1VMRCBO T1QgaWYgdGhhdCBpcyAgd2hhdCB5b3UgYXJlIHN1Z2dlc3RpbmcuDQoNCg0KDQrCpzcuMjoNCg0K ICAgbyAgVGhlIHZlcmlmaWNhdGlvbiBvZiB0aGUgc2lnbmF0dXJlIE1VU1QgaW5jbHVkZSBtZWFu cyBvZiB2ZXJpZnlpbmcNCg0KICAgICAgdGhhdCB0aGUgc2lnbmVyIGlzIGF1dGhvcml0YXRpdmUg Zm9yIHRoZSBzaWduZWQgY29udGVudCBvZiB0aGUNCg0KICAgICAgcmVzb3VyY2UgcHJpb3JpdHkg bmFtZXNwYWNlIGluIHRoZSBQQVNTcG9yVC4iDQoNCg0KDQpJIGdhdGhlciB0aGUgaW50ZW50IGlz IHRvIGxlYXZlIHRoYXQgbWVhbnMgdG8gbG9jYWwgcG9saWN5LCBvciB0byBiZSBzcGVjaWZpZWQg ZWxzZXdoZXJlLiBJIHRoaW5rIHRoYXQncyBhIHByb2JsZW0gZnJvbSBhbiBpbnRlcm9wZXJhYmls aXR5IHN0YW5kcG9pbnQuIFRoZSB2ZXJpZmllciBuZWVkcyBhIHdheSB0byBrbm93IHdoZXRoZXIg dGhlIGF1dGhvcml6ZXIgaXMgYXV0aG9yaXRhdGl2ZSBmb3IgdGhlIFJQSC4gSWYgd2Ugd2FudCBh dXRob3JpemVycyBhbmQgdmVyaWZpZXJzIGZyb20gZGlmZmVyZW50IHZlbmRvcnMgdG8gYmUgYWJs ZSB0byBpbnRlcm9wZXJhdGUsIGl0IHNlZW1zIGxpa2UgYXQgbGVhc3Qgc29tZSBtZWNoYW5pc20g bmVlZHMgdG8gYmUgc3RhbmRhcmRpemVkIGFuZCBwb3NzaWJseSBNVEkuDQoNCg0KU0Q+IFllcywg eW91IGFyZSBjb3JyZWN0IHRoYXQgdGhlIGVuZC10by1lbmQgYXJjaGl0ZWN0dXJlIGlzIHNwZWNp ZmllZCBvdXRzaWRlIG9mIElFVEYuIFRoaXMgaXMgY3VycmVudGx5IGRvbmUgaW4gQVRJUyB3aGVy ZSB0aGUgdmVyaWZpZXIgY2FuIHZlcmlmeSB0aGUgYXV0aG9yaXplcuKAmXMgIGNlcnRpZmljYXRl IGV2ZW4gaWYgdGhleSBhcmUgZnJvbSBkaWZmZXJlbnQgcHJvdmlkZXJzLg0KDQpJcyBpdCB0aGUg aW50ZW50IHRoYXQgdGhpcyBleHRlbnNpb24gb25seSBiZSB1c2VkIHdpdGggdGhlIEFUSVMgZnJh bWV3b3JrPyBJZiBzbywgc29tZSBzY29waW5nIGxhbmd1YWdlIGVhcmx5IGluIHRoZSBkb2N1bWVu dCB3b3VsZCBiZSBoZWxwZnVsLg0KDQoNCiAgICAgICAgICAgICAgU0Q+IEF0IHRoaXMgbW9tZW50 LCBpdCB3aWxsIGJlIHVzZWQgd2l0aCB0aGUgQVRJUyBmcmFtZXdvcmsuIEhvd2V2ZXIsIHdlIGRv IG5vdCBrbm93IGlmIHNvbWUgb3RoZXIgZnJhbWV3b3JrIHdpbGwgZmluZCBpdCB1c2VmdWwuIFdl IHdpbGwgIHRyeSB0byBhZGQgYSByZWZlcmVuY2UgdG8gQVRJUyBmcmFtZXdvcmsuIFdpbGwgdGhp cyB3b3JrPw0KDQoNCg0KDQoNCg0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkNPTU1FTlQ6DQoNCi0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCg0KDQoNCkdlbmVyYWw6IEl0J3MgcHJvYmFibHkgd29ydGggdXBkYXRpbmcgdGhl IHJlZmVyZW5jZXMgdG8gNDQ3NGJpcyBhbmQgcGFzc3BvcnQgdG8gdGhlaXIgcmVzcGVjdGl2ZSBS RkNzLg0KDQoNCg0KU0Q+IFdpbGwgdXBkYXRlLg0KDQoNCg0KwqczLCA0dGggcGFyYWdyYXBoOiBU aGUgaW1iZWRkaW5nIG9mIEFCTkYgaW4gdGhlIG1pZGRsZSBvZiBhIHBhcmFncmFwaCBpcyBkaWZm aWN1bHQgdG8gcmVhZC4gSXQgd291bGQgYmUgaGVscGZ1bCB0byBzZXBhcmF0ZSB0aGF0IGZyb20g dGhlIHN1cnJvdW5kaW5nIHRleHQgaW4gdGhlIGNvbnZlbnRpb25hbCBmYXNoaW9uLg0KDQoNCg0K U0Q+IEhvdyBhYm91dCB0aGUgZm9sbG93aW5nPw0KDQoNCg0KIlRoZSAicnBoIiBjbGFpbSB3aWxs IHByb3ZpZGUgYW4gYXNzZXJ0aW9uIG9mIGF1dGhvcml6YXRpb24sICJhdXRoIiwgZm9yIGluZm9y bWF0aW9uIGluIHRoZSBTSVAg4oCZUmVzb3VyY2UtUHJpb3JpdHnigJkgaGVhZGVyIGZpZWxkIGJh c2VkIG9uIFtSRkM0NDEyXSBhbmQgdGhlIHN5bnRheCBpczoNCg0KDQoNClJlc291cmNlLVByaW9y aXR5ID0gIlJlc291cmNlLVByaW9yaXR5Ijogci12YWx1ZQ0KDQpyLXZhbHVlPSAibmFtZXNwYWNl ICAiLiIgIHItcHJpb3JpdHkNCg0KDQoNClNwZWNpZmljYWxseSwgdGhlICJycGgiIGNsYWltIGlu Y2x1ZGVzIGFzc2VydGlvbiBvZiB0aGUgcHJpb3JpdHktbGV2ZWwgb2YgdGhlIHVzZXIgdG8gYmUg dXNlZCBmb3IgYSBnaXZlbiBjb21tdW5pY2F0aW9uIHNlc3Npb24uIFRoZSB2YWx1ZSBvZiB0aGUg InJwaCIgY2xhaW0gaXMgYW4gT2JqZWN0IHdpdGggb25lIG9yIG1vcmUga2V5cy4gRWFjaCBrZXkg aXMgYXNzb2NpYXRlZCB3aXRoIGEgSlNPTiBBcnJheS4gVGhlc2UgYXJyYXlzIGNvbnRhaW4gU3Ry aW5ncyB0aGF0IGNvcnJlc3BvbmQgdG8gdGhlIOKAmHItdmFsdWVz4oCZIHZhbHVlcyBpbmRpY2F0 ZWQgaW4gdGhlIFNJUCDigJlSZXNvdXJjZS1Qcmlvcml0eeKAmSBoZWFkZXIgZmllbGQuIg0KDQpX b3JrcyBmb3IgbWUuDQoNCg0KDQoNCg0KwqczLCA1dGggcGFyYWdyYXBoIGFuZCB0aHJvdWdob3V0 OiBUaGUgcmVwZWF0ZWQgdXNlIG9mICJyLXZhbHVlID0ibmFtZXNwYWNlICIuIg0KDQpwcmlvcml0 eSB2YWx1ZSIgaXMgaGFyZCB0byByZWFkLiBQbGVhc2UgY29uc2lkZXIgZ2l2aW5nIHRoYXQgcGFy YW1ldGVyIGNvbnN0cnVjdCBhIG5hbWUsIGFuZCB1c2luZyB0aGUgbmFtZSB0aHJvdWdob3V0Lg0K DQoNCg0KU0Q+IEhvdyBhYm91dCB0aGUgZm9sbG93aW5nPw0KDQoNCg0K4oCcVGhlIGZvbGxvd2lu ZyBpcyBhbiBleGFtcGxlICJycGgiIGNsYWltIGZvciBhIFNJUCDigJlSZXNvdXJjZS1Qcmlvcml0 eeKAmSBoZWFkZXIgZmllbGQgd2l0aCBhbiByLXZhbHVlIG9mICJldHMuMCIgYW5kIHdpdGggYW5v dGhlciByLXZhbHVlICBvZiAid3BzLjAiLg0KDQpXb3JrcyBmb3IgbWUuDQoNCg0KDQoNCg0KTm90 ZTogV2lsbCBjaGFuZ2UgdGhlIHJlc3QgYWNjb3JkaW5nbHkuDQoNCg0KDQrCpzMsIDd0aCBwYXJh Z3JhcGg6ICJUaGUgYXV0aG9yaXR5IE1VU1QgdXNlIGl0cyBjcmVkZW50aWFscyAoaS5lLiwgQ0VS VCkiDQoNCkRvZXMgIkNFUlQiIG1lYW4gIkNlcnRpZmljYXRlIj8gSSBhc3N1bWUgaXQncyBub3Qg IkNvbXB1dGVyIEVtZXJnZW5jeSBSZXNwb25zZSBUZWFtIi4NCg0KDQoNClNEPiBZZXMgQ0VSVCBp bXBsaWVzIENlcnRpZmljYXRlLiBXZSB3aWxsIGNoYW5nZSBpdCB0byAnQ2VydGlmaWNhdGUnDQoN Cg0KDQrCpzQuMSA6IEEgU0lQIGF1dGhlbnRpY2F0aW9uIHNlcnZpY2UgdHlwaWNhbGx5IHdpbGwg ZGVyaXZlIHRoZSB2YWx1ZSBvZiAicnBoIg0KDQogICBmcm9tIHRoZSDigJlSZXNvdXJjZS1Qcmlv cml0eeKAmSBoZWFkZXIgZmllbGQgYmFzZWQgb24gcG9saWN5IGFzc29jaWF0ZWQNCg0KICAgd2l0 aCBzZXJ2aWNlIHNwZWNpZmljIHVzZSBvZiB0aGUgIm5hbWVzcGFjZSAiLiIgcHJpb3JpdHkgdmFs dWUiIGZvcg0KDQogICByLXZhbHVlcyBiYXNlZCBvbiBbUkZDNDQxMl0uOg0KDQoiVHlwaWNhbGx5 IiB1c3VhbGx5IGltcGxpZXMgIk1vc3QgYnV0IG5vdCBhbGwgb2YgdGhlIHRpbWUiLiBJcyB0aGF0 IHRoZSBpbnRlbnQ/DQoNCg0KDQoNCg0KU0Q+IE5vIHRoYXQgaXMgbm90IHRoZSBpbnRlbnQuIFdp bGwgZGVsZXRlIOKAmHR5cGljYWxseeKAnS4gVGhlIHNlbnRlbmNlIHdpbGwgcmVhZCA6DQoNCg0K DQpTRD4g4oCcQSBTSVAgYXV0aGVudGljYXRpb24gc2VydmljZSB3aWxsIGRlcml2ZSB0aGUgdmFs dWUgb2YgInJwaCIgZnJvbSB0aGUg4oCZUmVzb3VyY2UtUHJpb3JpdHnigJkgaGVhZGVyIGZpZWxk IGJhc2VkIG9uIHBvbGljeSBhc3NvY2lhdGVkIHdpdGggc2VydmljZSBzcGVjaWZpYyB1c2Ugb2Yg dGhlICJuYW1lc3BhY2UgIi4iIHItcHJpb3JpdHkgICIgZm9yIHItdmFsdWVzIGJhc2VkIG9uIFtS RkM0NDEyXS4g4oCcDQoNCg0KDQrCpzQuMiwgbGFzdCBwYXJhZ3JhcGg6IEFtIEkgY29ycmVjdCB0 byBndWVzcyB0aGF0IHRoaXMgaXMgdGFsa2luZyBhYm91dCB2YWxpZCBjbGFpbXM/DQoNCg0KDQpT RD4gVGhpcyBzdGF0ZW1lbnQgaXMgdmFsaWQgZm9yIGJvdGggdmFsaWQgYW5kIGludmFsaWQgY2xh aW1zLiBUaGUgcG9saWN5IHdpbGwgZGV0ZXJtaW5lIGhvdyBjbGFpbSB3aWxsIGJlIHRyZWF0ZWQu DQoNCkkgZG9u4oCZdCB1bmRlcnN0YW5kIHdoYXQgdGhhdCBtZWFucyBmb3IgaW52YWxpZCBjbGFp bXMuIEFyZSB5b3Ugc2F5aW5nIHRoYXQgbG9jYWwgcG9saWN5IGNvdWxkIG1lYW4geW91IHVzZSBh biBpbnZhbGlkIGNsYWltIGFueXdheT8gSWYgc28sIHdoeSBib3RoZXIgdmVyaWZ5aW5nIGl0Pw0K DQoNClNEPiBCeSDigJhpbnZhbGlk4oCZIGNsYWltIEkgbWVhbnQgZmFpbGVkIGNsYWltLiAgIFRo aXMgc3BlY2lmaWNhdGlvbiBkb2VzIG5vdCBkZWZpbmUgdGhlIGNhbGwgcHJvY2Vzc2luZyBiZWhh dmlvciBvZiBTSVAgVUEuIFRoZSBpbnRlbnQgaGVyZSBpcyB0byBzaW1wbHkgIHByb3ZpZGUgYW4g aW5wdXQgdG8gc3VjaCBhIGNhbGwgcHJvY2Vzc2luZyBlbnRpdHkgYWJvdXQgdGhlIHZhbGlkaXR5 IG9mICBSUEguDQpUaGlzIGlzIHRoZSByZWFzb24gd2h5IHdlIGxlYXZlIHRoaXMgYXNwZWN0IHRv IHRoZSBsb2NhbCBwb2xpY3kuDQoNCg0KDQoNCg0KT24gTW9uLCBBcHIgMTYsIDIwMTggYXQgMTA6 MjcgUE0sIEJlbiBDYW1wYmVsbCA8YmVuQG5vc3RydW0uY29tPG1haWx0bzpiZW5Abm9zdHJ1bS5j b20+PiB3cm90ZToNCkJlbiBDYW1wYmVsbCBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxv dCBwb3NpdGlvbiBmb3INCmRyYWZ0LWlldGYtc3Rpci1ycGgtMDM6IERpc2N1c3MNCg0KV2hlbiBy ZXNwb25kaW5nLCBwbGVhc2Uga2VlcCB0aGUgc3ViamVjdCBsaW5lIGludGFjdCBhbmQgcmVwbHkg dG8gYWxsDQplbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4g KEZlZWwgZnJlZSB0byBjdXQgdGhpcw0KaW50cm9kdWN0b3J5IHBhcmFncmFwaCwgaG93ZXZlci4p DQoNCg0KUGxlYXNlIHJlZmVyIHRvIGh0dHBzOi8vd3d3LmlldGYub3JnL2llc2cvc3RhdGVtZW50 L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbA0KZm9yIG1vcmUgaW5mb3JtYXRpb24gYWJvdXQgSUVTRyBE SVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NCg0KDQpUaGUgZG9jdW1lbnQsIGFsb25nIHdp dGggb3RoZXIgYmFsbG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQpodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXN0aXItcnBoLw0KDQoNCg0KLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQ0KRElTQ1VTUzoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KVGhhbmtzIGZvciB0aGlzIHdvcmsu IEkgcGxhbiB0byBiYWxsb3QgInllcyIsIGJ1dCBJIGhhdmUgYSBjb3VwbGUgb2YgcG9pbnRzIEkN CnRoaW5rIG5lZWQgdG8gYmUgZGlzY3Vzc2VkIGZpcnN0Lg0KDQrCpzQuMjogIiBJZiB0aGUgc2ln bmF0dXJlIHZhbGlkYXRpb24gZmFpbHMsIHRoZSB2ZXJpZmljYXRpb24gc2VydmljZSBzaG91bGQg aW5mZXINCiAgIHRoYXQgdGhlIGNhbGxpbmcgcGFydHkgaXMgbm90IGF1dGhvcml6ZWQgZm9yIOKA mVJlc291cmNlLVByaW9yaXR54oCZIGFzDQogICBpbmRpY2F0ZWQgaW4gdGhlIGNsYWltLiAgSW4g c3VjaCBjYXNlcywgdGhlIHByaW9yaXR5IHRyZWF0bWVudCBmb3INCiAgIHRoZSBhc3NvY2lhdGVk IGNvbW11bmljYXRpb24gc2VydmljZSBpcyBoYW5kbGVkIGFzIHBlciB0aGUgbG9jYWwNCiAgIHBv bGljeS4iDQoNCkkgc3VzcGVjdCB0aGVyZSB3aWxsIGJlIGRlcGxveW1lbnRzIHdoZXJlIHRoZSBu b2RlIG1ha2luZyB0aGVzZSBsb2NhbCBwb2xpY3kNCmRlY2lzaW9ucyBpcyBkb3duc3RyZWFtIGZy b20gdGhlIHZlcmlmaWVyLiBIb3cgZG8gdGhleSBrbm93IFJQSCB2ZXJpZmljYXRpb24NCmZhaWxl ZD8gU2hvdWxkIHRoZSB2ZXJpZmllciBzdHJpcCByZXNvdXJjZSBwcmlvcml0eSBoZWFkZXIgZmll bGRzIGZvciB3aGljaA0KdmFsaWRhdGlvbiBmYWlsZWQ/DQoNCsKnNy4yOg0KICAgbyAgVGhlIHZl cmlmaWNhdGlvbiBvZiB0aGUgc2lnbmF0dXJlIE1VU1QgaW5jbHVkZSBtZWFucyBvZiB2ZXJpZnlp bmcNCiAgICAgIHRoYXQgdGhlIHNpZ25lciBpcyBhdXRob3JpdGF0aXZlIGZvciB0aGUgc2lnbmVk IGNvbnRlbnQgb2YgdGhlDQogICAgICByZXNvdXJjZSBwcmlvcml0eSBuYW1lc3BhY2UgaW4gdGhl IFBBU1Nwb3JULiINCg0KSSBnYXRoZXIgdGhlIGludGVudCBpcyB0byBsZWF2ZSB0aGF0IG1lYW5z IHRvIGxvY2FsIHBvbGljeSwgb3IgdG8gYmUgc3BlY2lmaWVkDQplbHNld2hlcmUuIEkgdGhpbmsg dGhhdCdzIGEgcHJvYmxlbSBmcm9tIGFuIGludGVyb3BlcmFiaWxpdHkgc3RhbmRwb2ludC4uIFRo ZQ0KdmVyaWZpZXIgbmVlZHMgYSB3YXkgdG8ga25vdyB3aGV0aGVyIHRoZSBhdXRob3JpemVyIGlz IGF1dGhvcml0YXRpdmUgZm9yIHRoZQ0KUlBILiBJZiB3ZSB3YW50IGF1dGhvcml6ZXJzIGFuZCB2 ZXJpZmllcnMgZnJvbSBkaWZmZXJlbnQgdmVuZG9ycyB0byBiZSBhYmxlIHRvDQppbnRlcm9wZXJh dGUsIGl0IHNlZW1zIGxpa2UgYXQgbGVhc3Qgc29tZSBtZWNoYW5pc20gbmVlZHMgdG8gYmUgc3Rh bmRhcmRpemVkDQphbmQgcG9zc2libHkgTVRJLg0KDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkNPTU1FTlQ6 DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tDQoNCkdlbmVyYWw6IEl0J3MgcHJvYmFibHkgd29ydGggdXBkYXRpbmcg dGhlIHJlZmVyZW5jZXMgdG8gNDQ3NGJpcyBhbmQgcGFzc3BvcnQgdG8NCnRoZWlyIHJlc3BlY3Rp dmUgUkZDcy4NCg0KwqczLCA0dGggcGFyYWdyYXBoOiBUaGUgaW1iZWRkaW5nIG9mIEFCTkYgaW4g dGhlIG1pZGRsZSBvZiBhIHBhcmFncmFwaCBpcw0KZGlmZmljdWx0IHRvIHJlYWQuIEl0IHdvdWxk IGJlIGhlbHBmdWwgdG8gc2VwYXJhdGUgdGhhdCBmcm9tIHRoZSBzdXJyb3VuZGluZw0KdGV4dCBp biB0aGUgY29udmVudGlvbmFsIGZhc2hpb24uDQoNCsKnMywgNXRoIHBhcmFncmFwaCBhbmQgdGhy b3VnaG91dDogVGhlIHJlcGVhdGVkIHVzZSBvZiAici12YWx1ZSA9Im5hbWVzcGFjZSAiLiINCnBy aW9yaXR5IHZhbHVlIiBpcyBoYXJkIHRvIHJlYWQuIFBsZWFzZSBjb25zaWRlciBnaXZpbmcgdGhh dCBwYXJhbWV0ZXINCmNvbnN0cnVjdCBhIG5hbWUsIGFuZCB1c2luZyB0aGUgbmFtZSB0aHJvdWdo b3V0Lg0KDQrCpzMsIDd0aCBwYXJhZ3JhcGg6ICJUaGUgYXV0aG9yaXR5IE1VU1QgdXNlIGl0cyBj cmVkZW50aWFscyAoaS5lLiwgQ0VSVCkiDQpEb2VzICJDRVJUIiBtZWFuICJDZXJ0aWZpY2F0ZSI/ IEkgYXNzdW1lIGl0J3Mgbm90ICJDb21wdXRlciBFbWVyZ2VuY3kgUmVzcG9uc2UNClRlYW0iLg0K DQrCpzQuMSA6IEEgU0lQIGF1dGhlbnRpY2F0aW9uIHNlcnZpY2UgdHlwaWNhbGx5IHdpbGwgZGVy aXZlIHRoZSB2YWx1ZSBvZiAicnBoIg0KICAgZnJvbSB0aGUg4oCZUmVzb3VyY2UtUHJpb3JpdHni gJkgaGVhZGVyIGZpZWxkIGJhc2VkIG9uIHBvbGljeSBhc3NvY2lhdGVkDQogICB3aXRoIHNlcnZp Y2Ugc3BlY2lmaWMgdXNlIG9mIHRoZSAibmFtZXNwYWNlICIuIiBwcmlvcml0eSB2YWx1ZSIgZm9y DQogICByLXZhbHVlcyBiYXNlZCBvbiBbUkZDNDQxMl0uOg0KIlR5cGljYWxseSIgdXN1YWxseSBp bXBsaWVzICJNb3N0IGJ1dCBub3QgYWxsIG9mIHRoZSB0aW1lIi4gSXMgdGhhdCB0aGUgaW50ZW50 Pw0KDQrCpzQuMiwgbGFzdCBwYXJhZ3JhcGg6IEFtIEkgY29ycmVjdCB0byBndWVzcyB0aGF0IHRo aXMgaXMgdGFsa2luZyBhYm91dCB2YWxpZA0KY2xhaW1zPw0KDQoNCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpzdGlyIG1haWxpbmcgbGlzdA0Kc3RpckBp ZXRmLm9yZzxtYWlsdG86c3RpckBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vc3Rpcg0KDQo= --_000_AAC987F0CC2C7845A9FBD8A36D52E12DCBD46FE4rrcatsexmb2atsa_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1z b25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCglt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnAuZ21haWwtbXNvcGxhaW50 ZXh0LCBsaS5nbWFpbC1tc29wbGFpbnRleHQsIGRpdi5nbWFpbC1tc29wbGFpbnRleHQNCgl7bXNv LXN0eWxlLW5hbWU6Z21haWwtbXNvcGxhaW50ZXh0Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRv Ow0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFy Z2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5l dyBSb21hbiIsc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVy c29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6 IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsN Cglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDEx LjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9u MQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48 eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwv eG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQg djpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hh cGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIg bGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkhpIEJl biw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+UGxlYXNlIHNlZSB0aGUgYW5zd2VycyBiZWxvdy4NCjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+cmVnYXJkcyw8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+X1N1YmlyDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+IEJlbiBDYW1wYmVsbCAmbHQ7YmVuQG5vc3RydW0uY29tJmd0Ow0KPGJyPg0KPGI+U2VudDo8 L2I+IFRodXJzZGF5LCBBcHJpbCAxOSwgMjAxOCA1OjQ3IEFNPGJyPg0KPGI+VG86PC9iPiBTdWJp ciBEYXMgJmx0O3N1YmlyZGFzMjFAZ21haWwuY29tJmd0Ozxicj4NCjxiPkNjOjwvYj4gSUVURiBT VElSIE1haWwgTGlzdCAmbHQ7c3RpckBpZXRmLm9yZyZndDs7IHJob3VzbGV5QHZpZ2lsc2VjLmNv bTsgVGhlIElFU0cgJmx0O2llc2dAaWV0Zi5vcmcmZ3Q7OyBkcmFmdC1pZXRmLXN0aXItcnBoQGll dGYub3JnOyBTVElSIENoYWlycyAmbHQ7c3Rpci1jaGFpcnNAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+ U3ViamVjdDo8L2I+IFJlOiBbc3Rpcl0gQmVuIENhbXBiZWxsJ3MgRGlzY3VzcyBvbiBkcmFmdC1p ZXRmLXN0aXItcnBoLTAzOiAod2l0aCBESVNDVVNTIGFuZCBDT01NRU5UKTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t Ym90dG9tOjEyLjBwdCI+PGJyPg0KT24gQXByIDE4LCAyMDE4LCBhdCA0OjA0IFBNLCBTdWJpciBE YXMgJmx0OzxhIGhyZWY9Im1haWx0bzpzdWJpcmRhczIxQGdtYWlsLmNvbSI+c3ViaXJkYXMyMUBn bWFpbC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVv dGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21h cmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5IZWxsbyBCZW4sPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdp bjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlRoYW5rcyBmb3Ig eW91ciByZXZpZXcgYW5kIGNvbW1lbnRzLiBQbGVhc2Ugc2VlIHRoZSBhbnN3ZXJzIGlubGluZS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHls ZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIg c3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi PlJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWlu dGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPl9TdWJpcg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1z b3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFp bC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj4tLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTxicj4NCkZyb206IEJl biBDYW1wYmVsbCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJlbkBub3N0cnVtLmNvbSI+YmVuQG5vc3Ry dW0uY29tPC9hPiZndDsgPGJyPg0KU2VudDogTW9uZGF5LCBBcHJpbCAxNiwgMjAxOCAxMDoyNyBQ TTxicj4NClRvOiBUaGUgSUVTRyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmllc2dAaWV0Zi5vcmciPmll c2dAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCkNjOiA8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1z dGlyLXJwaEBpZXRmLm9yZyI+ZHJhZnQtaWV0Zi1zdGlyLXJwaEBpZXRmLm9yZzwvYT47IFJ1c3Mg SG91c2xleSAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJob3VzbGV5QHZpZ2lsc2VjLmNvbSI+cmhvdXNs ZXlAdmlnaWxzZWMuY29tPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86c3Rpci1jaGFpcnNAaWV0 Zi5vcmciPnN0aXItY2hhaXJzQGlldGYub3JnPC9hPjsgPGEgaHJlZj0ibWFpbHRvOnJob3VzbGV5 QHZpZ2lsc2VjLmNvbSI+DQpyaG91c2xleUB2aWdpbHNlYy5jb208L2E+OyA8YSBocmVmPSJtYWls dG86c3RpckBpZXRmLm9yZyI+c3RpckBpZXRmLm9yZzwvYT48YnI+DQpTdWJqZWN0OiBCZW4gQ2Ft cGJlbGwncyBEaXNjdXNzIG9uIGRyYWZ0LWlldGYtc3Rpci1ycGgtMDM6ICh3aXRoIERJU0NVU1Mg YW5kIENPTU1FTlQpPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3Bs YWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1t c29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj5CZW4gQ2FtcGJlbGwgaGFzIGVudGVyZWQgdGhlIGZvbGxvd2luZyBiYWxs b3QgcG9zaXRpb24gZm9yPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1z b3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWYiPmRyYWZ0LWlldGYtc3Rpci1ycGgtMDM6IERpc2N1c3M8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBp bjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdp bjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPldoZW4gcmVzcG9u ZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1YmplY3QgbGluZSBpbnRhY3QgYW5kIHJlcGx5IHRvIGFs bCBlbWFpbCBhZGRyZXNzZXMgaW5jbHVkZWQgaW4gdGhlIFRvIGFuZCBDQyBsaW5lcy4gKEZlZWwN CiBmcmVlIHRvIGN1dCB0aGlzIGludHJvZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2ZXIuKTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJt YXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHls ZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIg c3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi PlBsZWFzZSByZWZlciB0bw0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0 ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sIj48c3BhbiBzdHlsZT0iY29sb3I6d2luZG93dGV4 dDt0ZXh0LWRlY29yYXRpb246bm9uZSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1l bnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4t Ym90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Zm9yIG1vcmUgaW5mb3JtYXRpb24gYWJv dXQgSUVTRyBESVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJn aW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47 bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46 MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5UaGUgZG9jdW1lbnQs IGFsb25nIHdpdGggb3RoZXIgYmFsbG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9 Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxhIGhy ZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtc3Rpci1ycGgv Ij48c3BhbiBzdHlsZT0iY29sb3I6d2luZG93dGV4dDt0ZXh0LWRlY29yYXRpb246bm9uZSI+aHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zdGlyLXJwaC88L3NwYW4+ PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQi IHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50 ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3Bs YWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1t c29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTou MDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkRJU0NVU1M6PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJv dHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBp bjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdp bjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlRoYW5rcyBmb3Ig dGhpcyB3b3JrLiBJIHBsYW4gdG8gYmFsbG90ICZxdW90O3llcyZxdW90OywgYnV0IEkgaGF2ZSBh IGNvdXBsZSBvZiBwb2ludHMgSSB0aGluayBuZWVkIHRvIGJlIGRpc2N1c3NlZCBmaXJzdC48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0i bWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5 bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlNE Jmd0OyBBcHByZWNpYXRlIGl0Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Imdt YWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAw MDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj7CpzQuMjogJnF1b3Q7IElmIHRoZSBzaWduYXR1cmUgdmFs aWRhdGlvbiBmYWlscywgdGhlIHZlcmlmaWNhdGlvbiBzZXJ2aWNlIHNob3VsZCBpbmZlcjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJt YXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDsm bmJzcDsgdGhhdCB0aGUgY2FsbGluZyBwYXJ0eSBpcyBub3QgYXV0aG9yaXplZCBmb3Ig4oCZUmVz b3VyY2UtUHJpb3JpdHnigJkgYXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21h aWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7Jm5ic3A7IGluZGljYXRlZCBpbiB0aGUgY2xhaW0uJm5i c3A7IEluIHN1Y2ggY2FzZXMsIHRoZSBwcmlvcml0eSB0cmVhdG1lbnQgZm9yPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjow aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOyZuYnNwOyB0 aGUgYXNzb2NpYXRlZCBjb21tdW5pY2F0aW9uIHNlcnZpY2UgaXMgaGFuZGxlZCBhcyBwZXIgdGhl IGxvY2FsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4 dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPiZuYnNwOyZuYnNwOyBwb2xpY3kuJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRv bTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1i b3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5JIHN1c3BlY3QgdGhlcmUgd2lsbCBiZSBk ZXBsb3ltZW50cyB3aGVyZSB0aGUgbm9kZSBtYWtpbmcgdGhlc2UgbG9jYWwgcG9saWN5IGRlY2lz aW9ucyBpcyBkb3duc3RyZWFtIGZyb20gdGhlIHZlcmlmaWVyLiBIb3cNCiBkbyB0aGV5IGtub3cg UlBIIHZlcmlmaWNhdGlvbiBmYWlsZWQ/IFNob3VsZCB0aGUgdmVyaWZpZXIgc3RyaXAgcmVzb3Vy Y2UgcHJpb3JpdHkgaGVhZGVyIGZpZWxkcyBmb3Igd2hpY2ggdmFsaWRhdGlvbiBmYWlsZWQ/DQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHls ZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjpibGFjayI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFy Z2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPlNEJmd0OyBX ZSB3aWxsIGNsYXJpZnkgdGhlIGxhc3Qgc2VudGVuY2Ugb2YgdGhlIHBhcmFncmFwaCBhcyBmb2xs b3dzOg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRv bTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29w bGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOmJsYWNrIj7igJxJbiBzdWNoIGNhc2VzLCB0aGUgcHJpb3JpdHkgdHJl YXRtZW50IGZvciB0aGUgYXNzb2NpYXRlZCBjb21tdW5pY2F0aW9uIHNlcnZpY2UgaXMgaGFuZGxl ZCBhcyBwZXIgdGhlIGxvY2FsIHBvbGljeQ0KIG9mIHRoZSB2ZXJpZmllciAoZS4uZy4sIHRoZSBS UEggbWF5IGJlJm5ic3A7IHN0cmlwcGVkIGFuZCBjYWxsIGNhbiBiZSB0cmVhdGVkIGFzIGFuIG9y ZGluYXJ5IGNhbGwpLiZxdW90Ozwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5DYW4geW91IGVudmlzaW9uIGEgY2FzZSB3aGVyZSBpdCB3b3VsZCBtYWtl IHNlbnNlIHRvIGxlYXZlIFJQSCB2ZXJpZmllcnMgd2hlcmUgdmVyaWZpY2F0aW9uIGhhcyBmYWls ZWQ/IFRoYXQgc2VlbXMgbGlrZSBhIGRhbmdlcm91cyBwcmFjdGljZSB3b3J0aHkgb2YgYXQgbGVh c3QgYSBTSE9VTEQgTk9ULjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+U0QmZ3Q7IFlvdSBhcmUgY29y cmVjdCB0aGF0IGl0Jm5ic3A7IHNob3VsZCBub3QgYnV0IGl0IGlzIGhhcmQgdG8gaW1hZ2luZSB3 aGF0IHRoZSBvcGVyYXRvcnPigJkgcG9saWN5IHdvdWxkIGJlLiZuYnNwOyBGcm9tIGEgcHJvdG9j b2wgcGVyc3BlY3RpdmUsIHdlIGNhbiByZWNvbW1lbmQgJm5ic3A7U0hPVUxEIE5PVCBpZiB0aGF0 IGlzJm5ic3A7IHdoYXQgeW91IGFyZSBzdWdnZXN0aW5nLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFy Z2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9 Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPsKnNy4y OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0 eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4m bmJzcDsmbmJzcDsgbyZuYnNwOyBUaGUgdmVyaWZpY2F0aW9uIG9mIHRoZSBzaWduYXR1cmUgTVVT VCBpbmNsdWRlIG1lYW5zIG9mIHZlcmlmeWluZzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206 LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg dGhhdCB0aGUgc2lnbmVyIGlzIGF1dGhvcml0YXRpdmUgZm9yIHRoZSBzaWduZWQgY29udGVudCBv ZiB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0 IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHJlc291cmNlIHByaW9yaXR5IG5hbWVz cGFjZSBpbiB0aGUgUEFTU3BvclQuJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTou MDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0 b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5JIGdhdGhlciB0aGUgaW50ZW50IGlzIHRvIGxl YXZlIHRoYXQgbWVhbnMgdG8gbG9jYWwgcG9saWN5LCBvciB0byBiZSBzcGVjaWZpZWQgZWxzZXdo ZXJlLiBJIHRoaW5rIHRoYXQncyBhIHByb2JsZW0gZnJvbSBhbg0KIGludGVyb3BlcmFiaWxpdHkg c3RhbmRwb2ludC4gVGhlIHZlcmlmaWVyIG5lZWRzIGEgd2F5IHRvIGtub3cgd2hldGhlciB0aGUg YXV0aG9yaXplciBpcyBhdXRob3JpdGF0aXZlIGZvciB0aGUgUlBILiBJZiB3ZSB3YW50IGF1dGhv cml6ZXJzIGFuZCB2ZXJpZmllcnMgZnJvbSBkaWZmZXJlbnQgdmVuZG9ycyB0byBiZSBhYmxlIHRv IGludGVyb3BlcmF0ZSwgaXQgc2VlbXMgbGlrZSBhdCBsZWFzdCBzb21lIG1lY2hhbmlzbSBuZWVk cyB0byBiZSBzdGFuZGFyZGl6ZWQNCiBhbmQgcG9zc2libHkgTVRJLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21h cmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Ymxh Y2siPlNEJmd0OyBZZXMsIHlvdSBhcmUgY29ycmVjdCB0aGF0IHRoZSBlbmQtdG8tZW5kIGFyY2hp dGVjdHVyZSBpcyBzcGVjaWZpZWQgb3V0c2lkZSBvZiBJRVRGLiBUaGlzIGlzIGN1cnJlbnRseSBk b25lIGluIEFUSVMgd2hlcmUgdGhlIHZlcmlmaWVyIGNhbiB2ZXJpZnkgdGhlIGF1dGhvcml6ZXLi gJlzJm5ic3A7DQogY2VydGlmaWNhdGUgZXZlbiBpZiB0aGV5IGFyZSBmcm9tIGRpZmZlcmVudCBw cm92aWRlcnMuIDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5JcyBpdCB0aGUgaW50ZW50IHRoYXQgdGhpcyBleHRlbnNpb24gb25seSBiZSB1c2VkIHdp dGggdGhlIEFUSVMgZnJhbWV3b3JrPyBJZiBzbywgc29tZSBzY29waW5nIGxhbmd1YWdlIGVhcmx5 IGluIHRoZSBkb2N1bWVudCB3b3VsZCBiZSBoZWxwZnVsLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IFNEJmd0OyBBdCB0aGlzIG1vbWVudCwgaXQgd2lsbCBiZSB1c2VkIHdpdGggdGhlIEFUSVMg ZnJhbWV3b3JrLiBIb3dldmVyLCB3ZSBkbyBub3Qga25vdyBpZiBzb21lIG90aGVyIGZyYW1ld29y ayB3aWxsIGZpbmQgaXQgdXNlZnVsLiBXZSB3aWxsICZuYnNwO3RyeSB0bw0KIGFkZCBhIHJlZmVy ZW5jZSB0byBBVElTIGZyYW1ld29yay4gV2lsbCB0aGlzIHdvcms/ICZuYnNwOzwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9j a3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBp bjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+Jm5i c3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTou MDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0 b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47 bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkNPTU1FTlQ6PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdp bjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPi0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBz dHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4 dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPkdlbmVyYWw6IEl0J3MgcHJvYmFibHkgd29ydGggdXBkYXRpbmcgdGhlIHJlZmVyZW5jZXMg dG8gNDQ3NGJpcyBhbmQgcGFzc3BvcnQgdG8gdGhlaXIgcmVzcGVjdGl2ZSBSRkNzLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJn aW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNr Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90 dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+U0QmZ3Q7IFdpbGwgdXBk YXRlLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206 LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90 dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+wqczLCA0dGggcGFyYWdyYXBoOiBUaGUgaW1i ZWRkaW5nIG9mIEFCTkYgaW4gdGhlIG1pZGRsZSBvZiBhIHBhcmFncmFwaCBpcyBkaWZmaWN1bHQg dG8gcmVhZC4gSXQgd291bGQgYmUgaGVscGZ1bCB0byBzZXBhcmF0ZQ0KIHRoYXQgZnJvbSB0aGUg c3Vycm91bmRpbmcgdGV4dCBpbiB0aGUgY29udmVudGlvbmFsIGZhc2hpb24uPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjow aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZu YnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206 LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5TRCZndDsgSG93IGFib3V0IHRo ZSBmb2xsb3dpbmc/PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2lu LWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFp bC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4mcXVvdDtUaGUgJnF1b3Q7cnBoJnF1b3Q7IGNs YWltIHdpbGwgcHJvdmlkZSBhbiBhc3NlcnRpb24gb2YgYXV0aG9yaXphdGlvbiwgJnF1b3Q7YXV0 aCZxdW90OywgZm9yIGluZm9ybWF0aW9uIGluIHRoZSBTSVAg4oCZUmVzb3VyY2UtUHJpb3JpdHni gJkNCiBoZWFkZXIgZmllbGQgYmFzZWQgb24gW1JGQzQ0MTJdIGFuZCB0aGUgc3ludGF4IGlzOjwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJn bWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFw dCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0 IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjpibGFjayI+UmVzb3VyY2UtUHJpb3JpdHkgPSAmcXVvdDtSZXNvdXJjZS1Qcmlvcml0 eSZxdW90Ozogci12YWx1ZTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21h cmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5yLXZhbHVl PSAmcXVvdDtuYW1lc3BhY2UmbmJzcDsgJnF1b3Q7LiZxdW90OyZuYnNwOyByLXByaW9yaXR5PC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Imdt YWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQi IHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOmJsYWNrIj5TcGVjaWZpY2FsbHksIHRoZSAmcXVvdDtycGgmcXVvdDsgY2xhaW0gaW5j bHVkZXMgYXNzZXJ0aW9uIG9mIHRoZSBwcmlvcml0eS1sZXZlbCBvZiB0aGUgdXNlciB0byBiZSB1 c2VkIGZvciBhIGdpdmVuIGNvbW11bmljYXRpb24NCiBzZXNzaW9uLiBUaGUgdmFsdWUgb2YgdGhl ICZxdW90O3JwaCZxdW90OyBjbGFpbSBpcyBhbiBPYmplY3Qgd2l0aCBvbmUgb3IgbW9yZSBrZXlz LiBFYWNoIGtleSBpcyBhc3NvY2lhdGVkIHdpdGggYSBKU09OIEFycmF5LiBUaGVzZSBhcnJheXMg Y29udGFpbiBTdHJpbmdzIHRoYXQgY29ycmVzcG9uZCB0byB0aGUg4oCYci12YWx1ZXPigJkgdmFs dWVzIGluZGljYXRlZCBpbiB0aGUgU0lQIOKAmVJlc291cmNlLVByaW9yaXR54oCZIGhlYWRlciBm aWVsZC4mcXVvdDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+V29ya3MgZm9yIG1lLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJt YXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9t Oi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJv dHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPsKnMywgNXRoIHBhcmFncmFwaCBhbmQgdGhy b3VnaG91dDogVGhlIHJlcGVhdGVkIHVzZSBvZiAmcXVvdDtyLXZhbHVlID0mcXVvdDtuYW1lc3Bh Y2UgJnF1b3Q7LiZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1t c29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj5wcmlvcml0eSB2YWx1ZSZxdW90OyBpcyBoYXJkIHRvIHJlYWQuIFBsZWFz ZSBjb25zaWRlciBnaXZpbmcgdGhhdCBwYXJhbWV0ZXIgY29uc3RydWN0IGEgbmFtZSwgYW5kIHVz aW5nIHRoZSBuYW1lIHRocm91Z2hvdXQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAw MXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRl eHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOmJsYWNrIj5TRCZndDsgSG93IGFib3V0IHRoZSBmb2xsb3dpbmc/DQo8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwt bXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5 bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6YmxhY2siPuKAnFRoZSBmb2xsb3dpbmcgaXMgYW4gZXhhbXBsZSAmcXVvdDtycGgmcXVvdDsg Y2xhaW0gZm9yIGEgU0lQIOKAmVJlc291cmNlLVByaW9yaXR54oCZIGhlYWRlciBmaWVsZCB3aXRo IGFuIHItdmFsdWUgb2YgJnF1b3Q7ZXRzLjAmcXVvdDsNCiBhbmQgd2l0aCBhbm90aGVyIHItdmFs dWUmbmJzcDsgb2YgJnF1b3Q7d3BzLjAmcXVvdDsuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPldvcmtzIGZvciBtZS48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8 YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdp bjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2si PiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0 b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5Ob3RlOiBXaWxsIGNoYW5n ZSB0aGUgcmVzdCBhY2NvcmRpbmdseS48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2lu OjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1h cmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPsKnMywgN3Ro IHBhcmFncmFwaDogJnF1b3Q7VGhlIGF1dGhvcml0eSBNVVNUIHVzZSBpdHMgY3JlZGVudGlhbHMg KGkuZS4sIENFUlQpJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWls LW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPkRvZXMgJnF1b3Q7Q0VSVCZxdW90OyBtZWFuICZxdW90O0NlcnRpZmlj YXRlJnF1b3Q7PyBJIGFzc3VtZSBpdCdzIG5vdCAmcXVvdDtDb21wdXRlciBFbWVyZ2VuY3kgUmVz cG9uc2UgVGVhbSZxdW90Oy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwt bXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5 bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6YmxhY2siPlNEJmd0OyBZZXMgQ0VSVCBpbXBsaWVzIENlcnRpZmljYXRlLiBXZSB3aWxsIGNo YW5nZSBpdCB0byAnQ2VydGlmaWNhdGUnPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdp bjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJt YXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj7CpzQuMSA6 IEEgU0lQIGF1dGhlbnRpY2F0aW9uIHNlcnZpY2UgdHlwaWNhbGx5IHdpbGwgZGVyaXZlIHRoZSB2 YWx1ZSBvZiAmcXVvdDtycGgmcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i Z21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAx cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7Jm5ic3A7IGZyb20gdGhlIOKAmVJlc291cmNlLVBy aW9yaXR54oCZIGhlYWRlciBmaWVsZCBiYXNlZCBvbiBwb2xpY3kgYXNzb2NpYXRlZDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJn aW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDsmbmJz cDsgd2l0aCBzZXJ2aWNlIHNwZWNpZmljIHVzZSBvZiB0aGUgJnF1b3Q7bmFtZXNwYWNlICZxdW90 Oy4mcXVvdDsgcHJpb3JpdHkgdmFsdWUmcXVvdDsgZm9yPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJv dHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOyZuYnNwOyByLXZhbHVlcyBiYXNl ZCBvbiBbUkZDNDQxMl0uOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJnbWFpbC1t c29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj4mcXVvdDtUeXBpY2FsbHkmcXVvdDsgdXN1YWxseSBpbXBsaWVzICZxdW90 O01vc3QgYnV0IG5vdCBhbGwgb2YgdGhlIHRpbWUmcXVvdDsuIElzIHRoYXQgdGhlIGludGVudD88 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHls ZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjpibGFjayI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFy Z2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZuYnNwOzwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJn bWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFw dCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5TRCZndDsgTm8gdGhhdCBpcyBub3QgdGhl IGludGVudC4gV2lsbCBkZWxldGUg4oCYdHlwaWNhbGx54oCdLiBUaGUgc2VudGVuY2Ugd2lsbCBy ZWFkIDoNCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJnbWFpbC1tc29wbGFpbnRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0 b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNv cGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjpibGFjayI+U0QmZ3Q7IOKAnEEgU0lQIGF1dGhlbnRpY2F0aW9uIHNl cnZpY2Ugd2lsbCBkZXJpdmUgdGhlIHZhbHVlIG9mICZxdW90O3JwaCZxdW90OyBmcm9tIHRoZSDi gJlSZXNvdXJjZS1Qcmlvcml0eeKAmSBoZWFkZXIgZmllbGQgYmFzZWQNCiBvbiBwb2xpY3kgYXNz b2NpYXRlZCB3aXRoIHNlcnZpY2Ugc3BlY2lmaWMgdXNlIG9mIHRoZSAmcXVvdDtuYW1lc3BhY2Ug JnF1b3Q7LiZxdW90OyByLXByaW9yaXR5Jm5ic3A7ICZxdW90OyBmb3Igci12YWx1ZXMgYmFzZWQg b24gW1JGQzQ0MTJdLiDigJw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNvcGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjtt YXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjow aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPsKnNC4yLCBsYXN0IHBh cmFncmFwaDogQW0gSSBjb3JyZWN0IHRvIGd1ZXNzIHRoYXQgdGhpcyBpcyB0YWxraW5nIGFib3V0 IHZhbGlkIGNsYWltcz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iZ21haWwtbXNv cGxhaW50ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9ImdtYWls LW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPlNEJmd0OyBUaGlzIHN0YXRlbWVudCBpcyB2YWxp ZCBmb3IgYm90aCB2YWxpZCBhbmQgaW52YWxpZCBjbGFpbXMuIFRoZSBwb2xpY3kgd2lsbCBkZXRl cm1pbmUgaG93IGNsYWltIHdpbGwgYmUgdHJlYXRlZC48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBkb27igJl0IHVuZGVyc3RhbmQgd2hhdCB0aGF0 IG1lYW5zIGZvciBpbnZhbGlkIGNsYWltcy4gQXJlIHlvdSBzYXlpbmcgdGhhdCBsb2NhbCBwb2xp Y3kgY291bGQgbWVhbiB5b3UgdXNlIGFuIGludmFsaWQgY2xhaW0gYW55d2F5PyBJZiBzbywgd2h5 IGJvdGhlciB2ZXJpZnlpbmcgaXQ/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlNEJmd0OyBCeSDigJhpbnZhbGlk4oCZ IGNsYWltIEkgbWVhbnQgZmFpbGVkIGNsYWltLiZuYnNwOyAmbmJzcDtUaGlzIHNwZWNpZmljYXRp b24gZG9lcyBub3QgZGVmaW5lIHRoZSBjYWxsIHByb2Nlc3NpbmcgYmVoYXZpb3Igb2YgU0lQIFVB LiBUaGUgaW50ZW50IGhlcmUgaXMgdG8gc2ltcGx5ICZuYnNwO3Byb3ZpZGUNCiBhbiBpbnB1dCB0 byBzdWNoIGEgY2FsbCBwcm9jZXNzaW5nIGVudGl0eSBhYm91dCB0aGUgdmFsaWRpdHkgb2YgJm5i c3A7UlBILiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+VGhpcyBpcyB0aGUgcmVhc29uIHdoeSB3ZSBsZWF2 ZSB0aGlzIGFzcGVjdCB0byB0aGUgbG9jYWwgcG9saWN5Lg0KPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9ImdtYWlsLW1zb3BsYWludGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFy Z2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gTW9uLCBBcHIgMTYsIDIwMTggYXQgMTA6Mjcg UE0sIEJlbiBDYW1wYmVsbCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJlbkBub3N0cnVtLmNvbSIgdGFy Z2V0PSJfYmxhbmsiPmJlbkBub3N0cnVtLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9w Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0ND Q0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJn aW4tcmlnaHQ6MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJlbiBDYW1wYmVsbCBoYXMgZW50 ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBwb3NpdGlvbiBmb3I8YnI+DQpkcmFmdC1pZXRmLXN0 aXItcnBoLTAzOiBEaXNjdXNzPGJyPg0KPGJyPg0KV2hlbiByZXNwb25kaW5nLCBwbGVhc2Uga2Vl cCB0aGUgc3ViamVjdCBsaW5lIGludGFjdCBhbmQgcmVwbHkgdG8gYWxsPGJyPg0KZW1haWwgYWRk cmVzc2VzIGluY2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0 IHRoaXM8YnI+DQppbnRyb2R1Y3RvcnkgcGFyYWdyYXBoLCBob3dldmVyLik8YnI+DQo8YnI+DQo8 YnI+DQpQbGVhc2UgcmVmZXIgdG8gPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9z dGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJpYS5odG1sIiB0YXJnZXQ9Il9ibGFuayI+DQpodHRwczov L3d3dy5pZXRmLm9yZy9pZXNnL3N0YXRlbWVudC9kaXNjdXNzLWNyaXRlcmlhLmh0bWw8L2E+PGJy Pg0KZm9yIG1vcmUgaW5mb3JtYXRpb24gYWJvdXQgSUVTRyBESVNDVVNTIGFuZCBDT01NRU5UIHBv c2l0aW9ucy48YnI+DQo8YnI+DQo8YnI+DQpUaGUgZG9jdW1lbnQsIGFsb25nIHdpdGggb3RoZXIg YmFsbG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6PGJyPg0KPGEgaHJlZj0iaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1zdGlyLXJwaC8iIHRhcmdldD0i X2JsYW5rIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXN0aXIt cnBoLzwvYT48YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0KRElTQ1VT Uzo8YnI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0KPGJyPg0KVGhhbmtzIGZvciB0aGlzIHdvcmsuIEkg cGxhbiB0byBiYWxsb3QgJnF1b3Q7eWVzJnF1b3Q7LCBidXQgSSBoYXZlIGEgY291cGxlIG9mIHBv aW50cyBJPGJyPg0KdGhpbmsgbmVlZCB0byBiZSBkaXNjdXNzZWQgZmlyc3QuPGJyPg0KPGJyPg0K wqc0LjI6ICZxdW90OyBJZiB0aGUgc2lnbmF0dXJlIHZhbGlkYXRpb24gZmFpbHMsIHRoZSB2ZXJp ZmljYXRpb24gc2VydmljZSBzaG91bGQgaW5mZXI8YnI+DQombmJzcDsgJm5ic3A7dGhhdCB0aGUg Y2FsbGluZyBwYXJ0eSBpcyBub3QgYXV0aG9yaXplZCBmb3Ig4oCZUmVzb3VyY2UtUHJpb3JpdHni gJkgYXM8YnI+DQombmJzcDsgJm5ic3A7aW5kaWNhdGVkIGluIHRoZSBjbGFpbS4mbmJzcDsgSW4g c3VjaCBjYXNlcywgdGhlIHByaW9yaXR5IHRyZWF0bWVudCBmb3I8YnI+DQombmJzcDsgJm5ic3A7 dGhlIGFzc29jaWF0ZWQgY29tbXVuaWNhdGlvbiBzZXJ2aWNlIGlzIGhhbmRsZWQgYXMgcGVyIHRo ZSBsb2NhbDxicj4NCiZuYnNwOyAmbmJzcDtwb2xpY3kuJnF1b3Q7PGJyPg0KPGJyPg0KSSBzdXNw ZWN0IHRoZXJlIHdpbGwgYmUgZGVwbG95bWVudHMgd2hlcmUgdGhlIG5vZGUgbWFraW5nIHRoZXNl IGxvY2FsIHBvbGljeTxicj4NCmRlY2lzaW9ucyBpcyBkb3duc3RyZWFtIGZyb20gdGhlIHZlcmlm aWVyLiBIb3cgZG8gdGhleSBrbm93IFJQSCB2ZXJpZmljYXRpb248YnI+DQpmYWlsZWQ/IFNob3Vs ZCB0aGUgdmVyaWZpZXIgc3RyaXAgcmVzb3VyY2UgcHJpb3JpdHkgaGVhZGVyIGZpZWxkcyBmb3Ig d2hpY2g8YnI+DQp2YWxpZGF0aW9uIGZhaWxlZD88YnI+DQo8YnI+DQrCpzcuMjo8YnI+DQombmJz cDsgJm5ic3A7byZuYnNwOyBUaGUgdmVyaWZpY2F0aW9uIG9mIHRoZSBzaWduYXR1cmUgTVVTVCBp bmNsdWRlIG1lYW5zIG9mIHZlcmlmeWluZzxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7IHRoYXQg dGhlIHNpZ25lciBpcyBhdXRob3JpdGF0aXZlIGZvciB0aGUgc2lnbmVkIGNvbnRlbnQgb2YgdGhl PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgcmVzb3VyY2UgcHJpb3JpdHkgbmFtZXNwYWNlIGlu IHRoZSBQQVNTcG9yVC4mcXVvdDs8YnI+DQo8YnI+DQpJIGdhdGhlciB0aGUgaW50ZW50IGlzIHRv IGxlYXZlIHRoYXQgbWVhbnMgdG8gbG9jYWwgcG9saWN5LCBvciB0byBiZSBzcGVjaWZpZWQ8YnI+ DQplbHNld2hlcmUuIEkgdGhpbmsgdGhhdCdzIGEgcHJvYmxlbSBmcm9tIGFuIGludGVyb3BlcmFi aWxpdHkgc3RhbmRwb2ludC4uIFRoZTxicj4NCnZlcmlmaWVyIG5lZWRzIGEgd2F5IHRvIGtub3cg d2hldGhlciB0aGUgYXV0aG9yaXplciBpcyBhdXRob3JpdGF0aXZlIGZvciB0aGU8YnI+DQpSUEgu IElmIHdlIHdhbnQgYXV0aG9yaXplcnMgYW5kIHZlcmlmaWVycyBmcm9tIGRpZmZlcmVudCB2ZW5k b3JzIHRvIGJlIGFibGUgdG88YnI+DQppbnRlcm9wZXJhdGUsIGl0IHNlZW1zIGxpa2UgYXQgbGVh c3Qgc29tZSBtZWNoYW5pc20gbmVlZHMgdG8gYmUgc3RhbmRhcmRpemVkPGJyPg0KYW5kIHBvc3Np Ymx5IE1USS48YnI+DQo8YnI+DQo8YnI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0KQ09NTUVOVDo8YnI+ DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tPGJyPg0KPGJyPg0KR2VuZXJhbDogSXQncyBwcm9iYWJseSB3b3J0aCB1 cGRhdGluZyB0aGUgcmVmZXJlbmNlcyB0byA0NDc0YmlzIGFuZCBwYXNzcG9ydCB0bzxicj4NCnRo ZWlyIHJlc3BlY3RpdmUgUkZDcy48YnI+DQo8YnI+DQrCpzMsIDR0aCBwYXJhZ3JhcGg6IFRoZSBp bWJlZGRpbmcgb2YgQUJORiBpbiB0aGUgbWlkZGxlIG9mIGEgcGFyYWdyYXBoIGlzPGJyPg0KZGlm ZmljdWx0IHRvIHJlYWQuIEl0IHdvdWxkIGJlIGhlbHBmdWwgdG8gc2VwYXJhdGUgdGhhdCBmcm9t IHRoZSBzdXJyb3VuZGluZzxicj4NCnRleHQgaW4gdGhlIGNvbnZlbnRpb25hbCBmYXNoaW9uLjxi cj4NCjxicj4NCsKnMywgNXRoIHBhcmFncmFwaCBhbmQgdGhyb3VnaG91dDogVGhlIHJlcGVhdGVk IHVzZSBvZiAmcXVvdDtyLXZhbHVlID0mcXVvdDtuYW1lc3BhY2UgJnF1b3Q7LiZxdW90Ozxicj4N CnByaW9yaXR5IHZhbHVlJnF1b3Q7IGlzIGhhcmQgdG8gcmVhZC4gUGxlYXNlIGNvbnNpZGVyIGdp dmluZyB0aGF0IHBhcmFtZXRlcjxicj4NCmNvbnN0cnVjdCBhIG5hbWUsIGFuZCB1c2luZyB0aGUg bmFtZSB0aHJvdWdob3V0Ljxicj4NCjxicj4NCsKnMywgN3RoIHBhcmFncmFwaDogJnF1b3Q7VGhl IGF1dGhvcml0eSBNVVNUIHVzZSBpdHMgY3JlZGVudGlhbHMgKGkuZS4sIENFUlQpJnF1b3Q7PGJy Pg0KRG9lcyAmcXVvdDtDRVJUJnF1b3Q7IG1lYW4gJnF1b3Q7Q2VydGlmaWNhdGUmcXVvdDs/IEkg YXNzdW1lIGl0J3Mgbm90ICZxdW90O0NvbXB1dGVyIEVtZXJnZW5jeSBSZXNwb25zZTxicj4NClRl YW0mcXVvdDsuPGJyPg0KPGJyPg0Kwqc0LjEgOiBBIFNJUCBhdXRoZW50aWNhdGlvbiBzZXJ2aWNl IHR5cGljYWxseSB3aWxsIGRlcml2ZSB0aGUgdmFsdWUgb2YgJnF1b3Q7cnBoJnF1b3Q7PGJyPg0K Jm5ic3A7ICZuYnNwO2Zyb20gdGhlIOKAmVJlc291cmNlLVByaW9yaXR54oCZIGhlYWRlciBmaWVs ZCBiYXNlZCBvbiBwb2xpY3kgYXNzb2NpYXRlZDxicj4NCiZuYnNwOyAmbmJzcDt3aXRoIHNlcnZp Y2Ugc3BlY2lmaWMgdXNlIG9mIHRoZSAmcXVvdDtuYW1lc3BhY2UgJnF1b3Q7LiZxdW90OyBwcmlv cml0eSB2YWx1ZSZxdW90OyBmb3I8YnI+DQombmJzcDsgJm5ic3A7ci12YWx1ZXMgYmFzZWQgb24g W1JGQzQ0MTJdLjo8YnI+DQomcXVvdDtUeXBpY2FsbHkmcXVvdDsgdXN1YWxseSBpbXBsaWVzICZx dW90O01vc3QgYnV0IG5vdCBhbGwgb2YgdGhlIHRpbWUmcXVvdDsuIElzIHRoYXQgdGhlIGludGVu dD88YnI+DQo8YnI+DQrCpzQuMiwgbGFzdCBwYXJhZ3JhcGg6IEFtIEkgY29ycmVjdCB0byBndWVz cyB0aGF0IHRoaXMgaXMgdGFsa2luZyBhYm91dCB2YWxpZDxicj4NCmNsYWltcz88YnI+DQo8YnI+ DQo8YnI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxi cj4NCnN0aXIgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOnN0aXJAaWV0Zi5vcmci PnN0aXJAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9zdGlyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9zdGlyPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_AAC987F0CC2C7845A9FBD8A36D52E12DCBD46FE4rrcatsexmb2atsa_-- From nobody Thu Apr 19 11:17:10 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFAAC12DA15; Thu, 19 Apr 2018 11:17:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hMo03mzX_Qnf; Thu, 19 Apr 2018 11:17:01 -0700 (PDT) Received: from thumper.appcomsci.com (thumper.appcomsci.com [205.132.0.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3554E12DA28; Thu, 19 Apr 2018 11:16:59 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thumper.appcomsci.com (Postfix) with ESMTP id EE5DA69512A; Thu, 19 Apr 2018 14:15:03 -0400 (EDT) X-Virus-Scanned: by SpamTitan at appcomsci.com Received: from thumper.appcomsci.com (localhost [127.0.0.1]) by thumper.appcomsci.com (Postfix) with ESMTP id 91641695123; Thu, 19 Apr 2018 14:15:03 -0400 (EDT) Received: from bambi.appcomsci.com (bambi.appcomsci.com [192.4.5.54]) by thumper.appcomsci.com (Postfix) with ESMTPS id 74475695120; Thu, 19 Apr 2018 14:15:03 -0400 (EDT) Received: from brg-exmb1.ats.atsinnovate.com (exch.appcomsci.com [192.4.5.112]) by bambi.appcomsci.com (8.14.4/8.13.4) with ESMTP id w3JIGv2J023164; Thu, 19 Apr 2018 14:16:57 -0400 Received: from RRC-ATS-EXMB2.ats.atsinnovate.com ([2002:c004:56a::c004:56a]) by brg-ats-exhb1.ats.atsinnovate.com ([fe80::fc05:b53:7f2b:84f9%18]) with mapi id 14.03.0389.001; Thu, 19 Apr 2018 14:16:57 -0400 From: "Das, Subir" To: Benjamin Kaduk , The IESG CC: "draft-ietf-stir-rph@ietf.org" , "Russ Housley" , "stir-chairs@ietf.org" , "rhousley@vigilsec.com" , "stir@ietf.org" Thread-Topic: Benjamin Kaduk's No Objection on draft-ietf-stir-rph-03: (with COMMENT) Thread-Index: AQHT14AKPiOjJFWsR0e2KEqxePTvUaQIWPCg Date: Thu, 19 Apr 2018 18:16:47 +0000 Message-ID: References: <152410229195.28672.4848182467373812893.idtracker@ietfa.amsl.com> In-Reply-To: <152410229195.28672.4848182467373812893.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.4.8.216] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [stir] Benjamin Kaduk's No Objection on draft-ietf-stir-rph-03: (with COMMENT) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Apr 2018 18:17:03 -0000 SGVsbG8gQmVuamFtaW4sDQpUaGFua3MgZm9yIHlvdXIgcmV2aWV3IGFuZCBjb21tZW50cy4gUGxl YXNlIHNlZSB0aGUgYW5zd2VycyBpbmxpbmUuIA0KDQpSZWdhcmRzLA0KLVN1YmlyIA0KDQotLS0t LU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogQmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5l ZHU+IA0KU2VudDogV2VkbmVzZGF5LCBBcHJpbCAxOCwgMjAxOCA5OjQ1IFBNDQpUbzogVGhlIElF U0cgPGllc2dAaWV0Zi5vcmc+DQpDYzogZHJhZnQtaWV0Zi1zdGlyLXJwaEBpZXRmLm9yZzsgUnVz cyBIb3VzbGV5IDxyaG91c2xleUB2aWdpbHNlYy5jb20+OyBzdGlyLWNoYWlyc0BpZXRmLm9yZzsg cmhvdXNsZXlAdmlnaWxzZWMuY29tOyBzdGlyQGlldGYub3JnDQpTdWJqZWN0OiBCZW5qYW1pbiBL YWR1aydzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLXN0aXItcnBoLTAzOiAod2l0aCBDT01N RU5UKQ0KDQpCZW5qYW1pbiBLYWR1ayBoYXMgZW50ZXJlZCB0aGUgZm9sbG93aW5nIGJhbGxvdCBw b3NpdGlvbiBmb3INCmRyYWZ0LWlldGYtc3Rpci1ycGgtMDM6IE5vIE9iamVjdGlvbg0KDQpXaGVu IHJlc3BvbmRpbmcsIHBsZWFzZSBrZWVwIHRoZSBzdWJqZWN0IGxpbmUgaW50YWN0IGFuZCByZXBs eSB0byBhbGwgZW1haWwgYWRkcmVzc2VzIGluY2x1ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGluZXMu IChGZWVsIGZyZWUgdG8gY3V0IHRoaXMgaW50cm9kdWN0b3J5IHBhcmFncmFwaCwgaG93ZXZlci4p DQoNCg0KUGxlYXNlIHJlZmVyIHRvIGh0dHBzOi8vd3d3LmlldGYub3JnL2llc2cvc3RhdGVtZW50 L2Rpc2N1c3MtY3JpdGVyaWEuaHRtbA0KZm9yIG1vcmUgaW5mb3JtYXRpb24gYWJvdXQgSUVTRyBE SVNDVVNTIGFuZCBDT01NRU5UIHBvc2l0aW9ucy4NCg0KDQpUaGUgZG9jdW1lbnQsIGFsb25nIHdp dGggb3RoZXIgYmFsbG90IHBvc2l0aW9ucywgY2FuIGJlIGZvdW5kIGhlcmU6DQpodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXN0aXItcnBoLw0KDQoNCg0KLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQ0KQ09NTUVOVDoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KSSBzdXBwb3J0IEJlbidzIGRpc2N1 c3MuDQoNClRoYW5rIHlvdSBmb3Igd29ya2luZyB3aXRoIHRoZSBzZWNkaXIgcmV2aWV3ZXIgdG8g YWRkcmVzcyB0aG9zZSBjb21tZW50czsgSSB0aGluayBpdCB3aWxsIHJlYWxseSBpbXByb3ZlIHRo ZSBkb2N1bWVudC4NCg0KU0Q+VGhhbmtzLiANCg0KSW4gYSBzaW1pbGFyIHZlaW4sIEkgd29uZGVy IGlmIHRoaXMgZG9jdW1lbnQgd291bGQgYmUgZWFzaWVyIHRvIHJlYWQgaWYgaXQgdXNlZCBsZXNz IGZvcm1hbCBkZXNjcmlwdGlvbiB0ZXJtcyBmb3IgcHJvdG9jb2wgZWxlbWVudHMgdGhhdCBhcmUg Y3VycmVudGx5IHJlZmVycmVkIHRvIGJ5IHVzaW5nIHRoZSBhY3R1YWwgcHJvdG9jb2wgZWxlbWVu dCAod2l0aCBxdW90ZXMgYXJvdW5kIHRoZSBuYW1lKS4gIEZvciBleGFtcGxlLCAiU0lQIHJlc291 cmNlIHByaW9yaXR5IGhlYWRlciIgaW5zdGVhZCBvZiAiJ1Jlc291cmNlLVByaW9yaXR5JyBoZWFk ZXIgZmllbGQiLCBvciAicHJpb3JpdHkgaW5kaWNhdG9yIiBpbnN0ZWFkIG9mICInbmFtZXNwYWNl Ii4icHJpb3JpdHkgdmFsdWUiJy4NCg0KU0Q+IFdlIGNhbiB1cGRhdGUgbGlrZSB0aGlzIGJ1dCBl YXJsaWVyIHJlY29tbWVuZGF0aW9uIHdhcyB0byBiZSBjb25zaXN0ZW50IHdpdGggUkZDIDQ0MTIg YW5kIHdlIGZvbGxvd2VkIHRoYXQuIA0KDQpJJ20gYSBsaXR0bGUgY29uZnVzZWQgd2h5IHRoZSBu ZXcgcmVnaXN0cnkgY3JlYXRlZCBpbiBTZWN0aW9uIDYuMiBpcyB0aWVkIHRvIHRoZSAicmVzb3Vy Y2UgcHJpb3JpdHkgaGVhZGVyIiAocnBoKSBuYW1lLCB3aGVuIHRoZSBkaXNjdXNzaW9uIGluIFNl Y3Rpb24gNSBoYXMgc29tZSBwb3RlbnRpYWwgZW52aXNpb25lZCB1c2UgY2FzZXMgdGhhdCBhcmUg YnJvYWRlciB0aGFuIHJlc291cmNlIHByaW9yaXR5Lg0KDQpTRD4gLiBZb3UgYXJlIGNvcnJlY3Qg dGhhdCBTZWN0aW9uIDUgbGVhdmVzIHRoZSBwb3NzaWJpbGl0eSBvZiBhZGRpbmcgbmV3IHZhbHVl IGJ1dCB3aGVuIGRlZmluZWQsIHRoaXMgd2lsbCBiZSBhIG5ldyAgdHlwZSBhbmQgd2lsbCBiZSBy ZWdpc3RlcmVkIHVuZGVyIHRoZSBzYW1lIHBwdCB2YWx1ZSAncnBoJy4gICBGb3IgdXNlIGNhc2Vz IG90aGVyIHRoYW4gcmVzb3VyY2UgcHJpb3JpdHksIGEgbmV3ICdwcHQnIG5lZWRzIHRvIGJlIGRl ZmluZWQuICAgV2Ugd2lsbCBtYWtlIGl0IGNsZWFyIGluIFNlY3Rpb24gNSwgMXN0IHBhcmFncmFw aCBsYXN0IHNlbnRlbmNlIGFzIGZvbGxvd3M6DQoNCiIgVGhlIHNwZWNpZmljYXRpb24gb2YgdGhl ICJycGgiIGNsYWltIGNvdWxkIGVudGFpbCB0aGUgb3B0aW9uYWwgcHJlc2VuY2Ugb2Ygb25lIG9y IG1vcmUgc3VjaCBhZGRpdGlvbmFsIGluZm9ybWF0aW9uIGZpZWxkcyBhcHBsaWNhYmxlIHRvICdS ZXNvdXJjZSBQcmlvcml0eScuIg0KDQoNCkFzIEJlbiBub3RlcywgdGhlcmUgYXJlIHNvbWUgc3Rh bGUgcmVmZXJlbmNlcy4gIFBsZWFzZSBkb3VibGUtY2hlY2sgdGhlIHJlZmVycmVkIHNlY3Rpb24g bnVtYmVycyBhcyB3ZWxsOyBpbiBwYXJ0aWN1bGFyICJTZWN0aW9uIDEwLjEgb2YgWzQ0NzRiaXNd IiBkb2VzIG5vdCBleGlzdCBpbiB0aGUgb25seSBGZWJydWFyeS0yMDE3IHZlcmlvbnMgb2YgdGhh dCBkcmFmdC4NCg0KU2VjdGlvbiA3LjIgdXNlcyAiYXV0aG9yaXR5IiBpbiBhIGNvdXBsZSBvZiBk aWZmZXJlbnQgc2Vuc2VzOyBpdCBtaWdodCBiZSBlYXNpZXIgb24gdGhlIHJlYWRlciB0byByZWZl ciB0byB0aGUgYXV0aG9yaXR5IChwcm90b2NvbA0KcGFydGljaXBhbnQpIGFzIGJlaW5nICJhdXRo b3JpdGF0aXZlIGZvciB0aGUgY29udGVudCBvZiBbc3R1ZmZdIHRoYXQgaXQgc2lnbnMiLg0KDQpT RD4gIEhvdyBhYm91dCB0aGUgZm9sbG93aW5nPyANCg0KVGhlIHVzZSBvZiBleHRlbnNpb24gdG8g UEFTU3BvclQgdG9rZW5zIHdpdGggInBwdCIgdmFsdWUgInJwaCIgYmFzZWQgb24gdGhlIHZhbGlk YXRpb24gb2YgdGhlIGRpZ2l0YWwgc2lnbmF0dXJlIGFuZCB0aGUgYXNzb2NpYXRlZCBjZXJ0aWZp Y2F0ZSByZXF1aXJlcyBjb25zaWRlcmF0aW9uIG9mIHRoZSBhdXRoZW50aWNhdGlvbiwgYXV0aG9y aXphdGlvbiwgYW5kICByZXB1dGF0aW9uIG9mIHRoZSBzaWduZXIgdG8gYXR0ZXN0IHRvIHRoZSBp ZGVudGl0eSBiZWluZyBhc3NlcnRlZC4gVGhlIGZvbGxvd2luZyBjb25zaWRlcmF0aW9ucyBzaG91 bGQgYmUgcmVjb2duaXplZCB3aGVuIHVzaW5nIFBBU1Nwb3JUIGV4dGVuc2lvbiB3aXRoICJwcHQi IHZhbHVlIG9mICJycGgiOg0KDQpvIEEgc2lnbmVyIGlzIG9ubHkgYWxsb3dlZCB0byBzaWduIHRo ZSBjb250ZW50IG9mIGEgJ1NJUCBSZXNvdXJjZS1Qcmlvcml0eeKAmSBoZWFkZXIgZmllbGQgZm9y IHdoaWNoIGl0IGhhcyB0aGUgcmlnaHQgYXV0aG9yaXR5LiAgVGhlIHNpZ25lciAgdGhhdCBzaWdu cyB0aGUgdG9rZW4gTVVTVCBoYXZlIGEgc2VjdXJlIG1ldGhvZCBmb3IgYXV0aGVudGljYXRpb24g b2YgdGhlIGVuZCB1c2VyIG9yIHRoZSBkZXZpY2UuDQo= From nobody Thu Apr 19 17:31:48 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 039AC12E89A; Thu, 19 Apr 2018 17:31:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 67CcMmK8_LyQ; Thu, 19 Apr 2018 17:31:39 -0700 (PDT) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9651A126CB6; Thu, 19 Apr 2018 17:31:38 -0700 (PDT) X-AuditID: 1209190c-155ff70000006461-15-5ad934e8d995 Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id 13.8D.25697.8E439DA5; Thu, 19 Apr 2018 20:31:37 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id w3K0VWrE005283; Thu, 19 Apr 2018 20:31:33 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w3K0VRLn014934 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 19 Apr 2018 20:31:30 -0400 Date: Thu, 19 Apr 2018 19:31:27 -0500 From: Benjamin Kaduk To: "Das, Subir" Cc: The IESG , "draft-ietf-stir-rph@ietf.org" , Russ Housley , "stir-chairs@ietf.org" , "stir@ietf.org" Message-ID: <20180420003125.GC54168@kduck.kaduk.org> References: <152410229195.28672.4848182467373812893.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprDKsWRmVeSWpSXmKPExsUixG6nrvvS5GaUwbdvIhaT9nBazPgzkdni +Lq/LBYPb0hbPNuxntVi+dptTA5sHpe/TGTxWLLkJ5PHqjtfWAOYo7hsUlJzMstSi/TtErgy jhy4z17QqFYxc/189gbGFvkuRk4OCQETiYbjJ1i6GLk4hAQWM0lMWPeEEcLZyCgxbdcqNgjn KpPEzP75bCAtLAKqEjfXLGYEsdkEVCQaui8zg9giQPHvE+6DdTMLfGWUuHv1HViDsECYxNOf d1lBbF6gfeeerWSHmDoHaEVPM1RCUOLkzCcsIDazgLrEn3mXgKZyANnSEsv/cUCE5SWat84G W8YpECnRffogmC0qoCyxt+8Q+wRGwVlIJs1CMmkWwqRZSCYtYGRZxSibklulm5uYmVOcmqxb nJyYl5dapGuol5tZopeaUrqJERQJnJI8OxjPvPE6xCjAwajEw/th3Y0oIdbEsuLK3EOMkhxM SqK8xyYDhfiS8lMqMxKLM+KLSnNSiw8xSnAwK4nwljLdjBLiTUmsrEotyodJSXOwKInzLtq/ N0pIID2xJDU7NbUgtQgmK8PBoSTBqwiMeCHBotT01Iq0zJwShDQTByfIcB6g4ZeNQYYXFyTm FmemQ+RPMSpKifO+B0kIgCQySvPgekGJSiJ7f80rRnGgV4R5A0FW8ACTHFz3K6DBTECDDVRu gAwuSURISTUwLnPf2iKt8Eru1xehWeHLtrnl3ikWjGE/eilAaMLqlHs3DVif74h84f5sulJd VHgst0fmtSXzZ7+dEG8h3NT2Mil2s8gBl+lvkiuyTl9Ub4z+4Sl+5tIF88tHdOdvVZLe2fBE h+WbkELT8vb5xyob+54o9Af9utPq6CwrYdTUWvVrzrHdDMKrlFiKMxINtZiLihMBpA+5ty8D AAA= Archived-At: Subject: Re: [stir] Benjamin Kaduk's No Objection on draft-ietf-stir-rph-03: (with COMMENT) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Apr 2018 00:31:41 -0000 On Thu, Apr 19, 2018 at 06:16:47PM +0000, Das, Subir wrote: > Hello Benjamin, > Thanks for your review and comments. Please see the answers inline. > > Regards, > -Subir > > -----Original Message----- > From: Benjamin Kaduk > Sent: Wednesday, April 18, 2018 9:45 PM > To: The IESG > Cc: draft-ietf-stir-rph@ietf.org; Russ Housley ; stir-chairs@ietf.org; rhousley@vigilsec.com; stir@ietf.org > Subject: Benjamin Kaduk's No Objection on draft-ietf-stir-rph-03: (with COMMENT) > > Benjamin Kaduk has entered the following ballot position for > draft-ietf-stir-rph-03: No Objection > > When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-stir-rph/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > I support Ben's discuss. > > Thank you for working with the secdir reviewer to address those comments; I think it will really improve the document. > > SD>Thanks. > > In a similar vein, I wonder if this document would be easier to read if it used less formal description terms for protocol elements that are currently referred to by using the actual protocol element (with quotes around the name). For example, "SIP resource priority header" instead of "'Resource-Priority' header field", or "priority indicator" instead of "'namespace"."priority value"'. > > SD> We can update like this but earlier recommendation was to be consistent with RFC 4412 and we followed that. Ah, I see. (I will confess that the "namespace"."priority value" was the one that confused me the most when I first saw it; 'Resource-Priority' header did not bother me too much. But there is no need to change anything just on my personal experience.) > I'm a little confused why the new registry created in Section 6.2 is tied to the "resource priority header" (rph) name, when the discussion in Section 5 has some potential envisioned use cases that are broader than resource priority. > > SD> . You are correct that Section 5 leaves the possibility of adding new value but when defined, this will be a new type and will be registered under the same ppt value 'rph'. For use cases other than resource priority, a new 'ppt' needs to be defined. We will make it clear in Section 5, 1st paragraph last sentence as follows: > > " The specification of the "rph" claim could entail the optional presence of one or more such additional information fields applicable to 'Resource Priority'." Okay, thanks. > > As Ben notes, there are some stale references. Please double-check the referred section numbers as well; in particular "Section 10.1 of [4474bis]" does not exist in the only February-2017 verions of that draft. > > Section 7.2 uses "authority" in a couple of different senses; it might be easier on the reader to refer to the authority (protocol > participant) as being "authoritative for the content of [stuff] that it signs". > > SD> How about the following? > > The use of extension to PASSporT tokens with "ppt" value "rph" > based on the validation of the digital signature and the > associated certificate requires consideration of the > authentication, authorization, and reputation of the signer to > attest to the identity being asserted. The following > considerations should be recognized when using PASSporT extension > with "ppt" value of "rph": > > o A signer is only allowed to sign the content of a 'SIP > Resource-Priority’ header field for which it has the right > authority. The signer that signs the token MUST have a secure > method for authentication of the end user or the device. Maybe Using extensions to PASSporT tokens with a "ppt" value of "rph" requires knowledge of the authentication, authorization, and reputation of the signer to attest to the identity being asserted, including validating the digital signature and the associated certificate chain to a trust anchor, The following considerations should be recognized when using PASSporT extensions with a "ppt" value of "rph": o A signer is only allowed to sign the content of a SIP 'Resource-Priority’ header field for which it has the proper authorization. Before signing tokens, the signer MUST have a secure method for authentication of the end user or the device being granted a token. -Benjamin From nobody Thu Apr 19 18:08:52 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 257291270AB; Thu, 19 Apr 2018 18:08:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ImAU6twFAPAQ; Thu, 19 Apr 2018 18:08:43 -0700 (PDT) Received: from thumper.appcomsci.com (thumper.appcomsci.com [205.132.0.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9E371270A7; Thu, 19 Apr 2018 18:08:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by thumper.appcomsci.com (Postfix) with ESMTP id 725336952DE; Thu, 19 Apr 2018 21:06:46 -0400 (EDT) X-Virus-Scanned: by SpamTitan at appcomsci.com Received: from thumper.appcomsci.com (localhost [127.0.0.1]) by thumper.appcomsci.com (Postfix) with ESMTP id 028516952D0; Thu, 19 Apr 2018 21:06:45 -0400 (EDT) Received: from bambi.appcomsci.com (bambi.appcomsci.com [192.4.5.54]) by thumper.appcomsci.com (Postfix) with ESMTPS id CD85C69521B; Thu, 19 Apr 2018 21:06:45 -0400 (EDT) Received: from brg-exmb1.ats.atsinnovate.com (exch.appcomsci.com [192.4.5.112]) by bambi.appcomsci.com (8.14.4/8.13.4) with ESMTP id w3K18ej5025263; Thu, 19 Apr 2018 21:08:40 -0400 Received: from RRC-ATS-EXMB2.ats.atsinnovate.com ([2002:c004:56a::c004:56a]) by brg-ats-exhb1.ats.atsinnovate.com ([fe80::fc05:b53:7f2b:84f9%18]) with mapi id 14.03.0389.001; Thu, 19 Apr 2018 21:08:40 -0400 From: "Das, Subir" To: Benjamin Kaduk CC: The IESG , "draft-ietf-stir-rph@ietf.org" , Russ Housley , "stir-chairs@ietf.org" , "stir@ietf.org" Thread-Topic: Benjamin Kaduk's No Objection on draft-ietf-stir-rph-03: (with COMMENT) Thread-Index: AQHT14AKPiOjJFWsR0e2KEqxePTvUaQIWPCggAC49ID//8XjwA== Date: Fri, 20 Apr 2018 01:08:38 +0000 Message-ID: References: <152410229195.28672.4848182467373812893.idtracker@ietfa.amsl.com> <20180420003125.GC54168@kduck.kaduk.org> In-Reply-To: <20180420003125.GC54168@kduck.kaduk.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.109.16.82] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [stir] Benjamin Kaduk's No Objection on draft-ietf-stir-rph-03: (with COMMENT) X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Apr 2018 01:08:45 -0000 QmVuamFtaW4sDQpZb3VyIHN1Z2dlc3RlZCB0ZXh0IHJlZ2FyZGluZyA3LjIgIGlzIG9rYXkgd2l0 aCBtZS4gICANCg0KSSBmb3Jnb3QgdG8gIGFuc3dlciBvbmUgb2YgeW91ciBlYXJsaWVyIGNvbW1l bnRzLiANCg0KPiBBcyBCZW4gbm90ZXMsIHRoZXJlIGFyZSBzb21lIHN0YWxlIHJlZmVyZW5jZXMu ICBQbGVhc2UgZG91YmxlLWNoZWNrIHRoZSByZWZlcnJlZCBzZWN0aW9uIG51bWJlcnMgYXMgd2Vs bDsgaW4gcGFydGljdWxhciAiU2VjdGlvbiAxMC4xIG9mIFs0NDc0YmlzXSIgZG9lcyBub3QgZXhp c3QgaW4gdGhlIG9ubHkgRmVicnVhcnktMjAxNyB2ZXJpb25zIG9mIHRoYXQgZHJhZnQuDQoNClNE PiBXaWxsIGNoZWNrIGFuZCB1cGRhdGUgaXQgYWNjb3JkaW5nbHkuIA0KDQpUaGFua3MsDQotU3Vi aXIgDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBCZW5qYW1pbiBLYWR1ayA8 a2FkdWtAbWl0LmVkdT4gDQpTZW50OiBUaHVyc2RheSwgQXByaWwgMTksIDIwMTggODozMSBQTQ0K VG86IERhcywgU3ViaXIgPHNkYXNAYXBwY29tc2NpLmNvbT4NCkNjOiBUaGUgSUVTRyA8aWVzZ0Bp ZXRmLm9yZz47IGRyYWZ0LWlldGYtc3Rpci1ycGhAaWV0Zi5vcmc7IFJ1c3MgSG91c2xleSA8cmhv dXNsZXlAdmlnaWxzZWMuY29tPjsgc3Rpci1jaGFpcnNAaWV0Zi5vcmc7IHN0aXJAaWV0Zi5vcmcN ClN1YmplY3Q6IFJlOiBCZW5qYW1pbiBLYWR1aydzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRm LXN0aXItcnBoLTAzOiAod2l0aCBDT01NRU5UKQ0KDQpPbiBUaHUsIEFwciAxOSwgMjAxOCBhdCAw NjoxNjo0N1BNICswMDAwLCBEYXMsIFN1YmlyIHdyb3RlOg0KPiBIZWxsbyBCZW5qYW1pbiwNCj4g VGhhbmtzIGZvciB5b3VyIHJldmlldyBhbmQgY29tbWVudHMuIFBsZWFzZSBzZWUgdGhlIGFuc3dl cnMgaW5saW5lLiANCj4gDQo+IFJlZ2FyZHMsDQo+IC1TdWJpcg0KPiANCj4gLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogQmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5lZHU+DQo+ IFNlbnQ6IFdlZG5lc2RheSwgQXByaWwgMTgsIDIwMTggOTo0NSBQTQ0KPiBUbzogVGhlIElFU0cg PGllc2dAaWV0Zi5vcmc+DQo+IENjOiBkcmFmdC1pZXRmLXN0aXItcnBoQGlldGYub3JnOyBSdXNz IEhvdXNsZXkgDQo+IDxyaG91c2xleUB2aWdpbHNlYy5jb20+OyBzdGlyLWNoYWlyc0BpZXRmLm9y ZzsgcmhvdXNsZXlAdmlnaWxzZWMuY29tOyANCj4gc3RpckBpZXRmLm9yZw0KPiBTdWJqZWN0OiBC ZW5qYW1pbiBLYWR1aydzIE5vIE9iamVjdGlvbiBvbiBkcmFmdC1pZXRmLXN0aXItcnBoLTAzOiAN Cj4gKHdpdGggQ09NTUVOVCkNCj4gDQo+IEJlbmphbWluIEthZHVrIGhhcyBlbnRlcmVkIHRoZSBm b2xsb3dpbmcgYmFsbG90IHBvc2l0aW9uIGZvcg0KPiBkcmFmdC1pZXRmLXN0aXItcnBoLTAzOiBO byBPYmplY3Rpb24NCj4gDQo+IFdoZW4gcmVzcG9uZGluZywgcGxlYXNlIGtlZXAgdGhlIHN1Ympl Y3QgbGluZSBpbnRhY3QgYW5kIHJlcGx5IHRvIGFsbCANCj4gZW1haWwgYWRkcmVzc2VzIGluY2x1 ZGVkIGluIHRoZSBUbyBhbmQgQ0MgbGluZXMuIChGZWVsIGZyZWUgdG8gY3V0IA0KPiB0aGlzIGlu dHJvZHVjdG9yeSBwYXJhZ3JhcGgsIGhvd2V2ZXIuKQ0KPiANCj4gDQo+IFBsZWFzZSByZWZlciB0 byANCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWVzZy9zdGF0ZW1lbnQvZGlzY3Vzcy1jcml0ZXJp YS5odG1sDQo+IGZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0IElFU0cgRElTQ1VTUyBhbmQgQ09N TUVOVCBwb3NpdGlvbnMuDQo+IA0KPiANCj4gVGhlIGRvY3VtZW50LCBhbG9uZyB3aXRoIG90aGVy IGJhbGxvdCBwb3NpdGlvbnMsIGNhbiBiZSBmb3VuZCBoZXJlOg0KPiBodHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXN0aXItcnBoLw0KPiANCj4gDQo+IA0KPiAtLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tDQo+IENPTU1FTlQ6DQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gDQo+IEkgc3VwcG9ydCBC ZW4ncyBkaXNjdXNzLg0KPiANCj4gVGhhbmsgeW91IGZvciB3b3JraW5nIHdpdGggdGhlIHNlY2Rp ciByZXZpZXdlciB0byBhZGRyZXNzIHRob3NlIGNvbW1lbnRzOyBJIHRoaW5rIGl0IHdpbGwgcmVh bGx5IGltcHJvdmUgdGhlIGRvY3VtZW50Lg0KPiANCj4gU0Q+VGhhbmtzLiANCj4gDQo+IEluIGEg c2ltaWxhciB2ZWluLCBJIHdvbmRlciBpZiB0aGlzIGRvY3VtZW50IHdvdWxkIGJlIGVhc2llciB0 byByZWFkIGlmIGl0IHVzZWQgbGVzcyBmb3JtYWwgZGVzY3JpcHRpb24gdGVybXMgZm9yIHByb3Rv Y29sIGVsZW1lbnRzIHRoYXQgYXJlIGN1cnJlbnRseSByZWZlcnJlZCB0byBieSB1c2luZyB0aGUg YWN0dWFsIHByb3RvY29sIGVsZW1lbnQgKHdpdGggcXVvdGVzIGFyb3VuZCB0aGUgbmFtZSkuICBG b3IgZXhhbXBsZSwgIlNJUCByZXNvdXJjZSBwcmlvcml0eSBoZWFkZXIiIGluc3RlYWQgb2YgIidS ZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyIGZpZWxkIiwgb3IgInByaW9yaXR5IGluZGljYXRvciIg aW5zdGVhZCBvZiAiJ25hbWVzcGFjZSIuInByaW9yaXR5IHZhbHVlIicuDQo+IA0KPiBTRD4gV2Ug Y2FuIHVwZGF0ZSBsaWtlIHRoaXMgYnV0IGVhcmxpZXIgcmVjb21tZW5kYXRpb24gd2FzIHRvIGJl IGNvbnNpc3RlbnQgd2l0aCBSRkMgNDQxMiBhbmQgd2UgZm9sbG93ZWQgdGhhdC4gDQoNCkFoLCBJ IHNlZS4gIChJIHdpbGwgY29uZmVzcyB0aGF0IHRoZSAibmFtZXNwYWNlIi4icHJpb3JpdHkgdmFs dWUiDQp3YXMgdGhlIG9uZSB0aGF0IGNvbmZ1c2VkIG1lIHRoZSBtb3N0IHdoZW4gSSBmaXJzdCBz YXcgaXQ7ICdSZXNvdXJjZS1Qcmlvcml0eScgaGVhZGVyIGRpZCBub3QgYm90aGVyIG1lIHRvbyBt dWNoLiAgQnV0IHRoZXJlIGlzIG5vIG5lZWQgdG8gY2hhbmdlIGFueXRoaW5nIGp1c3Qgb24gbXkg cGVyc29uYWwgZXhwZXJpZW5jZS4pDQoNCj4gSSdtIGEgbGl0dGxlIGNvbmZ1c2VkIHdoeSB0aGUg bmV3IHJlZ2lzdHJ5IGNyZWF0ZWQgaW4gU2VjdGlvbiA2LjIgaXMgdGllZCB0byB0aGUgInJlc291 cmNlIHByaW9yaXR5IGhlYWRlciIgKHJwaCkgbmFtZSwgd2hlbiB0aGUgZGlzY3Vzc2lvbiBpbiBT ZWN0aW9uIDUgaGFzIHNvbWUgcG90ZW50aWFsIGVudmlzaW9uZWQgdXNlIGNhc2VzIHRoYXQgYXJl IGJyb2FkZXIgdGhhbiByZXNvdXJjZSBwcmlvcml0eS4NCj4gDQo+IFNEPiAuIFlvdSBhcmUgY29y cmVjdCB0aGF0IFNlY3Rpb24gNSBsZWF2ZXMgdGhlIHBvc3NpYmlsaXR5IG9mIGFkZGluZyBuZXcg dmFsdWUgYnV0IHdoZW4gZGVmaW5lZCwgdGhpcyB3aWxsIGJlIGEgbmV3ICB0eXBlIGFuZCB3aWxs IGJlIHJlZ2lzdGVyZWQgdW5kZXIgdGhlIHNhbWUgcHB0IHZhbHVlICdycGgnLiAgIEZvciB1c2Ug Y2FzZXMgb3RoZXIgdGhhbiByZXNvdXJjZSBwcmlvcml0eSwgYSBuZXcgJ3BwdCcgbmVlZHMgdG8g YmUgZGVmaW5lZC4gICBXZSB3aWxsIG1ha2UgaXQgY2xlYXIgaW4gU2VjdGlvbiA1LCAxc3QgcGFy YWdyYXBoIGxhc3Qgc2VudGVuY2UgYXMgZm9sbG93czoNCj4gDQo+ICIgVGhlIHNwZWNpZmljYXRp b24gb2YgdGhlICJycGgiIGNsYWltIGNvdWxkIGVudGFpbCB0aGUgb3B0aW9uYWwgcHJlc2VuY2Ug b2Ygb25lIG9yIG1vcmUgc3VjaCBhZGRpdGlvbmFsIGluZm9ybWF0aW9uIGZpZWxkcyBhcHBsaWNh YmxlIHRvICdSZXNvdXJjZSBQcmlvcml0eScuIg0KDQpPa2F5LCB0aGFua3MuDQoNCj4gDQo+IEFz IEJlbiBub3RlcywgdGhlcmUgYXJlIHNvbWUgc3RhbGUgcmVmZXJlbmNlcy4gIFBsZWFzZSBkb3Vi bGUtY2hlY2sgdGhlIHJlZmVycmVkIHNlY3Rpb24gbnVtYmVycyBhcyB3ZWxsOyBpbiBwYXJ0aWN1 bGFyICJTZWN0aW9uIDEwLjEgb2YgWzQ0NzRiaXNdIiBkb2VzIG5vdCBleGlzdCBpbiB0aGUgb25s eSBGZWJydWFyeS0yMDE3IHZlcmlvbnMgb2YgdGhhdCBkcmFmdC4NCj4gDQo+IFNlY3Rpb24gNy4y IHVzZXMgImF1dGhvcml0eSIgaW4gYSBjb3VwbGUgb2YgZGlmZmVyZW50IHNlbnNlczsgaXQgbWln aHQgDQo+IGJlIGVhc2llciBvbiB0aGUgcmVhZGVyIHRvIHJlZmVyIHRvIHRoZSBhdXRob3JpdHkg KHByb3RvY29sDQo+IHBhcnRpY2lwYW50KSBhcyBiZWluZyAiYXV0aG9yaXRhdGl2ZSBmb3IgdGhl IGNvbnRlbnQgb2YgW3N0dWZmXSB0aGF0IGl0IHNpZ25zIi4NCj4gDQo+IFNEPiAgSG93IGFib3V0 IHRoZSBmb2xsb3dpbmc/IA0KPiANCj4gVGhlIHVzZSBvZiBleHRlbnNpb24gdG8gUEFTU3BvclQg dG9rZW5zIHdpdGggInBwdCIgdmFsdWUgInJwaCINCj4gYmFzZWQgb24gdGhlIHZhbGlkYXRpb24g b2YgdGhlIGRpZ2l0YWwgc2lnbmF0dXJlIGFuZCB0aGUgYXNzb2NpYXRlZCANCj4gY2VydGlmaWNh dGUgcmVxdWlyZXMgY29uc2lkZXJhdGlvbiBvZiB0aGUgYXV0aGVudGljYXRpb24sIA0KPiBhdXRo b3JpemF0aW9uLCBhbmQgIHJlcHV0YXRpb24gb2YgdGhlIHNpZ25lciB0byBhdHRlc3QgdG8gdGhl IGlkZW50aXR5IA0KPiBiZWluZyBhc3NlcnRlZC4gVGhlIGZvbGxvd2luZyBjb25zaWRlcmF0aW9u cyBzaG91bGQgYmUgcmVjb2duaXplZCB3aGVuIA0KPiB1c2luZyBQQVNTcG9yVCBleHRlbnNpb24g d2l0aCAicHB0IiB2YWx1ZSBvZiAicnBoIjoNCj4gDQo+IG8gQSBzaWduZXIgaXMgb25seSBhbGxv d2VkIHRvIHNpZ24gdGhlIGNvbnRlbnQgb2YgYSAnU0lQIA0KPiBSZXNvdXJjZS1Qcmlvcml0eeKA mSBoZWFkZXIgZmllbGQgZm9yIHdoaWNoIGl0IGhhcyB0aGUgcmlnaHQgYXV0aG9yaXR5LiAgDQo+ IFRoZSBzaWduZXIgIHRoYXQgc2lnbnMgdGhlIHRva2VuIE1VU1QgaGF2ZSBhIHNlY3VyZSBtZXRo b2QgZm9yIA0KPiBhdXRoZW50aWNhdGlvbiBvZiB0aGUgZW5kIHVzZXIgb3IgdGhlIGRldmljZS4N Cg0KTWF5YmUNCg0KVXNpbmcgZXh0ZW5zaW9ucyB0byBQQVNTcG9yVCB0b2tlbnMgd2l0aCBhICJw cHQiIHZhbHVlIG9mICJycGgiDQpyZXF1aXJlcyBrbm93bGVkZ2Ugb2YgdGhlIGF1dGhlbnRpY2F0 aW9uLCBhdXRob3JpemF0aW9uLCBhbmQgcmVwdXRhdGlvbiBvZiB0aGUgc2lnbmVyIHRvIGF0dGVz dCB0byB0aGUgaWRlbnRpdHkgYmVpbmcgYXNzZXJ0ZWQsIGluY2x1ZGluZyB2YWxpZGF0aW5nIHRo ZSBkaWdpdGFsIHNpZ25hdHVyZSBhbmQgdGhlIGFzc29jaWF0ZWQgY2VydGlmaWNhdGUgY2hhaW4g dG8gYSB0cnVzdCBhbmNob3IsIFRoZSBmb2xsb3dpbmcgY29uc2lkZXJhdGlvbnMgc2hvdWxkIGJl IHJlY29nbml6ZWQgd2hlbiB1c2luZyBQQVNTcG9yVCBleHRlbnNpb25zIHdpdGggYSAicHB0IiB2 YWx1ZSBvZiAicnBoIjoNCg0KbyBBIHNpZ25lciBpcyBvbmx5IGFsbG93ZWQgdG8gc2lnbiB0aGUg Y29udGVudCBvZiBhIFNJUCAnUmVzb3VyY2UtUHJpb3JpdHnigJkgaGVhZGVyIGZpZWxkIGZvciB3 aGljaCBpdCBoYXMgdGhlIHByb3BlciBhdXRob3JpemF0aW9uLiAgQmVmb3JlIHNpZ25pbmcgdG9r ZW5zLCB0aGUgc2lnbmVyIE1VU1QgaGF2ZSBhIHNlY3VyZSBtZXRob2QgZm9yIGF1dGhlbnRpY2F0 aW9uIG9mIHRoZSBlbmQgdXNlciBvciB0aGUgZGV2aWNlIGJlaW5nIGdyYW50ZWQgYSB0b2tlbi4N Cg0KLUJlbmphbWluDQo= From nobody Wed Apr 25 14:55:09 2018 Return-Path: X-Original-To: stir@ietf.org Delivered-To: stir@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4EC8312D7E4; Wed, 25 Apr 2018 14:55:07 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: stir@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.79.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152469330727.23271.7381034174684268342@ietfa.amsl.com> Date: Wed, 25 Apr 2018 14:55:07 -0700 Archived-At: Subject: [stir] I-D Action: draft-ietf-stir-rph-04.txt X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Apr 2018 21:55:07 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Secure Telephone Identity Revisited WG of the IETF. Title : PASSporT Extension for Resource Priority Authorization Authors : Ray P. Singh Martin Dolly Subir Das An Nguyen Filename : draft-ietf-stir-rph-04.txt Pages : 10 Date : 2018-04-25 Abstract: This document extends the PASSporT (Personal Assertion Token) specification defined in [RFC8225] to allow the inclusion of cryptographically signed assertions of authorization for the values populated in the 'Session Initiation Protocol (SIP) Resource- Priority' header field, which is used for communications resource prioritization. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-stir-rph/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-stir-rph-04 https://datatracker.ietf.org/doc/html/draft-ietf-stir-rph-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-stir-rph-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Apr 27 07:49:21 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 753461242F5 for ; Fri, 27 Apr 2018 07:49:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.799 X-Spam-Level: X-Spam-Status: No, score=0.799 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (768-bit key) header.d=shockey.us Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fmv2uuZxNcwM for ; Fri, 27 Apr 2018 07:49:17 -0700 (PDT) Received: from outbound-ss-20.bluehost.com (outbound-ss-20.bluehost.com [67.20.81.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85CF6124234 for ; Fri, 27 Apr 2018 07:49:17 -0700 (PDT) Received: from cmgw14.unifiedlayer.com (unknown [10.9.0.14]) by gproxy1.mail.unifiedlayer.com (Postfix) with ESMTP id 2A4AA175A49 for ; Fri, 27 Apr 2018 08:49:17 -0600 (MDT) Received: from box462.bluehost.com ([74.220.219.62]) by cmsmtp with ESMTP id C4fFfKZaZYnqBC4fFfg6BF; Fri, 27 Apr 2018 08:47:57 -0600 X-Authority-Reason: nr=8 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=shockey.us; s=default; h=Content-type:Mime-version:Message-ID:To:From:Subject:Date: Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=Kxj1lKkz3h1LlLFKaE+SM0GyYqcxKI2Mzu+khJ/deCg=; b=f37TUrWtEXKsLyGkz7SVaT+jGj O5ejoqkWV19CK1gkh2xEx8tkyckNVBD3DF1eOIVpm8HWPzUM9yFerfoy5q97kz5AA8mFKijKZG17o ArtsatTgOEbUnOoYmTYTO/Rie; Received: from pool-173-79-80-207.washdc.fios.verizon.net ([173.79.80.207]:56556 helo=[192.168.1.155]) by box462.bluehost.com with esmtpa (Exim 4.89_1) (envelope-from ) id 1fC4gW-003vU3-8S for stir@ietf.org; Fri, 27 Apr 2018 08:49:16 -0600 User-Agent: Microsoft-MacOutlook/10.c.0.180410 Date: Fri, 27 Apr 2018 10:49:14 -0400 From: Richard Shockey To: IETF STIR Mail List Message-ID: <1950949C-5EC2-47C8-9D49-AA1904760B83@shockey.us> Thread-Topic: FYI .. the FCC NANC WG report on CATA aka STIR/SHAKEN was approved. Mime-version: 1.0 Content-type: multipart/mixed; boundary="B_3607670956_359145768" X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - box462.bluehost.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - shockey.us X-BWhitelist: no X-Source-IP: 173.79.80.207 X-Exim-ID: 1fC4gW-003vU3-8S X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: pool-173-79-80-207.washdc.fios.verizon.net ([192.168.1.155]) [173.79.80.207]:56556 X-Source-Auth: richard+shockey.us X-Email-Count: 8 X-Source-Cap: c2hvY2tleXU7c2hvY2tleXU7Ym94NDYyLmJsdWVob3N0LmNvbQ== X-Local-Domain: yes Archived-At: Subject: [stir] FYI .. the FCC NANC WG report on CATA aka STIR/SHAKEN was approved. X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Apr 2018 14:49:19 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3607670956_359145768 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable FYI.. =E2=80=94=20 Richard Shockey Shockey Consulting LLC Chairman of the Board SIP Forum www.shockey.us www.sipforum.org richardshockey.us Skype-Linkedin-Facebook =E2=80=93Twitter rshockey101 PSTN +1 703-593-2683 =20 --B_3607670956_359145768 Content-type: application/vnd.openxmlformats-officedocument.wordprocessingml.document; name="FCC NANC Minority Report_HSchulzrinne_revised.docx"; x-mac-creator="4F50494D" Content-disposition: attachment; filename="FCC NANC Minority Report_HSchulzrinne_revised.docx" Content-transfer-encoding: base64 UEsDBBQABgAIAAAAIQB25OZ6mQEAALEHAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIo oAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0lU1Lw0AQhu+C/yHsVZqtHkSkqQc/jiqo 4HW7O2kX94vdSWv/vZN+BJG0Kba5BJKZed9n35DM6O7bmmwOMWnvCnaZD1kGTnql3bRgH+9P gxuWJRROCeMdFGwJid2Nz89G78sAKaNplwo2Qwy3nCc5AytS7gM4qpQ+WoF0G6c8CPklpsCv hsNrLr1DcDjAWoONRw9Qispg9vhNj9ckEUxi2f26sfYqmAjBaCmQ6nzu1B+XwcYhp8lVT5rp kC6ogfFWh7qy22Az90LRRK0gexURn4WlLr7wUXHlZWVpMt8v08Lpy1JLaOZrtRC9hJQoc2vy pmKFdlv+Ng5ZJfT20xquEexr9CFdHo3TiNZ6EFFDk+HOLFxlJxCJ/vRhNNKdEAmXBtLpCda6 3faASAN9AGyUOxEWMHnrjeKXeCdI6T06j328jUa6EwKc6olhq3xQDhCP/yZbU4B4gD/5iYmB Pgg20p0QSCsB1tfjk1jJ7LOkztWPkFZM/Mextzuknh6Eg/6AjSNJH30+qNeTAtXizVcLd/wD AAD//wMAUEsDBBQABgAIAAAAIQAekRq37wAAAE4CAAALAAgCX3JlbHMvLnJlbHMgogQCKKAA AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArJLBasMwDEDvg/2D0b1R2sEYo04vY9DbGNkH CFtJTBPb2GrX/v082NgCXelhR8vS05PQenOcRnXglF3wGpZVDYq9Cdb5XsNb+7x4AJWFvKUx eNZw4gyb5vZm/cojSSnKg4tZFYrPGgaR+IiYzcAT5SpE9uWnC2kiKc/UYySzo55xVdf3mH4z oJkx1dZqSFt7B6o9Rb6GHbrOGX4KZj+xlzMtkI/C3rJdxFTqk7gyjWop9SwabDAvJZyRYqwK GvC80ep6o7+nxYmFLAmhCYkv+3xmXBJa/ueK5hk/Nu8hWbRf4W8bnF1B8wEAAP//AwBQSwME FAAGAAgAAAAhAC77TN8/AQAAzQUAABwACAF3b3JkL19yZWxzL2RvY3VtZW50LnhtbC5yZWxz IKIEASigAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArJRPT8Mw DMXvSHyHKneabsD4o3W7IKRdYUhc09btKhqnSlyg3x6LqV3HpohDjn5V3vvFdrpcf+sm+gTr aoOpmMWJiABzU9RYpeJt+3x1LyJHCgvVGIRU9ODEenV5sXyBRhEfcru6dRG7oEvFjqh9lNLl O9DKxaYF5C+lsVoRl7aSrco/VAVyniQLaaceYnXkGW2KVNhNwfnbvoX/eJuyrHN4MnmnAelM hCyNIbDsqGwFlIp9PYvZSMjz+dch8x31DTdwzN/Xvvi7kPGABfKFJwCD4kOYh0TATmdgebsO DKPkg5iFhMg7R0a/c9oIEccHVdYE2rsUi9BL+Wcso+SDuA0J8QXZKxDxFCYYE9E7myQkCfFZ ODD8lnvRO5KboO/0pBWD4kN4CLsVSFuVNZNWjNIAIY9+wqsfAAAA//8DAFBLAwQUAAYACAAA ACEAdYh1CcUiAADdigAAEQAAAHdvcmQvZG9jdW1lbnQueG1s7F1bb9tIsn4/wP6Hhp8SwJZJ SqIkY5OFrokxJzNG7Jl9GWDRIlsSxySbQ1JWNE/5D+dpgd0/l1+yVdXNqyhZvmSSnE0QxBbZ rK6uy1eXbip//duHwGd3Ik48Gb46MVvGCROhI10vXL46+flmdtY/YUnKQ5f7MhSvTrYiOfnb 67/8z183F6501oEIUwYkwuRiEzmvTlZpGl2cnyfOSgQ8aQWeE8tELtKWI4NzuVh4jjjfyNg9 twzToN+iWDoiSWC+MQ/veHKiyTkfjqPmxnwDDyPBzrmz4nEqPhQ0zAcT6Z4Pzvu7hKxHEIIV WuYuqfaDSdnnyNUOoc6jCAFXO5S6j6PUsDj7cZSsXUq9x1Fq71LqP47SjjkFuwYuIxHCzYWM A57Cx3h5HvD4dh2dAeGIp97c8710CzQNOyPDvfD2ERzBUzmFoO0+mELvPJCu8NtuRkW+OlnH 4YV+/ix/Hlm/UM/rH9kT8THrV49MNDjQys9j4YMsZJisvCj38OCx1ODmKiNyd2gRd4GfjdtE 5pHusg+eJkqUBcFj2NfyD3zF+WGKpnGERpBE/sQxLFTnzDgJwAqLiR8lmpJwzSMBJCNg7RCw He9Ik85oKGnCeuDJEp1EPIxMNyOTbIPC1TfR8mnW8iaW66ig5j2N2mXh+xuMwg+gpa2u7AnJ 05i5XvEIICFwLi6XoYz53AeOwIYYmAEjDeC/oBWGTnfyGlKFuXS3+DOCO52LiMf8ErTdGw2n ptkendBVANqUruo/cPUC0hL3/asTw+iMOl2jnV+6iulip2sPjPziRCz42k/xjt0xeoM+TR1d xfTjOt36wNjFHfdfnYyAH+vkHG/E6n48k2GawH2eOJ53A2KBRQX8Nxm/HYaJh5Os8JfdO0Ql +SMjbfbxyrkmfJ4zMJfyFkPDdQoxBQajuRPvIUeC/3gjR9y5VdSysdPQzUcqZhsF8PmXsblI +Vx/Vova1WZ3NulNZ+3O82uzOvyqtvJGBd94qS+eU8GO9CVKn6jzdSrrAuvYTXpvFlVvaBiD 3sz6c0SlLh0jqt+c7KIDwVbEX60AjfbEMkcGiuC7AB8jQGtqW73hcFYVoD0xO3bfmD5FgO1e u0+KeZSzfoUCJMj7QjwA7mLUvkgi7gC1KBaJiO/Eyet3HkReKCwYDk0zYN4UAeI+zX3JJb1+ LyIJQVCG7Fr4wsHKgMkFeyPvRBzy0BFsuE5XaoEcYuCNFwh/yyYi8uWWWg4w+vrt8Ifpj+fX N5fvK0JoNnizbQxss/cnQe6uwY9ctXYZZWIJPV9JyhcLTAiqF+cyTWWwczn2lquGwSLdCBHu Xue5YvQ1FI5m5ThXEzxJh4nHX50MY4/77OfQc6CMZO+uccVO0nC9pn6VSeCVMRKka5bOZ+Zu A4NHwJc5G9h9wLCqNi3bHo2NTreizUGnPbTMo7WpM8d7tLkvmfyc8DUfJwf9DSACkvPsxlmn roe2lnlZD509yWoOI58JMz7/WhAQfhz+OGZj7vsEJ6AQz6EuxJfHzGz9z7PQ5hCxNzR80zq9 iddJyoahA+GB/V3Gt0iTiu0jgoA9tvr2aDo+Igg8EDb0cJryHox4HmnfV3DuEUB3bFqDISZ4 /50CaE/t/sRu1/LeZ0wDygL4+mL+c0X3io9b9KdZK48N+4fgao630m2EaMeXVDhUnT5xU/1D k2oyOCw7ApGwH8WGvZcBD3HFhTwabpI1Nt5BQdUvH8TCXEpWDoMlKdG1AvSwkaZB0+z3O91u FzcT6DFXOlc8Tn+a/1b69AYinoi32UM32KDDhHkMy4cgmFQeBc3+vhZqvjK185L84Jdp6B6Q 5cNjRSVihPIqlnJRFw2ZVMkwymzA73o5+KnWiLJnhtGz0Jsf5eM907bNwQEf13coOdSDiYsm 3Lv5afxWcNxOzVyx0bxLZCDG1TV2RGjrTOxxd0zLKy3anM3Mnj3AgFcsulqh34Nh9cWYR2A4 1qa5GWQuVb451dd2zKTypJOkpcsjz9XGs8dcKl6zV9Dm0Ji1u7TEhe+OV4SW+rcbwpS5WHrk vnsSpxIFL0zS+AZkvScDA3mxXyU7Mc/AaH5dsV//YL+uKS/Lnzxmmj2MJgKVn5YAEKQJd2Lf C29RJ5QkvTr5x410uqbZN82BhfXvxcpLUhlvwTyIfD5xg3EoXqYDw+z01GAt1YpdvM1mrSuo nLmZFStunvZbMK1qL/xPE99lmMbSXVOz5GGSLC9qI+ZvPdcV4QMX9CByD3asx050n/9dDd9M 309nrOIB6Ij3ueDjGPrcAmxy+Kfr/nX7uc1pD/sidCu5Wo5V+2Ja17Q6plHfUTJGRn/YnuHV Y2LazOqM/r/FtPtQnlKUL4Py1neUf4r4IONz/DUexvuO8Y/H+PZ3jP9WMN6e9af97qzWye8O pt2ebXzH+P0YT7L5Mhj/QGP6jvFV8b0XCxGL0BHVuv4ZnPK/CeM73zH+W8H4njnqje0pttTK h026U7tj9qsY39iQszrdjln0sA435PRg4mJPLNC9avCWRP/MbmJbHqlFMnl10u/rdnVpAPXi cYQvuCuAO1cWDwzaXXoC1aBpfz0QWOov1xur93bK9CoQXJq6tg+2mIj+Lfdw1cdd02lbXXsy 6+wcEbV6RsesbvRrfhuspHrnK7QSj855ItlX6qRnSSkkcpTooR2P2umIftu0er3a6ThIp8bD dq/Y0tvrbw866/I1STITW7NYjPFw2rNHNRjqWNP+uDuoiuWBm58lcP1zTqP+qWfWPs/htOpB m6qIvyDve46mHVpJd2aas89+ZOTQebqmg3PfoOybz/odWsioY4zpOMdXtpAHH0/s9OxZ1xjX 4pxhm/ZsNihsqwGbymcwpiakWRV07plme3bgRQi9N0nVcQEe84Z3FWhG/a4CpeFGr2d3gDeV FDQ8QXtNtSe6g64+F9D0BC20/ES2aVV5ongrIivqq/qv7KUe2DbZpbd3IlrlnmBrz8zpuFvP UAaD3rjTrWpOK6PKbdfqDYbFxZI6q8Pr6qwtWpNRi75ZeQmjbBBROFaQFsXyznNFwrifIlqk 3p2Ae44MwMtc9XoeSyUD/EhENtplHiIhiS9h7ZbVstiLTx//tUeUZWVSYr+jflufXGh6glK0 ivrtXrvT1wazf8F1L/8Mp1rq2fOhMywoGXD7szdDNpI8du81O30G5Fta4B7cK2LmlXpd7N61 d+9be/r608d/v6TQoO2QdVsmGeE7zxdJKkOR0BAAXSiEGKF3YfenLJBg6lBuu2y+pRHgBF4s 0Na54wDHWIvrG/kBc5xvndApDITwcwXndBmeE2GyRgorDiN9H6byxR3Xj/HFAhiF6ZKU34qV 9CFxBa+D8R4297VT4XzLIm7DPB7otuCgdUTUMHr96WRg1xJ9a2r07XGf4Hcf9pRgpgpAT4ga DaZ/j0E0r6ptDaftfrt+fqc7tMeTQfXdlP2rugc8M5wUaFSoyhtgNFqBLbFLF08Kg/0ANLJk m6Qi0CpNmMPj2ANtnjKeMC+IfIGqknhhvk5Jg0sJjucRkgKGpvAYcwA71wEZwZJju4qtww1Y CxhCLOfSAQtKWoyYUbLDx+GTDCERkuHZUuIh10j6nrM9CzgdedU8kiHBcHLFUyY+OCJK2QK8 HAnMxmPkSfiLFrsElPXAVH3vFvMrV0AQgBABOl1JthQpcZx4y5ARP6dw3XNWah4PokYoBJm+ jiYbNP1bLFzRckP1wjHqGYYAxYP5ctm5A3KZjZeuFMlFLH5fi9DZshcld6+TO4RBR0+t8UJl /I0zvH6ZiWE8TFBIjKv0+g+QBfK9khuWSOARQQCJ3fHYk2swFBlEYEwI1+j4ERpHyCIfmKUH Ewp7aCMiRtnhw14MVoUaAOLuGoXeYkOgq/gELFJWSPMkEagD9I1v6nJHvSVDHzySHeoks060 lh0IW62ViaVegPdh/GYlwpKlkq2ID8AeUsREwffEAtQjgz3WC1YIf8GJU89Z+zwGI0vjNYCe EjPaIuIhCIStgIfkTC4WjEfgJBwEjFxBjX8nSn6lDKqGwCAzsLp1ksbbYyCyY846046NSFA+ FzeyRsa0P3lOMLlUmL5Yp4Anp4XjSLiK7sjRszL4SNa45oSBnJYCx4o4ir1EwK2AbxnKF1cK fpz5Xdk1OSlvS0PnAuIU6jAAZj2QHPtFXl7lU5Fgye5OlZchjxG6foK7zFnQdECgEhQPv8Qx sAPKw8CFdPF2uA7mIj5lcp3O5RooEiNYJc/FivsLRQbcN6PTYjPgXXzgqMvac0y9G6NYCyE4 ow2Tqil6Qjwmm0V/9iBk0CoxFBeMZFxzD/vOQD9xVlL6zPXALDxwEZjblQ4A86eP/wQ26X12 JTLyRl+9irC7iBakTOCO6RrSY0DJU/JrPRkYagSZMWQRFNkCgZwkYMuQRnNAZ2xkYtIFPrTw iQkERlgo5ChVlQFYLdAkJHIGv5Ax5MuFYQFANnhC1b4PQNnjkfC+lNOr5bU3ABynJA4dqpKV XPuY0FBmA4KA+IAckPdSgbGgDEAbUiYQFI6y/VQHXtJxXFtzs093J5YxHU9qJZc1mMyMYe3l 1cemPXq540MiLA3fo4Ei7oPVzQEIwEKh4kLvypNECiPKhihfzHJDFe4hTjseOipacUnurR3l KoYrXrfnWYXtOpjkEayMsR7iv4tpQo7FGG0oYGwjSlZVGoBqxYANq0owu1ZYl0FfAXPZ5FfD U/qJ4VTFIZEjVYu9KFIgNaw8nJgmQYVSi5HdhnLjC3dJHFH4lT4IHD8p31bR9JQSolwslHCQ 1RI5ymloCYrdYmVzWr8kdPVSXAdguJz73lJXyyA24MOLPAr0OCtiF8EZeO9L9r8yXKKjA9xW nAZBQMkfL8dyvVxR7qh1rtlBsWtng+pCEBBBgoBT4ORZha4XtBIke/17CFIKz7Roi1jkwAKK QNJib/kdAWFmqE8z98L3wa4xFVyh1SNYqnoJ7YBT/rIlTiB0rQTeRqaPnNqH0ve9CKGkEu4V X4pRLPgtlZDpa5V7eBGWc+BFmfkzlTK32DWqtxhEEcdPoAp0XRANENTf1kSVIWg6XvLQ+0On tcA5SHqRoox9/1Ql5+IDRJzmXF8l9ODSwAwkc0QXey0q7iaE92CMBIhA0eOo6oJOGSyVaeVg ogACssXf1pAyuJ5qzhyVDEEFNRlNsCtV3hgaD8wBYOozV1bgTwh7CZhuDGER/Cjx6L2Gkli1 RTjkjaGEXBTFRW5YibIt9vc8AKOUlONuZMXKK09cMKzlypdy+tQH+HH4/ucxGR6NU42BTMZs iS8U5iFegwtmsONsxNC98xIZb+EK6DRNBS6M4dc9hSpJRrJZcpU9lPshrZoWMcd3uAIJEZE7 FDCzig5kx9kL0Vq2TvNZE+zoyPDlUb2Babs77VMXoBwk+9Zk0G8Xim3QddZFfZIBXHtYNSAk KTMA0Aa7XoWAjT77fQ0Gn2V9qvBEb6hihl47OKIIl5DlQSUCUOWKZaxkLRD9dOukIJ2HBCjd 5mIrMaOEyi0kG1wjbtC3GeqiB2dbrEPyoNIlbMtg5leOiaoTcIqBALSjq+gMz2o5YcXSKC7p sjCrXBDHpePp9VPaGyI8aDupugh5EdRpqqbSshPuUQ7fG0wnw27tBLU1nkzbJp2rLoxg2u8Z 7cbdTWPWM3r5JgvpW1+iCZ+2rYAH/6o93263N7B0W7DpCXqDq74RYXb1XkDTE2SrO33lQW2O oiepW9R5CFIOUVpz+rr6VRQU2pWZjIsMoBbRdufp3TvPnjg7i2ExGxnf3jtF9mpsYzAYjibd +mtyVs/sjged6mtyVQs43jYyLCh3HxAP2C1mAFmLpO51uuf2qAZaAEAArpMESB57CSGS8bnq lEHA2PAtxIbLharsMPIq8IVPLj4BuYHOHZXbqfwRvXMdZr2Z3XEZHEgqxzVvKjGjVkuxAJiy KM1VXaRQD+K5LkMxO4TRoEjPx2TwNxQBxURd/kNEDbO2ii6IVxxRJ2VbkaqQsvD5cgkgwV4o JE4iKRc4G5CQm4TFPPKgHAdhqexZ0aEkfs5dZE11NaFUvvUpyYFBuQiy0Ttrp6wIv2cywSJH UI4LUQ1y4axBpJGMCg8F27+vhQJUdn01I5lNfrh8lys/Uzm4QYDii4DQSqfneUCFPB34kbir hWsMdSEScM/H9A5c56gEqTfCdjq9L1mpLE27PepUE6Sn+oQAm3CxxeChXLU1o4JRrq7u9yi7 0GpX5qYTZ2UWGGE49iSwiVFSFT5DwwIJGhI8QUtKY8ARfMC5Vft8GEa9JUYq1Q0hswTzorgL IxbcwbwVUzKBbRGHShIyW4xLIP/ZzRgng8zoGOma086op95OKffiOniAe1Ltxdntjm0UIPRQ 6b6VG0w7T1XRnTUZsRmH9onIiWIv+b5uBa1ToKk6TbmXSsjoQpHSQwUm5I5VIlJRI2pBCVdg 5aibcqRIlUIka92vTTNfhrJSbKg/RJVdDGmD77lYS9JtnJhjcxEUu0C9ggXd6WaZ4hib0JLd TN61Xh4qp7RwD0WYzFvBkYrtqolwVCbdO2X4hbJQlqZYvVC++wPUIuwdnuejLqOyL/wGlgv2 6eO/sC9B/GEDHb1Wd/xwLy0DCeyKgPNjp5nP8UMxVC0OO58gtjlmcNRqy7f68oL/08f/K1AX BUaxGERcNA4z6arB1FbIeqy1ApKETsGo9enjv4/Juds9czwb1XJuozcbjttT/M6JYwy8eqfZ wJu1hgFQq4TqWiUS7H1w1AEUFIiQWIOleMgGN3/gXiIoAgf5Zqp6wpVR3pMt7YtiD6J8tqVR q0poILOdfiqKVO8gQXmOLGTVM+pE94sOs1fK6/U93HJTXCN5GAZrhBhRzs52OmbNCrR603G/ ayEWlbcezY4FWsF+43Phf7MCfyoBCuLXFotItGKEfWX/oWrMnwFUFRBFRjyn/WXUwh3tT2ET A62gFkjgs67MEAix7qZYufGgsgYXvlU1TYATKdnhc7qrn3z6+E9tVdmUWRw6xT2uHIrqLDLc J6eMT2DAhlLP9RLu4pY5X4oW+0k5m4rauDtEloI75nhcheQBBSSGTKisnHyd1AsAJngg9cQL D+q7QjC7+yYkVvw6WiZ8/KLavKsIQ+uYif8c6jel8Huq44E6MJDlRzozhOmwXAMsIyRvsWtE pHzngdTjStxclXQ+J+/8EHIVMVntYkAcyhWxbyOOMM3D84s+xRGkqKIHpRaugjih209Unyqh F13YS8RSLT8XOyy6U8Fx09FBPC38E32uul2nXNz18L8UwOYPeSAFP2xqRvnZCvyy4Q2GU8hl XZnZcFHmKol4CO9gzbVJWmwY5rX0Gbaq0WAxUpZrc0hgpINFd3U/EeINwA+2m2dlZFJuMeYh dzlSUQSp9XtwPxIk+I7HAFttk6LioMmKsgM8lSJ5JmWK8TV/H6h6xmZRv61LuqyoLqinr3HX MHfYkqQrwuU+2KtLO4aVzWH6cnawhYWg7KLUYMyVlHdo1HWSkocbmpk91hKOPeFxNILIVv+O krY17fXMwXOiq96mwv1OBCGeWUeWeoF80qJwQbzbaCgIVdoIZq0yRcxlfAQXF4S0RQhxVh6M KWdvpeiINrf2F0gJFQEOGCCuVk2mmio/PDe7BDTKtmPGw5uhPsFQIInaVUSDwDo1oAQS43ZY N+WKH+/lcE/7YGpOJkPaQi/nOoY1tdqT6ibck5UJKnO3ISfoV0sMxUZtdQgFTsVJBTevMEt6 AUVA2hOQaYO2fTxAB/KjTiLBX4KngCCTPMucAduvSW0XG6VEfrYVHIvjoutI06d6Mzg/U4lB GI3r8vqqhELgVesY47wqS7MkH/Xx4nr4y8HMfdo3bWN60DroyICqVsC5aQawx5S6p03QhOBB GRh2FbDVEkAwZY6PO03KbIDx0hZ9mnLnWBZf3ybsxWh8xdr9U0DJLeCjYTQz8VL1b6jHfv3+ 8uDG6xFSuLy83LNDGtf7chXSs6nRtkea+0KNNb8BK1KYj/+VQfM0LZbXoHr/cy5CscDQDGAw /AWDm+7wcMeJsQWia6ZL3PUJ8axRqrbIqeppLGWyOH3kip4zCuXvkBVr3qMKgCCAw6NNRm/x puWtZ4TtF+Ph5WTIrpvFjd0tER85yXPKITsZXrHloxeLh1MxvOLhoHQDa9XY0rjIfS9N0J4k Wo4XelQWVw91P9GTXryfjZll2b2dVWlDr1w+bw78fWNkd2bDaqyw7cHQ6PeLb1p7hlhxnSWQ p9REbGL5ObWfv05+r5ZeRGsqSsGYAQR3ksS9FqJPPl/NyhQAf4CI3ayQl9Slwl63an9SlJK+ XOYbj9TFgrSNDlxCKgf3cHMK8KecAyAe43klPJICyYWH+Q6ogqIgZM3FQch05cVFYUGn1rLG l27ARhEYNdWGkvryqnqhQkHif0RTO6wIi4U5UH/6XGGlkMlPXJQ6w+j9rpoNkjdwiBBPE1EN 7PN1SE2FvG9MIex2pzWR18UZUmODHpGZtmdVQVGZ/7QeFrAJT833NaaRR6sYyplR1sQl/RTJ DFjx22bE22NmyELA3XrBpBNg3K9G9YGwaD8U6tkQctiD8eMz4SZtvh0DkKobTYk4D/8DAAD/ /9RZaW/jyBH9Kw0DC2wA26OLpOzsGNC5a2w8EWwjX4M22ZI6pthMs2lZ++vzqprUQUuOghgB MsBoyD6rq169es0RT7OpMFaMf79/EHqVp2qlMiedNplweqVSnSlh5uKmJRK5KYScO2WFLopS ZjH3uKUSibYqdvpNCZkl4k2mOvFLrLVb6kwYLLJR0v7ybX3r7ujX3v1S/bi762azwN9CJ4/f L1qt1rg7mXQveKR4X6W3RS5j9f0it6pQ9k1d3InnpS7EUhZCZ7FVslCJyKV1Ota5t2JuzUp0 Wj9hgHiQGzy2Q+GM6EXcNFaxWr3gWGiPzrTFznz3k9ukCmNw5u8XU2NcZpx6VHNlFfxz8c2v 5AfPm92Yp5PvF2E97NPDN9yE35zac7Fu925xXnmPpYL+eDAMwuiCW516d9QaRlHU67d7F/tr TyetbjjcNo3VXJap+9gzY0OmUSsa+ZPTTyoL96iyBOdIZnKhhvD76zdvJ8Jhk0vxOPv9Xvw8 HM1Eux8cC/xXujA6cKG340+XoiQsINC5xZzYMVZ15tTCarch8FpTOp0tLhk+Mi2MKMo5LZ14 0BSpWYtE5anZUF6cE4JeOOpHk2nQCMFoehMEg8FBCCqvHgnBYc/RELi7kYEDbEbYR+a9KJUJ 9U55wadeSieKlUxTEUtrtbIFshFvcB/GCvkCp8M1S2QsPcEzMkk05YtMBRbJTVboF53CU9fi N7NWb8peipUpXJX1hTq6PnyOXkCAk3AjKEs1AoUYvOmEhmHXhXRqjUxMTba4SnThmE1irFZc UhqnZYKwiL+Z+1ndSszilmWB9wwhSRWtwXYfGkvLu6WBFam0CyUQNpxKFddiUNDhFbBZ6EVG 64M3VlJn6UZIEXtvijnYkPa9MlYvdIZNkq0JhBH2AB27zNYyo15rXgyPENspNLRpvLQw5t1Z MCw2LLNUv9IDzN1NY9BVpCmFLS1iceBkuJcMfx4/nIPFqDfoD6bR+BCL3V7QD6IukcSXYfEZ kbkUawpGbFbIFQqWVYCIU3nh0cjwkHGM2Fk67C6vbs+htmEwmkxa4eFZWtPRqDud9r/kLLkn mfyAkf4CdM5gw8LKfEk0s77NypUfqdO3tB7X2vbdJ3Vb2Kt4qZpBJ6tYz7ttkhWlJRRLj6lt KnELsVOVFUhZt6YMr7FCKOCUUHZVv9ezAfAyXhIGD/Nrl4I0M0WpdFcxwZk3onmJYX4ARg0o BZkgU6r3lGVPz/eP4gmQXiqJNcRcqzQpzkFh2LsZDKc3VH72ItcZBWHQb38NI/7vI3fvlQ+6 STmAEX2YiFmIEpSMwZDIYfBxonyQuKjImCXJz+p6cX0pgtZPKFM0FYvcj8Xox+ABKWMRTay1 NGWaEFmvpH3FbCIGLFmU2jF9Y+25ficG0VmiY8qpSnsRyZXZ9oXjDZI0czx7k8+L3HA8HQ4G 3WbOtbqDAbPK/2PkKn1S14CGYkUkKRH3yZsqgq8lewm2F5sMU43dUHg+U4+jSdjqDPnQ7s4T fK6sNgntmRmUVs8EO7lcqW0QKnR5bR2h7sfgx0iMBs8DAC039sO2vMdxtXwtnpgb6r3Ve6xU UhEO/M0VDYgayUwmGsZsKellw3uffcTR4/OIvVttcUkr7A4p/wOj2RuXXr6duKPUGZCQoqeB f42dqUR9KB6rEi2ekFuvChGN1bH9v1KT9j9q0hOn80E8q6BPo85kHJA43y/o43bQHXSpNO5i EXZ7YWtX4/cSMuoFk9F28PGCftzSX3HF897V2ZIO6zgAOMA/S82iGanyGUAqozxAZLYRKN/C U6IPL1QYIvRSIqEKj3bSaDozrNi9o7wM3AkN/29MyezrHoQTMCJfOb3BowZAwb+5KSASU3WO o9vTXmcYdpvKaTLtjqP+16iNLR0p8ejPRYeHHCWZKhRVagKT1wYZX1fIQ2g00IULTgLykb+u sLpEfaDKjMJO57zcSxYqF0Q5GTlRFhD5rP8peDUJgeS2irRSCr7E4XpcFBIEB2FOavpNsYZH hdO4FKBf2qsyQ7MtIFf3bktiikXVuyQrYIwjvV3vQacypLxxi1nQneWSlQdtCExQTcy2VpDW T3GYFXYBCiiU1iCaPtmf6NMDIhxcd64FeRNqiERV5a851BHAQQvszCdD1NyhRha5ijW0TPJn VAROXsW+jFO6QlBpPSQcrIp7RnoFYrt6VSqvz0XGxymR9nppxJqrQ6EgpcBJBefFfj3mynKN uF+ZXHEZqq+mthb6xPoqK/yuBGhRIbpQalUc3B82JMXoGgTc0VcQH1dojRVFivGDE5HyzhkJ 16JOZHTtKl11Q4nBzgvY+MJfUrA55ySStA4RGTgvKERVZYjptMhfk8gNg45cRzrFYi2qm1gE nvbSqCqqpGWgOhmROxI4JzU7w0EL0rFzmJq9dtiZDm6o9WRqzux/na+fffh4YCUAl0NwxyXf wuUL6Wj2D2kFW82EN/ayyuOUFQa0+E6kk6jEvbZcKX8jra/SBWXAWqGa0byV/AfABRhZUiHV LBCiZczzvPq2vZ2/VlSFjXgzaQlgW51Sp+OYzec61oA7mtR7rviTAOg2gernQktQbuQE6vqh PjonjK3wptvpT4hL98IYVX8OwhgM2t1huxHGfhRMox0T74XxcDiHMWq3u7gkshXHBOdvOB1y q12V7GrMizGvJL2f4CJXVfUbWjdDZn2/+PuziYN2K4rCdsCi8/iMduvYlG5YidejU9j65pTw hu07MYWR/9Ew/rh4Ygrp+iOGdT6Zwt8QPxrW/WQKfQk7Yhh/sjsxhcXJR8M+24UR89Gwz+LC 4PloGOu2E1M+RL/db7dvOo1dJhndRjxaTnS0G9Hf62kEea+nEZi9noZn9npOmoa4nOppYGav pwraVtMdpKJnwa0MLhpC8MhyDVfv9bDjjhNHEN4ErajTkGZHiaM37AUtRvmetb0eVuCcbBLH 4XAmjmowm9lQiCOMH48bZnSGo2kwHh9K8VHU63Y5Dc4y43B4xV9hCJ+c5K+hSTb/nrs6R5mo HTRQejDlKBN1wwZ4DqYcZaLw5iSqOidzoXMyFzqcCzVACkjA2RaUZ7qcdONeK61DVzll9y9y bpPjGIkPzoWwvLm9Tyrk5ounPzBqTcnZ6fHSS0qtfq/GzOKBJOGtMzklox9i9WLpdq8vxjmz 2r2TMt29+c9tALiPnjcRt8uQXxel49dqu9hAxq3rixtN4WanXapmC35OTPyr1eRHKucz7WJY 3O3U/wnlXcmPLwAVP2BKSdX+7l8AAAD//wMAUEsDBBQABgAIAAAAIQBwQn9EVgIAAOoJAAAR AAAAd29yZC9lbmRub3Rlcy54bWysltuO2jAQhu8r9R2i3IOTcGxEWC2lVNx22wfwOoZEGx9k GwJv33HIgTYUhVAuTBh7Pv8znjFZvJxY5hyp0qngkesPPdehnIg45fvI/fVzM5i7jjaYxzgT nEbumWr3Zfn50yIPKY+5MFQ7gOA6zCWJ3MQYGSKkSUIZ1kOWEiW02JkhEQyJ3S4lFOVCxSjw fK94kkoQqjXs9xXzI9ZuiSOnbrRY4RycLXCMSIKVoaeG4T8MmaAvaN4GBT1AEGHgt1Gjh1FT ZFW1QONeIFDVIk36kW4EN+1HCtqkWT/SqE2a9yO1yom1C1xIymFyJxTDBn6qPWJYfRzkAMAS m/Q9zVJzBqY3rTA45R89FIFXTWCj+GHCDDER02wUVxQRuQfFw9J/UPtb6eHFv/yqPFSX+C8u a0EOjHJTRI4UzSAXgusklXWHs740mEwqyPFeEEeWVety6Xdsl39dT+tLKhtgF/ll/ll2UX6f 6HsdTsQiao8uEv7cs1LCoAqbjXul5iq5fscLpAIELcCUpB1LumJcsgnxgOcVR9PHMJMKo8+s afVc7p+rlu9KHGRDS5+jbZvez+2/8AOssuquO0E/J+YtwRKuBEbC7Z4Lhd8zUAQ15EAZOMUJ 2BFOxbFN5y6bVwUnD81ZwmpNJVbYCOWCyR78wC/WSfAch3ZuC8aZF0xeNzN4A7FWuIhNYS0/ 1hVeW+Ifket5m2C88ka1aU13+JCZqxlLV3aot0bLBSpsMMpiLFXeEkwENyk/FJfY29/ivVva V99Wr8Hq/2q/qeJOHM2zXv4GAAD//wMAUEsDBBQABgAIAAAAIQAYYmnd0AYAAO4dAAASAAAA d29yZC9mb290bm90ZXMueG1s3FjdjuI4Fr4fad/BQlppR6r8kxBQFyN+e2parS5RPbvXJjHg 7SSObAeKvZoH2Xm5fpI5TgIkkKoK9FzMdEkVII6/8x2f7xwf591Pz3GEtoQLypL7jqWbHUSS gIU0Wd93fv081/wOEhInIY5YQu47eyI6Pw3/8cO73WDFmEyYJAIBRiIGuzS472ykTAeGIYIN ibHQYxpwJthK6gGLDbZa0YAYO8ZDwzYtM/+WchYQIcDgBCdbLDolXPDcDi3keAeTFWDXCDaY S/J8wrCuBnGNvuFfAtk3AIGHtnUJ5VwN5RmK1QVQ9yYgYHWB5N6G1OCcdxuSfYnUuw3JuUTy b0O6kFN8KXCWkgQGV4zHWMJPvjZizL9kqQbAKZZ0SSMq94BpegcYTJMvNzCCWUeE2AmvRugZ MQtJ5IQHFHbfyXgyKOdrx/mK+qCYX34cZvA2/hdTpizIYpLI3HODkwjWgiViQ9Njhse3osHg 5gCyfc2JbRwdntulVst0eak8TYulPAG2oV+ufxwVzF9HtMwWEVEQxxltKNRtHpjEoMKT4ZuW prK4VssCcgCwLwC8gLaU9AGjWE3wB2ZWcAS5DsY9wIh9fEr1Xbr+NrW85yxLT2j029AeTrm/ U9vwFVil6qqZIL6NzNMGp1AS4mDwsE4Yx8sIGIGGEMgA5RFQV4gKUknXGVZ6BbQbyH0KjwuS Yo4l4x24pSKvWfmDKUztDtTYA9z0+l1ravfnnfwuVGKp7vbKPzUVGpdwcd8xzbndHZvO8daU rHAWycqIQufqcjRtDN8Z+T24pvn1QLORcsASSZMsr2NP5/TNBvaub0+82bz7p7JvZNHaE0W1 aaFdb+K5jtWvU7X7I7A9n9SomvOe2TvdqlAtR3L0x5xs+iT3kbK7xdF9Z17y+AzwnYJy+Vxx Kb83zlmQFeHQmZJyYvnwwTUYPq5BeZFK7gOR4gBil3IiCN+SzhA9EYKg08QhxQlawAfTPpOI bKlqgRF0ukj9hDSIs4QGxa6FJvCTCvXEHVJmZMXYYSUe+dkilByXE2GoT1pjLoeAmUZAIiC5 1VkCRTsgaperskBTEhTUJovPEwTp6GuOfc6hai43VhitmGtejVu9qfrxCwY58n1OTa/BtVGj 3aBGp+c6E9OZ1dXoWqPJrDf264kzMx1v3Jg4xchfXI1zxhF5xqAEcods+5+IrRDOJEtYzDKB xF5IEgsUQjEFZETVg7lExpNH5PiIJmiUchoVq5+L+/WIVpZFDtUuINQ2kDIGHukBpiHOmwaR xdDH7vV0kzZpTQ6vj3RRxOqR7vanvmdZ3lndGVtW3x2f6qEiPvMtz1SSuIh0OfIXj/Tboan4 cQrNbrerhAU24f+SQIpDxIyro1Dsx2fVf+Y6jjM/i4LVM6d9c6Q23++n+n/97f+tK54cTj88 fEQ4ithOQE1GEAGc0P/lewKSDEn8hSBOmhMEIpSI8viHoLQjjGLon/CaqKTFL7E4F8ILflzh xA7vkdxgiQJwYUnU2x66oiREyz1w4rC9pBQqSj2hr2b09bff79BiPkGu77t36JcsUjuC2dfR aItppJpEBBxaGGmRFJKxSOiUyFWeFRsJ7TtfBa7ru1cnhNuQEHZ/NrWs3uhsAzItq2v33O+u LE1/fmpfmt7oasY0US8P0aeU8DxRcISmFFQm6ZYgaF5M6zZTVSN36FMgdWR5d2rf6zUmYLO/ LeX4ivaC/RJ2ynAj9DXbGksWGrlT11dir0F4zqzrebZ51oe7E9fzp/a0XomnzmzWeGQoR/4G wnutGnhO1zN75eK/UrYrz9ajVwOYfhwtJmgWQ+zBcpBxVZVHIUvzWg6HdajwUJZ/1Z909J5B iUxUl9WW3yslkfyHkC/o2CPngvWvKIpvu1Ye5VWjQHZgLD/Ci9JHI4Q2LtCIclw73NRw6bi2 Vo5rNNEyXeja+mrHb2gDi5l12ZuuMzLH/lnDb82tyXjknrr7hoa/1tQ25EJ95PHvczBQ/b2l dtLXS1TFmdLWeUH+xOkalP1vHEETmav9WJrRGAvoA1QzsyFoQQTL4ASKHrNlRAP0gezRQ7Li WEieBTLjBP1r8fjh4ccryu2dUr6uNN+9qvI2nlKUwmGX10hIJeP5zr8MUvUPC6XL5wvVvizR cwF6nuXavn32qqbr9t3p2Kq///jzT5xtssZvyBrLm9vW2D7LGtua98d9X/Uu30/b/vbh6fJN xXkiLNiSBdDMoyfJKTTuc/W6BVSfMt6snJcknfcedtF7eFfJutaXH5tZjuGgoPJRXwVB3lUE 66VxoKsVdLWcrjan0FBpBWk9DVdvld/KDzH8AwAA//8DAFBLAwQUAAYACAAAACEA1k+wgsoC AAC9CgAAEAAAAHdvcmQvZm9vdGVyMS54bWyklllzmzAQgN870//A8J5w2CYOE5xJcJLmzdOk P0AWwtCgYyTZxP++K06ntBlMXjhWu9+eEtzcvtPCOhCpcs4i27t0bYswzJOc7SL71+vjxdK2 lEYsQQVnJLKPRNm3q+/fbsow1dICa6bCUuDIzrQWoeMonBGK1CXNseSKp/oSc+rwNM0xcUou E8d3Pbd6EpJjohS4ihE7IGU3OPw+jpZIVIKxAc4dnCGpyXvP8M6GLJxrZzkE+RNAkKHvDVGz s1GBY6IagOaTQBDVgLSYRvpHcsE0kj8kXU0jzYak5TTSYJzocMC5IAwWUy4p0vAqdw5F8m0v LgAskM63eZHrIzDdoMWgnL1NiAisOgKdJWcTrhzKE1LMkpbCI3svWdjYX3T2JvSwtm9urYUc k39tsuZ4TwnTVeaOJAXUgjOV5aLb4XQqDRazFnL4LIkDLVq9Ungjt8v/jqd1XcoeOCb8pv60 qCP/nOi5IzpiEJ3FmBA++mwjoTCFveNJpTkprjfyAGkB/gAQ4HzkSLeMupqQD1iecBQ5D7No MepI+61eit3XpuVJ8r3oafnXaM/93i/NB/gMVjN1pztBfS2YlwwJOBIoDp93jEu0LSAimCEL xsCqOmCu0BXLbDp7BX8JAiTzUCCJnqHLMze+D9wYDkQjhQNWG6k3v79e3y0eQBrCn0jyM7Jd d301jx8WnWhNUrQv9MlKRd/I6vaijwX4Dg+oiOwfBCVEPnKuibQds67RVjX3VgkXBElDFxyK cu36bqfaqcCxQ3qdebAc6sh8l+keMwsqFad3+Ru3qgVJdbPYhF1dQLEWfipKiySGT5LVPb0e BdR+S3awmf9WzpnS8hWKa/oeKoEwqApJFJEHYq+szd3Tg2VMOsVx3hQxfdTkg8PTnvkLL4jj qjOyTpHxjeQ8bQxqmV4tqwqNc0pY0vsztauu8PO5+gMAAP//AwBQSwMEFAAGAAgAAAAhANgD 9svNBgAAylcAABUAAAB3b3JkL3RoZW1lL3RoZW1lMS54bWzsnF9v2zYQwN8H7DsIeh1SR/4X O6hbNG6DDkhbI86wx4KWKFsJRWkknSb59DseKVmKFctpk61F6AA2KR55x+OPR8sH5fXbm5R5 11TIJOMTP3h16HuUh1mU8OXE/+vi9GDke1IRHhGWcTrxb6n03775/bfX5FitaEo96M/lMZn4 K6Xy405HhnCZyFdZTjm0xZlIiYKqWHYiQb7BuCnrdA8Ph52UJNz3OElh2MPg66csooJ/Pad5 JpT/plDwgcEbV1JfCJmY6+Hprl7RVaA/pFgupkx414SBIL78zpvXnVKAqW25U3xZOSsQXXW3 5Pr4KsdDAaa25UbjUf9oMx4KkDCE+Wzr7gcn0w8nVrYiZIoNYw+m01G3Jl8Zv9cwt/GHflCT RyFT7DfIDwb9QU0ehUxxsC0fDKcnw5o8CpnicEt+MBp2p3X7UWjFEn7VuILlypQiccY+Noqf nlbEN1KdCkOmP1ftRKXkMhOnIIrLTFTCPXWb05iE0OMjZddUJSHxPtM11RrJMSUtAqHcKdC5 pzNN+L4GeGfJcqVazaiK7TBmI6ZN2liBTi1ch45M9/BjnDA2V7eMnkmcicxYEp3CRaxg93IB 8xUUreKa3FIQLHsiU38najVfkRwUBqhhKe3QS+nlmQQ78HLj2LoBPKksjUWAAGmiwHZzuVcN HOUwWFtiSCoU9fQA+yrrHf2YssAI7qktQNO2tZVTbtSGH9absHk8og+EYNg1qj0ZEkYj7Xcz QLEsz7hEdtZmIisS0YbLlfkF3TG8ntybVVDajXgaJxcDbJysN+C93cR4veZ9m/jjQXfgeyHJ J34McQOKaQ7jSb70PcKWcOKHykywfS/em/G4margsP+Q12sqciHVeyJXphc2Fcck39jfHfS1 H55mAg3BZD8reqPgf7QCP6pLS+OYhuqBK5sqtJlBGlufXrhet5YtlnqSP2vQ73/Xpt0oMv33 VVbZMJVtNP4xE/YJXhV1GFm21XUHhXGtYSonauXpN4A+ESGjqEIHo4vsHFbfK2Okpyb+wcgU RXlxATabi0abHuq/OkFKvfecbXz45M7GcRucvVvd9zvblmq+rnLU4OrO9hbVR0vxbQ5rW7dh 2eISdL+Hb4xrZq7IHGqmMBP4uWOX23sJnMpqTb/EcQnh6BBvOCDirdPy+kEAe6T4nrHjSDHB Ouge1YO1buKZFsKR00RR4bEktdu3cI4J+NUAp2fTi6xaO69FFt3OhMZSY+fJPDxNIHqfEalm RBCNqL6bVl/gLWYZ2JPZku+tMnHXdF3Lw+0ztPreN6Htlv+siaC+x/7kUi/hCBe4WhHVyqJa 4et0mumDGK3Doj2/hGJYhSLhIeirHFv5u7UCH9m4bmaJPpWb4B/ReAZzT4k4w0GgcI6FhEew oGbg8jT0QPyCLOZ3OvIdda0BKKRvHd6hIAGtME19R3PGT8QVNq/gW1DCl7M1D3FQs7bzPDSW hrNw6wuhOSNLiZMCxnCmpJEt91u19V1sjqRmOdu6WANtFzcIxGI9vyuL+laorHzOOMWiIosC H/DAOTjsap0maXaZGGLuNKJ2c2rf4ft64nMYQP/UIpIrqmtzLFmQbWMeojTXv6mw5I5+xOqC SApfHvVdl/VVDfmS7fqefPBnj5pYfT+s9WU75Zbb0E80Stap2cy77kOrcrtuRKty8jbdR7BT rEBRnFmmr1mQ7wcyq2I8Dvr4bXQfjIOXgLEJPj8PxujHcub7YFxHxIJhGek6RhwjTYxoMCwj PceIY6SJEQ2GZaTvGHGMNDGiwbCMDBwjjpEmRjQYlpGhY8Qx0sSIBsMycuQYcYw0MaLBsIyM HCOOkSZGNBiWkbFjxDHSxIgGw5QrPwzLosD4OY29JLopbJSh1S9wCkszkY37sYMWjEHjI/va LhvzH9m/7IT6YZHL/rgM1ktlbrNMcTBuC0VOoJJcMCmIYW9weD8D8fCqdHv6r2lVHsgL/4o5 DIgNvXGRw+gPjoJxkcOwLSaHYVselcMoMjw6gxE/VQbDBTbjrpcR2AwXqNvlBhwiLjfgGHG5 AcfIMzHicgOOkTZGXG7AMdLGiMsNOEbaGHG5AcdIGyMuN+AYaWPE5QYcI22MvNzcQJkSUDe2 8GBuwD2e8Oif9p/44YRaXHq2RxPKB61+sbikrf614xLZejThj/TygDU9E68bKDENtYcPdEMo TcOupw2sXZU4aDhEK1wqwR2VLpXgGHGpBMfIMzHiUgmOkTZGXCrBMdLGiEslOEbaGHGpBMdI GyMuleAYaWPEpRIcI22MvNxUgs0gdJr+yxK9UYJMi/9fatyou+B/avoXAAD//wMAUEsDBBQA BgAIAAAAIQAy0L62fAoAACQqAAARAAAAd29yZC9zZXR0aW5ncy54bWy0Wltv3DYWfl9g/4Mx z+uYd0qDOgUlkm2KJC3qFPssz8i2EI00kDRx3MX+9z3SjOJLPhXp7jYBEg0/ngvPjYcSv/v+ 864++1R2fdU2lyv+iq3OymbTbqvm9nL124d4nqzO+qFotkXdNuXl6qHsV9+//vvfvrtf9+Uw 0LT+jFg0/Xq3uVzdDcN+fXHRb+7KXdG/avdlQ+BN2+2KgX52txe7ovt42J9v2t2+GKrrqq6G hwvBmFmd2LSXq0PXrE8sznfVpmv79mYYSdbtzU21KU//zRTdt8g9kvh2c9iVzTBJvOjKmnRo m/6u2vczt91/y43Au5nJpz9axKddPc+75+wblnvfdtsvFN+i3kiw79pN2ffkoF09K1g1j4LV V4y+yH5Fsk9LnFgROWfT01PN9Z9jIL5iYDbV9s/xMCceF0T5hE9f/jk2embTP+zKzzOjvv4W 0x6ht9V1V3THwD3ZdbdZv7lt2q64rkkdsu8Zmehs0m78d9T4NSXN7227O7tf78tuQ5FzuRKc rS5G4K7allf7sq7JY6Hr2q7/MvxDV+xIgWpT1E+Qfnioy1+KpoyTerGqh7Ij1p8KWgiPjBL3 fl3U9dU4r79csfH35tAP7e7ZEOUAafJsaGLdv2l+Gy3Lx5G7shhLwrNZzWF3XXYvR4fRAM9G tlVXboajlmPB+Ln59dD0J8Zfg78UXXHbFfu75SnvZ8mLMz6MWswMNnVZdI/oaXRo9/JHsKxP VV+9XEIx2rYhQ02j74vdEZn8MHTF5uOv5UhGpWQa2pY3xaEeSIkrkjL7xIoTxeaOlrghjlf7 YkPi87YZurae523b9+2QU4HsKH+PFDdtOzTtUP7SPf1FBGMGnfPnk07Dk7CLl7Rls/3qxws+ z0dnNs8Ij+V7fDr0ZQxvi4f2MBzXNiFXx61hDBKy1eXqWbl/127L0aiHrvr2vJ08M0W2PhkR CmppK+soZSb/T86KZNyr6vfSNdufKPgr4jgV/f9Bgz9SoGxGyT9T4fjwsC9jWQwHcuNfJGyK lFhX+3fVWBfeNFvK5L9MWHVzU3YkoKI8eEfhXXXt/WTnMYuog/iL5FKE/ZMmU92WH8ZUy9qB StiPD/s7svX/wZMXT8OZ+qBtPz/8SpkzT2UsVdKJk6Yj+ogwJqx0EBGS+QQiSrNoMGKyFMtR JszbxQvEyCRkGNG5UxCxWigJkUQkBnPLJQtY61wrh2m8DAHLCcyZFCNKW2zRYESKbRAtszlC OFMsgTQjkkM5nJmce4jQH41ppHEarodLmzKsm7IygxHCLcvFAiJtBn3KrUnmXeYFksiYYxrH ojwV1ZcIecFCJDdKQm/zILiLGDEeI4IrkoQRm/IAESEk9o8QOsfxJoRROcwsStPIsBypxYLW SisOfSo0Ezi3heYmxzSJWdIgscLAOBApZws0qfU4T4VjLkLPCa9thrl54xWmCTy12HPUgC7Y OqoUe04yaXBUSaYkzlNCdIDWIcRraGtJIaKwBoKKGNZAMZ5iOYpZBbNeqkXdjA05RqxMGMxg QpzFNAllPbQ1ITHBuqVUYLGcTAsJs17mdHbC3HIbPcwS6ZVQmJu3OY4dGVRwAiJRSAOrmOJc xQVE5guI4iKFEaKUEDnUjVxq8P6jjHUKy7HGKkyTaLagQWJCgNmoEuvxvqBSFj3MeuVEKmDE ExIzWC2Vs1Fi3TLuJPS2yqitwdwy5e0CYgTeG1WuWIq1zg21TxDxhi3oFqzPoBxNqZ1DOZoq xQINBUi2QGNTB/2jlVIR5qlWxucws7TmC9GrNW3OMEu0UTqD1XKkwFGlacdY0M1xmWEkk17A eNOZUQwjXuZ4R9dBC1yrdOQ8wtgxtJ8l0D+GacogiHCpcTdouA44Dgw3icNypDIM1jdCAu7F DPWJDEYIWc3iXYZcajiMa6OMwXuWoQVZbAOjlMc0dCrA3aCxRuCoMokUHsYo9cO5xTbIjEmw BplJcVwbzzKNdYuUWJCbpV4V75qWcxkXELIcjEQrVMJhXFtpMg1XSqVfYm9bJfIALWqpccix HM2ZxzR67FEWkATvmrQxBQujylouIox4m2uXYhrPlYd5aj01dpibNymOXhtYgvM0YZrjc0nC yXTQbolUjkMvJMq6DNMo2gGhRRNN/TXmZoVzMOcSqyOOxMQajTuHJKV0wDSOTvwwSwgJHFsn Fz7FunnG8DuHJLAcn9GTQO0TzEZC1IJ1ok0NlJMyYTmM65R6fwGtk0rO8Wlq+V1NqmwiYY1P jUkV1sBYj9/ipNZ6fKpOU+ZxRUpTOp/CuE4d43hvTDM6FWDdcpYzGAdpLuWCHG8i9lwa6GSP NQjcJ3CljjEfoRw39hvQBo72QA394yRtmzDenGLew7h2WqUZrEhOG7ag9dggwJW6RGQC2tql QuHq4lJtkgWETkZYg4zUXkBsxFnvci5xRXK5Wog3F5hIsUWDlQHmj4vc4m7DRRHx6TCTLGhI k0muGcy5jKLAQLtliuVYNzpiCLxjEJIl0G6Zpl0Yc3PUyEPrZI4O3NA/WSaCgjmXZdbiHT2n DS2BnhuRHFo0F3yJm+IZ7q/z8WACbZDrpbcRuVUS93y5tTnu0vJU+RRrkFLPBb2d0w5s8Hqc tLheExIWbJBRYYY+zXPaoDESmMGVLw90lsArDeQ4jETlF2wdTY5pvOYLp0OvhcP1mo60Du/1 3qo8wPX4RMQFGmqFBIx4nxiZwv7Np9xKTOO0DDB6fWY87ga9p/YNr9RTeYNR5YNxuHPwwSqO 5USpFaShMJDYOoEbHmAVo6aGY92CZvQXI5bhXpnCzUZo0WBZgqt/oLMHft8bEpWl0AshsXT8 gEhqgsc2cCpgzwU61xuY28HbJME0kVl8bozMaGyDyFVuoG5RKI3fWxKS4XdPkc5FDvonKiUT uJ6opdDQ1nHctqFPo7YGn1iiMQKfxGMiPO4PYiIt/ooQE6UW5CSa4V0zJnTmx9ZxTOKvSdEJ J7DWOVP4XU30Y3JhxCYp9mlg8vi98eII9a+/263H+1TjbYPj0/gZ/2x3pMiL3XVXFWfvxhtX F+OM6+5jVjUzfl3etF35FLk6XM/g+fkR6HdFXceu2MzAZNDdelv1e1/eTM/1u6K7feR7mtHB 0W1589MXXuPdnrL7oWsP+yN63xX74+f5eQpXx1fCu3XVDG+r3TzeH66vZqqm6B6eQIdm+/On brLTo3nu18NduZuuObwtps/m09yyOf/t6mjsTd1djZ/Ey3fFfn/8sn59yy9XdXV7NxyvwtCv bdF9nH5c34oTJiZMHLHpR7EZV0azTw+PY2IeezJPzmPycUzNY+pxTM9j+nHMzGNmHLt72Jdd XTUfL1dfHsfxm7au2/ty++Mj/tXQ0Qj9XbEv/fFeDoVXexw4XdTpzz6ty88DWW1bDauzfl9t d8Vn8hE7vt48za6nay7P5o7YOHn/nMO2GIr5esEz4inEX+gy3hfaVBSOVw+768drQK+OitdV P1yV+6IrhrabsX9MGFfrbbt5Q5lET9O4cjxwd+o8uP4C6yP8L28MHbwyc54LHc+zVCXnSbD5 uRoPZE5Qv8vDv0+JOF/vfP0fAAAA//8DAFBLAwQUAAYACAAAACEApaE7oiwVAAA7zwAADwAA AHdvcmQvc3R5bGVzLnhtbOxdWXPcOJJ+34j9Dww9bOw+uFV3lbyjntC5dqyvseTtZxaJUrHN ImtIlmX1r19cJEEmQDJJqKx2jx1hSwTxEcgvMwEkrr/9/fsudL6RJA3i6Pxk/MvoxCGRF/tB 9HB+8uX+9tXqxEkzN/LdMI7I+ckTSU/+/uu//9vfHl+n2VNIUocCROnrnXd+ss2y/evT09Tb kp2b/hLvSUQTN3GyczP6a/JwunOTr4f9Ky/e7d0sWAdhkD2dTkajxYmESbqgxJtN4JHr2Dvs SJTx/KcJCSliHKXbYJ/maI9d0B7jxN8nsUfSlFZ6Fwq8nRtEBcx4BoB2gZfEabzJfqGVkSXi UDT7eMR/2oUlwBwHMAEACy/wcRgLiXFKcyo4KcHBzHOY9GlHvp84O+/124coTtx1SJGoaBxa O4cDs3/Zx36lyuHH3jXZuIcwS9mvyadE/ip/4//dxlGWOo+v3dQLgvOT+2BH9ekDeXQ+xzuX iv/xNXHT7CIN3POTiyRwQ+dLFFDlJM77O5a6vYhSfT4vhY9P2TfXfkKTv7nh+UkUhOJZ6EYP +UMSvfrCscsvF4/WgU+/5iav7i5YxlNZEfG/Ur19/Tf+36XP/8/iPSwA2WTg4TrOsngHHifB w1bzMskeCYngc7de3dO8KOwHWXy1wKeAO2pY1MzuhLXTVLJ5F3tfiX+X0YTzkxETDX345e2n JIgTatHnJ2dn8uEd2QVvAt8nkfJitA188tuWRF9S4pfP/3HLrVI+8OJDRH+eLudcn8LUv/nu kT2zcZoauTv66Q8sQ8jePgTlx3n2f+ZgYyliXf4tcZmjc8Z1CF58FMSE5UiV2uoxD7W687dQ H5oe60OzY31ofqwPLY71oeWxPrQ61oc4zHN+KIh88l0YIvwMQG3DMVgjGsdgbGgcgy2hcQym gsYxWAIax6DoaByDHqNxDGqKwMliz6SFirJPDdrejNveRvTDbW8S+uG2twD9cNsdfj/cdv/e D7fdnffDbffe/XDbnTUeV3S1nLfUzKJssJVt4jiL4ow4Gfk+HM2NKBYf/dnBY40eSaxU0gKM 8GyyIR6M5rn893YN4Ubavz3P2PjQiTfOJng4JCQdXHASfSMhHb47ru9TPIuACckOiUEifXQ6 IRuSkMgjNhXbHmgYRMSJDru1Bd3cuw/WsEjkWxZfjmjFKRQK7R6yLTOSwIJS71wviYcXLXat +Yd3QTpcVgzEuTyEIbGE9cGOinGs4WMDDjN8aMBhho8MOMzwgYHCmS0RSTRLkpJolgQm0SzJ TeinLblJNEtyk2iW5CbRhsvtPshC7uLVXse4e+zuKoxZvH5wOe6Ch8ilHYDhzY2MmTqf3MR9 SNz91mHxbT2sWmfsdy5j/8m5t9GmFUi2+vVcRa5orYPoMFygFTRbxlXgWTKvAs+SgRV4w03s Pe0msw7aGzvjmbvDOtMaLUfqZLR3bngQHdrh1uZmwzWsNIDbIEmtmYEe1oIGf2DdWUanDc9X lnJ4wUqs4WZV90pWiychLZQyjL2vdtzwm6c9Seiw7OtgpNs4DONH4ttDvMuSWOiaavITTkkn k7/Z7bduGvCxUgWie1Ofz/Q779394Ap9Ct0gssPbzaudG4SOvR7Em/v375z7eM+GmUwwdgAv xUSyLUwZCfzP38j6v+wU8IIOgqMnS7W9sBQe4mBXgYVGRiDFviUk2s0MosBKG8rx/pc8rWM3 8e2gfUqIWFyTEUuId+5uLzodFmyL+sVH6n8s9IY43v+5ScDiQoPRlEhfelj/Trzh3ulD7FgJ 5nw8ZDxkyHunPLc9uOEtewVueKt+z6N8dwFTOQuVrcANr2wFzlZlr0I3TQPjrGdvPFvVzfFs 13f4eE3ixWGcbA6hPQHmgNYkmANaE2EcHnZRarPGHM9ihTme7fpaVBmOZyGKxvH+Jwl8a2Rw MFtMcDBbNHAwWxxwMKsEDF9Uo4ANX1mjgA1fXiPALHUBFDBbema1+bc0MaOA2dIzDmZLzziY LT3jYLb0bHrtkM2GdoLtNTEKpC2dUyDtNTRRRnb7OHGTJ0uQNyF5cC3ENAXapyTesI0ScSTW XVuAZGHl0F5n+zeytoplIfjohmEcW4o5lV6d56yu6WrLdr8lu+Fj1U+h65FtHPokMdTJnJcO Su/2rifD12AarFM48B3fAXG3LaLgKsxi1JozHxVXsrV/UCfzxaQh23viB4ddXlC4yWAx7Z6Z a2El86w9c9lcV3LOO+aE31y05yy7opWcy4454TdXHXNyF1zJ2WQP127yVasIyyb9KQZSBuVb NmlRkVn72SZFKnLqVHDZpEUVU3EuPI9F0SE73WzGnL+b8ZjzY6zIjIIxJzNKZ7syQzQZ2Gfy LWDNJ8Zp8u8VqwqA3+c91U6e8x+HWMSzKxMx3Tc7vaW9kygljhZn2n1Cp+JlzHLs7G7MEJ39 jhmiswMyQ3TyRMbsKJdkRunsm8wQnZ2UGQLtrWCLgPNWMD/OW8H8fbwVROnjrQb0AswQnbsD Zgi0oUIItKEO6CmYIVCGCrL3MlSIgjZUCIE2VAiBNlTYAcMZKsyPM1SYv4+hQpQ+hgpR0IYK IdCGCiHQhgoh0IYKIdCG2rNvb8zey1AhCtpQIQTaUCEE2lB5f3GAocL8OEOF+fsYKkTpY6gQ BW2oEAJtqBACbagQAm2oEAJtqBACZaggey9DhShoQ4UQaEOFEGhDFVvw+hsqzI8zVJi/j6FC lD6GClHQhgoh0IYKIdCGCiHQhgoh0IYKIVCGCrL3MlSIgjZUCIE2VAiBNlQ+IzfAUGF+nKHC /H0MFaL0MVSIgjZUCIE2VAiBNlQIgTZUCIE2VAiBMlSQvZehQhS0oUIItKFCiCb9lNOKpuXn Y3zU07iSvfvUlSzUZ3WLswo17Q6Vl8qM1X2N/mUcf3W0G/KmfLzRDSRYh0HMQ9SGuWsVl687 QE18frxq3vmiog88jEjuEeBzpgB81jUniKnMmlRezQkGebMmTVdzgl7nrMn7qjlBMzhrcrrc LvOVH7Q5Apmb3IySeWzI3uStlexQxE0+WskIJdzkmZWMUMBN/ljJOHeYc67nnneU06JYxAkQ mtRRQViaEZrUEnKVu2NoGF1JMyN0Zc+M0JVGMwKKTyMMnlgzFJphM1Q/qqGZYanub6hmBCzV EKEX1QCmP9UQqjfVEKof1dAxYqmGCFiq+ztnM0IvqgFMf6ohVG+qIVQ/qmFThqUaImCphghY qgc2yEaY/lRDqN5UQ6h+VMPOHZZqiIClGiJgqYYIvagGMP2phlC9qYZQ/agGo2Q01RABSzVE wFINEXpRDWD6Uw2helMNoZqo5lGUCtUohpXsuE6YkhHXICsZcc5ZydhjtKTk7jlaUhB6jpYg VznnuNGSSpoZoSt7ZoSuNJoRUHwaYfDEmqHQDJuh+lGNGy3pqO5vqGYELNW40ZKRatxoqZFq 3GipkWrcaMlMNW60pKMaN1rSUd3fOZsRelGNGy01Uo0bLTVSjRstmanGjZZ0VONGSzqqcaMl HdUDG2QjTH+qcaOlRqpxoyUz1bjRko5q3GhJRzVutKSjGjdaMlKNGy01Uo0bLTVSjRstmanG jZZ0VONGSzqqcaMlHdW40ZKRatxoqZFq3GipkWrcaOk9zRJYOBrpbucmmWPvHLU3brrN3OGH 9n2JEpLG4TfiO+iqnj5W7nJi3+B3uNH3M1pRdpy3ssfIF8eZSkD+4lu/uHOJZWYlcuTtUvIx L7icY+U/JykdCMt3RqP5ZHl2IbW74V6sOOIT0ekf8jKndO96pLgXiqrH+Yl7yGIpJvXyLFTO 2g1bqLzVa7hwn63d1YXLrFzoVc9Ye7m46UtAsvUcj6/dTUboO2Nx/B47Oun8ZLLkNsZ++Xxg t7qpCPKqNt2NbXw7MTvE/Pc4ecOuYmMo5b1pmmvZ+IVtMBuvWfpHXrGJNPD0jyv2LfFMzmOr 97chBKfc1cY1uUX3C22XKw7GQN/Lq8MkLdTMPhacFkel8sSIHTwpU9hJlFJvqVvJn+afudq6 iUgtHV7+jnTpZuOaXs8meeMjaYsOu+KHt8Wrcw51qiSX+rFmx7cxnZhxMUp1Yb9x3Fgct/Xu W1h8t6+idNOFKed9IH0TI31S02r0yWxy0YVKn+rmNAROOhBYdc0DOA3CkoXcvxeJkKj8lSpR 6+HSnRqlKwVYk64qQ4Rsp0eQ7VdC9h9okfgz9ss7KsNUlFQndqk+z2dd/ANm68qdrWpGN/IZ 94JppqRcBr60L+4dC0ncLOYrvh6Lv8z7X9Rz8t4Xb/v5Y7YkkAItby3Y48yoMbmXt6Ixsw4a U/acfogC5S4Gq0BmjeGI9jUmEP9eibpU9Gc8P1tdXXbUn0sb+iOuBNXpj1yzZkd/5i9ff6S9 WNSfvL19To9zfI1ZGDVGjvftaMzi5WuMtBCLGsMRf7o2amnUGCl/OxqzfPkaIy3EosZwxKO2 UcfXn5VRf2T8w47+rF6+/sjcFvWHIz6zx5ks2d+6xrCr5Ep9uQ/YFeXXklAlgCGjApUARj7+ GqJUZ0alklTbUaqzl69UUuYWlYojHtUp/SgV8yi7ricPwTeEeeVlVsWpU/wqq7ryGW68MihO XuIWxTGXO2MzBA1l5jMIjfFpMclg1OzOqp2tQ6Ee9Ie3EVPARxl3FCX1v7sCiqZfkTB874q3 eYzb8KqMY9PU8YgfpFpLL6LVhvx5RNoAcFotjPi1WU/ExZ6B2HBlnA5gkzcacfPdf0Ml3VGH SzdZzNfUC1SmtBRJ2v0hf84umRMqg/Td3iGlfN2xF+pCExdy3Yr7gUFJeaLzH+5u/9+OfIeX TDomagV86ob+n2fh1LMv7OOU1mQ0yYOy+bu/e9VXGz0dD9mycoTfSBZ4rvOBiMvceMRWl+DR r14kAbWvL1HgxT5x3t+JMlc7YfyPXVGyeDoM7/L7nmRwziw2ZnGF1BZl0fJXy9ZDzJNMx3zd EHqepC4yR+z0NYpUSe8o2Qn/00Oype/k0xV1OYqn/Hv1SQwZudI132C2SQY4j6Nya/GvrsG9 vZ2NxrLgZSF50isZSSlb2HwWXm1hxTO72gvD51x7q/Ktq+JkxT38YFX8oWZdiKGYLqtLonke TYqo2rc8O5tf3chOXjdrLNZU642xSEbboqpNUzmKVrVJPLOrTVpl0slpOV4sxrLNA0pmc5b4 OVROL2PtvHEfr9jSdLMeUV3M+fMOvjLgHUbW+FDwBZfw1o0eaG7xO3+330TrMVzo4kIY+7G1 m3fdeQqcjRdrh3hiPiOPbYnLdQuDGmt9okaON+zvc0kItimqhKrqWPYNWTBMdDb7d2h+KjHC jqUqRultqm715nq5WuUNE675MYoO00Bp06DchrfZbHhXnkldlxNf0VcmC39ijk3B4ZhY99EU RLpdTa6v5VvGBky4V9mAzfmxILABq7rkpRg9MYFFLBZzcEN5ZUG7YeTBoSDSrIjSJlZWwVRS yoASe1wGlAa3bmV/QVxMwe9wqBNYubSijT41hKiANkYRO8daqqyvbmbjiZzDkhSUzdBY02UX z9pFVAkoNHWyavVrEpxTSqAmPW14rUmWSDn+CKEVIrqKd+y63vJkorqMlNsuk+IlnJjsaRQd LSyeRTh6o5PC0RqdIhfmeVB2p+A+h92VUhpuQvWi1sUg062YkCruISbUqCX54lS4YLWvlhTX RNRlUyTwD24VBvvVa3Qzmy8vxIuyZfvXiuxnX5ENuhF2dKmrAVaWG9c1TCY646Gml3/FaHeS t2pYYj4eXUt9bOxidVlLzKQwKGij4aLrsBbJhVg5bOJiYokLWcOOXKjTtN25aJsobeJKP4W6 hnz1WM/Rzcgen2+HAVIjxHpnk0ZMLWmEHKo+q3Xa14i/mi6IlcwmXZhZ0gVZ6a5LPpBx9yOp ht2Fyj+oZRYrj018zy3xLbuzf26+/6QMi5XCJoYXlhiWYfmfiOFnc/bWGRYre00MLy0xLLtn P63P/vPwLVbimvheWeJbxqN+Iot+Easg2+kVa2JN9J5Zoley+NOa80snuzxeQZ6uAOea4QkM +j3gx4hdX05HN3Pp9CTjFXGvRuyvxN4WGb2QuEISyriF/roJQpp6s2B/u8nVsFr9/v27Twlb cb1zs4z40GzoC07lDZ0EjavUa/Cl6T2PZDuuIDwby+6W6YXxaioDMKY3Jst81Znpjekiv0/F 9MZsnjNuemM+O2sp6WI2binpcjppKelqkt890CCwlpKOR6Nlm1Cp22sp63h8Nmop7HiyyrsK xlemy3zzgPGV2WKeG47QFhDorS8GuIoPSUAS5wN5ZDByhr/2lAUx1UdCo0vHWKzHURxjx8n9 zq2gzuZazXpwq1h3JDgrb3WWLWzkTaP5LJNuVB350BI553V3WP9OvMZZxlS+omMIzJypq9pA ombOTX7/Obzz7GJyNrmuULkWdZCdjuMah6bCdaHnc5ryHbNhaOdxzdIdZBEaMYL9TlD3RalN 4n7J0VTQu4MLvGDvTjYuP6B3N76ZjC9eYO+Ob1ABktuKxzphNW03JEkXB9HuES5n81F1YaOm vyZXODp5V2mh6SrVNtNMRR8FtOh2Bpay9nVZiiQbY8qckYYNT0Y5Il3CD3YCemU1bLLaKPuq OiqrQPqrKqtS+7osRdJQZVV3uv1VlfX+45WMAwEhq9ff6YQs02QowrTXW7PO1qyz5qW3mr0j XfZvVzZr54papP5r2dFRD4IUa6JnK55BtyYa7kDhjJtHtG2BxGPM4OUBlsqKnbwHd3RjhsHD LPYMR0Z2OaqBFekz8cmG8oK356oNX8/H9aNY2wJcTFn4+7oGKOSdjfMTP1bbI3GCcNEeqQqY L9EvtiG0tFRGKcNOPJOyvtt+bCl32mWX76dSdyHUtsz2EAvcA8TE0v9IxhchFqmCfcXCOhkR 7WdoV1+zPiFLxK+9VmGfI9wxmkxH+XyI9LrNS9RtBzhABeuyy1+wsma7whJOlK1yQ0yIDTjB OOfkOBEPQJN550Wh4/b3XfTR4v5Le2sCz6N830iSXYTBQ1GT9LAnSeolwZ5XoL9kwzB+JL75 gBH4hi3BYr3FdDYan1XlXOli3d6ORre39S7WRl/+QyHIoOc5KIUM2Z7Ay0MYEuh6+XZBmaYT W7mJfYD+aRod/dBkCsYm4PgFcX4v7Da3N0yVQ3UaXC5/CDuQ8nGLLMyrdpsrXjtGGlmbouxj /geU/aMYUfCTgYz9MxvHBvUWQNHpMgog/yn99f8BAAD//wMAUEsDBBQABgAIAAAAIQBoIMiy NxwAACx8AgASAAAAd29yZC9udW1iZXJpbmcueG1s7F3ZbuQ4ln0fYP7BMGCg+sG2SO1GZze0 VtUgq6dQmT31LIfltJCxQQrbmfXU6E+Zl/mE+Z/5gf6FodZQaKFESnIowjcf0hFaGHcjee7l 5eWf//pttbx48cMo2Kw/XKIb4fLCXy82D8H6y4fLv392r7XLi2jnrR+85Wbtf7j87keXf/3L v//bn1/v1s+rez8kD16QNtbR3et28eHyabfb3t3eRosnf+VFN6tgEW6izePuZrFZ3W4eH4OF f/u6CR9usYCE5NM23Cz8KCLtWN76xYsus+YW3/q19hB6r+TluEHpdvHkhTv/274NxNyIfKvf avWGMEdDhEOM6k2JzE0ptzFVtYYkroYIVbWWZL6WGphT+FrC9ZZUvpbEeksaX0s1c1rVDXyz 9dfk5uMmXHk78jX8crvywq/P22vS8NbbBffBMth9J20KSt6MF6y/clBE3ipaWIkPzC2ot6vN g78UH/JWNh8un8P1Xfb+dfF+TPpd+n72J38j7MN/+oq9WTyv/PUu4fw29JdEFpt19BRsix6+ 4m2N3HzKG3mhMfGyWubPvW5Rz+7SNjzZqSj3DfYhP5P/aplSTm8RCT00EjdRvNGHhMPfzClZ ESvc/zCXaErCRT0HkLwBXGtAWQQ9TTpvI5Um4Ye8WWon8tmakfNmou+rfVd/3X4ZZi0/hpvn 7b61YFhrP+/7/ms8DTO0lVlduSdEw4j59ORtyZCwWtz9/GW9Cb37JaGI2NAFMYOLRAPx/0Qr F3Gnu/wLwQrefbQLvcXub8+ri4NvPxOlE8xB3rwLfQI0wvhiCiuMx50fmqHvfY0fiVtZR3Gb dy/e8sOlm/xTrcvb+M7qebkLPvov/vLz962fPxMTu/STy+lju9V2md+0XRuLuqyld5Yv8Y2A /Ml/LCEmfxilTxHI466Kiw/+Ilh5WdPkzc/+t+LeFboprv/HIr+69B936eXtr2FCEBFF9jd/ hvwGkcfddkO0hDRBiJ+/3T8ZrGMRxA1lt8m3J2/9JQFsopI/nrR/m/x88rck8k59oAH6sLn1 IVuaI+kYz1ofkkTVR3x7fH3gAfpwuPWBbVXQXHPe+hA0qj7i2+PrQxygD5dfH7qqyYYya32o mKaO+O742pD4tZEaD5c2TEeVEEIKvzbun5dLP5NuRRn/+uf/jtE5hk0er3dh9sfdrHdRLPho ERAc8+n76n6zTF41iEwPLgTrXWxnjx6RaNZY0gqnbuUBus2EzqFbB+tY1R1jzrodNhHNQbfK AN1mgyCHbnXRwkgzBqC+6XU7bFKbg27VAboVuXUr60gR7CGIfnLdDpog56BZbYBmM8VwaNbV dUt1rVljn72ymlQb36WollMb+gBt6NzaUG3ZQbqZgadZ9rNByphDP0NcQREBO7aKdOr0+PT9 PgwefonvLZv1q8mq5op6I7YlH3fb5YJ8lARdEAT0Zho/9kB5KIk4RnIoidgrvNv56523C178 +InBktmwyoUb91mb5zDww4u/+a8l6VSuLqL6g2xSiyMZh1KLEf7IUvvXP/+HVW4YcY4Iv5On 47XSqCS1w2tsAkqN6LCDTSAg5g6HtSOAzkPRxH7+/HockcOse1zav+bX4ySRcwgfu8fFbugc e5wsHMGFPxRN7MXNr8fJKudY/UY9LvaQ5tjjFIlzCB/e41ixL9cClCDqpiqadiqAZuybXG1B vYYhWFiwsgWTskbH8TE5RsgDdcXfqepiRrBjcHVztXfK+3fgA8bi733s8Cd/+eLvgoVHOuaz XzLGhhtVUbze3af/W3GDqb2k14Pq99oTC29bvRQRgSythuu7MPhaWFt28aHx6uZ5twzW1avR k/ewea1c9Mn4HdXoXm1Jnyg0kV1db34NN5vHaqtrb/t582NY6izpjRdvHURPVX43y02YX5Ms E0npkPbkr3wrvvfh0lssyHCWovn48idCNhnYzGx1K9p6C6LaSrtVtr764bpyifjuQZwmVKX/ j/yCKOVXamp6zr+vN+vECBI+yO3kXybJx0d/UcgseTA1i4eC4fzt6I+45fgDYcbPPjc0GT0V Ql0sfS+sP0YuPAbLmNDSay9+uDOWwZeC1Xsv8mODyFVeJ3Lp7UX67Tqn0/einREFXvnaffAQ FN8zjfiL/2pQNpLuvixjgyMfQu8hG+vIlyj8cm8tw+RG+nxB/G3+VvZkZrLk4/3yOfwtbSX5 /hBEu9KXWCTp5+jb/uP34uPX/dWv+6ve8ss6E0M/0lKC0mdD/3FJNJ6YVAOBRHSlz7/GkaPs m79+2N8iX8r3Wtl6JL3AHs5mppgdGWj/Mx8lyPfX4lkyIn24DNcP2bfVlnAUxXlk+4YWuzAT 13rjEuvL2tyG0c72YivIhRdtlsFD/pP38dSYy7H0+5ngSaf3xYf0y8Jb+aGXtBM3SoBcuHva fAm97VOwcEMydOeNEit/2v0WfEmNLCAj/u4p9P1fdyUB7jJiw80uubj09hJexpnJ2efQf8lM NyExbzrXfJnAbbjZRuJDqsBvu/A5TnH+aS9DQiHBeb8XF2IufvEIwggOul36K97umaCRvdTK t+PpchOu9jfL8056/1M+ILY8Eu2+L4lRBYtP/i7Kri3Wu29kiIhnwPytHK9RIyxJdx8+q99c ZQsx/Sf2alRuv9gxDmIRR+Tt5iqbSfqzpylJCKJgL/4+Jntpptxo7N1cyawcIkFIpvqCxeTC mDzKo/N4c7WPU/dlE8mH0Dq5MCabyhRs3lypzJxi/RBrJxfG5FSdiNObq/0yLm/wu5QkMQ6z 2nTM3lxl63EM/Mra4YCUXBjGL6unzpWaKCiKIipuZs3snnoaVkGZp19W0Die+p9YNdFzcfeQ 1r7+NwHafvjR3xGJNtOLmentmYh3SG9fZJHQ+9tm5a2byRWZye2bxnlI7xho4YcriZ3anknA h9T2nfy7rOGHK5md4p5p5IcU953KO+zhhyuFmeCu5boJJ2W1V6rIAbEyT2/rO692jg4aO8Ed a33D5sau4UFnplfEk2TdI640b0HRDdmVqWne3RkYhqljFalGIYpCzAmnM8jAOEYKzaEkZpqB wZud+c4zMLiz0cdeD55tBkbHNPIGPW6mGRgdw/+xe9xcMzBEfSY5T3PNwJCUo+c8zTQDQ5p3 ztNsMzAQ5xA+vMexYl+uTXWCrkkSFrN4LC/2lWUk2LqRrZOW9VrCvootK4IuOz31OEL2/wjx nopVojh7n8cquyNCzBzxhVhqYBKZQ1iiBY2aOArj1b92lqqIEhXbqigs1eGfy8kS1eakNwoj 1CDbdEYnT+a4H7JUw1OTGZ3CbnQ1UNXL6OoIaBKjY49ddUGgnqhlOqNjj251gZeekGIyo2uM f9GNroYrWoyOFQRw7b4WDE0SDIUKAiANk30ZCNIwIQ0zGXIgDRPSMNOOmr2VPQlpmPlnSMOE NMzl4byT3oc0zDEQC6RhsrAHaZitbEIa5micQhrmOMyeaBomVy0twRE0FSHuNEzXtCxVx5MV UGVVBHjq43rqhZ1k38/cZ+92wpGsa1Ya96s54enqDrsTjnJPlMcNxxl4OvS5U8ZbXGx2hxeQ NyBvQN6AvAF5N3IKyHscZk8UeXNVOhUcJGDsDEyUcQ1F0rCbnYBQVlNiBVCmL2GyKgko09ct NSjT1wnEqgKCMn1tGUdQpq8XLKxKDcr0HQgIyvS1igbK9EGZvqMkiXPVghcc3ZBMmzvqrOmu gGXzVPLD2mDpGKS+YSj5c7Dyo7inXaSpi3sTa7gTd87q5YSg+8IIsu+QBla+0R2BPsh4miy7 q7gAyV2Q3AXJXck3SO7KNQ/JXTNeYmoLV4xH8PjrRm1xhFFpnmIxqM2VH5vwKVZ42rzsCWif YtmmzROehvwp1mLavNLJOJhigYXXc+Q6t0ogjp9iW5k8eFdNTNHWbDeHiGXZJ/qCVZOEyaok YNWkW2qwatIhIFg1aRUNrJrAqgmsmrxlj4NVE1g1OcaqSTIyMGNfhAwLGyp11aQH9rUlDcsu HOwJ2BewL2BfwL6AfUfvcYB9Afvy9TjAvnw97oSwL9fBnghjS8L0gz27sS9GmqAreV2qsl4B +wL2BewL2Bewby4YwL58PQ6wL2Bfvh4H2Jevx50Q9uU6Kg9hWxclnKWJcWTLu7LkOIZRyLXQ KNRogWqqh5feTxq9JluWti+bWqmmmrY+Xe3UzAWF9HpIr28jDdLrIb0+oQrS65O3+OZwqOBU ZQ8qOA3nESo48bMJFZwYQ91QwYmZX1a/PA7/sPvlEhIUUzNTztj9ctEwJUXTZrOLXdXP1C/X xeP55VUvvMnn7u9bT3VISO1Qj4ZqolRXb75ornaq3ZnBOYTx2eM5UXkXeE5G7wXPKfI7wnO1 MyjPHM/p0tHxHNfRtUgVJKSbGcO8OUaiLQnYdhsr4l9AjlEiiVKOkW1YlmK56SG+vbn+v3/8 9+Bu2IkDWlHgPlZtxFG2i7+vg8Xmwb/45RMVI8YrsI0vQKoRpBq9TceDVCNINYJUo7fscZBq BKlGR0k1igXGAYFVVcbGwC2mhuVoJnIS0H+oV4DADRAY0uwB+wL2BewL2JdBboB9Afvy9TjA vnw97oSwL9dRqEiXVckxsiVR9uV8RxctUVL3q9OFRiHN/mzS7E9jOX/C40Z5EwQgAbW/gUMC 6iD2IAH1rRIWIAF1NE4hAXUcZk80ATV2ldgRq6VpkmlRjxClIlZkCraQJ6DGc6f/MVh/zW9/ ii/sYWehvXnD2QP45D3vEv/wzJAsnMRUXISTmJawVRS2isJWUdgqCltF854+F0/9FN3vk/Wp T9lRPnHv9/Rd2rPwU3mdT64zfJGtWorgWCm57M6nq2uSM6PlEtj9CMsl5XZhueRUQBjs8Dz9 BRPY4TkOm7DD8xjoEnZ4vvmCCdfpoRg5FhKFTHTsmDXNx0I5bqgumKDkXyHNQnvjANobVjXF +VllLVXytSaGqczkdgDw6XEHM8W1iVkWGv2xQ5JHRhPsVKuJw7enWpF6xFHGxwjMhGNcWQKM LaaT8Ekmfnba1YoXFntlnbRPNZuzDyW4Gj+JMXcn/RPO0ewsqNVJK+69nSxMO/Myc1FLe28L ZDHOp2KyJMA8n2LbEJFOrYDVvV1MMrFmuYheMUGTFEdATlonoFsd5dTnbZLIkN/5SBxeEzaT 9ZBbRTKwmYxHarCZrFNAsJkMNpPBZrJEQLCZrFU0sJkMNpMdYzOZyHVeITZNSbZ0OxUAR2qu IGqSrDdi4n76Ok72LWwmgzNbiqvNCbdvcTTLsDXb7Dca1mzbsmk5clshP7WRQMhPhfzU/ALk p+b3JspPHTxtw05SFvZgJ2krm7CTdDROYSfpOMye5k7SxE9jd1ctwVVsIwO+vAs5ii5hgt0b U3ovanGtfoqDun8ckoGlGj57gqUaWKp5ox4HSzV8PQ6WamCphq/HwVINX487oaWa2MyYsa8o IAkrErWKSjf2JQjasA0h2w5X1utcsG9HOvD7xb7V7UOAffvJrbrrAbBvBfvKR/c2Z4p9q9nE gH37yU2fibc5V+wrKUf3NmeKfaV5e5uzxb7oaN4mK/blOvKQjMS6jHC2LMWxIU4RLUNw9+s9 hUZnmabUBkvHIHX83KM2ODgStVDuiIabRqUZyh1BuSNu8qHcUctiKu9MyXUymig7miQg6lY3 2kypGIJlFiusZalDQi8k9B5eOruE3rwMM6HgOLWWIG83/gh5u5C3W3yGvN2OGQzydo/lkw1m D/J25+LpDWYT8nbn6D8OZhbydqteKdeZhaKmOFjA2QkuHNtMJU1zpHT0PVQQeKXglR5egm2m eSvgroK7Cu5q1ii4q/ub4K6CuwruaiOP4K6Cu9qLU3BXu/mdgbsa57mxu6umYGDBzqyZ3V2V dN1wdSOD0mUFgbt6XHeVOad9vP7EyhuAlUHsAVgBsAJgBcDKKYEVrgPuRAth0eU/4E7XVcW2 HQArZxpbz2nLFHzuUfYex6E7iqKl+19q8fR0f1Dp8L30+IhpI+zp+Q4TR9ghTAjIG5A3IG9A 3o2cAvIeh9kTRd5cx/QR5K1IFqaGCbsrcsiiamFbMwqxFWpKrOBgt6k7juJYNdRRjq4NZ1eo R7GQefbKLjevfvjR3xFdNHPEfohfVyG5NlBSZckcwtJvm5W3buao8ZC/MF5MbmWpVuMN9Tn6 rF6UwuVkiWpz7Mf/dVVka8Meb2Z07AcDdtVSa4Mab2V0jccF0o2ufs5bH6Or12WYxOjYzw/s KkrWhh3ezOjYzxPsKifWhhDeyugazxakG12t0leL0TGCgET17CDAEVTJxdzhN8uVsCnLcILK mYbf0v8htbUxFAeprZDamn6G1FZIbYXUVohZt7AHMevhPELMGmLWvTiFmHU3v8ePWUtcB35K WFWRYlOrSFMr6aXRALsQWKGgcdzVP7FqoqNc9DAntDvyzEwvVyy9L7LoDCszk9tVdXo6tPDD lcROLVdYv+/k32UNP1zJ7BR3VKceNpV32MMPVwozwV1HyUw4KbPHc7tKWw+bVyeI1vKtevSd G7lisfTRt6NENu/cxnU6mIQNW9RVau277vVYJMiSIRmNAdmLPCjuKLIiqJYxyjjHPukxnw/G HKQtOIW1W1i7fZtRDNZuBxgdrN3C2u17XrvlOlJJ0hREFJ6tC/ECBkfQJFt3jUIWhSZKgGHW CVyAFwAvAF4AvAB4oZMdwAsDjG5GeIHrGBrJNExkSAMTvk0JW5olwxGMLIACjmDsITU4grFD QHAEY6to4AhGOIJxgh4HRzC2igaOYIQjGEfpcazYl+tgKVlUCfIVM0myJ44g0uOwY8I+B7ZI 33T7HO7z1rLwJ+xR2P9U456D/jsMYD8B7CeA/QSwnwD2E7TyBvsJWNiD/QStbMJ+gtE4hf0E 4zB7ovsJuE52kmVJx0J+XjDHyU62ih0Bn4pbeFq+3snBilPECicLAE55Vj/xqfr059+zmFR5 Z0quQyVkRTAxTqcTnpkS67ajWrZTSKGQOgRQjxJAhUIxYwVho7W3/bz5Mdx3Flp0dlYVZLKp LfqjppbDIPBFRveHUoSzPSp8/1AwmL8d/ZFGtxJ2/OxzQ5PRUyHExdL3wvpj5MJjsIwJLb3G EYdeenuhfrvO6fS9aGdEgVe+dh88BMX3TCcQw24gEGLYEMPOL0AMO78HMWwevxRi2D14hBg2 xLB7cQox7G5+ZxDD5jpBSVZtXXbsgXUDNAs72Gk+R+kC0voTSUBaP6T1Q1r/W/Y4SOuHtH5I 63/LHgdp/ZDWf5S0fq4zjGRLFVRVzVaVuGtmyTq27eYsjqpejzMwMFfAeC/Yt6M4BmDfZrl1 lUEE7NtR0+P9Yt+OyiCAfZvlVis/Ati3AvE6Cpq8X+zbURYFsG+z3Gq1V2aLfeVkzZQZ+7qK JKsW99FdDkG9upAuYBxq9DgZWap+phlZusiXkfU5WPlR3Ckv0qJEe2tsuBP34+rlhKD7nMYs tA85Wgc3unO0ynlGHclY2XeeVKziAmRiQSYWZGIl3yATK9c8ZGIdMxOrtsJ6ZqlYCOOzz8US lXeRiyWj95KLpcjvKBermqpw7rlYunTsXCyZ63wyBemaJCiZ6DjKTGEXY83eu5iFgsAnn4VP PsYuqaq/3eRd9/eiux1YyTJRklrYuMkov/yJeBfEHTTdjII+x0xTnT3Ac4DnAM8BngM8V2cW 8Nyb4zmuM/kUrNpIFagl82l4Tpc0w7UUKBs6NZ6DXe/x1WlWVOa/jb0doY5XuBTipdzZirBz 9dTQNexcPTN0DTtXx2QWdq5W0TXXAZbE5XORbtopZ+zoWtNdAcvmqdSUOhPIDGlJPCAa0pIg LQnSkiAtCdKSsguQlpTfm8jNPkXf+WQd4lP2ck/cdT19f/QsnExez5HrKGNFdkVZEzNVsHuO 2UnRWa5DWerjeI48B64fSLfX0dejuY7M5HbkBU0/VzJTjKo5EbLQY+YZebZkp1rFh/OOIvWY dsafL5kJT0qFlwmPLaaT8EnmS3ba1UpyWJws1kn7VPMl+1BSrU6UpDt10j/hhMnOglrNF4h7 bycL086YzFzUtny3zfusUybXCaiK6qiyrHEX8HdVSUNGfgBAWexcU+b2E/HBih/+yffi3bX7 iOsZpjk0crwX5+B47nUNokESRKmByZMgBEdRtLSEQC0JIi2xUEqzTUfkzsjtoLSIdMiEtIhy z+XCoI09dx+uGSOWc11zEmeRNNHI+T7oM1JQ6Lrm488ipaKR+X3oaLzo0nU9RDOLfItGAezj T6NGqa7rIbZZJGM0ymAfxBo72nVdDZDOI1GjUQr7QNgEQbPranR7HkkcjYLYB9Omib1dV5fq j5DgwXW8pqJLEpLULMzGW55REB3FNi2jEFuhwsRCZlCekbsM4bnXZ+SuM/je6zPylh/8PXgf 9Rm5yxCee31G7jqD77w+I3f5wbF73GzrM/KWITz3+ozcdQbfeX1GAvCP1eNYwW9seOzg15QN rDsDz+WRLcVyzXTx7FCvcwG/UJu8WS5Qm5xvXIDa5FM5B1CbHLDvqD7Du8G+UJu8RTBQm/zc a5NznUmpmJaGLJman9njXB7RxqaFGiuUV/UK2BewL2BfwL6AfQH7ssgNsC9gX74eB9iXr8ed EPblOpNScbGiiGnqLU+itawhQ1bkxnSHfvp606oWdXUxI9gxuDqdmnE5bVm+LiROS8i0HDMZ mxoSp1MiIE16DdvaxxlvoHocC3tQPa6VTageNxqnUD1uHGZPs3pc4kcx42zifonIdTKGOWoz m6qlKtJszto4q+pxJwcrThErnCwAOOVZ/cSn6tOff89iUuWdKblOpVI1Q5HFvE4q+0wpYccR BH0/fBVSh4jUOUSkkv/f+lSqY58ZkM0MDVEfenQHIjkQyemFziCS04NHiORAJKcXpxDJ6eZ3 BpEcrlO2VEsyVMW1U87Y8amDTMEWtAzfxtNrvEn/Y7D+mj+RXEhUw8oQ18EGqqNhLGPuWltw sEG5c7BSCwcbwMEGcLBBrsg6kXCwQT/S4GADONggoQoONkjegqUaWKqBpZpm2mGp5h0u1awT j3Gdeoqpu3PgPua/LyUj4G3yaO29dKBtfA/ldDS9l453zb+Xm1HTe+mY0/hekYfd9F7a5Rvf S8/fbXkv7W7N/OUeedN7qZ03vpfuK2x5L7Wu5veSPtrynt7+HqbRiVKXvPkHaYpANIvJx7HG FykmUzjmjS9SbAbRbBRRjAbRjAZRrKao6N74IsVsCjTQ+CLFboqzExpfpBiOSBUOxXIkGo+Y Yjk0FjHFcGiWiil2QzMbTDEb6shGsRqaJjDFaKjypNhMAoza3qOYDK0DY4rF0EYaTDGYZPpq G/Ep9iLSDEakGAymUSpSLEahmYxIG2louhcpNiNSSaUYjUyzUpFiNQr1RYrZpKHfthdpUxR1 yqcYDqJZuESxHEwzOYk2R9HUIVEsR6YNUhLFcjBNHRLFcjDN5CSa5dC6lUSbo6jqoFgOokqV YjkSVY80y6G9KFMsR6LpUaZNUrTeIVMsp/AuGl+kWI5CJZVmObQJQKZNVDQDkCmWI1JJpViO SP1FGrqh8kixHJn2iwoNF9MMQKFYjkyzVYXmStF4VGgAhzZ0KLTZqk7qzw+/eAtjZy19b/28 LXgq9fh0cfEv/w8AAP//AwBQSwMEFAAGAAgAAAAhAHQ/OXrCAAAAKAEAAB4ACAFjdXN0b21Y bWwvX3JlbHMvaXRlbTEueG1sLnJlbHMgogQBKKAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAACMz7GKwzAMBuD94N7BaG+c3FDKEadLKXQ7Sg66GkdJTGPLWGpp 377mpit06CiJ//tRu72FRV0xs6dooKlqUBgdDT5OBn77/WoDisXGwS4U0cAdGbbd50d7xMVK CfHsE6uiRDYwi6RvrdnNGCxXlDCWy0g5WCljnnSy7mwn1F91vdb5vwHdk6kOg4F8GBpQ/T3h OzaNo3e4I3cJGOVFhXYXFgqnsPxkKo2qt3lCMeAFw9+qqYoJumv103/dAwAA//8DAFBLAwQU AAYACAAAACEARjQp0+IAAABVAQAAGAAoAGN1c3RvbVhtbC9pdGVtUHJvcHMxLnhtbCCiJAAo oCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACckE1rwzAMhu+D/geju+sk60da 4pSmiaHXscKuruMkhtgOtjM2xv77HHbqjjuJR0J6XlScPvSI3qXzyhoK6ToBJI2wrTI9hdsr wzkgH7hp+WiNpGAsnMrVU9H6Y8sD98E6eQ1So9hQsV5rCl/NYZs9N+yC9/kuxeyyYficbWt8 yKuqYVWTnvfpN6CoNvGMpzCEMB0J8WKQmvu1naSJw846zUNE1xPbdUrI2opZSxNIliQ7Iuao 1296hHLJ87v9Ijv/iEu02an/Wu7qPirbOz4Nn0DKgvxRLfzwivIHAAD//wMAUEsDBBQABgAI AAAAIQB/ZDtSswIAACoLAAASAAAAd29yZC9mb250VGFibGUueG1s3JZbT9swFMffJ+07WHmH XJpeRUFAyTYJeBigPbuO01jzJbKdln77HSfpaEnLmg3xsFht7XPsv49/Pcft2cWz4GhJtWFK Tr3wNPAQlUSlTC6m3tNjcjLykLFYppgrSafemhrv4vzzp7PVJFPSGgTrpZkIMvVya4uJ7xuS U4HNqSqoBGemtMAWhnrhC6x/lsUJUaLAls0ZZ3btR0Ew8BoZfYyKyjJG6EyRUlBpq/W+phwU lTQ5K8xGbXWM2krptNCKUGPgzILXegIz+VsmjFtCghGtjMrsKRymiaiSguVhUPUEfxHodxOI WgIDwtJuGoNGw4eVWzqGdpPpb2TMWtBnDwky+baQSuM5ByVAg+B0qBJ2726z8yY30GoisYBZ D2sxV7yyF1gqQ0NwLTGfekEfWhg4ZsNgAJ/9YOj5biLJsTbUadQTo9qcYcH4emNNKYFILFvS 2lswS/KNc4k1c1HWLsMW4CjNPACx5vFqSwh5v2uJWnN6uxZS6Yx2LeHWHNjTrym0aDwyQQ26 pyv0XQks92KJoA2CHuCI4RVBL96PpdrpNRZd6XYhcgMxRzdJ8kLkGizDUf+qRWT8FpFqGNY6 xxO5VqVmVDsmB2gMgcC4ouJoxJ1oCJVSvQ9Hxp5pejyLuPcRLH7AJeQuX3OgXFrP/14uXylf UssIhvQoaUUFc3sPvk3kd5gvSom+KJsz0pyslUEBsOs127lRlwzCpVXdysl9T9F2CjnDcDxr lVP4JrHGEHYjdglhcfQkGfyMU3T3cKCmruCGiauaqtt+IqO9RMyKGdMJSTJMkstkG8nNeJa4 5zWS3sZyAEkv6V5Vu0mE7mjKSvFPXOLZ+3C5dKG3UgXuufbNG/05VcbVqr/mcssWud1XYtdK zyk/XFvxx9XW+wKDvxtvA2s65vwXAAAA//8DAFBLAwQUAAYACAAAACEAWZfhV1oBAACfAgAA EQAIAWRvY1Byb3BzL2NvcmUueG1sIKIEASigAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAnJJdb4IwFIbvl+w/kF4PCmg2Q6Amung1k2W6bNld0x6lkX6k7VT+ /QAFZ+bV7tq8z3k455R8epRVsAfrhFYFSqIYBaCY5kJtC/S+XoQTFDhPFaeVVlCgGhyakvu7 nJmMaQuvVhuwXoALGpNyGTMFKr03GcaOlSCpixpCNeFGW0l9c7VbbCjb0S3gNI4fsQRPOfUU t8LQDEZ0VnI2KM23rToBZxgqkKC8w0mU4AvrwUp3s6BLfpFS+NrATbQPB/roxAAeDofoMOrQ pv8Efy5fVt2ooVDtrhggknOWeeErIDm+HJsTs0C9tmReaqsd2IdgBr7soD5qd1tR55fNM2wE 8FlN3gQrqeXBqtRsB3WO/yJtlYW9aF+SpB0xXPPzWk6fAB4042Sn4fvkYzR/Xi8QSeNkEsbj MH1aJ6MsHmdx/NV2d1V/EcpzA/829gLSdXz9S5EfAAAA//8DAFBLAwQUAAYACAAAACEAZ9oz JqAAAAD8AAAAEwAoAGN1c3RvbVhtbC9pdGVtMS54bWwgoiQAKKAgAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAArM9BCoMwEIXhq4QcwEgXXYgKQruthUBX3SRxNIEkI8kIevsG KT1Bl8P7+GFa3UjckoHMJHgwBJOkw0PH38NzkG4ne58cOYzjPDsDY/QuQrVnz9kJHyoUXCxn L0i5wI5fOduDj7nRHbdEayNENhaCyhWuEMs2YwqKypkWgWf4hmYLEElc6voqtNPe4ZLUao9v 7C+pvhW/h/sPAAAA//8DAFBLAwQUAAYACAAAACEAL0lu9/UBAAAVEgAAFAAAAHdvcmQvd2Vi U2V0dGluZ3MueG1s7JhBb5swFIDvk/ofkO8NNmADUZNKVVVp0k5b9wOMcRJr2A/ZTtLs18+Q pEmXHcppHLiExzPv4718lkA8PL7pJtpJ6xSYBSIzjCJpBNTKrBfo5+vLfYEi57mpeQNGLtBB OvS4vPvysJ/vZfVDeh+udFGgGDfXYoE23rfzOHZiIzV3M2ilCYsrsJr7cGrXseb217a9F6Bb 7lWlGuUPcYIxQyeM/QwFVisl5DOIrZbG9/WxlU0ggnEb1bozbf8Z2h5s3VoQ0rkwj26OPM2V eceQ7AaklbDgYOVnYZhTRz0qlBPcR7q5AOgwQHIDYELVwxjsxIhD5RXHyWEYesa4g5ZvKNJi /nVtwPKqCaTw10RhuqgHd7/dzZZhh9Rq507HaD/ves8wTTLMin65gvrw3C/teBM2H4q7bNge 3+TKn7P4PftdrTf/SL9Ce5t8Au9B/5UPbTzVtov8pcaEbY3CifvdXdcFLRfyFAtoIOxGvvVw RDRXnQ2rrD50NKzWXk8+pDS+DH0MP9pICWOElaycdIxCB82LkmJKJx1j0JGxhOYlZmzSMQ4d GUmKlGWTjjHoKAuCi6wk06N8FDoIpkVKS8rw5GMUPoo8LwpWJvnkYxQ+SpZmJC1ZMvkYg4+E EEby8ECfXnb/m4/j0fXB1cec5R8AAAD//wMAUEsDBBQABgAIAAAAIQCWQys83wEAAOIDAAAQ AAgBZG9jUHJvcHMvYXBwLnhtbCCiBAEooAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAJxTwW7bMAy9D9g/GLo3ioMtWwNFxZBi6GFbA8Rtz5pMJ8JkSZDYoNnX j7IbT9l2mk+PT/TjE0mJm5feVkeIyXi3ZvVszipw2rfG7dfsofl89ZFVCZVrlfUO1uwEid3I t2/ENvoAEQ2kiiRcWrMDYlhxnvQBepVmdOzo pPOxV0hh3HPfdUbDrdfPPTjki/l8yeEFwbXQ XoVJkI2KqyP+r2jrdfaXHptTID0pGuiDVQjyW/7TzlqPveATKxqPyjamB1kTPQViq/aQ5AfB RyCefGyTrJfLa8FHLDYHFZVGaqG8fl8TXxDiUwjWaIXUXfnV6OiT77C6HyxXWUDwMkXQNXag n6PBk5wLXobii3HZC1UYEZmLah9VOCS5WGSLUyh2WlnYUAtkp2wCwX8T4g5UHu9WmezwiKsj aPSxSuYnDXjBqu8qQW7cmh1VNMohG9PGYMA2JIyyMWhJe4oHWKaV2LzLvR3BZeIQDB4IX7ob KqT7ju6G/zBbl2YHD6PVwk7p7FzjD9WN74Ny1GE+Ierwj/QQGn+b1+O1h5dkMfgng4ddUJqG Ute0HOUOFGdiRyy0NNRpKhMh7ugO0eYK9K/bQ3vO+fsgb9Xj+GRpFWdz+oY1OnO0CtNbkr8A AAD//wMAUEsBAi0AFAAGAAgAAAAhAHbk5nqZAQAAsQcAABMAAAAAAAAAAAAAAAAAAAAAAFtD b250ZW50X1R5cGVzXS54bWxQSwECLQAUAAYACAAAACEAHpEat+8AAABOAgAACwAAAAAAAAAA AAAAAADSAwAAX3JlbHMvLnJlbHNQSwECLQAUAAYACAAAACEALvtM3z8BAADNBQAAHAAAAAAA AAAAAAAAAADyBgAAd29yZC9fcmVscy9kb2N1bWVudC54bWwucmVsc1BLAQItABQABgAIAAAA IQB1iHUJxSIAAN2KAAARAAAAAAAAAAAAAAAAAHMJAAB3b3JkL2RvY3VtZW50LnhtbFBLAQIt ABQABgAIAAAAIQBwQn9EVgIAAOoJAAARAAAAAAAAAAAAAAAAAGcsAAB3b3JkL2VuZG5vdGVz LnhtbFBLAQItABQABgAIAAAAIQAYYmnd0AYAAO4dAAASAAAAAAAAAAAAAAAAAOwuAAB3b3Jk L2Zvb3Rub3Rlcy54bWxQSwECLQAUAAYACAAAACEA1k+wgsoCAAC9CgAAEAAAAAAAAAAAAAAA AADsNQAAd29yZC9mb290ZXIxLnhtbFBLAQItABQABgAIAAAAIQDYA/bLzQYAAMpXAAAVAAAA AAAAAAAAAAAAAOQ4AAB3b3JkL3RoZW1lL3RoZW1lMS54bWxQSwECLQAUAAYACAAAACEAMtC+ tnwKAAAkKgAAEQAAAAAAAAAAAAAAAADkPwAAd29yZC9zZXR0aW5ncy54bWxQSwECLQAUAAYA CAAAACEApaE7oiwVAAA7zwAADwAAAAAAAAAAAAAAAACPSgAAd29yZC9zdHlsZXMueG1sUEsB Ai0AFAAGAAgAAAAhAGggyLI3HAAALHwCABIAAAAAAAAAAAAAAAAA6F8AAHdvcmQvbnVtYmVy aW5nLnhtbFBLAQItABQABgAIAAAAIQB0Pzl6wgAAACgBAAAeAAAAAAAAAAAAAAAAAE98AABj dXN0b21YbWwvX3JlbHMvaXRlbTEueG1sLnJlbHNQSwECLQAUAAYACAAAACEARjQp0+IAAABV AQAAGAAAAAAAAAAAAAAAAABVfgAAY3VzdG9tWG1sL2l0ZW1Qcm9wczEueG1sUEsBAi0AFAAG AAgAAAAhAH9kO1KzAgAAKgsAABIAAAAAAAAAAAAAAAAAlX8AAHdvcmQvZm9udFRhYmxlLnht bFBLAQItABQABgAIAAAAIQBZl+FXWgEAAJ8CAAARAAAAAAAAAAAAAAAAAHiCAABkb2NQcm9w cy9jb3JlLnhtbFBLAQItABQABgAIAAAAIQBn2jMmoAAAAPwAAAATAAAAAAAAAAAAAAAAAAmF AABjdXN0b21YbWwvaXRlbTEueG1sUEsBAi0AFAAGAAgAAAAhAC9Jbvf1AQAAFRIAABQAAAAA AAAAAAAAAAAAAoYAAHdvcmQvd2ViU2V0dGluZ3MueG1sUEsBAi0AFAAGAAgAAAAhAJZDKzzf AQAA4gMAABAAAAAAAAAAAAAAAAAAKYgAAGRvY1Byb3BzL2FwcC54bWxQSwUGAAAAABIAEgCR BAAAPosAAAAA --B_3607670956_359145768 Content-type: application/vnd.openxmlformats-officedocument.wordprocessingml.document; name="FCC NANC CATA WG Report-Revised Clean.docx"; x-mac-creator="4F50494D" Content-disposition: attachment; filename="FCC NANC CATA WG Report-Revised Clean.docx" Content-transfer-encoding: base64 UEsDBBQABgAIAAAAIQB25OZ6mQEAALEHAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIo oAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0lU1Lw0AQhu+C/yHsVZqtHkSkqQc/jiqo 4HW7O2kX94vdSWv/vZN+BJG0Kba5BJKZed9n35DM6O7bmmwOMWnvCnaZD1kGTnql3bRgH+9P gxuWJRROCeMdFGwJid2Nz89G78sAKaNplwo2Qwy3nCc5AytS7gM4qpQ+WoF0G6c8CPklpsCv hsNrLr1DcDjAWoONRw9Qispg9vhNj9ckEUxi2f26sfYqmAjBaCmQ6nzu1B+XwcYhp8lVT5rp kC6ogfFWh7qy22Az90LRRK0gexURn4WlLr7wUXHlZWVpMt8v08Lpy1JLaOZrtRC9hJQoc2vy pmKFdlv+Ng5ZJfT20xquEexr9CFdHo3TiNZ6EFFDk+HOLFxlJxCJ/vRhNNKdEAmXBtLpCda6 3faASAN9AGyUOxEWMHnrjeKXeCdI6T06j328jUa6EwKc6olhq3xQDhCP/yZbU4B4gD/5iYmB Pgg20p0QSCsB1tfjk1jJ7LOkztWPkFZM/Mextzuknh6Eg/6AjSNJH30+qNeTAtXizVcLd/wD AAD//wMAUEsDBBQABgAIAAAAIQAekRq37wAAAE4CAAALAAgCX3JlbHMvLnJlbHMgogQCKKAA AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArJLBasMwDEDvg/2D0b1R2sEYo04vY9DbGNkH CFtJTBPb2GrX/v082NgCXelhR8vS05PQenOcRnXglF3wGpZVDYq9Cdb5XsNb+7x4AJWFvKUx eNZw4gyb5vZm/cojSSnKg4tZFYrPGgaR+IiYzcAT5SpE9uWnC2kiKc/UYySzo55xVdf3mH4z oJkx1dZqSFt7B6o9Rb6GHbrOGX4KZj+xlzMtkI/C3rJdxFTqk7gyjWop9SwabDAvJZyRYqwK GvC80ep6o7+nxYmFLAmhCYkv+3xmXBJa/ueK5hk/Nu8hWbRf4W8bnF1B8wEAAP//AwBQSwME FAAGAAgAAAAhALKzPRXaAQAAggsAABwACAF3b3JkL19yZWxzL2RvY3VtZW50LnhtbC5yZWxz IKIEASigAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzJbBbtsw DIbvA/YOhoAdZ8VulrlFnVy2AT3ssmXAropEx0ZlyZCYJXn70c3ieFsr1ICA9iha/vn7I0X5 dnVodfILnG+sKVmWzlgCRlrVmG3Jfqy/vC9Y4lEYJbQ1ULIjeLZavn1z+w20QHrJ103nE1Ix vmQ1YnfDuZc1tMKntgNDTyrrWoG0dFveCXkvtsDz2WzB3ViDLf/STO5UydydovzrYwfP0bZV 1Uj4ZOWuBYOPpOA1KTndmHsSFW4LeJL1pIvWap82gNWDVo2t5q6SRZ4vzpu/WkU+Ph8QnBGa 8ccNZ1cv7vjDRMdRGSO9Cxe3D8tTMEtJ7CkTUal5PGpq1MHEaR1K/zFmejDKWBwbOEdCFrL8 xRtnPrFxolKrrMG12OhR8wyhELeo2Myu3YCj6XcxMYSCxeunREQU1CxuzKFfB89PFjO/3Hm0 7U/KNlhI00uUNwht0E10Gv+cpyEURBKVSeBA7ff7lHaelJSVhMkB75xVO4mp8N1h1agyX2Tz 4l0+m3bG+lke7Rv2sPkOiNTLI5ajYJBmVCdP0PwDsxMOF0UvNXEg9XBfUcWLq/nEu7ifwPGu wf9qfY6ECn39yhjm1/01M6ULokKM/c/Ix5b98jcAAAD//wMAUEsDBBQABgAIAAAAIQAxYf1i iowAABKlAwARAAAAd29yZC9kb2N1bWVudC54bWzsfV1v20iW6PsF7n8g8pQATkxS/JAy215Q lJT2TnfaiD079wIDLCipLLFDkRqSsuN+6h+xLwvs/rn+JfecqiJFUmSRIiXH7ssBppNIYvHU qfNd5+Nf/vXbxpMeSBi5gf/DG+WD/EYi/iJYuv7qhzd/u5u9H76Rotjxl44X+OSHN08kevOv V//7f/3L48dlsNhtiB9LsIQffXzcLn54s47j7cfLy2ixJhsn+rBxF2EQBffxh0WwuQzu790F uXwMwuWlKisy/ds2DBYkiuB9tuM/ONEbvtziW7PVlqHzCA/jgtrlYu2EMfm2X0M5ehH9cnQ5 PFxIbbEQ7FBVDpcaHL2UcYlQHSyktVoIoDpYSW+3UsnmjHYrqYcrme1WGhyuNGy30gE5bQ4J PNgSH768D8KNE8M/w9Xlxgm/7rbvYeGtE7tz13PjJ1hTNpJlHNf/2gIieCpdYTNYHr2CebkJ lsQbLJNVgh/e7EL/I3/+ffo8gv6RPc//SJ4Im+yfPTLhwoHu/DIkHuAi8KO1u005fNN2Nfhy nSzyINrEw8ZLfve4VRqyS5V4mjBU7hdsAj7H/8ZjkItXVOQGJ4JLpE80ASH/zgSSDVDh/sWt UJNBrtJQgCQLqAcLGAu3IUknazBswn7gycw6ETluGT1ZJnra7Fn9cbvqRi2fwmC33a/mdlvt es/7j6iFj1iLU12WE6JuwNyunS2IhM3i4/XKD0Jn7gFEQEMSkIFETwD/C6ciIdO9uQJTYR4s n/DPLXyjfdw6oXMNp22MbM0eWuob+ikI2hg/Nfn/4NOPYJYsv/zwRpa1sabLg/Sjm5B+qOnG SE4/nJB7Z+fF+I2hyeZoSF+9vQnpH7fxkweAfXxwvB/ejAEe9c0lfhGy78NZ4McRfO9EC9e9 A7TApjbOr0H4o+VHLr5kjX85/IauEv2WLK0M8ZNLvvBlCsA8CL6iariNQafAj5HcKey+gwv+ x6dg7Cy+stWS3079ZfpLBmwpAs6/jcePsTPn/2abOjzNwURXpjMNz+3Ep5n/+U1h56UHfOfG HjnlAS8CL0Ds09WdXRwUEaYZZedejip5rOv6xMDNPgOq2EdNUPXrIvlwAcqWhC8WgYY2HU/U 4ahHYEsEavpsaJvm+KUx6wtE4OPZpe6RgIEwvvpCtgGokcCXbolHFmhbS8G99CkAV953/AWR rF28DkLwPSRw3qU7d0O8J2lCtl7wRJ12+PXtj9Zfp58vb++uv+DisVi+m5o8spTBdyOZ8ZLt PdgmaPFdj2HKI/eoUvMfzoM4DjYHH4fual3yYxI/EuIffu6kB8M/Q+RwULoSK3Gi2Ipc54c3 Vug6nvQ3312Aiyb9fCugGPhmEZU8Uaq/8RMbgaCfqdyKmC9LNtVAaAxkExTXuInaGmkDS1Ua UwC312oooMqEO6fQmNuRkEe3zgJM4uSL91rxHAYc59lz0CpMxHPLmfPvBYXIZ+uzLdmO51ER BAfiLqjvnxMxmc3WCYzT7/80G0V3ii4Fb9qGJCLhA3lzJVVt81Wf6V24i2LJ8hegUqS/B+FX XJO6uA0Uh2yMBuDyI3ufWGzwn9NX1siI02C7zs0rR4AuW7KsDpr4uX9OBKj6UJHNodYAAe1M hywCXp6d8D0tgpxcUOn/yk+yralwfhG3h5TBvhdMc3x1/LRFCeysqAuRF0TRMuZ/cEjKAEIH ZEMi6TN5lL4EG8fPn0TJlxTa0m/wIIofC+Xzfm+paM6cAv1sv18MqXFBrgyHmq7reK1AH1sG ixsnjH+Z/5r51yfQwiR8Sh66w1AdGv42bB8Uc5R7FCjnnzvC3pdd7TKDP/jL1F8KcHm8/mL/ 5VrMD27CILgXHjuDJwUD/s63g/8qhAlU2VI0tbXcMRXDUDDI0MRl4T+mUJTJ4rtf7B+Jgxer iXgoZZ/MMqB3iyfWQN0aU0PVTB2By2xaHWqmMR1a+U0bujU1GsrV4maUBnrF9UuEW/bLKf/s gExyTy6iOPPx2F1y4smTS4ZvigRTjmrFkmcDnW7y3lvaayrD+d/uqFSZk5VLGbjCnMus4PpR HN4BtivsQsCY9I9AeqO8h5P5x1r6x2/SP3bUWkyfbPKaCkAjgscfZ0Qg4BO+CT3X/4qnQk23 H978x12w0BVVV0xtiPbIx7UbxUH4BFqASWwBeTBYbAsFfE685yjjx+StxSPK2pNKjo7LX/s6 iCsfGX82BF77cRgsdzTwcxwus9t6JPMf3eWS+Edu6Kjljmatti+q48Ab69P0y3Qm5XgAWbGO CdsBdG4ElrF897O/0k5NThXgE3+Zs9dSaVWl17SxbqrKqKjMrZk9nOpUljXQa6amg+FEN/An 0mt1kp4aKt9H0qu9pO+GwOk3stjF7gORbnebjRM+9eK+vbgf9OK+QF76SxX3xnAsK+CH5MW9 atimOVHsXtwLxD2qyO8k7ge9uO+GwNIb3PsglGAv/MJWskkYu/d4rUKkWehsyGMQfu3VQnu1 oPVqoUCG5ktVC8Bhk+nYnubVgmHPVM2y9xcnndUCj5IDF0T8z+RLvETARbdB9MOb4ZAHyjM/ oDcH+AuPOEsComEZ7B8YDXT6BKKXr/1nUj36c6ieYvj+R+I9ELxmlj6THUkRcfCFQOwOPvQh qcb4L0fhbOfTcJTjSVOPYI5RhJFr1FtlSq3XV+31ld7rqwLxvVh9pWozW5WpXMzoK13WLMUY 7/mw11ffR19RdL9KfdUH1hrjvxyFucRZp9dRghe10VFGr6MKBDd6qTrKNM2hZmmF/LTBdKwb 1nSf/tBZRw2a6ShlkGQf9UqKshLNVPlO8bwPau8ZddY0d9fvP1mZSo0bVkvZq5f26sXs1ctr US+6bevW2J7k1Ys5sZXJVG2akNarl7OpF1p38/3US+/IdEQiVy/jwAmXvZI5pZIZ9kqmQGuK /FK1jGro9kSZFfIFjJlsqfYgLS3stcz30jLUj/x+WqZPTOiIRK5l7shi7bsLx5Os5YMbwWFK drDzF67Xq55Tqp5Rr3qKqufIOMQzOjjKTDYGOkq4rIMzHs+s0eCE8bP+jqeN5mGFo6/yjqdX Wo3xX45CZGpnEZMQTt9d0HyE/qbnxKpqJPeqqkB2L1dVyVNVVidyIR1BnQzN8VAtVMT2qurZ VRVNYHyVqurIsrFeVRVR+CVgld4AujSz7V4htVdISq+QCsSlHGlJPqNCGhhjG9ykvELSRrZs GXZf5iNSFt+xfr+X9h0ReBN47uJJspYANJwgsHwQ9mU+R7yojV7oi/0P9MKLrfbXR5opT6aF an9lJE+N4bR3VL637nmWjgJncFS0Pputq+oS1PmUabVeYbVXWH27gtejsBR9atsH4w80Yzib WDj75xDM5KNeYT2DwnqWnghnUVh9flxj/JejsFDo0yup6he1UVJ984QDJfVim+oMhpPhyDYK Skofm8rYUvtom0iBPEtng3IBdiQ59RqgiMD82JM+xNbsRW2UQd+Z4EAZvNjWBOCaaNOxWRjn ottDW7UmJ2yo2XssrRTOa21NoPchtq766mfXI3DuPulTqDvoor4DwevRRYoxG6lsBFhWF01t eTpWaOym10XfURc9SweCs+iiPnrWGP/lKLz2caie++D+RpbSjQP+0sLFwfb93IEuuqlvX3Cg m15s/wJjZsrWUC6kIgzMAeZSnzBo1uumPBU31E3P0r7gLLqpL+9pjP9yFFrLpctTEewA9FTo 9w5TB6XUtzsoKiX1xbY70GZTazguTnnTJ/JMU3Xsjn0ipfQnvMkZPYfCKBdYRi/xuyHwb9sl 3tUEfmGUfby/07m9vunvck6hDvoWBAfq4MXWdYIzMpuqeuEux5hZxshUT5h99qdTB7r8LO0B yqXZkeHYXh0UEXgbk20kxYE0J9Kd85X4+Pef4S/S7S4kku14Hq3xxwjWggat6PT6iJbaWPBl GtBCxLo+1SOfrc83vd5oqzeAoXq9UdQbL7fMRrMtZTo4mLJmyQNdw46dvd6o0hvPUqtfLvaG vd7ohkCMFnm7qL/ESH/RRtD3dfavR9Abw5kxVvTCBbthWDNrYNLc1l7QVwj671hnf+SdWC/o iwj85AVR1A9NTn/RRsz3ZfMHYv7FFnjo1mxqTpQDMa+ZhqrSSEcv5ivE/LOUtJdLqWO7avdy vojBL+SehMRf9BmzXSR9X29+IOmPvLF7PklvyooyU+2CpNeM2dAYaFYv6QWS/llqwSskfV8b 0RGD1nYLvOJ+6+V8eznfl2wfyPkXWxlhjkfjqUFnAGabyw+HijE9pUXfZ5+20iWvdeC9ovRl el1V0WwX01vmADYBdE/vl9nVcqbFPPyLzkwJvGCFXUf40JQ4yH58Gzv+0gmXvffSQav1teev R6upxtQcT4ojhzV7MB7IwxN6L71Wy1NxQ632WmvPQav1BX+ND6Ach9f+cgfy80mafnM2W4/Q 7o4/B0viMd3GB4H9RFbYAdKP3djto25d9FZfp36gt45McHlGvSXPNFufzfJ6y7SswdDQCt7Y WOOXChkOVTVdU/Y1gxlllv/5TebHFIpevx2j31J6YVhXLHk20LMUg9IF/mtHlYKwIcVs6X+j ZQxeQEx8RrPwz0PSMUa6PRrQOZhZ0uH/y5EOh7eESvLfvEAqcf0l/fE9gsu/Sw6FohwxGlNU bp1VRnCU85syG2nTmYyZiHVIK+U31IdsANwr47cEbRViCLN2hjR1vQ4tI21gqTRXsRFaQIph G45qHLixx00woUBwfs2wdY7h999wdk6W1oxGzMxhPz8EcBTlWvwL2QZhjEVIudaiIp2lzxRl VkGcz7KTq2Om3r0UREsOSJM7d0O8p0y9lwjPY022p3v9+mI2AuTBytMuwXz+kttBBYdPBjNj ohUGtTXncFMxDAV1zQGHj6aKbaQVolTw8R9XMv2PILFcf0WvAvd8OQ+Crxsn/HobO8ANIPpR XuO6voNIYyaubJoGjgtg+rbkCZpdV3hCH+nD6icoG2WfoOVqQy6akyemVBExmJi4KkUQY45r Pw6D5Y6ycoG8DterfBHdZflxmro2G08tjGzUHmfufDi01ljnPayLx6kbmj5OIyaNjnMcLJ8K qrn0bQw3NLwZoW3jCdPoxmPTnO5DN4crlbPGBa3SIaF0PZGiLVhhQGiU78NgHizgK/z3ivgY XyW0PsdzwhWJYsnfbebwHLDWAkDcbeDviwA8VsdF3o4D+uMZwcgs9gfYbHY4uJpKa/yXG2H+ t/R2ZtvvLqRHN17DayVY2N3Am5aS+kETivSpqUwGRVGTw9zcBejFKeYtkZYiJ5JCsiDuA8A7 f5IswAFs0Y8kcGOkDci4NRY1qbJiSI4X+OSD9IUsgpXv/oZYjdcuuPTOIr4QblREkAIYAbf/ tgPBrWgXCIF5wc7DtiXA/A4AdqTPQexiiPxeuvb/uXPDJzEcpjmxha+MCPmKGwMyYIXBrKAL 3vnH7/8FqMIRe4CPbRhs4M3wwzNsOyPm//j9P4Gi3CSesiQPxAu2sPOI0KJlgCMOFgEcItI7 fMOuEIBatzhAfbmDReGpyF358BAQ9BkoydlXxwF3gTmzXQOdSIy2EKyNG7sr/DLHnJ0QdwV8 QaNHGRbvtLWrD0c/LqsDecLs3MQmyMnIWRDEfhCTNLEsr+fvi19ndc0pyUmygJlR99Eid+BX Z9+3HtieUUoU7Zlr7QDNuCAVUIbhh2VFkHchkKRk0cgvrYjEc/0UBrut9Na27qwqdDaGWryA bAyG0zE/u79/OpqYcs+/OwMTJy0FPoOdv07FqvSZahzElR3s/IXrSW8/W5/td8ibrv+AuoOy iiM9OKFL4idch0o7OLcoChYu1SxU1+DyGVkhRU+gYzdCQi7HxXkIOQ2snAylt1uyoL22Pe9p T645UkVkihAwMwzVbPHqV0DSDQAAInOWS/h3RJF1H3he8IjEGO3mUexgkz4iFMyFsFKZYKa0 2k24f8w9fllqDsszXTWmeqHs9BTmcIl3k4Gu1Bz+CaTpeAcqKW5uFMMbXVST4EWDQHDQ+Hpc u4s1jpe3pGgd7LwlFqVHNEBAln9pgBRjaMi6TIFvhRRuH5UhxTAnE9on7dRIyZJ9OdlOSARY mjPTXURZpfZ0jq0IQLYTtp5sClSiNulEmO3We2LmMEjuefBA3i/p6S7T421yeroys4zpuJin 9XpIGj0DNJuXF5LLtF/GSwLDA7QEiiCKQdBm9BefLCbJqWUdr524+BznBHDKntDyxhgUGOkp tjO2DIuh4aeoIaSMXUrXodrxL2h7NhIvpqGN7UJ2wWs8C4qQhFhTIYMf3pSJGTg6LGzO46jA ZzPZ0Gf7yFCZFoDjeVwTeEsoRXCy4MTBq5Pzrp6W1FiTwWpOuisGMb4zYG+Mna9kHXjgt0eV 5tBZbZ8kjlNJX9pQ02Wbzkg4P32dNpqzb5kotMKEJhMumg87NT/6atOoux2UeM3gWUbYGKaJ JaLY8sgajlHvvEpRUY4jSwqJE8Epz1EuYwAdrRXw9XjkYeMmAwZoSoezDLZUzKJrv8w1VnNy Tkq1aE4kD57DhsTgLxXkVRIGoZEYOKkVPUD0qkB+bQDaXQhmUt5CKD+ywWg0llUqwv5ER5b0 2cZ8m1DaYD5oTJDCD5UqIm27i2koy4NlkCOIjwhMfx6R7BmLGNka6WB4culQVK/lvz2aY5uz /FVCrOAwh0gXcRPbS7bsyWRkvVqKuLL8J5RpSTNbKr2Kp+4TsmRhbexvBX/eOwvXc2MMOBR5 VmBCNaWF6hu5JlLVUAeTsYWk8hoPxHOi+AtYX2AVLG+cFRmDNP1KL32q5C2cX+mhASun8d8N JgCkp7fBPynPio5LwiaWXEjDbzASeNCuLB+jEp1v/ZVFGuHqrKVvPMf/PuabVme+mUNrqtrK KzTfynF9h3HhkCUlRLvNxgnd36jqAMeMRAAa9XNFhNHSmhO59CXE9XJtSmqUdOOcJaiteVoE IlCkjbdF/4qMntEMDtp1cJoiWAearLCu+Me9z+V3cHubjXoCIHrQRYjWXTdEndVsmBwEmIsZ xqi32MWSRO7vMaHmAVX/Yu34brRBYQne8BwMm9wVVMkl0ocm5qOGtoKmNYk9DnVzMt1jMsPo +W9OnERBRcthggNPoqCPxVfTb2Sxo5i6pSxfvJs/TE9I5GJZ6HE8nNpTs5DWOrBHujyQ8+UY uqra431nwAxO8vdsZ/Bds56Iy+RbyeWqkDd4epvgJU06R3e4VWp05ysUkrpumvvpjCU7uBfP s65FQXXI9MEVugf1oNVc9LYFrcR+Osfx4Z/uglRHpXCdydiYTIqZfh18pGZUy1hDtIY6MSZU 6FWucZiadiK84a21aN2BpukZMVsC2lmO01mEgf+06QRZJaOfA+D4UZwC0iRBpt4WbAldjNWs eLsLWppf9FJT6CO76QZlBa7OXZpgIoKg3ti6XiKnVyewdsHyF/LgRi4GQ98iQ7zLiOzkXohH w6/9mIQ+iaWpv4LPWWbAnRN9lWZBCO7I2+vp3ez49IQzuUV6+xv9K2HUoFbst5B4LQ+vLjWp pYIR+TkdoL11V76DJeTv504EZPUjgE/THYFDrQh+hETo+qDPNywmsIvozVkAoj4C6qQy/50Q stlwYM6EEZ08t55jmxmuOYOsrTubet1p3V3fXtKpIUG420jXN+8/f77O8HEnlIhT056T/9NM 9VNxxTloZRqhy+vub6fOwM18TswZoG9owreEG7w9z/2NYAHul4xSwuswvAGjWa9pinOUWKvc bich+2Ucg/t9Fv0PhwUOuYvp0wua+OZ05Msk+RuDnt00PY3vnOFEeAr6GQXEObwJEDDm4Pgw G40yMvph2igk95h1cBZaR2oi37Do4BxbAUZgQa4zQS5aVpENW9nHT5ouG4Qu2JhObdZ6S6iL wuIcEgJvJxaBf++GG3ZPeSbs5+QGOp+JWIoxk4U6Dh7Lp99F4rMaTEw70xy9hHldeg+zpOnz wthIW2+EekvfR3TVMtfVB+muMiqMP+axQo4qoQRuyclZgdTtJP/4/T/PAB9LiiBir6Q+/oEZ 492OyvVBH9+AFUBjjdbtLXgXtBIgwKlJb2/gk20Q3gm91cxxntIwNSsN09qYVQvtd35KqKH0 1kHO8GkbB6vQ2a5ZEr30x+//jbVB3YAVi62WwP7x+/8ID0Eb6vKIVdoz4gbihN3EWJZClvj0 QcAoCfnQqMw7aYH0S91WoXTMvOiUJEurU2t39ny2GeXujeP7NZq73uimipn6E+yCJSbhJrE7 DowEUKEPJHTvMRzWkQoLWrteO7Vlo0w8pXBdWHhBS419vcF7eAerZS9yuXOidw010xqLEqvQ tUScJymPO0wPQ/mNmSH4Eb//SlOAhHL85QTsQuJ47zHnSyyzLXlkCpmqkDxDvc99NSOvFK63 +WVzMBtaohfVpdjUgwp/e6j1a2rhSG6/O53JVVXBtXCHLdML5mCLUxl+T6stHF/o09dyxPPR KKeeM0Bb6wW197SwWmPe0bupcBV396B3XdoPoMasrSGUK2a8k+WHs0ury/K0B3mk2aqB+RZ1 qSAiGz358LCNDv/mDLkQY7Jw0H2l6gC1AUp+kAf0Gg6byrqscd+tCLX1d8LCa+WS3192e53o Bvo01n+tq+WEQoOyrZ+6z085AptOiIpeyBwZD7vizTQb/KxIrQcCzlW4Qv2Nb8bejy467wa5 Zhu6mDYlrYIaNWoN1bEqtF4FGTeNQXJqC/VFMLaMKh5BjBVmCL1VSIsPMCErJivsLZVU84mg rr+dxIJk7Fl1gd6Ns6KpghfgiIBziO9AswWlIAq6ZiR2SE1dUdAs6VCfqbrSrP9PWTunak2T l2hn0DR3mKsOxwr/F+HX0Axj3CJWQ5tadCbDhOqau1wNiuFZ7K4zgXQ0kuJ1SLrL76UbLUKC vSkWcRBGH7FQvaQjnPS2G7DYHLg5rFefrHfcK8Mg7txzI1BW0jbw0MBkZQ80e4jd2Ga4NiMO pPskZfMvGOLEZ7HPflpZDGs866bKD+DGEidqtPSqGPJ4MuzSeXofB+/hD7G6rkuzv8rUZYvV Tltf8BTp8UJhZBpqi0qCxCQ4goJpyFJiPdTPganqTMKjjB1eTdRVEjmVzRefRxiWr8nMj473 0FfiEGa9EViNm0bvr0AXmjVZawXNHXp3mWvchXYQj8QmNznwm68EK1HAMAt8cNWdB8f1WEEw ezrAMiHxzdTQNHRtb3aU7DpbkSbefyvzoFAQfBp6qc8SrIH1yk5PRLRO1ry9qrmgbGs+NXi/ YB/CcqyJrowslocWX3EDoabVf+0b28jy2tMQqvfcLkSavMMp2BZ2kKyNLtdLWNp/SQIjXVxo 0VK9HQiTxsT7IffLy/KqSnswmMjjMwTTzu3ilGMrW1UZ7GJWlM7DbbRRrONJhBWvReiSJp2g 0458KGYWa8DOApsIRTG2RGjgFD+PPfrJovC9DGBuLGwfkdY51rW6rDdgw6R/zikqmbGXX7CL Mg0VLpIWF+yQ3X3rhn0wJAzmaBmm+pFujJds815/UpbElgFhPZaS3iYnEWplussS8n29X3wB YHaPdwEe3JA1jsIEAI4Z7unB8ZX1QywXPIY1sUBYNSnnFt0llAie/LXOyQXP8W0GPNDCu1XH vMUkATq9UnYyxbboch9ZTtfygqa66XDTFWjoiHs2KfukgQS2DapLGfPFgN6YRgyw5VuaJ/2W fFh9uGC/nnvBgvZCRSwwRYklGDz15B3nWO5uN5CbAuB9HBJUXELwe7zSodVVMdmKSrhKPZvy LrApl3UTtpXFQY1lwTp4JA/idI96ME5xKyAIReIaTeLV0pw8BVyzRotg26jUje0ATpXWytRc wNdDIc2DpMMsG9aFWgr/emM1VivlK2esx2wI7ghiTKynpju8wta5aQvk+jrX+ssoprS7UguY hPBzdulRf865TNgTxXReTJ+2mhKGWqISYq6+qPU6phXGKNfQzqJd7NIuWKKl69sd5RRFUyiv Hl3P64gRWvvAhMgK1VZN/kn3G9icRQmKQegm56RW0qioJkW5yaZhCdgo8dd4KYFt8mm+YbeN 77MV+XKReNpBPZxB17MAPRMu37NEx26gNKbPgp7BbNYlyNWuB8ZOirrAXXESgH3mpH1uGpPq PsnvSGq5arz5Z6jQuix1bPTxTLGGoyaOTenwM1NX5Mle9meHxuTGUVHHZmjqM1Mw+Kt5+xrq PB5M9DH4RLSyJ6iLdTg1iFaslj9Bd3/YIoe2uMkcEMNDZmvHzcHCh0vdqeyKFeeLjpRo3cHQ GB5c89evW+d41IKbeH92swT60vU4YYm2P6voo1N2mHT5Q4Lhc5vKnqDtiw8JhlaSlLU+or0P yr4okNj+i8qlCoOp9l+MBO2V5Iltq/S0ayMU48FErYiglzCyJRsDPaWi5wqNXueCNSLy0UzD zMxFLbEdKzwKYQMVRdZk+3ijNiHJTM/yBvHY2i1UGlzoeZ1hGyznakXlGMtkS/IlRC+zp7Kh Hp/tW3dXVu+MUgcpTdiiGY10JgoVwYUErgwxRHX9IlqmvDUg2lpUNb71bJuWl2vtKdQitjmb YNu2SlBLhtdga046uebmndC0mWnaYMjMpfCExVOJoGyxmxb+42RqWEZFOp1gTRroi/iVjmj9 +sAUpl7tokh83dYSzOoLKeHBtpujwypOojjcLbBrTY0fVbehq+OuzJg8zdPrZam2VVCwamNk 4Fb3Abaeu53Mms055Uy1raKZg3G92ZyMUxKYzQrVMYdmUGHcZO4Rit9DM5ibO+l55PYlOODZ npCmnJCaaMjS4bbZtzUxukvmdhY8hsw3qRdyePr6WB0OR1aT0cilJFo9Gjn/80atp2ttLVNW 7NQyv9sHbPloD9bYBV0JP/Df0xxOl5ZjBuGTFBJ6cj6rfqc3qFQaBOGGFcDNAydcXoAeFR5e GQtkwWohc0vT+XNbzcL+IJaMIF8NpagUGgB4HwbYZ4Lk++IcFrGK3l0YqVSyERw9GrvxDvRb TW5MLkQo1Lt8x22xn3vRzwS1fpQQ1Np5YCHrkPxzR9vcCfVE/U0D+bZFm60m0lofxK2bbglK dpjgfBP4Lqb10vGUjVLTa/FZJ+Jy78+6LAjDzV+vO76enkbIJa4ocpCTUSJ0HrGfiiinvwrq m83U7WxNHI8O1sVoLvcBajRK0y02TArHO9uiWF0EQbhEMcpyD5qAMzSm06kIHOyRXUPEOcZk aSJHC596QI7YyVUcOj4sgNZ582HwnWUSV1Rp8+OEItL76Au88nskmIXQRKSeFNLZUJenwgJu oB4KeXORx1pcwBY74xiprOlbq/gaS6+P4D6g1Htsg4hs1e3VkkOtS0x58tg9XSBt3MjZgi7e hm45LRwB6IFS7cAltUdxHe+NtAjHv9JioTJfjF1H8rQwKgl3W5ryRW/36GRzL1u7kZ+Kd1Ho 60f/vfVcVhUHaHvAdnu4LHPPEgCYHikmAgThyvHd3/jKey5jcaRMVOODNHP3Q8JwFA9ms83R cHCW8L4Fnd2GtzZp39+9KUA3jDEHJ8LR8YllSuNUNUEdln3GznNJFi5OUWEY7Mw77gY+olg/ hk4axIvqzaQKJVUKx1WquijqO2+b5X0cOusiGXGMAUJtDXxJSWJhGV9elrptg8lAs2YzdLtr s4dtWdErBhgmH4rdttMXSBKSJBxgOTGO4xYRjGgHbM0Dk4Ub7iHBQeysY2+ZrBG9Vdc0bXZ8 iOmj9NatqV2r3U7CyTj1CI3Kyoz9pkChDAxdLIWp6WZeD1s6QuIIn7QlKt/9BXDZGZmJ+nhL FYVoLVWXVXEBSDpIvhNIVeo+UUrnQSUuD+jsjM+9BgOMPrgRxlYWbL67OD5+juas9eCiO7Of ebnk45WFKC6Lz+VJqjk/8vS5NHk4yY5f7dwls0mcebDrJv6qYg3OQphiVJu6XrEuMzkFIYwS LBzK3k6QHXUCQqLUNWNiM93WiP4uS9WxOtLAERoj0bw2dTxzwyjuqoCrohnHhz1L9eB7pgeb n3kVRzDSoy7BadRh+YuqdOQRHFO+MLduzgAynzjPfQ422DaHfPCNlseUeleYyl3Nj1oTvwEZ MFOxGxwvT9NV+t2iVWdDTRsen61RQ4fN+YRFAc5Bz2HgLC/ADfdi931mRrr0EHg74MeDC6HO m6EXKGfYCbLl3z7cirtvtjzH/F3PGYDHPxpdH5XpeIK9V/7/YFO0UiOcVtGVCnPX/2c5Ucb6 LLSVzkwPJGeBxBTgGG7JWZJ/7vAvlAsLjHYhzXcxrT2Lg0DynHBFn187m23N9WJ94Kiu22i7 LZOkg+OBTuSZGGLe1Cx1BqZhzenT2+c0bHjvkW8uYpb4tIIxCliU0GWBwoavO7piEk7Uxd4X S2eLxyNhAPCfO3fxFT7kZ7zD2yK8YSePNMDi4MRVMBfovzFizSbZz+HcWe+kswguyi+71Yr2 w+xqUiAJxoz9HhPiVuT3is4PpWDF5WXKZXkKq2UPZ9MB5rK9MoegHN+3ZBH4S5YJmgRUTm9N s05KncjlmUI0neU0C/XTFJ9uKGMUyyIc2MX5MXi/XTsRVbkom5oDSudTnAVtXZGV7dZ9BvgY vhgiE5M0TfrAyh925HD4l5hGwYQgin9YIdiFC97IIK2krr8fz6Gd6eq6mUttcZ/CDmo3wqYc 0T4l8eVZR5grn/S16CQHyoET52A2kE9StKHV/pk7xweQiLFz371IVQSaMjUm1vGpvscVvqvv B9KWzjzxiTAI3ZYWGYt57lecLEQtSM5g1P7zlx5mn/FcE3RIaH5rfkzbnMSPhPiI8sSlq+nL U6cwKgvhOymK/VUxAonCAggGJ/XRyy/4d6ZdI6s0T+UH67lAU4AKGb8vj1/L1/wF1dpxUvDM gp/LeDdi6QBEnMg3MMypLewJch6iYSXMIYXzDNJgE8DSnruh03rPsAGf4Dx5oGocs0Pv72uO reU+uAHaUZhXR1sK0h2TsdcE/Jms67vcYcl1V/oGuZedaZ9Y1iA1EJdk2VVfwdprZ0vNE/ir GyzdhWjBlpeL2P6lI5xOGLO5JlhmxhxKzOAmG/o33jtib8pkbDCE4XDK/GV51sTYnupTq4lX xn2q5KNnTZDAevez3cjsr2+Lt7fCM1RVdaBMOISR8F6xJWwJb3Xlqb07eg4g6+a0zvSBqguH yNCslPcbmmh+Bgi7QVeF0noCqWdywN0++M6y38QeT50WrrLx61tL1tpKuGVP2FSyJXSpg8nj faze4CzmBA0YMpObJxaKTLJmaDnB1VmVDvEzommDo27Ehn1Lc/eDlJs4RntYCUQiRx+mrNIF gPs914HfdL8vogXVZ9gh2hRoRWa2hdmRYLN45AEtMvgBy9KsqXrcl7NW2mHAZg5t8NaNqoLF YhfSWtu6tjhjTVfHY/6YOFTY1h9CJimfcf9vgQvo20+6Z2YKxXWKXIzpLYGzo1zucCPrxDQV dWI26gjLzya/t2qTJf/ztiYLQ3qefZozwVVFHvHVGabtCH5blnDOmLwrFKz4MHP5VlPeIk8N NU0K5vejnTGBr99nuyW2MctJzbs15YfRvTkhzdhME2AK0RtkGHSd6D9pdif8eJ+gj588vCvJ 0ueOEU9ihJ/sZRv/qgmDqcOppShUJrSaKsP7wpQwWMn8shNWOtNy08NK54Gg0pnKvcNKZ96/ pXCq9W10btNIVK0BXJo9eWxLoZIa5kJdd+YbiofyEx8YY2uoTJqIVMWUbbV5k+2pYijTNHRx Fi9wn9NejAMmLVXvMXePtTiNA9Gh1EdBH6nOorNePa+muK2RlYvBzpp2/7VXeSdI+aszeadj QzNELUeusnr8aMJvACGL9Ma7bScwq6zq0/TOxGYztCkqq+5JS246opYXOmF2k5BSai1RWrR6 mOXNuOSQfbKR90/WhTSmvhiv/WYJ23epgrESn8BmPoEQ1JOMYK/QXrYyMFS5SXu7UllWrb1K zMOG2isVvQLtRcXnofbivedKHzloice0F28yRl9VpagatJESIIeR5V7b3ZTeoZfooMJuMt/Q 5iLlJ2pOrcFoOikUccmzkTk2M54LJSHwZ2YVwrLZibY1+MvxTKfcYWGe2POrbWpDw+1zMAje oykOKMcbhL2JTqPBxTewJ4UhkwadGMpXfRRuZ6jOpsd3bq/pl6apqi2sdUinM5wBNiFoOWdb VFOa+fFJAajd1JUQJBHTsMfF6S4nEebHwlS+Zsah8jxgGObDeU/JoNw2RnkOE1hTHkTAcuC1 0pY4jk/VYzf8FjtQFc/3DFfW9UDRXmWJKbB2ImmOCQU7vDGIdrRQ+34HNjC1Elh0J8U+N2vL 6h0bSKWWZ0/tETdm3Y2YSZMCBKc1Jyuwo6g15oKYWAJ8SBgYSQt2LOabXswy+74bz5UDWddp of5YmJBjmQ/hziP5FNviBV/ynxM22mMNtEqhnyGc7VsMtWwgZ/FEqKSvgJuEqlioKTu6Fegg JNjYB9TyN3ez2/AMYtfDFjLC8zY1e6on4lToRfKfnpRda1FzFTpbd+lhuUbjbUTbQKwtWx4I TfN7CLwHJEye/FxIb74stfTA9FJsY4i6pM52lw3dtipmCCYfZiw91ZKtWaqjnisdeLajs6JA +wDNeXxq4sGEB16LgDMXxDSQnV9xzCSFilNiI6LEeee1qSdX/xd7FIiWMIYDlYaWKpeguTyI G0fyaTtRgT9OD7OlwQGaO8JqgU7QVqx9z496EywJdmpA8Zz/TNq4qzWtWli6tFW+T1uYROjR vd9t6a/wmijYApy8jY2D6af73BcxdbRK9RQff05czEAzkm8O5oVdiDsp10rAK+zXy9UWLXjC hLM0aWif7Rjt5rAAVhwsSEjldoquRRBhQ1IskknwzJagkoelI0k0V4Yi8ivjOHoUGOq4fx+B aeDQsTjJsCYQVbSKBN+V9FW5JwTvqCTPXRA/wh/jJzUV/BmstZH1tRG/H9lko+6zic7ACWlm nrMKCat8oDfs2B4qxxCdXn50yQ5PSsOrnQ2lpwAriJwwdJH40D4sqcHC23aH98SmgXiWjcDJ pfBbWthICymBQQ4bQuZbOmJfTUxwoNdPNFe6+ADQWBOVqaszyxpOsT78yFwthtPq29B85kaj xqRHhLvKhjPoI0MwnEGpmM7AW+cXiD8fqWLhLhq/LFBdSSiqePtDebI+ttoiHEYjdeXnasLB amMVVW/mXDXLHEz0zOSEw4OqNYXynstzmUI019nh95QYw4qZ55i5CE59zDTFGzM7G4Qq1Ylu joXG8byrpMxmIXHvgnqL1LHkoXOy/CDdgnTxnDBX6II8zsMEGEV/OTuR/ADkISq4fcpushUs Tsy60GI7oT4TnN0dVL/3gcT4Vk4Sbih99YNHjyxXLH2E5sG51AvNJuhkIbxgxMVMr/3FNx1+ nGsOWLydEevyc5QLtMuJQ/uLbZhVSESEDa9jDJJPlGPxDEQz3TXgyAWtsnO8xNBCdYS5bjW1 iDYIB3uvRpqCWmzokXZN7kZE6dXVGUAuKOhugH7MPV4u4QeqgXZeo950x0n4Es1dJ+F/AloY 7zyPxM2v3n/xCa9LX9Dq9tTUeZvk0+8JEKTJZ/vOeidktayzkc+wKcegZqu2MjaahAteLgaZ 9dcIg5Z9YgTqA1WzZXqt8tpJ8PqnqV2Btr/dnpzwNFlTLfvPQHgCvH2+OzW9GdOpNTJeOd4Y vT26aIdE9IZExLP23fWJkTgYWubEnqLP9tqJjyJRhJxaXX51VOl+VVyw5ghPzQaKNVHH5vB1 a367WnBcf7Z/+fnGuhViLVcp1QRrKiB6aNEhKq8Sa1V+MZG+kBXL4xDg1KH2aRDG7o7OYRGh 1pwo2oHPwj9k+P47OKc45+02pjPR6HvtwPHoPdqFdDf9P9ZPd9OfGrxExFfNGZMOhKOXyNFp WU02p+PhmHarrSMaUdD6+7LaL3d30r8H1zd1gurff/mcx145TkzV0GWFJpx9f0Y6QWgpf/+b BJUSL5mPK2JhaaGuGZlyKpAq638bh1l4XIO55RHt/ySk7HaT2pwHx/Wo73AEs9G5Ea6/wDAc eudOHDuLNY++JHj74/f/vue3NH/8/j9p7IvF8gGVxAm9p1xz/6Qh/0H26z7UzQYHpLGZ9Om6 y636DLnudyGZXhQJd927GPZHbOQgTTaaCcTstsdPlFPNqanbo0KItwkffneWwzzi+ZPnPNJJ bqKTq20WXnmLdAxF8xgY7wwhJVOGuHTM5jTzU+JsmYYfMyHnfeQzI0Dy51nYYwbh3VVhhYzL tHHLRfrW7hYYKhS31Kw3o93uVrQIgJGsmopwnCUbQnBEB/+rQbcXVtoZjTf8BCJQGCesR/sJ pJYvLuBvGQ1FkjpZH2a8VogdIF9+q+88BK4Y6pYdT+oizPWJsl7AZITLYsE8vxp4LQiF8w7r 82TEidj4w/aJc/Vvp5IxSAxI9CVi19/xuWn72TFdD1x8S1TPD5Z00vutx3WAc4NQPGZaGnWE MaM0PHclyidqzMT34v69bW80QvI+owEFL2kubVJTm2I1+iBdpyNBE6R3w+6SLDxsv5cHvjng V5iXgY2VOh5yV1RdYNIQ9WgfcXYVXhazNBO8wNx68GveJpTh7hQk2fl0RUDUi07M2wIDpTMU 2CE3uSAWQWSC5WuKZSZx8QC6s2ddy/IsKFQJZe4S0Zh0MAdKiN1sXEOYn9hg15wP0ztYIq6I yb5aqKQavBpz50XIKjX8kCNw4CpzEJEbaCZ/kruPawsyqT4IN3fi2/umC3xOEhxeBF+jqgLP D1uNp97NHtHZjI+N8yutM5cegrjQ9vSyPJakTIazUaNYEg/4lkKffJjN2M79vKVjW5pHRr1l nkf2s+N6U39pg2kApkJpJlkuUP33tYt93FMEPrqeh/hN2gWChC/0ciiSb3QhgadaTJDgRkVi n+222CBeLP6y86JZ2CtJzhUTTHY/FQTDM2tmto3tdiUb9rHbAOdlanw3sN+YEPr9l2AeLPA+ 5+9BSItRPoXBbgt7XDnYpBQbAPOUHWRdutJhVg6+kEaLBHGU0iQ6mv9XTp3qeDI01XGLCAtD VXUt8HmTI2k+5mFyJC/sLXtEpfnChUcMxRQ0v2B9O4qP6LKg4litaLHBUzBLH6losTGqrASu /EalhUel3yh1OaCCfOEkeFRdyl5LgyrvupFj0LOkjKqCLh7qCLSdNsD0wT9FXB+DjCIJWO/1 7lsacKHCmgqKFm3Z+q/G92m6jKDFWnYssGgD9ZEv16cVEp3NCqckvvoirTEkpFyWZIP5YKaq DRVhaXxy9XaMsYs16ivf/Y3W0M5/BeLkPfySRo94tYCVipf8EiXtk3ZRMZL+8uavrOdIjdkh 3V7fXF7/fCstwfsMnvBR4VnJ6gB8vhMdCz0BGoYBPsR5i5mE1EwQnnJnJ9qugPTt4ETRXjHJ 6ANNbnGFR9OVMdxaES4tD9o1gIThPp9IXTPuotE+xOOisi+vwOX0CNKppJYk+lYXPWtLNC0D UFXCkpWYE8xzoLrIxc6T4YZH0ASCv0FYrV7mP0tYrR6MlxRWawDtadxvbISZjIJKAlviQHlL krXuqSbJ1p1kLzKFTJuNYHHK64Y8cEl3tHq1M+80iaW0xNiJBjSWBVhOiW3++6Mp7wj+FkaC mu6lKiqYG7ZHOfMIyPLK5rLU9TH02UgZjFonFh/l6J+uZaVa0fSr4ALnHjlo+sUcfdo/q+KR slpLcPQFtZbqQa0lBcwseOC5R7Jhtb2jP6p22iubgamFzWS+aduZ014DpQBth25ER+99r/6c aiGGk/lGEMdSZqYqT7TWCcOaphs0cbYJeWeYr51nz98mOI108A0XCdnekbydGV7YZpJymiTw 8XgAl2fVfVCaQgkUwkvs4KMt1svRPjEuH7yxKJAUv+ZJN0VnVILtBujKi7AC2NwrFgHSdSf7 qDVQ6cpFHCP0q+a9R3LJkXW9Rxqglrf3x/HZ9+zmZwH8A7h0UPmwyQRiBh1OQOsXvZTsm5sw 6PGAH1bKXmDTqTlZgOQDKwActX1p6orGwUsJY45Vc1uauQlnAL4/9pyi3QC2ZIFuftrfj1Eb fWjtPOw7YRTpL8CNZljmexNdXfguR1KiHmpNX1hTJT5TNd1KaENs2md+fjSBdN1FIRmR5uoC 8YCzUzxw7GLl4rTR0EHhiHRWPW6hiIHyl1MC67qDcmgbH80yrJlKev6T2QeOn4+JrqxNwB22 r+TpAH2PoP14f3rerQwT6ZIBxPBrf0X7wsMPgi3xcYDlBXicuzjEqg7WJB7+7gOI2Mztad9V HvTakvcXQlFE++rwDvN8fhR/476tPOvisA3BNWAi6jnRJNH5bKylFsExiayKvZTqRGCVuoy5 V12AjEcTjFXQs3ZEGH5dgSoh1cNomitBMVf8P+6+bcdxZLn2V4Tz1ANUd0siqcs2TgHUbVww enZhun3mmZKoKp6WxNqi1NU1T/MPPi8GtgF/iz9lvuTkisgkk1Qymbr0bQwb7imKZDIyIjKu K/ywO+xWE+alBUbAaCa4Q5eG837Q9wOPnniWFdnueYNpAbulWZFlUp5kRYpbpH/EJiX9F9Zv NC3lEmpuI/aASFDkI22NSSrKTGAmTTsM+9PAhznRRBoj29Sj6JxBGsc2Ib3q/HamwRiSYlju UO1eReHDmRG1CCoQOYStfbTW6f29vU439PsuYETfJxnDgoSCXuWp7kIDxA8UEpHFC7ILBPbY cV5GXF3tonyEMNtw6TJZvRBqp1DOT1BUGDtCMU0KAKfr9MFaZmzZEeuHuajdGqXhe5POcOo0 DOR739LKcUk7KI4y4dJtsHkoYWFMOrkxRa36KlpjVHiaJUZQW50KxlhdKeB3k9v46FijyVD7 FlfC0CvV6gBV8+Gujr/Iq9hE5QHB4lkRvFVBYjrL8SRyrqqf5vAFNsZRPXZwdnht0no4gVCn a5d+p98e9FzqG75TVgT/aebbKlrg39hYzg3B6he7JOiIXEH09LTO87kSc07s//qFDEJkFJZJ 9rQWLCD+OV+nC9ReWdtnK2xYy3mchK7jPNVlxckXw2Kvuuv9YTjq+cO/xJkiZwFogIIU6hL7 cMjyWMyHHVz9cLt4xIhgIblXFiNv5s1GbYrw/qAEJfBxPpIVvneePuU6CuQGISAkLlnCLT18 arMjlB7m6/h19pimMBYZMwx+k4zcJOiDfTrsldjxZDvbNujRjBqlWUzEcz+4hZTeTT/Mblre z/f3V26NHwZBOPPOPtnDYX+mQXR+U8FS2Tepl/YS5v0JJhzCa4TaH0sLrElNlT7PtqE5AJ1u 6Tnv0RsXWe13p9NO6LJH41D8uBoPrXfZyj//pi6bDIvel1qs3wEi1oFCnfHQa/c9lwJ0I4Xq ufgMCrkCPGisdRsSSD2UFSHQviUE2dfZPvoYP6ZrVG6Ve8+pvwIcaOmJaL1K3sQANM6dCq70 T36Pf7phWHxCMiYTYocqNPdO/JOxsmaDQWcYnM3C33iDbIXDKOPPhA6CUVSgHdA8DJcQnI4B jP2Lt9khez2PoKioTGsp1Amdc5QkgVktTKwGbEIHWBYulyGDrShXgBDeh1jSxWqRzRt8FR46 DmUCozAgpaETZVm6wBiOZev+36yH6+k2jueLs8J3gX35LrVCTX0PghJZCjdBAlijnlQQm3lL QwRggG3G6uBxKAxvXVYlavaJlZ8ancGDMMIai2B1jcfQ24edcB6va9n6od/rDXo/7lnwHhDz wnHO3YVkqyDqt+n2tXD3FruEivdS4N2ioTnek6ctW+a26SdqKBIKiN1GKCNZSkwdOtFBSJ7w 2dkEcqa+i63SDjuzYRCeHUP9IcLLf9cqFd6+B+7LW9m6EWdvpzlIsQO5+oPRaOYG//rdmN8l Zn1XgtLPbWH2yFw5qy7Ljqdx1tz2pKHX6YzH1ie56yXzAxzgx5u/Z2FJzBoou4oSYCtBc1Ps hVJyLcT4kBcWFyhTSEMDCjPxuqo0mHb7gU9u/o/JncdRF0QGhJElrZE4xhm0fIjRlIhmRppx flUadoNJ1/N6ZwdavkMaEvYpHzzr+DOsVPSwXJds7bH4GH/okqb8UciWAV2Nsz6bRPy/fYpS fPChMNPEcb2DRXddKnY6I3EaBy6tr989FSGkhyc58W5L5pDMy9lI5hCRK8fg5WwKVXyTx7qL VnlLlwbyKp+oOPCq29ifTLrdYfvH1cOz3C8GAbXkB3nCBCbTSsTpRoFw5NvUcEn0s/OYkAQZ Bvwpcrcr3DRNtz/xu50fKgJaJyPpnIoC14kisVadU+6ZkRdKRbfYnLfiVwrlMXqIgIDVQrnr A/9CRsLFnw+krq4NiRyM+x5NvfrxlT4PF2V9FWc0jQyZukMDosMZCdFxPxw6EW026Q+GBXyP Rp/ylcvoc0SKAwJn1MMqHdRFunvCVF7uhDtk5dAl1KnwnnbbzEk3dkbTQW/oEuT5PnlmXBQA Q0PiXKP6nD//+Ofjy3yXLAG8WpSQqFJQ4HJclY+8wJt2ByMwwQ8vfDJUqqVYORYG9iv1gC/j RZJBsfEA3befKBOo+mOvLKndcThu93qgxA9K4cOSnM9YYuJemT7BtD8dh38N9Q/ELaSPyZhB zzZqbtC6TIUWOI8RoYUwv1VXOVctY/BXJazf6Y4G7dn5USam1Zcg7LOKqu1mKdCjn/8WZYsk +fAYo4WM+g//NRQmIl7xiH8cX6GnZL+r5+dQQPYoXzmKFaPoJck2qgBmh90z1RNIA0hpaurt yH5SlQN0pkU5XoO0q16vk49kcTX13J+eGR7PZv2e5+IY+CM/aB+NAwg67Um+fZN4jT8Ogv5k amyDLM/jvHYbpBnvqC9RfUy3eDV4RxaIJI/i98dtkBbwIs+Md9SXcD/GW47wjnhhtreYukDF wixdoJ6pCzQYDi0tnZ6xC7Tbtn0L8dHRwjwLqJR31AWKW9od21aadr/X7Vi20jfufuBbiEy1 3ccL833LLabd73UDSxOsb9z9YGD5fN+4+23rW4w9wN3AsvuUCjUszEZk4+63A8vuU4eqYWEW TvaNux9U24b1W4Kj3edOYwuRA/PuB5Xd17pxa1HIvNqGZq+yAO1KRci0KxVqaldq1+bVtkd7 FQ7QrtT2HXsVodGu1NLAr6WBX0sDv5YGfi0NqtKpXamlgV9LA7+WBlXFoV2RNKiYEGW8gPLp iZ/vb39FPEsWOhz7a8cvUvJesgocsAoM73bLhBmWQHtX48DMen2v0604MEEw9Htj7vzPF12B ZdOMiPKVc2HkLN94xx0Z8ScukCfK2xsPPW88ncotyw5PT+nuOJthI2qEYSCc8nyNbjQZskTQ mjxQrq2hBPxb4Hq14kWavWT7eMMwNVigHCec7qmsi8qBi25h19Wb18eFrQ7PKLNYGS/AmcVO pnjx5WqYMrqguSuCO7Z/55JO9uFR7bLZoBiLR9Wolul8uPL1P9QOddW8Aa0Pj4kaGE2VOBTs znA0vUZrOJViwcdYEnwsVentd3G0AVqTvYX7mjvnvmUfTpAOQmzArKDLaLgV8rwTXEDjFk94 PeCqqNpXKAOkFzKJK6DYlAchRxkQaSt4TDVK0J8EU0CXlpRgu9ebtCdBMeMGX9UN2+GsKGZp 3hyDuvwSqJtn8scHSTKJfsB6CrHKbQtqTlD6kWnMZRsS3SFroZdbRtUeqCFxnz4j+JYX7huK klopASPyZCohD/tkExN2mR0zq5mP/jV9Bifd0JcgX0fBv5cWCm7RALamXqo81UTZKNlHSaUt ErI4SlCgiRYZlV4J3nRppcEbj4/8BDhrOEvql+yqf8SRpoYuFCcGc26yjFlVLvbU+LVtxWgX kXicaYKq1BQ48Fm6pkkmWNzDLgEUM3W3YasYUiLdxOLbV2isLo6em9b8gBJDlKG1DluZyhAS QzBjkW0zjOV1zR+7vZBaNcpNxn1VxPdNC+xsW34JScYZmuLUdYklVWC/o0JQLnujpWrZvBZm V6AUEjznL+EvY6qRoeaYokxZq15A96v4N5+/SzRbrKm6N28F1GBM7ZJr63M/laZ3ewIOEgcq AZlVoVf4IJYsnaMbcOZZCRd9GOA4G0A2S6AVTL/EPpn+mh+qVoydspoJ10JfsIjtDIhCmL1Y 1k/Umhi1qscwCJwXWXDOK59ECH1V7W2gwGxRuEz3a7xFbYyrAwyEnRBxVMjOWT+THl6mi0Mj 2O2pNDKbB944nHjdqo9kjrX7XnikH+tB6Hp+uz88C20+d+nqo6+BMczVDiyIctTNcRzn6dki MOYg59ASfgyMYa62LczFVtjxwmxvMQc5h5YwV2AOcgaWYFpgDnL2LG/pmYOcQ0vEkkdkHi/M EhftmYOcPdtbzEHOoYVhqCbfsDBLYLBnDnL2bG8xBzltUXGqzjxeWM8SfuyZg5w921tqgpwW hukbd789sOxL37j7XVsotW/c/Z6ap2C8xbj77aFlK/vG3ffalq3sG3e/Vw1wlm4x7n7HFuFn rXy0MFvsnRX00cJsEf6+cfc71RCmfgtlwg0h7toYalB/pTa6Wh/9rup+7UptdLWq/bQrtdHV qvwXV6oCqF2pjTBXtbx2pZYGVT2nXamlQVXStSu1NKiOSNGu1NKgiraqXamlQTU1qV2ppUG/ lgZVVFntSi0NqilY7Yqkwa5lMntwZX97jxbHl1a43CTbJNvvotp5crgVQPOFXWR6XtPMw2bk 2HyguGyjGmugGHlxa+Ulhm+v3eUB7bLZogxGvdAb+i6wxkaLsh73NQzoLJFXrhpbstASfjcX uVg9q2AadCnKdtrT68aP217V9nvTTg6nJrnO0kzjuhZaSVFFwgUiOZhn/Dle5BEZ/FJ19tLV T/GuhKmT+z6oksnnr+cBcp4RoX7D/hGeafvsEhCMJFi8SF9zasL94+3h8a8EMurAUdNRz+9Z ofQwyO3iTUdP9ctlCzE/eZ7uH08BScx5ijuDuclf47fmdMmZCy0a2W0Pnw18n02cug+4HFwx AmYmgssY/LtFqkiFTAqxzHG4SrSR7bKans91ibMqsQ7SPJe2kR0vsrQA8SXWZolz10CIghQv wy7vAIO8OBAqHhd45xh5JWV8GTPkOdOzFdNb4/HaCbr+eOjUL+5QQ6cfr8HImzDsPq5cuVxu YPTzgHZQMjFKtxz5eexPSJuwQshmo2gmsamFDE057Evh0qZjpxlU/9j+O7LgDCZUrTk8yMl5 vPvezJ+OphT9atp9b9zucATnmN0Mu1/++dc0rmzEH3ntKfUD1sqMPEg5V3oNAH0uxpfBWKNm vWjB5rdqQCMn6AsnFe+Pet227DdvmJXs9UZcp3aiit8ytp7uZbwrQ+/9XdmSQvgwmTVHb+bw uTrex2He81BfU36qRacdMTvJpiU2nqXpfpvu41/jVQyMG5qoiyfxj1fVy1JMuTzU+Mbrgkd/ AEi06w7XvI7E42LRkCly2i7GcBbK3wXF2Q+ng67fQXzsy6utK7VKNNMjfEK6B57SKlcTaDJP kDXSYYQK5VGYbAkBLkkIc0xGkHeCv9AzZdvwAeqGiwYHA88sLpLz20KQL1pGDRs92R7abFlJ OFjbQ0qdCZW+vPqfXlU7qEP8DPKfn83ze6NJtz1yGin148iZODBWyW6TN/3mYYRcno7Tr/JM ElKmIXZdxncJOWQOMwgd9pIiIvk8ddu6ul7QPRoYXFrXVeI+ly0BZC7tiZH8+3gdPz2m27i1 PXDL9mGb/OMQ10MinHAyQeHqVtqVu5bbw0l/QtnNv5Bg3WXZgU4cbBdgoNJlshBsuY2f+VSz 0bAcjpMCeK+wHcepsBNe2e5vPsTe31tbhksLaJiV6yIE6cd4S3UbF63a/HQt8Om+0NsjtXZV nu74k1noj1ygybuD3qxdlO1+dfa9fQdUuZh7ozk4KPzsZF6KRx+eXu/T10tCRUl4vop4X7IU xm+6L6kGYWztxNY8pVsqEEPNJJlyMbsewmy7rvLojmaotv0ulMdJTjt8Dyspznd0HFXAiZ6g eRE3LWppbYr0uC2nPgRtuOFGVUtSyer+OW09PUbA80JVq9CzOz3P8uYLkdqVTAjGCENLiA4t 0korW7Gs5RVOs2tLFKQR6zRcfLeXeEo6CIxtjaXIR3R5poSo8u03Kcnk/nBhqHLKbesKZ90Z N8ae9K49jac6YbOoRBWerDDytnu3AU/eaNTzZi4FiDb5NCjH8s+/4NGUR7pQTisEmoARCA9K 4Qnfh8pFQQ2yKkyWtbzC4HrgsLGynPNJbowDD9cSg1L4bHLm+FfZdeGO+r1ZP5hUO0musVPf 0gaexJ/idfqkMJ5PDPeeaQ6eFe41P6ooGVCB6/D+jljwC6y7apCeohuixT8OiQRPS1dfYHEX k1L4G1ailaTL6rTLX1qoAWfjm0lyOxyP/ZCqaK9skH4dneskyU3Wnu3LLG9R0vUQ76mPxPaK brfr2dEcv9AiFwdxYFxBuSg/6qIl3lacqxN0xrl+WP0vd9eM8VIm+pr75hLjDUJ/6k2GLt5k xW3/Lo5h22wKPUtYQnoULEhHpmrc4voNDJ5WVtUeg06pFZ4EP5oLhmtl6Wr/bMkJH2ssow93 qRTpZT3ysyjsINZZLZs7OmAXgkxoNIrW9jqaM8/M58d4K14aEzoU4iA4pHel+ZCObX1S1OGe PW/lRAfYU/djqxCfe9bTwksdWVHeHFeADjaDkw2nnclA4Wq9cRC/dm846U2nXycS/BUqMChF 2Uq3DylN8dMkEDljbo+zEdDWNM5UvU4MJ2875anzp+ege+2R57WpqOjKG/flBm00k6VSZ0HT N2ScVEjf4QmN6Jwz+xQla4WzK82jXHuSTpXqs8l1GPZ6Qz+UewtgiMUh26eba9QfO7921VQi 7/CyQj+Qx1ScJI+79PDwiCZQ23qazR5ggpQEah9Hm9arzuuu7blB2PFGpwfWnO3QW7GgLN1u K4PKTv46q0dS0qpOWJpBMJi2RxDDv1B+7V6l1HLMTGWRlAQVEpe3ovNR9kLzSYuiXzksl4sW 8ym6BIFAs9Vsm3H9sHYNCyqsAsLuvmhF5hfkABzuK73NJLZlJnQhUkNWmT6Zbf3JqDOcdf9i aeGcbXOAAD5b4v0OQ3zn0eLjxWlS8nybK/pP3hGv63X7wRQK9Czv6JtnOpGTjzFogCYj32h7 gFiw8ELJGThyFG6kc01z2eeROO8Xe0wj2O3SHSb6pTjY1QzFeYwcTz4xHKhUu+iAYR8wI5yG QpxsNwf+tD3rj1025sS6dQPQwBXr1s3QqFVYvtItR53DXLcuOxYrm99ct/5ezwZEVrH7UrXq tW2Y3Npds+PBYNLvj1yGYE/CwJtW81OVP9pBpuSPa3e82VOa9icjaxEt0qMObVu9ni+OBXX8 kNNi+7l876mLaToDGx8wh/kPxmqoiysHvZVt7Koaahb/qzBnoINg+dzTnGOh0qzVQp1+b9BV OvLX2b2zbvpJIVlbS9/1x9esWc0j0cah1uYAnHfRAWXbYWmXLkOogj2X6M25JYrw0eJ4qw9a /TlsjTCEwAGJqnHFYgObbMQz5aJInTpz02KX7IXFY+XpLy+lqjRCpfNVm1/Z9OdBuym3pnCQ E5HpZWtVNDfFsrnJmQA33BbHMUl06haaQeq7Rwnv2TjSyJkwZOC0AI65W94wYD0NobzRZu7e lPv0dFd6gSkkiGU0mCkOwoNG5DymBBC8dG2veSpOmtp4r2yI0SZHMQioMNji1YqBAvX+agQs Zb+R3G6GEOQmzhOYiIQTDY7MTHPrl1SYgHYeZsHmsAEGKxfFPe1oLhDPGYOlSKM0ksZymmYW yGJYCk1FPF9B/c3j/TOUnabpmhBom1eFoKqewpjHkC90GsNcl2CwtuCq6+qliCJ4/ylNLl92 o3vduKLCS0ETs7A3udESAQ/xm/1pB4gLlGHjilB/oySiUG40t0iomy0OdYqpyOmwKBA9Hg+r Ck93iKpCBaeqWkRox2Qvu4wbED+FazMaNMKW2p5Qsi9/+5l0KAEMy8AQlqziTZfLaE41wAsm PMU7QoYF6awGIWnuS5ufwv63GCcdfxbHYybUp+3F/XEQDq3zv+2b1CwmoYQ3ZQjBYmROayNY pYU81GaTUinyah1/TopzgPGUL1s8NAcGwDwgcm9PC5YkifQbcezFfMHY1pd9BiKYJ+w+i9cb 2ztl+eXVrDQSt0l7FASaLhK6xNpdp9sHt5ItMqdbyututjOUaO7i1/MGxV9aVLJqLWNhYS01 3OCSoX/RWp2iQShHDbpOk4BOjA2Ur5wbG+AvCRmjvSl56WAR2ijqdf1wpBR6kSkozqvDHNjS 0B67+FMSP1cfds6LXVcOo1CYBGSMJpQ1fGmtomTNMyNjPm6cvy6dr+VozqxI3rPbuT/uNLB9 l7TToAkrjbOFlitDpTSkJ5tJcWNuzOUvq/UenVlEhgKw6DWmMqQHYJLrRun8ZR09N9gXvZk/ 6yhyq4hVfq/iqmW8xx4iQblAEwzvSAl4GGrOgRddhN3rdtuTPgG3NIZ+e/3wKG/Q7nmDaVFi oId++Wt1YZc/PkPY8yM9t9KbOwwsy7XtNTnwwtdU5ERGMDtsNhG3iAEcmIL1ThX0XnsW+P2h S+70RPKWf34SecUtMqiuldJpNK8lmeE2UODeECgzk8Mfjwc+gGXOJMc4bAdtQvK8AjkcM0Dy nYXU/lyMAg25dVCYj7D79LEsR0DsRS24ci5LXbk3FSAC2O/azFFkF+oOPF6Zk7AP++NZz2l4 4/dLfqk0lbbcIVxjjQ+W1G6tyjh+W41+QHzU9rpmB8UUrW4wBprXpY4oFFuSE008toGvnB3k qFXXZdeUhbkzWjvsjPxB54eV8xrHUhhbTbvf6/QGodWjuXD3840uDv4DKnZpuxmXTxuhUoLn 4xzB+bsaeOGwO+6cbSt84121VTdrioWIdMN2Bo+jEETM4SAiCg8L8/hj/JiuCc6CinyeBeUx T4iGWwBBgUpddzRoBg/bPMX7hO4t/vp/0rt7UvS7A3pNsxhlAVnelrrkngkofnBdWbDdJbTC oEG3Ox5Z+x7KzGhmhc64PfXaNDbzLyXgX0q+ldCeIOeSC1bp4pDBKI323FWPkUHxA0YCIyd0 vVSNiwbo9YPJuE8AOWdte6/dDQdFqu472fbGqG41zNRUj+dgRcjdXccRp6MUg5AbS5OxVMdE yvWI6N4tRbxxq6rl50v7HQU4t4tHrhpie/Oq2qBKmfJ+1lhspYGG4h+HxR5An+lqReqzEoRd Rk/01RRT5LynUNSY5y1IA8f7MeI/YyQiLsqK4N1hHW8iapbIRZCn/0FeDmtU07woOn9Tolyg dr2R350MXPqLTlS7Z3jrtfLHOy8DdE2y4hB9obg9TVI77HFQQosRZsMWuVtDFksIz+KRgXo3 G9RmFV0vO00xsrCZsmqFqF8hvrgQ600o38Cz7JCNitaHpoJXuYG8FBfl3O763dmAOO8vHGuI FC45vOR3SHU4kCaY+sHE888mzTd3fLWYgx4K0JwAZmue+Cl4PhHaLg/eKtMW6lUYA+QWqMoa WVZCES36bfYYUbmJdB00dCSuYm1ZsNbcmdXrj1En6IKG9+My69/pEJpRua9LeKw9Goe9sP+j OlhaUuZLp/TxwxzFW2X3z+fG3qznzQTlTyf8t4mBFZV0ym4kXJMq9dcYTyq0Qt5CmNOWApFC OczTJaZEqPMSZA0/3L1/+154prN0d9i07u5f//LLXetDlH3EX46xPU+g8mAWBmMaWNhE5cvn 2WmV1UbSu8+zI3PLUGZuGYI2MI6O8qoDkkq3EAGO50DZhjoZR0d11Ih54y3G0VGebTYf98Ac L8yCDj80A8rbxmANjYPDPNtsvqGx/L83sJT/D4/K/3lhlmFb1Mxv6BionWRU3THtSu2Mo+qa tSu1c54GtROAhrVznoa1wPb1k8DOxvSfxE/r9EVBflTVhnoanuUNeoM6abe8wJbedn2GwzyJ 5qFQ41pMZgM5q60mTq84p3Shiai37tOmmNtrtHo/nHVmY5fe7cstOc0pcs0gG9/GBMBR+pAy nCqYaRx+CFu//Wyjaql/4c8//p+d/0pvm8cvKYK9qiZQ4UzoR3isoyaQNS7DJZT5Vtht5Zni eXgoR9+QQ7crc6tQNwzHWZhMWzIGxIMUzuGykNVSjNC9z+w0WiSUqIq3i/RABkr2nKz22tAp mDYy4FWYeXPqqt0c0HbLVRGQgxII603rk6AsRdHpO6xIUHoZ3C0s9XX8kPDo9tKMLIdnlD+1 9OCyZWRZwllVQkf8rFedKipp4CvUViY+c5EzfozCUcZrIdahAnlEEgXP7B9fGKc1B0FZCE8x sU+lbiRJzYcmBKYic+kFHjXeaCmsMZAhXDwmsQwdsoDftB7TZxjD6NmkGv6MCkNTRNGpuSZe rUAi6S/PxmNK2lh57TK2UAz6iBholdW/Hs/UR8SLllQkplggqf0F+Ycyg2HDNnEk+1Q0XfIk p8/fNORUvGDQ0F3OE70ZnKekJpiO0XKJ91A7dKlWaBHvtlXuMZ9jvt/r+n1qEL2ydxJ0u0HR oHTlJtjhkavRCYL+sGuZUE3lSAYr2HbLkavBVnCtRauuVFivZH+8S9bivBMyXhUlw+NqDeQh GcjmLW0Pg2l/SpPCtS0N2pPOaDgupJN4sDYz1Q57417edX6uFSIVtE0MzixYK+yW07MS8o+W p2sdDLanj/vetKMQYPanlYtetOpbwaQPKHVNNpRVN77YPlrpTMqYkwbm30Y4Pqildv/YmsdC rzZoxMbPPjIWI71crEiyqWKzD5QbDCk3aKbRm1bLWlx+Jpm2lHNDtS9VP6jeCA72ZXG+cZmE TDa0nfD6GGwhrm3YPnvfTuQ3jlL+Ev5yNADB8lJB3Lu8VjdaZyn3BizShy1C65p9QpHRIzfA uLfCiAZ2BAVVlyq9GZOBkyVIN6XyLMZTXKXX3dVmemhFj5e9on4opp2urm+9fW/+gIpZx0nE 3AG68JvQR5MuhF0NEw/H0nodry216vXUlymcnDNyX02FfKshYXS7ESA59YNd9h3cGVXCQso9 AiyuKG6NNikstBhW7dNhhxkmFNkXTJrCuXggexCaQAl+dQvf1hzl3U5n1K02pQz8MOj3irYi +1FevnJ5ktuxoqzIheS7V6/GsKiZ542n05OUGL9U9ipvU6a20CWXMrB1mWF/2rHmvlG6Uac4 BKPsH12pcIw2a1t0tNpzQaTt8XpZ8BkfH/T8wdD68Tgi7IeNXpicHeYbRGTwf3zUqYSYcEbN FHzjIDdBrzMKO2El5xL02/1g2C4ge+xyM2gLY7/ct3VhcciHhr1pPsXLspUQMpOslDyBVaDR JMAGddWv9zhmcXYaiveg/9wwLBzMIk1ELz6bTUJWtxyWu0zKSOk4ceEn4SWPemOvwk/daX8w nUwK7xdvHfqdWWhEhSpfuRI/oWFnI/hAO5bADIJMTxghTlBa9v2VvASbKv68iFFMISdv8QNB ZqaeC6X6k07P99qVuLgXjmaTgMAUv8WJZYn3lAVKlhoXKeUvzrCWG0osi6AO2swl5haLvNpl YfBGS1gVTRA2F62yvCBwmlQixaJO0SR6RY+TTg87QTgcu3RXfEXOuv0t1gL6lNjQYugqxMm4 OAWOHaUBPj/FSzgsKMXL9vGTBL19hL+31T1Ewk95SoWQz9eVdnMzqdrjznQ6dAKBrC/sMJDq 3AiQmdXutioRYw8LNEaIyFP47WdhZgvelU2jyR6OorDbMQBny7he0qwA8Xn4FUj8old28b3S KRL7sRReJbhZdqcWFeh5SYmK9YqHPotrFU/hBGk/ciouI0mZTSq3X1jqe2bITuz36rBD6F9V 9BG1U2o4Fb4RI3vX4IdIPa06C7V4BI4rtQnShDyB7LKIvMnBu2wzwHz0SvV8BDuixSOvf2N7 +JlppThGD4+9Mbt53Tggq7Rd6Jhgf2u9Sn5q/QPubiKbhHRpehW/eXjD28rzVQkxNJ+Iq2U0 SKTETu6FaTZHqzlL6xpPfFpHewLDIoR9ju0geERHDHRqir9KAUVLiGpcjrPqu7PkAfOIKLlG /WL8FuHQ4iOE3t3dtOL94s1P/0K6+FXCX7c2fZz4300eyq+JEshktKSDdm+pQW3OvVdopcIQ teJ8V0qLD8kbFKzhIF0d1pX8ZIlZb4CL+5guyfYzJa1WhyINnyff5Id/U71xe0fswfz2jFNP ooLIBOVYfIq0dfcUS1xHDzSBIy8yiLKUEYFwui54IwgKidlWdgpiseXhzGgzo8QPndE4FcCJ ki3jBEpL3VxEylT7hvgl29nM0pQw1pKs+VkhH+lygncG025n7NRKKvOIRqqajvXSz+lY7/qB 32FH6dK03FGhHSfMZB5Lmkx3eV5TUKdU2l7hHkPei8q/zDTzgmDsDWYubSKyhsNAni9efSNO QQBXyc4NJoTUH8ZCEKlCNDm1nJKagKiTMgMiO0piqexhnSiuFdf30hIn9KaGtL9QvuLIjT4i fp8LGVutQna4iGHFUpq/THZmFeO2KQLMypeWfNiLtfxurtu5qiIyM0x32u5M/NnZheffrobL /M0zZMc+RziFgACWRatYGLq7OVR+g2NYipUIPsAkgGVT1ql5Ra35OiXUcGpBSrLXklG0+UIG jqGzVBxRgvMO1K4JhuE8WYEsITQqYu65CLlwsTDoUy6rz8/mGyl1h3W0E1qffa1oG61f9kCW BwwK7IR1lOQgp1+8x9CgNd6jVN0ovJRrESvcgSzChDiIUw/mNUBEc30Cy8X8weLviL3G9B/i CHyotsR+0c+CgQmPbEGxgywF1BBbf+ILN+IbOfryDG9MvAEg8moH51i7Xh9zd49h23f3fEAv MFCkUG+fUvDBsVabx4vowDYXtjZ/hrr9E6idA6Aqe4zwJYQVVtat0R4HvOZH4qs4DVZgFXxR NXeGhE5l7IJriArpKCXWGVvPoXuFy5IEF0Ldw4iiVkVhjlORonDIaZPLXnl5F01bXTVwnQqb Ov3AH4U9lym+Q6/TGVfT35U/2i0o+eNTlDsLQBm10T7B8zyvG/WmGRfHRvWIG3jWwO/PvI5S OFZUxgvWQ004bO9gU+e7NBI7DsCpHTTZCj7xfSmIxhYPdYdzlLaIt0mwCFVtH+WuTVEuoDf6 4aX0wlwTXPKBljyo+dPzY6hs6Fn3ZOr7U1U5ll60Hbdl5Db2OZ8fE3Gw4AyZIz6JClIAPav2 chX/UmQ1FmubQriVxX2bgNMkfpIF5/LkFgLMdc7GwhIuoTZ5m7LaciuPAiozYfhp2Se6h/BK Jt0QBI0CbINFQd4jLtu+cTz0J8Oekj5rD/Yl0veKd5zdYYQqAJyojjShJIWykFAvu/3rwxNp +ewnJoAMQTN1TvoWO4BnicmtRWvnfvWcWVhjbXwCaZpX0rvnXIZQw7A+xM7xP9FegD5C56+9 UEYpmBFlSfZtAzH1+TLNw2QeohNdP2KEaX5YCQs/gVKOM2G9s5oT2u64/Kfu/KmJan5OEGq5 jMTQYeKJEmZjmWRPhC4j/rqMedkLZGjK7vdXwRVpXvs7WMM5hijZDAkde3mgWjs4xVc+CHrB zBXW3E6odlJ40UOUbGG65aqbYlecisO4pghjTEvb5rprX0Z4Zc7+86Ow1BsHXI96/dFQObI5 7PtlbPclZAnjM6gJWVdIznRu1qnNvJQjbqn5HtB0edO55IA806LJPXMLjrpo+SnJUIAJvzsR 7g/KEYqeamQ3yvLy1hyHGQza3rDv0ksnTooORUX5T3arvCmz6x7X7LSP2oE5sCn7VOnGEmDr WDZhVPboOKKJR2vPOD+aFYSCjl2nkLE363q9I+boem2tlkUjbXfQ7/bKfebyx7WkPXZ4zGSt aZk2N99qL93f3tm43/aBFjJvK0MvW2PgEQPuFH+RMSs9DEtCsIUIERbDktUvoAWUp0Ln4mXq h2MJ8Y66HW2Pau4o0rqEnHUNKkIyoP7Z7gjbQb9fnbncTHCuYOMwm2xmsteInrmxThGDYCbo N/WdxjGfJkDln58pQDZhmCW7bH8DvSvtlSTLE6XCrdsJw705wg9GnguTAbjbqXBj9gBGj1vJ WmsQhdEhDuO7ibBC0nRFUgL+x28AOZbOUwrX3hQTH2Up9iZdygRBIpzwGHBmCAGkDMoRiUMQ HZhCpmQvYCsE8Hi0oVcivyujeXLdqLPek6m8kE14bLM9rSPgAJKjyqHwUn5CCCoSpzIlTFbf AcGXFF3sxZ9lwlZQ+bX8v7bwgapfSURDR8J2gaSIIMYaUPTUKqpmktYxM2+iNq7zzACfzgX5 lpS+8Q0ATIq8gLZ4m6AZB1c4CLT7cs0PoG/I94FARsEUst9JDfb+84//zFrYNM4OEBuKLWi9 St7EYt+2sfDBkfZQFPlJNgVsoo9gE6Dp7Sgim8IBgLIXXv2j3gnNSQd6/5EAgLtT4cyoGJYK cXITMVjYwrcq5qJiEYJlKDq8oVovXQCcNfSvKt56KfFvWrBalA6ZI8EIcqkzsdAlUWuNDUGd KIK3BLbDXdLi+5RoSFjCI93A+kBsC8N2xZ+FnhJb8umwRjGYAuasOGD4Jc5ACTih49lpceEQ SxOfI4jLB7SNhqVGfhfQPgf2X0RbFNICACpdY2+L8XjpMnohvt3GaDL/SMMMxCHzL61dlEeI nnZCmSSC3lmO/5cHqJYloEhC61++CNtJaMB4+ynZpVuQw/bF/qA3zXsLypb5OR/rcKa2g443 7Y5dcvKVM/UrHp/mz3sfYxBFMxt5U38adq/LRrT3eaMcx1V0nP2iQnFbIBkkWyEJObc0zzQ7 WngT6qObAqHDfb1SWZuvTDoc/eKUQEAHpMmHSOKU3scPhAesKg9rKMfBTu5ck4lSDpEWKoei oVQEVJ5nQHnlD3e6pqJ+NLr5Ja/hxRzDdW6J0VpIJ1J9hXCqo1yl0vGCgwSv0ZwQyQAUq9YZ g/LVh31GlR8LscD8kPraLKzOQurSdj7K6mFo3E39fy2aSr+R5B5pbeI0qnPJqpufStgZStFj xVqljzbbJkbl4SLGY4T1IUxfHRa2VGyPcdquwNa96SwYk2vfpJ37o96sJh3KONEXamcLTfU6 8cTSTsyCVPVrtHo9UFxB5VSLNQl2sQTdVRgfLFpFjFWuAOd3sj3QxoGi1ORq5XQtz2H+VMs4 JxWuvaAbVkYjItgWwgLN1yxRYFC+qBSULKYh3Zk+cAaLjGEyfKFeqIANiyI8f2XTVBCVSH2Z rbayzuUEW0mVbmJ0zSfZRk73yBGedOUqwYwV5LHe7+8iAIKtB9PpwMXlrwgAK4R69JPyz0kq 5J9qpcIdm7FD/VWGcKQEx7NJ078/ESizJe9c+jTLk8pId5qtbmbg93f3l76x5Y7dBhLVVooG 47A79ChWc77eM+zwSCjUKQfgTtF7tobqEIEcZGkZShZU/lU6Uq33+10iDIYZDobWr1yeT36S VExudxyIIW7KZgQakbQ0k767BJJadL5DdlsfY8oBMFCb4gbk2PFSiWOGim0oD1m7VhQG5Rmp Y08R2GfRbkdQDiT6u5cnoY920ZPwoamaP4L24NgVa3yq/mBloVfrc9YPFXRrxtiNVY4SX7eL FnnMRpUognxyQbJklTMhjXG0vParVBUrFNtDIo4f2RKRtlbindRYgMoDOtxZbZICp0+ffRgj QCW47E3rDnkXGbKQdRrSnADSl9SD2hbeYBewLarYClEx4M8hwCDoRlURK5q3h3zOmvL/FLGA zy/szKNgiDpJIlnFxVPeJYdNYrF8NFn0b1rddqcv7t4ja0dnxr/txH3v4O3SNMSidedvrT// +CeiUyYTF0aPmkwu96zYwOKneUgGeed5hrIyzHneRP+XR5SpuIR41X/IM+mQMQnA3ILiptYU /JjOzC3qEY9rKYmMHKf584//cjG1/PZ0OD5CcvhWKqdGwf6dKkexzajVk+VANFUFUSrZPZNz CNOVWumi1mPyQLI910bMzzGl6TlC5IidKqJ9IaeQke1SKwaWXS3gKwWLJ4uXMWm5uMpvjgQz 7hQnk4unbnqMGCRmjiHq+W083oh1TnOxMFhqwZOQaL9l2Hq9Aj1eVI/RGjVBZKRT5lNKykiW lRZBci5AE4orWUo0ICxaxTmBSZ3HyzHRRs5g0mygNRT3fC001JqKIJ4fE1Tgi714Jl9WicoN bwi+Al2k2ASE8VoY01T8qrU8cGD8SOVS5Q/bfS18QrRGMeYLfUE5SM71oBEu8U+w3bJ+SlMe BaYh5HOxSzgo7SAzndlgOGqPgUKmd92Hs34/nBZJ4K8mM1QAw628u3glTmshLYAbd9B0rDJl UBkKF5pP66RQ3b7gSzmqoNJcllfDHnsqUensNulSVlVCU1GIFIsqP0G//2EnOFVGgp/zokB0 WaYJpodwhbw5ANx0NEKD5PqayukA4wpucztVYW1ArtUJxmIpGTfHm3mOBQWKsmIZOKXycry/ uEn8Nyu8GNjwuJuQKZ8TwfdiJz8qFt/KmBHdJ1MQ2Z9//KdqTcBBQa4oFAH0zNNhzzKktRPv 0PUZyXwD2T/FdDTxxzzsI6PY+V14cyFCki7lwmos2uZ4elOvU0wtN5rnNQZ3QVStVwnuWL6R XFTLMhBts+cYDJz8DvuLPO6s9Sp8/+tPmtankv48Z5KJH2Ur2cYJ3i5f5o4QeeIe0QHobbmh aqXA0JsNranx1qd0fRAbsDvKothuyoc8oW69kGKqa6/pBmUpE6LkZE7mnjUb9jvx6ifMR6Zc o3zEMsHkQxCFhJkcctSpcl002fLpav8M4ZE4wQXqHM5QxlOGWhP+d1ZNCatbiJdxtmwF58NW ZKWfAcONjG+9Dx4/F6qQUWjFYSwYXAgODgerSyJ7jMVv/i6OQlhlwpjs0TLYTcEl2z6HQd/r qlrM8Emcz6fsJixXss3zvdP37E2LunDQqgKgAY5i8MHMe8FD6yr7zsEVceDdMSKBHNYkT1gY 0RL9zlWAzWs30MXy63G0jZbRha/ENo5/FT4KrC00vqgQXLLH6cYduEJN/ldNQMAgIILKb5s7 D5qXxiem4C6SBdJTp/CBMGDeRTux116H3Jmh6eadNA1KpsMsTffY01+VfSDtCPnjVfWyilYQ PL7T2jh7TEcON9MU55x+UmkKIBdgna/Zd1zF0n9mqRTHW64pKOa2Yy9T/J04JhG8n59/TvG1 dtAeBn3gF5wVX2s06+iVl/s9v5ExjWOU8CWVbsuVGnnXnMIpbBmh+PIuXbM6U6EVBiMRG4K+ AakuICgPsTQTgBRYm1E/8u3ZdjHx5MktKRU7kdgq3aLyHX1r7LStDusVZace6WjYwDoqCyuK kAviMc5BfSi8tLWsCrh+VFmjBuOvwrpaMF7IalTK1HGlCAjvwqHd6cCb9kPUIeo+xnjkhyOu TrRzqDQsvpjjUXlbo+ZTdafsBZL/KxQxmDhPkGzAPc393hT94FoGdlGAmrNdspzoeONskmRq mqXYwFIVpc64eTVEoZ1QmySsvRRlDAVyeZ7Dk6uNdrsEq7IdC51Z1+9Zq+/hrNq50uFoUcqh aF5Pdlz4+WLmXFTRwchap9uH18IQsq9g2OkMR9aSMO7vlV4UF2+DzsVRp8VaLqeXtv2XLlw4 nYg2ICbwCFuvxDZky8L6ZD1IgRykMe0Vr2HQsUOGFvjD+JDFx236vI6XGBnICAQyPKUFQKih moK1DXkSLEBQse0PpRbDDly2WnQff5i8UywjC9C0gBuLgZ0ocl/Lu6Nv9u0vwoUSW8CTu6UT Qb1f+yavBeQBlgxHebQJswyOkqM4ae0ClBHP2+HylgxUbW4piUiNxEjjCoHnMRgUSiuvpNK2 Tr+CasAji4CdHEENsD7VVyGLM2MUYy8Rn9rBL1UwYdjsHR2Y/FK+dNhGsNqXYHzhYlLcG7DT +fwZ1TbOBzu0pLAD4MSySwcUH348Pk2aohVNdrb6KIl/EdBGjK/yCim+BxliAi72yfLXepXC DOAPow0CSBGq68TjhImY5gOK9ZB6QXRs7k9w03n0SL6n4kGybPeIYVTtvMpy40ax6AchlOKr BaPGG46E5UxQDRMtybHSpFjXjdKAVjpBTrwH75OdRYtRxq4aQ86tgMVTXCyLThAMJ50RamhL 0ctOp90tJivUWxbCdB7REIevYlnIt1l00wfBZjeICObAM1YtFMzaM9ULd7t/biiEbn69ApvJ i6WixUKwM1XOFMHMvzlsjNcZTwfDfqUmsTedTIcdGuhVuzGX5fcBJHkv1kDpS07Ubw8b/mWy /rRWv5P9QOLaHbLZ9LeechDlHdo+Wmg21dsydc1AfxH6MS90nsf7Z9iKSmRUYf+eCpP5v9Xd hENGTV5llVQOG5GaeM26HS/CfVZ+CdoT5Q/UWSOlgfClaj5wpQTp0M8ryhCjxM+tAWQy6bdh /pUl1hsIu2ZU2Ph0nE4hxtUztvxHjVvKV3gWDv/pO+IWVfD6kFDmCPo+4tT7MkbAiyPRi8dt uk4fSBUvoqeiXluxkENaDeBukGBORWyjDC4vo8/gJVY2mbb9sWphlKVc4tHLw+J4YplNm9DS 1/Q6OSis4quQ1647QaVPhwmClg95sJadU8jDEmCgtg8Ju732wNoiSoCIxm8CQhOc7MueT+Fq cqRPIZy0q3DisxxyAPzN//x34bTp4E3iyI+24A+d4jJ9Q+FlCWRY8mCEnVZ1HVWzqpnScgSA jlwdPQm++Kx6LJA0eImjXQ6njOcoExePoiwdFatyEBofRIbfk5BBFJEs+ImA7eRCOlXpYfrC YgJJZZmcKcoRTCg1RXYUGSYoDUZQr3BU1COI+0johGElJa7+Pdomsd5n84nvySURn5iHtNW3 8fs/pcmSpvfQxhy29FLyQUrAilwmmNfxoIYPli7qmNEx6Jro9cJOexZ0KmPRe+JACNo9ghTM 2XokLIWucdi3QccOvH4okRnOs4o0Jb2/fceej55pPAAlSvoENO2oar+rpBLqBIxJhWP7s6Jm CvYrEKH1Jmswdm3yTxbWFWTY3yrjDc08SGWDCULVN5h7eXnz4FwLebKlTmPHwRVce6XkJ183 l+rgT8gk44eEkKWxK9FAVqQ+MlgZIkpa/EghZuqcBBdrg64p9PSh24v4d4qzSlVOayBm5bfx 0jMIHr2Q/sZLUN3vhcuiFbCgMEx2QOpFEjfYSxRYcCVKq8CL0wVCPCBVPholNYvqC0PBFz6G K/KKkpNKNFhoR8Yxq9OR7NSQBMtN4wO24NGF0DviecUXatjljIZdEM3FyenP2iggd0Ear5dc eUUX09GSD6H0ScnqNlmzpbOOV6iDLf9xnu736ebozzvC4jn6sbRUjv4eQXD0v+Gj5VJUumeW Euv8TRgtSYKi3fWnGPHz1i/xIcbXwe4NsyT63/8r3CHO8e9CbadiJ969x9XHUIi76bZFZriB lrUQUpUvrEv/wxey34u/qr+MsbbS3+ZLw1fR11TMwjl+t395wnkvGKLISNUobWFfeF676kaN J8KRCsvWsgwNGra+fIWx1Io44sVl0tTAWi2TDkqICyenTN6TH2ozvfxegPok1rdHDXmWR9eH WI8eOz/hsU0wZ9pjj0Y1Wh4rVLM9OPo16PDutAW7P9g8N8384CaMh9KDTxmgZ8rz1T74qHnJ tuK9nvZzfsVvp2wiYP6cn7w66clfhiinEPso0G/bRW0giPMLkhNecLEYYpwq0NAqF01tFQTN 8tZsDHjDsD3pVGucJ6POsBu61jgbToQzc/3yxF5HwkqSv4y3r8dhuSSjNtp5jP1VhAP+/OOf ABCLUdyiNwmUoTG4UY9zBKpRl9MT3B+wRuUV28mH7ZLewLWhnzC8QIa2yO/7B0BSUCXAGCls GwpzVPgT8APiLexNrpuG4Zjk0xq4LyL+lKSHzFRqpar68yHXZEdvl0hEIcJbqQ/IbX1Vhydr 57WIDvrvqUqfe7ryNgs5lIC+cJmSx0rGNfVcpKqYMK/yXDEeCNWQSwpLrDNhEz/FmOeOGrus NU8JZ4cxtEoVnvrG8Mq0quRP8Y57PHD1Tet9skkos3RzjG85xv0VECC90az1ivvyYIO/vg9/ 0qJGLwBXjtcYN19EYvHM+iJdDR+VMhu68pB+zi80UDcUW45sS+sX2gOs9l7w+htATx1lNKpj IGgjczaRjl2prRARFNVIs3Bq4cOSpci8YgYVpBZORz7gRbGPbGMEe6BZOieZ2WeZH5I1JbgJ S5yTPliW2h6zQjMReB4/AnQCN2mccDqF/+e/S++sUYb9WdBr96HJmjyj6aDf9qoTHOpbC8s/ 50BH0Tp3sc1Muvd4snqgHC3TPeTWHdvZ9D7zMUIRau2gOm4BpFIWHnnmcCxZXkUrN29SZzTo +l7PBZ5iPG33NPeV1+v7Qc9c/RMOu76f9yjwMdbp9TpcK3BeNEq+zXpqFarfZhJ0Z/6wYy39 QA8huvKONEfdY12XeBRubZjgPgi9fNwqYXfu64douq6hOJVupIqz56bCccdrQib9/9Rd227j SJL9FWIfFlWALyIp6tKL0YC6dQvYrjba7pkGFoMGJdE2MbKoIUW76m3/YV/36/ZLNiMik0yS yWTSku2ul0JZosjMYERkXE/gMDc4ZptvVV/eBPNjUu+OiHzp7bl8ksRxctnhYdBDWlPyFYUM PTohMzcgSklN5ffZHiNUkHqn+GXe+l0DR0WoC6H3eTk0tylangt/5mE/yjwWAW+ksyhJQRUd QHb/IdjzZvErHb04lJWOH05lqB+zaIuBTM6gUic+GkFNm2fkxXLTImC31df2OK7n+NVxYO3r W9LcNWiS7MAvtUYknCzFjkSqO4OT9Rk+RCMz74+ETT8IelA5RniPYWts/y29ZKmAKIkB9Ahy ONhwJE53SVLJmius8ZzWxVQsVVeTjpzTvjcdifNGO83dWLWA8Vq8y99ylK+WGYdT23e7v9c4 S7DHQoyeqtoxb8BKlfTuG2yqGCZhrAU5yLrB9Z3f50kknMB7EemTNyBVW7ZcJlLDwSWK4k5a 3QTuBuh2py3mFXNAl64zzrHjRacDpJjRmaKcZF5sDDP2uMI57W1M+EQAQNXMO4qzJIWovvbO 7Ryjh9B+JZvwQ/hQjA2KawG3zjctto5Vqm+wbp0KU5COHQ2ZFj327TkQ4P++EdgCMAjVo0Z5 ZCNBaEKiV6Z70nxuD4da2ojCZXhMLUGpNyLat7Eqam91NyoNbqgFLLs9sogu1cJubSXzJ2rx dmmH4J2wQ950KSVnh71Zg2vP9nzTGxySDGAWRN9oHtkCoxfCMkcy7d5AHZTUV6t90y7sRRjz DRabw7gZVcAMloOeO17A62wLRIz7ru8UnUml9YgP5VGEpeWfPxCBkfJKOVXuuuWdy7lDwF+c f7eqJdgaNcv1qSyLkEVxkj3BgLcvX1bWXZD+k8fBYXWrxd2ycDOF6yEhz2J1hXa9495gWkTr OhjTayyv1SThjH0BmfA5eBNZ6cLD3iZSGBbA63V7eqWDkLdCmm9oUs1M0IvAJh3mUwO4uXV4 5LORCfi2oUqlsoWzuv7I6aW4VTU2JpIv23iTwdp0S9PFE+lxjZagsaonKFRquBMhCFOVCaOI Tl4AmSUgU1iwWBTv5++44cQn9/W3q1vt630PGhLAmW4VvaHn9KtQ6aVVbNipCGJ58mJSLNHm slBQc425iSyHKCOkFiYrtVyWlNozG27f7rDcxy3lhwb7Kk5iSgMKfVVYFMV8gEpSB2uIMZlX 5CjhJrBjjgcV6X0y3xv0pGHQpou+sv5OTVTMJLnPoFQzzdZPEXC0lH9FKJcdjNa5tzjICeRx CwQ3DihEKG5UKkjDbAFGA3+PIFkUM4MEZx7twuJQwtKDONARyhcRcJYtin1QHLZ0wAT66gbH 7/nL6gQPoxPMNBzUSucJxzopy/y10mDyxmO/P+hXsKGUBpM/cqYOzAGVn9ucXitffvb0GuaE 6hNveD5M/RvcT/U37oCXsal/g3ur/mYwruTJyr+pTW+ntelSf7ZyMJJH6JvqfNyg+Ss+J171 lZi0pHyNxD4/7mJMGVeYUHU3DpSq+MpGqqqZrrcYjex+D3pr25iuP+17VH5YZ3YF0ykGhrdN r9JXvaxLRS6dixzBNgQMxKo8E6GX4RagPbFpUxL+oodTe2q/YkoePRbsL5ywiZhzAv75Pkw4 ynbV/ALt+X///b+gAqWlmeE12h5w1sJkfPBiOqj3Wze/6vLlnRwy5duV3r9yCY1McZwoSr66 n90qNpHJMx8N3LHWPIIXpK24EPFLGvdDNUfwXbp5DJ+wSh6mz+GJn4N9Y2cWZOGU7WgEqiKZ mRfU9BtcWFN2twz+Q4cxNHDTMToLkmi9DoMKd6v5ZzCe9ke9kQnEsOfZs2XDuajgn/LlZ3fo G1jlxr+9ZRZNrT74VewC1NxAR8Qxhhpi9FGo22KfkgVFILVYz4ZoMmg4leDPhK2rY71Wm2YC tV1YtHfyvjiT8CpAYcCiI0w1YPrQ8ivNr+D0ggzKzmLl4Gm0/C/zlUx+Xc5GjuOd9sB/GMhh fzZ1Z8OFiRwq7cRmOVTYie8gh1VX+c3Vd/t8Qkzrn7oODAOsbtCjiTexnOeXGBTChpc2wK70 hn1ygDOY9YIBPAzSid/rXZH2TUkPJV7to0xzvu0SNUJgwOSp5MfVixgqlQt3K3gyP6zyFLIA g9S6swbzbHPt1DJQS036UU9JeXGtdFOMiBHJBh0oVj5fK9uTYlRcKMotWXdgEvzl3xD/+ydo tgIJxa6r+jdoUkldVML0F9LWQL6VgD3uZIIWVVJmFqjDzIflFEvhW1vr3N7CawjSKDRX+fJ3 01w3tc6XVymrgKbBQEMss9RyAeJg+xFi63CDYhvSiIACN7fozIU3JaJOWnGaQ09C54O5i4YQ Um3hjDgt9583oL3aV+1uPpNOtMtSQ6lokf1l9iXFNmdKLpBeqJ76j9+Y9b2L9v+0EnSok9UW QxEB1sqzv8P7S9QlPZed8R5SlkkM1IAxr4sYqI21ypibP4knchfpzdTBRF53VYLzfbcR/R9Q hYIDG63bm9U8vQCAKCoUSKkLocTLVO9e4d535BEmtoBsANXzQq4+VlzUNwDICUAg2zUj/OHy ShULfD6HwQ/efT/gNzR024AMpvEmQhZSToxq3HHwsVsVZWI5I5f5+Fp5Dg6n/mw5nVdQeb5f T5oZS6cyB56Dt9Sbc5dzx4pPv7jIzz+0TISjLMbxMLoHWCGna6KRqdrBiwZVVmVXY+Y0YQZ3 0B/2FrUWw+/XnTtHybGOwjqRoCUwXvrgFUBcF/0IsIKAI6Eh8tDM4Nav4XOURqj+EHU4jycV 3h+KgNSRBmlc7qFcgEtigUuX/8+jaB//a2DCid5i2Z+6eNS1qiXfdqfVM7E5AVW+/NwJKBvv XE/yVLIy5d/Uxs1RAqqS5Cn/poa9QAko7B9u+k2t94zWVkkLlX9T6z2jtWmfo0zCDca6JByV 2tXXxvNS6t/UknCUHKusTc4+Nfex2c0pNVtzw8qe5K8qeT35K84NFU1QyrblGPbVaITqfs2J PRsJqJaxwWw8Hs8HFQhNpYx1zbeVLkcZk1SS0Obnji+IkYR4YyGnDepl5g5nHk69fpX3P5zb /XlBD7164Rc3qpfWg066AfeSMFI07OsOBn88XM6rB4N8J/Vh09ZfJ+VN2fkqRgReEvT4T0zN Y2kIM4D8lN0RDpGVlGMgUKU7yEuk1ic6PD533kVpDdqK/lcSoUoDhdeNyfwmz7qRb6SVC/bX OdsR/puJb/fsmK46zY/H4yH94fr65eXlitE4vYqTh+ttvIGFhdccu/EqSA9f/8pW7oyc8bB6 /Kp9ayPyGVmVA2c8GzrzCv7cOYRNFWp7I2Eb9b4LYZMTeiRsx5jJWCFsP1g/gquyx3Lhn+Nt SDOuZ1Ks+uc8Vv0eW1bIFlW96MNWHy9Jbr+cYDtNkpqq4AzkyxkslrZvG42BKYtSm3yVvzGq mwFg3WnGHNajVspkzlZv/csvd4sfpLzIkFJEpUQJVo8+B9GOgEGp3qAoR38J1+DHmAdwmoNv pqu2COVdoLbDai2A0k7LZpz6Rbrz2Xjujl9tlfDlKV7k+1glqtjteeSgk6KcxQC1A94pubRy 7eotD5Hd5JkKvE7SmouvNEC08y7amcNI92lD9m2v/uPU4cDuj05Uh+0ENFKHPWc2mA7RQX6V OmyWotFw4FXKCM8rRaubL19Wl07PHl2ydfQbY1fww6XXH/cbTCW62++///4Both+h7u8j4bP SGdS9wsUlfE6alDzhQ1CgEtQEUklZlLUCfL4heECwgs4UjCYGtoh2trkvKVtLxvOQiLgTbyL Nt8sf/sU7ZlAIiiW+eYn+rL4c1O/jZ8l1QDSXxV1Jul0ThXCHhwO6TUGC/84ZGtGChB/zLtf HR4PfxV//MHE3x3b3ujfg6fDf7w8/BGs10n4/JfosN9ru1Y7OxL2bMDOMc+kKt1eOHZTY4VC st/O0JG7cHWGTpVQRBV/t7P0U49K9ksNrkb32C+rvI4iRUtK95jF0J67Yp4cccOu0yjX3Exr eMo83JlJgJFFPBt6c9s1yWP8uTxOTSU5L+r78JiPBNUHwR2RNJAUNq/7vQ1p4NBqz/Qxqecb nkB4jz2obCsMtH+UX4l45VdReLxH7fp4fNpdJ/eb2ju9/ig/0l0sRq4/MonTKHMuHxinMSh4 fZMDV0mHkrjcMB8DrRoK0YAUYPjT+iRqvrvHP88kDfiq/nzScM6oill8cmEDBJ0J3yvzIB/O 943Vn+91JjTnkmfsIIP/Brv0BznI2HnFpeedZlm3tS13tUHU0oUr+PNJV5lXtNIl0cFkedqF mcih7Q7dpevNDeRwPraHaN7J5GzO+ZcvP3vOv6Gxs9IFWfqNU2vspLy6rhmUYEnqeXVdbYGj rC2wtc2tTsNcB02uu7nhk8o81V/xbHxFKkppcP9wYOZw9LUicKq7NSfwHQ2q+sDpz3qea1L/ djrT2f2hO21nOpHI1jGdoy7mGOg6kAnMoc50ugIQp6GYQ1eY4aiLObQFLU5DMUdzFYXTzI9V OGX5K4Pai2WGiNvlwJPuyGE09KklvOGWDccIxLKkdBz7C2NjNOfJ3z5HKWB3HmP541s+hcyg LsRprgtxNHUh9nho+8vqBE+1PaQCHmsOoCr6sKWGk9fZQyXD4A4L1l7gn8DaRU9YxcZR9ON7 K0pTgPpndK5iyyRBBDlV7roKBJptSBM6qd5zzd5Qhg1E6SY+EBotQENQhwpA4T/CcN/yUVfh lFd0ZzdvtyG82lJwWooY8Z0aXN91GV3sx220vbAexXxDaY449Z48QZRY4FvxIQ2itLbxlV7Q 0Gb2i8pIYhwWhgP5DglUee+YhLFHAnzz+psE8rSOtzAh/d3e5sSHjppNEtH4ZdHxaqyEzruY T2XqYaZ1l7DzCYZeA/H5e1BT7TP9AKL1u138khoNDh4P+vOpbRLdPV3tvEEaGwWvPmgben6i fYaDTKVxcNiU+BzuYoRORcZWjq0ougWDTRKnaTGkr9p6L4bxAiDOEfKZ6RVE5b6VptrBa0mP gGqE7eAgWIBgxeTOupv/nHdAYvIkW0f/yqIjzDYp90+ubvILK4Pjmf5MTJA3y1Rsh+ME7YpD CS8ArOAJdgXjRtk6X4JvzXCcKiGjGSoAFEpzOZgm2MkJYnlS495ivswlFBSE++dIW2v/yo3F e4q/c2bhw3DZq2RKSgNW3sB9xCfU4V+0jv6d133/iHXfCOoEB9llfH+55vB7jLibxwjAjmjm 5D1C7u4B6womncDcvDTeZUCksypEtSYYzN3BYmkE19gfeb1xMenoNZpg5vX9M2uCmyxJswDg 12Ig9q9LbQpHWkET0fIeNpJaJgow0TlHwWdnWa3ERL9CdsqetiRot4a4fhsQYTlORKD8xYRX 2gLTQAe2NyyWEeat9Umu9NHHSGl+RPm57UMlukiX+g4lB6ENLLydpCC1hbxlhMd46hrz44Jo r2/cXwx7I+6fHid6MEN5OxN4nacuFNhB90B3NFiOqF2o4Q4hk9cMs1LGewTTpW3gicHS67in Gtg+s80Y89KksL1AmeeYfmg4nraGouiirZZCJqr6XgVjm65pgo3RaEpFe95lxws/yvirHRRQ +fC6Vp8+y/FiYNciQp4/nQ/0duj7m5x8xAvMx0ki6BbJB7nzpnK0cKR5xAKxEsbIPAcbApPO eaaAgAZchf+xoqvw6gJhESnAz1yrgOaRcGTE4AGmGDGbhdlmm0fmh326Wa2ooPjmy+qzCbm9 WX85niNwn0Tu/sgeLGYSEDOxvTtcYjzK6LAfOp5H4avT3wGR299zNapnubnvuQuOM94g3U8Z UA0GsWVHNG4ZyR6DZ/ZBDJJ7z0xSGgSEkFvsteVTycHsh9PmZc9stMfoALaBhC6CHctgH1eX WDCM+eInMx+a05l7DnXhCEsSHS2hZyu+sfr1On7Ps5eIyNZmy82Gfdc1nwFWvvxVLaUNS7bH 7rDnmZifyiU3h4QVSz5nSFidh9D26tGku3rY1SBKuhJwO4uvAeCTI7tiRwEv0iPd9J8IUrxQ I8WqIpPNuQRXAx7p9vrj0RAbqb/PoCUhIUuxSkHeJyIpzTUVhnPGe9ALhS4BIF2Sux7y8RXi U4hw0UvBAVPsfCBMPyrPeSY8IYo5VUD9NjANlJqB6TEhZGWYumEuPx8Uxu79UESyi7GVLzBA VSwSXFofbp/DsvMo1xo0HIRPA+YNJEwJRxsxBi2FiB1SoLb5DTt1UC+JWWdlhSRRHWj+DqFX zv26VcznzC0R44JFcC/UjqLgP+m6mC6OGTcXtiZxut5y6YzsBSiO70vSEq476XL+13EyX/q3 LcCLJVqVafT+TPYblAdauGrrEzv5s/sARS2xmNEQ7jEyDvqXO5AzKLqc+b/OP1O8S8o3iWrp b7KE8rsAMEryRKPouKaAyCS7nGYCEgDGJoSJB79feb2x5HnIJdk4AjmfRcirQkiSOR7PTno8 DMUVAYDgIQnRpkELFIIFhFlpTD9dMSVz/MBilQfrAeJpWAZQuWArBfRznmtAiiBtH5IA1gUk BhWbhM+xhI8uQbR9tEZaiTMD4dQKOm/DYxDBgZBkcHLzSdBiLhEP6vP3duObDVnxBnPXsU0y 6Z38pndQAQtmSz98s/4W77L9EYZr+oL3ujiX76cYJnygtgCfwQMSGVOzE+vT3/z0M0e8Ol4e 44O1jr/yRon0CXIPPKovj3QrDlfOSOilBPywB8lYxxiuQ2C+CMCsdsBXgXV7DEl0MCdyZH9Z GaouuCUsBaTrifmhOEPjviKKJRukDaJLzZDO2Bm585lJQmm8sOcSeL7EkOVvkCH5R2/JkDP/ eprEL2zbl9jKWGUNznCoWqvX4szTvRWSVY6ZpX1pnCuZkowHUilvB0yAyM68CScBHkg45wDP kJKfQf4ELPJwba3/HwAA///UWN1u28oRfpWFLooYkH/0a9k9NiBLduGLJILtu4NzsSJH1B6T XJ7dpWTlKg/RmwLta/QB+ih5kn6zpCTqx6lcJGkTILJIDmdnZ775vlkZPbdk7Mkvp/NLd82f xn9m17/gQ8wb7ctMGnkfXtXOzofnw06nUfN3Hb04vnte/sPdS2NV+ADDs3b3vN9ur24NaSLz 2O0+GVVu+QVHxv95dIuYYDOT8VXtRoeL2mkRVfHcLB2PDDs467Z6tzfegSkMxoV5eeWu+2Gi UmWdkU7NSAx0ngYqFhNtxBMZPJOx6Dsng2lCqbPiXX/w1D/ayMnXVnXXl6/ZsmWn2RzcDAtL 8ZLElzaTAV3VMkPI/Yxq1+INSz1NSdwNBl8+/80KSzEFTulU6IlwePDmjW4tPF1kZGKVPgtz qVBdcx82OlytKZxqs7iqNYo8fyXA+Xx+Asy4bu9Em2gbWKsV/oOb/Yk6Esq+mix2cXHbGPYK MLlrmR5g+tYQ3lCr/Q7oRSYZ4H3wNuZTMvS/3cm1FAk6WB1bJ59pquOQjIiMzrNDd7E/hC+f /2pVomJphNNAsHQiMzrTlkKhUtxAuQ1l2jhYzqUVuVOx+oSnMFecRsaxkDCK8lgyRIWMKA1l XcBaZ4UrGEsxIQQN/FdMx6AWgd5YPpLhTFl+EOgkUc4RnXy1TN+2sz+m4r1ciGazLpp4VPcd jVZHxDFJ3ocUH7RTAXG7j5Z5esiRBfms0ki8+zB6eH/EmcNbQx08k8MbJ+Li4rjR7HIaLNGz 3x2nDbwxlwvr7ztDMkFfkl8VRQjIWjFeiPlUBVPhKJimKkCOAqMcGSWFNCQIeBjHyk4RB5NM kIMmEmADGUiUJSvoj1xlfjVf3QQGYkxCxrGeF5UJdJqCxQoAkBg9Pn3YlKPvmvS+FUxWBYEC bZzBdeZlbPUakQwja1WU8rfMqJl0hGSH2BMwU80bvM2QpMmCq+I3bjMK1EQFlYQkRKBgfq2a xt1MA5dpCBD8kcMOFhyvoqJs+Rg4ZR+Kc85xImRfCvabSKTWMB6KKkrx5fPfI0T9TAQaFo/D j18+/0PYqc7jkMuCjeSByw2F37QEp3sHivPbxl3rbHjz9oFio44/aMroNjq3g3LP3KpDCigZ I4nNxqv9qlDfB09fvoQfDdPmu4c/QQD+/PGoXlaFK6sMl35ahZNew4KfvFkAqgG/UiQec77e Kwc44Z2pEIAGvLc3YTOdglB5onq6f/SmT/f9oxKgaDeJ8WWm3OINHfsDyaGctUSque98H/P2 tscuW9nxKzJpxbzsMfCfj8SDI9Lobjih1OaGuWJstAyPxwV6lj59wwcqk35Nr4vka+eHwDKF zAgFT/ikqzGEkm+erAAnEP6//tluvTrY7kwem6ne38Vnw36z1R2c/RxdvLe8nuVlZKhaZM5v hRnleibggqkU1FzQ8apM9AJO9YwOF3MVx3Xm598r2rac26McDcNiW5TMq0YI1rV1ARdojsSb TzC9c8m9nmS5pwIvKLtivNIoKHb/w+P9sQwCUIriAMHyxTqJRNj4j82EEtQClLFnmeHtmZee 8oiw0qht8LQaRydiT1fsiCHPanOKS1dZIZ7cFAIrGZb/yu7oJaDMoQmw86Cc6BDuxMeC6Ah/ SmWlraPqd23/rb03/9vG+SEcNckNMINZFme+sioQ+w02fuV0mGiAkQ9WbKwxAXqSgvKQFyGm JuIpzak0B1UvCSikGcW6GGWYB3dB6Vl+B1OsejHVOameTGWCdVSCO5Sy3PmJaVMIy6WEkZkK 40XF13LSYQQrW1IyxniZoqM80WJctic85XxfGmy2GjeNfq/7E9NgwLIBxWIWyZ1gIUvQ1Mh3 iNk15PNHBPawRd2YpQpB4oyLu/II1V8eoQZLuqwzUazmYGDyV/ptOdjwbbzbH5TyCEvo2VSh 3uJXCORvXiE9/yGsnGsaMYGkXHysptKZjmcFZZSwhGsc/0xoV8M4cwlzc8GGh8E2pXnxSMc6 WuzBT6vzbfHTbQw7nd7Z8CfEzx33d7xYz78hFV3vJ2AmFi4rzngohtyebKVnCBErPscsu7kc Gz0MQ8UzjZctrjyOX9PytFZq9JqjPMBSSDmo6hhynZFTnungSntyDJVFmZmQ/Pk/Mzw8IS4B JPKsxk7n2jxXF9jWQHDHeV20e99ADQ7+pWab5NGqQZxzS/o9I3UsuJtp5mTy2bCa7dUpFOIb cvMlwLiEJiTrQyPvuc7i6w28/4Pjj6V1D8SppHAkI7oxJJ9PiyysCsb9yBe/a4wjy1rzWtpE iOWTZxUeHwyrgDf1ioQBR3nC8YpQQsxPCZAxJhJjZBp5MtiZejvdo0O6sHN2cTe4vej/X3bh /pAbw0Fn0Ov3Dgh5cN5utfzPuZWQ2+1O94Kn952QN819yOeNbrdx8faQLYbg0UaDHBDLI16q 3GU/E42Z0zzQBNiAwsPQLTK0SlhEXav8bN3lOLB89PgJZnMkqtlse99TfO/08L00eC85Mqcz 3G8XJoZZZn051s7pZH0d06TydEoSgEfOm/6yiPGq1uv6yyh3/rJcLtCQs/myxfmVoj2Ui2kU +e+hDv5iwHpYBwAfKRcg4lbTb+h0mUv/lX+/9F/wSs64v/43AAAA//8DAFBLAwQUAAYACAAA ACEA+Ap90lcCAADqCQAAEQAAAHdvcmQvZW5kbm90ZXMueG1srJbbjtowEIbvK/UdIt+DcwLS CFhVRVR7220fwOsYiDY+yDYE3r7jkBDaUBRCuTBh7Pn8z3jGZP5y5IV3YNrkUixQMPaRxwSV WS62C/Tr53qUIM9YIjJSSMEW6MQMell+/jQvUyYyIS0zHiCESUtFF2hnrUoxNnTHODFjnlMt jdzYMZUcy80mpwyXUmc49AO/elJaUmYM7PeNiAMxqMbRYz9apkkJzg4YY7oj2rJjywgehkzw F5x0QeEAEEQYBl1U9DBqip2qDigeBAJVHdJkGOlGcNNhpLBLmg0jRV1SMozUKSfeLXCpmIDJ jdScWPipt5gT/bFXIwArYvP3vMjtCZj+tMGQXHwMUAReFwKPsocJM8xlxoooayhygfZapLX/ 6OLvpKdn//qr8dB94j+7rCTdcyZsFTnWrIBcSGF2ubp0OB9Kg8ldAzncC+LAi2ZdqYKe7fKv 62l1TmUL7CO/zj8vzsrvEwO/x4k4xMWjj4Q/92yUcKjCduNBqblKbtDzAmkAYQcwpXnPkm4Y 52xCPOB5xTHsMcykwZgTb1u9VNvnquW7lnvV0vLnaK9t75fuX/gBVl11151gnhPztiMKrgRO 09etkJq8F6AIasiDMvCqE3AjnIrnmg4t21cFr0ztScFqwxTRxEqNwOQOfhRU6xR4xqmbewXj ZB0FYbKKUGWFi9g666z+OFd4bcl+LJDvz+JJksQX04ptyL6wVzOOrt1w2Rov57iywaiqsVZ5 SzCVwuZiX11ib3+L929on0XrZDaNv/5X7TdV3ImjfTbL3wAAAP//AwBQSwMEFAAGAAgAAAAh APrwKP56CQAAAysAABIAAAB3b3JkL2Zvb3Rub3Rlcy54bWzsV81uIjkQvq+071DqU0YiNDR/ HTYw6kCI0OxGo8BqDqM5mG4DVrptr+2GcJsH2X25eZItNw0kQ2cGSHa1K00OTmK7vvqqvrJd ffn2IYlhQZVmgnecarniAOWhiBifdZzfx4Nz3wFtCI9ILDjtOCuqnbfdn3+6XLanQhguDNWA GFy3lzLsOHNjZNt1dTinCdHlhIVKaDE15VAkrphOWUjdpVCR61WqlewvqURItUaHPcIXRDs5 XPhwGFqkyBKNLWDdDedEGfqww6geDdJwL1x/H8g7AQgj9Kr7ULWjoZquZbUHVD8JCFntITVO QyoIrnkakreP1DoNqbaP5J+GtFdOyX6BC0k5Lk6FSojBf9XMTYi6T+U5Akti2ITFzKwQs9Lc wBDG709ghFZbhKQWHY3QchMR0bgWbVBEx0kVb+f251t7S729ts9/bSzUIfGvTfoiTBPKTRa5 q2iMuRBcz5ncnvDkVDRcnG9AFt8KYpHEm31LWT3wuDx3PfXXqdwBHkI/z38Sr5l/G7FaOUAR C7G1OITCU58bJglW4c7xSal5lNzqgRfIBsDbA2iG7MCS3mCss4nxoOUjHE2Pg2lsYPQq2R31 pZy9rFpulEjlDo29DG24O/tL+wwfgZVX3eOToF9GZjQnEq+EJGwPZ1woMomREdYQYBlApoAd URWwh87pPuoVYNk2K4nbNZVEESOUg1NW+fNqtlGiab1t14Y42QoCvxIMPCebxZvYZLP5jzXF xiW66ziVSqve8P36dqpPpySNzaMVi67ssHXtdi/dbA5HmY0bmoWUQ8EN42l2j42+pl8pYF+9 8ntB0K+9KvtCFgdHYqkWJbre866vmtf9A6jWLmqDi8p26r2yk1dXrdZ1UMQ/3565fJ9FIEdm FVsyCxJ3nEFObow+nXUc+b71kP9daHNHp1Rhu0pzw3zzJl5c3iYmH4w9A20tSYiCSkU1VQvq dMHuMl/tzdHYE+xnAHokjiFIzRzfKBZm4sBYpdpAwMO5UKVCD6Z7K3A7BTGFIf8jZWpVgpoH g14P7sIIGhe+D2f26X5TfmJ/iMxegcy1ltfzPc8/Xub/vaJP6zW4atQv8lNVKHO3F4yDNoxo TMNMTZToRuCHEifILpNaKGzsAD+NYMwSGq+gT2UsVrZNKRWq/QzTX6kxVMFUiSRT/gPDbolx Cj3sIKlhmfurVFGSghHQmxOGjzuHd2SRxjGxzLDu4Da47cHZgE7K4HklwKrx38DZHV0we2cD AamYUEgyLEMrW29BnLkuwWQFKBbl9rMvA4soiTIO6FCnk4QZBJgyTmJQVApl7MJvZJUj+aU1 fWtKiYoZxhOgv3i3HhFDS1m2WGIBCDeYMoLZimiUGWqKd1sEEwyKGpCCcQPLOQvnyByjEKlG gwiTE5rcwmoEH24sly+f/wykxA12/uNN8AlClIcqRoBxoFhk9srMo9MpM2TdmNvsEY7hc5to /JbFZ06KLGM2dCsREA03QQlxwjjNMhSMh6PSmoFIEqbtx3MJMLkE8KW8t1tm9vl/LM0vXz7/ dcIprhVd1lU/qPQ9ezhPuqzz4n+Fo114ev7rN3h3GB2vw/queKpD0/eazWqt90OHf0+HRoEO Xq3Z9/zq4IcOr9jRjCiFGeVUYWez+s5rWq83mnmaTPfj3cD2GPVPRQyecbbfHn3fQeOfdtAs dtC1Rfs3AAAA///smN1u4jgUgF/F4qqVgCYhCT+aIoUAErsSgygjVRrNhUlOirXBzjgOLftC +x77ZHucpBTalBZUaUea5iIkts+fz2f7hJ7qf7m678n8nuT3SAjFhYL+l6dnct9j4XXNrenG hNybdi+hkk6wzRp6nZFpt2p5q4IHpVvb5YWtPZmycH5dM4xWtzXuGrummdSN3sCxu/aucQgR zWK1Nzw3OZP5z43axtqZDY2va+PSuQXarF3pflkMY1dFUPpNh1W0FrfyuVLRHCKQwAPQ2h4V PE0CdpftO3WKPKzjXprQAK5riYQU5AZqfaJH7Wb20PS+c68quAEgd8BB0jjevtB2OIG27bjl NKn+d28xuWmYBl5t+0eVG6pfP66vOzJ9d1Toe2d473OoY7xw6FXBcnpiyu8esxRCYzg6zIzq Nw80vofhdgXDtjV0vZY7PJdhy3Zs0/9k+GyGywkskZmP/Y5lOa/ge3rKOxUpb43tjjvumKen /GV2y55ZznDHMbpFJO9K+P+T28UKyM1iQnyQikUsoIoJnhIqgSxpCiERnNw2MZJG8Zpky5gF 5C/YEsYjSVMls0BlOPxi9ufkklAekkBuEyXuJE1W2+Yb+R4YluMVK7EaqUN6KkF4JbRiwzlu 3rVddzAocSv2pmrWjB+n09atoM3pjLx2Z+B+BG2/OFrHZ7487YvZHQtJFJL4rXnTzBFiKiUK pGRKSAZpPe+dCqlWxFuDRE45mWbrJT7iuTDD04F44ZpxhjxSlCEXU2868y4JSwl6lCDTbInB RtjFIcNBMaFPAsg8ERHRMoTv1KKgyGSgzT/6tNPFYqbQsXyhhBAxjmuDcTL2fSKzWHeghIJg xdHXGOV+ZkzCGjgqoUkixQYFlts8LhRqkq8JaEfQrC/WCeXbMr6UXHz1p+llHUNJsyehae41 qh49BCs8HIH4FOcLJPHSVASsCOpiOvI9lNVuZnr9KkEyzn5mgDsxC9EdFm2LuJFQxQKGptFF dKZcP0YLN2XHPAN/syT0cLd1LWfQ7jq/Af964/KSBHjIHsi//5Bu06oT1KFzvKGSiSxFZMIM Cdw2QthALBLM0FqEEKfkfoVuEEoiCdBIFeKk5WK4w5TrtKltHccIfaKKHB0UTbMlzhSjEvsQ dBpFiCn2aLZxhcAD0q61FPIFFAqH/F2AEWW4vjDxj85JuMtivZpwKO7AIU2f7ebvosCsoMDF jdazHes33AX3TH948WTY7qhcdW/V20cs1k+yMplNp5OGZZidhu6aVxrq397enqD0w+o906qA z2x5vj/wu+fW+MO27Y/0BvZJ5ImfpB/EyoHSj2OlVcGK2zYtz3PGn6x8srLPSlG4PivtLXM0 HAzPYOX4h2R74GKF+KuTojPtU06x/OBkjj+isYAYNizVdaiuhvVrINbrTJfExWcmlrprLGvx +c1DZ9w22sUklD4u/TT/m+T596Iun7HqwZhyqyOONX+QV977XpAhBIVr/nzhk5yzlnUE92Vu rDD6JvbnRrMfxx+UZ1jJ5a69SejeS9r/DwAA//8DAFBLAwQUAAYACAAAACEAPsO89skCAAC+ CgAAEAAAAHdvcmQvZm9vdGVyMS54bWyklllT2zAQgN870//g0Tv4Cibx4DAtaShvDNAfoMhy 7KJrJCUh/77rO9Qt45gXH6vdb1d7yL65fePM2VNtCikS5F96yKGCyLQQ2wT9ellfzJFjLBYp ZlLQBB2pQbfLr19uDnFmtQPWwsQHRRKUW6ti1zUkpxybS14QLY3M7CWR3JVZVhDqHqRO3cDz vepJaUmoMeDqDos9NqjBkbdxtFTjAxiXwJlLcqwtfesZ/tmQK3fhzoegYAIIdhj4Q1R4Nipy y6gGoNkkEEQ1IF1NI/1jc9E0UjAkXU8jhUPSfBpp0E582OBSUQGLmdQcW3jVW5dj/bpTFwBW 2BabghX2CEwvajG4EK8TIgKrjsDD9GzCtctlSlmYthSZoJ0WcWN/0dmXoce1fXNrLfSY/dcm K0l2nApb7dzVlEEupDB5oboJ51NpsJi3kP1Hm9hz1uodlD9yXP53PK3qVPbAMeE3+eesjvxj ou+NqEiJ6CzGhPDeZxsJhy7sHU9KzUly/ZEHSAsIBoCIFCNbumXU2YT9gOUJx9DzMFctxhx5 P+oHtf1ct9xruVM9rfgc7aGf/UP5AT6D1XTd6SSYzwXznGMFRwIn8cNWSI03DCKCHnKgDZyq AuUVquKUQ4eW8JegQDKLFdb4Aarsz+5CfxUEqJLCAWtLabSIvvtRcA3SGP5E0qcEeV64CNcL rxOtaIZ3zJ6sVPRHXd2e7ZGB73iPWYJ+UpxSvZbSUo3cct3ijWnurRJhFOuSriQkZeEFXqfa qcCxQ3udWTQf6uhim9seE0aVitu7/E1aVUYz2yw2YVcXUKyFH4oylt7BJ8npnl6OCnK/oVsY 5r+VC2GsfoHklnWPjcIEVJWmhuo9RUvn8dv9D6c06RTHeTO0rKOl7xye1sxfB7NoVVVG11sU 8lFLmTUGtcwuA69K0TivVKS9wzJ51RX+Ppd/AAAA//8DAFBLAwQUAAYACAAAACEA2AP2y80G AADKVwAAFQAAAHdvcmQvdGhlbWUvdGhlbWUxLnhtbOycX2/bNhDA3wfsOwh6HVJH/hc7qFs0 boMOSFsjzrDHgpYoWwlFaSSdJvn0Ox4pWYoVy2mTrUXoADYpHnnH449Hywfl9dublHnXVMgk 4xM/eHXoe5SHWZTw5cT/6+L0YOR7UhEeEZZxOvFvqfTfvvn9t9fkWK1oSj3oz+UxmfgrpfLj TkeGcJnIV1lOObTFmUiJgqpYdiJBvsG4Ket0Dw+HnZQk3Pc4SWHYw+Drpyyign89p3kmlP+m UPCBwRtXUl8ImZjr4emuXtFVoD+kWC6mTHjXhIEgvvzOm9edUoCpbblTfFk5KxBddbfk+vgq x0MBprblRuNR/2gzHgqQMIT5bOvuByfTDydWtiJkig1jD6bTUbcmXxm/1zC38Yd+UJNHIVPs N8gPBv1BTR6FTHGwLR8MpyfDmjwKmeJwS34wGnandftRaMUSftW4guXKlCJxxj42ip+eVsQ3 Up0KQ6Y/V+1EpeQyE6cgistMVMI9dZvTmITQ4yNl11QlIfE+0zXVGskxJS0Codwp0LmnM034 vgZ4Z8lypVrNqIrtMGYjpk3aWIFOLVyHjkz38GOcMDZXt4yeSZyJzFgSncJFrGD3cgHzFRSt 4prcUhAseyJTfydqNV+RHBQGqGEp7dBL6eWZBDvwcuPYugE8qSyNRYAAaaLAdnO5Vw0c5TBY W2JIKhT19AD7Kusd/ZiywAjuqS1A07a1lVNu1IYf1puweTyiD4Rg2DWqPRkSRiPtdzNAsSzP uER21mYiKxLRhsuV+QXdMbye3JtVUNqNeBonFwNsnKw34L3dxHi95n2b+ONBd+B7Icknfgxx A4ppDuNJvvQ9wpZw4ofKTLB9L96b8biZquCw/5DXaypyIdV7IlemFzYVxyTf2N8d9LUfnmYC DcFkPyt6o+B/tAI/qktL45iG6oErmyq0mUEaW59euF63li2WepI/a9Dvf9em3Sgy/fdVVtkw lW00/jET9gleFXUYWbbVdQeFca1hKidq5ek3gD4RIaOoQgeji+wcVt8rY6SnJv7ByBRFeXEB NpuLRpse6r86QUq995xtfPjkzsZxG5y9W933O9uWar6uctTg6s72FtVHS/FtDmtbt2HZ4hJ0 v4dvjGtmrsgcaqYwE/i5Y5fbewmcympNv8RxCeHoEG84IOKt0/L6QQB7pPieseNIMcE66B7V g7Vu4pkWwpHTRFHhsSS127dwjgn41QCnZ9OLrFo7r0UW3c6ExlJj58k8PE0gep8RqWZEEI2o vptWX+AtZhnYk9mS760ycdd0XcvD7TO0+t43oe2W/6yJoL7H/uRSL+EIF7haEdXKolrh63Sa 6YMYrcOiPb+EYliFIuEh6KscW/m7tQIf2bhuZok+lZvgH9F4BnNPiTjDQaBwjoWER7CgZuDy NPRA/IIs5nc68h11rQEopG8d3qEgAa0wTX1Hc8ZPxBU2r+BbUMKXszUPcVCztvM8NJaGs3Dr C6E5I0uJkwLGcKakkS33W7X1XWyOpGY527pYA20XNwjEYj2/K4v6VqisfM44xaIiiwIf8MA5 OOxqnSZpdpkYYu40onZzat/h+3ricxhA/9Qikiuqa3MsWZBtYx6iNNe/qbDkjn7E6oJICl8e 9V2X9VUN+ZLt+p588GePmlh9P6z1ZTvlltvQTzRK1qnZzLvuQ6tyu25Eq3LyNt1HsFOsQFGc WaavWZDvBzKrYjwO+vhtdB+Mg5eAsQk+Pw/G6Mdy5vtgXEfEgmEZ6TpGHCNNjGgwLCM9x4hj pIkRDYZlpO8YcYw0MaLBsIwMHCOOkSZGNBiWkaFjxDHSxIgGwzJy5BhxjDQxosGwjIwcI46R JkY0GJaRsWPEMdLEiAbDlCs/DMuiwPg5jb0kuilslKHVL3AKSzORjfuxgxaMQeMj+9ouG/Mf 2b/shPphkcv+uAzWS2Vus0xxMG4LRU6gklwwKYhhb3B4PwPx8Kp0e/qvaVUeyAv/ijkMiA29 cZHD6A+OgnGRw7AtJodhWx6VwygyPDqDET9VBsMFNuOulxHYDBeo2+UGHCIuN+AYcbkBx8gz MeJyA46RNkZcbsAx0saIyw04RtoYcbkBx0gbIy434BhpY8TlBhwjbYy83NxAmRJQN7bwYG7A PZ7w6J/2n/jhhFpcerZHE8oHrX6xuKSt/rXjEtl6NOGP9PKANT0TrxsoMQ21hw90QyhNw66n DaxdlThoOEQrXCrBHZUuleAYcakEx8gzMeJSCY6RNkZcKsEx0saISyU4RtoYcakEx0gbIy6V 4BhpY8SlEhwjbYy83FSCzSB0mv7LEr1RgkyL/19q3Ki74H9q+hcAAP//AwBQSwMEFAAGAAgA AAAhAC1zYfKICwAADzAAABEAAAB3b3JkL3NldHRpbmdzLnhtbLRaWW/cRhJ+X2D/gzDPK6vv Q4gckH0kDmwniBzsMzVDSYRnhgOSsqws9r9vkTNjHf4YOLubPDic/rqqq+vqqlZ/9/3nzfrk U931Tbu9WPBXbHFSb5ftqtneXCx++5BP3eKkH6rtqlq32/pi8VD3i+9f//1v392f9/Uw0LT+ hFhs+/PN8mJxOwy787Ozfnlbb6r+VburtwRet92mGuhnd3O2qbqPd7vTZbvZVUNz1ayb4eFM MGYWBzbtxeKu254fWJxummXX9u31MJKct9fXzbI+/O9I0X3LunuS2C7vNvV2mFY86+o1ydBu +9tm1x+5bf5bbgTeHpl8+qNNfNqsj/PuOfuG7d633eoLxbeINxLsunZZ9z0ZaLM+CthsHxdW XzH6svYrWvuwxYkVkXM2fT2VXP85BuIrBmbZrP4cD3PgcUaUT/j09Z9jo49s+odN/fnIqF9/ i2r30Nvmqqu6veMe9LpZnr+52bZddbUmcUi/J6Sik0m68d9R4tcUNL+37ebk/nxXd0vynIuF 4GxxNgK3zaq+3NXrNVksdV3b9V+Gf+iqDQnQLKv1E6QfHtb1L9W2zpN4uVkPdUesP1W0EZ4Z Be79ebVeX47z+osFG38v7/qh3TwbohggSZ4NTaz7N9vfRs3yceS2rsaU8GzW9m5zVXcvR4dR Ac9GVk1XL4e9lGPC+Hn76922PzD+Gvyl6qqbrtrdzk95f1x5dsaHUYojg+W6rrpH9DA6tDv5 I9jWp6ZvXm6hGnW7JUVNo++rzR6Z7LCqr6u79UArXhLLowGsOMDLW9rPksgvd9WS1grtduja 9XHeqn3fDoGyYUfBuqe4btth2w71L93TX0Qwhsspfz7pMDwtdvaStt6uvvrxgs/z0SObZ4T7 XD1+3fV1Tm+rh/Zu2O9tQi7358DoEaSYi8Wz3P6uXdWjBu+65tuDdDLD5Mb6oES4UEvnVkfx MRl7skwm5V42v9fFdvUTeXpDHKcM/z9I8EcC1Ntx5Z8pS3x42NW5roY7MuNftNjkKXnd7N41 YxJ4s11R2P5lizXX13VHCzTk9O/IvZuuvZ/0PIYMlQt/0brkYf+kyZSk5QcKm49lO1C++vFh d0u6/j9Y8uypO1PRs+qPH79S5BynMuaVLMRB0hF9RBidhcpjRFhZQERIFh1ElGbZYMSUHkug TDqeGi8QzUqtIGKkSyVGdCgwjZXZ4f1YLZTEiGEB79QJZ7AETrmYIOJFGbB2ChMMpgmSJUwT pJ3RddCqwLIlWglbOyltsXaSER7ahzyHBUjDmQk8QoT+05hGmkJD2bi0ngWIKCtLaB9uWRAz iLQl9BBujTuecy8QJ3PANJ6HiKUuWJaHhP8SIV1biASjJLQcT5wzgRHBi4wRE2eQLJSB9hFc kXQYsZ5DHxVCSGxtQXFVzNDokGDMCWFUgJmC0k5mmJvUAu9UKK049B2hmcDxI7QwEq/jzJwE zgoD/U14zmZovI04tkXBigz9QJQs45gTJQ8Meq+I2pZYgmiiwusk7i32g0Qxh61NVfqM5SgS POaWlce+I5k0OBYkUxLrgBCdoBUIiRr6gSRXVFgCQWkUS6Ao8PE6ill8nko1K5uxCZ8ykk5g ixFHuQrqmpDssAReZpzJpafkj5GCeYv1VmohYRaTgZpSLEGwOcI4lZFL7PEyCgp7jCihsATR Buy9Mkle4v0klQqYYWUW0sDsrzhXeQaRYQaRSggYjUpx4aFsikgC3A85lcE2VUYXOLsoYwuF ZbPGKszNaTYjmzMp4f04G/EZrDzLEctWCC9gNBKSS3hiqMJmiWUreSGhv6mSSlXMrVTRziBG 4DpEBUOFL0SiYTMSJBuxJ2pKLgHqQFOumqEhB8FZWSulMswUhBTY2pqqgwAjWGsWA5ZA8xmP 15rKHRhZmjK8xFIbpUuY4wlxHkb9uAr2RO0sczC7aDqDZ7RTcFlihGQW0Ht1aRTDSJQBV086 kftg2ZIWOJPrzPKMtTPnGXqvoarCQcsZ0g/uPgyX2kEPMVwn7KOGG1fgdaRKuL42VPszmCkM 1f64SiNNW3wGk+sYDmOOkEJj7Shj8FlvaKsWa8coFTENdZS49jfWCOzXxkkRYfxQX8SxXxMS LNZoaQz2eEI8jkYTqd/GUidLHTdEMiUXuI6lbgbXLpaTTqFfW6Ech9a2Qmscc1bKYKAOrDSl xoiighDLpkRI0D5WaeegfazmLGIaPVaKM4jDNQUdwclC77WWiwwjyxZcWMytNBnnaxt04fE6 kasIo8RGStiYWzQex49NzOEc4pjmuA92nNQNre0oGHHH4iTPJaaRquDQ2k7awmMaZYsZboqq DWhTp6mfw+tYUeA+2I3Og7Vjdcbx46zRuH5znsIb0xTSJRj1hCSOrRBE9FjqyBi+zXOJiliY QwhRM9pJRnp4lrhsvYHreCYshzHnqcIWUDuec49vfrzkHEeJVzwXeJ3ZO1WvrMNVjTfGK8zN 2IjvVL21Ed89ec8izr3e65CgV/lSOoYlCCzgGyYfpJzhFk3G1vaJz9xoEhJxHvWZQEyTReAw I/msNaYpGIu4byzGShHqraB6Q0ObFpwpDbVTCDNTWxaSCh54zlHZHSOMuULJiM+FQitfwnxd aJJghsZKfGoWY9GH9eZEKaCHFF4onJULr42bQajjx7KVtKEZxGacxQryApx7i6BmYqFITHhs hWRlglFfZG5xBVlkkfGtR0l9G44FQhyOrFLImTqxlCxpKEEpOfVgGNFUWUFEsYB3Sm2wwOc2 IaWDVijpCMZ9MBWdCWeK0tgS3x+UBbWu0D5lYSX+W05ZiqSwRktrcf1WJnJRbLlEJQXWQTba QSsEKmwc9MQRCXCdwMf7CIgIPiN1ULzEHWUYW35on6DnbhqDsZxjqSkUZmSzSmIfDdYGnPmC Z0lhCbyKuOIKnjoG6NeBqjeDZSukxWcwIWlGoyUdttATQ6ASbgbhLsNsSceswVEfsooz9skm 4FwVpbH4Jitq7gvILWpR4JiLhlIcjJJoVUhQ6mitx7ds0Yk8w40KbAEjODqq7DA3z63ENNSh Jxg/seSmwDSlibhjiZFaDKydSEcJ9MSYTIGrzkiZAtchMUutIA05iMR6S9zwBLMLlcocy5aU 1rgmT8pGAb0qactwp5cMsxlqNI0XZtDfkuUR++iI4E4vOVXiO7vkLLXiEPE6Z5gPkjcpYo0W KmE/SKWZ+YtnCtSWYL1F6xzmlqmxhtklZR0F1HVmRmNdZ6E0/utLljLg6jYrxgsYwVkp6eBO s5ZCY25jKYal1tZgm2ZjBL4Xy05EXPNlN/dmITulZtZxmuHaJTtj8LuNXDCJO71c2JluNwem 8G1rjmMQY8Q6P3ni2R7qX3+3OR+fzo5vzfZf4yOuk82eIlSbq66pTt6Nj2vPxhlX3cey2R7x q/q67eqnyOXd1RE8Pd0D/aZar3NXLY/ApLbN+arpd7G+nr7X76ru5pHvYUYHR1f19U9feI3P OOvuh6692+3R+67a7R9nHadwtf+jwea82Q5vm81xvL+7ujxSbavu4Ql0t139/Kmb9PSonvvz 4bbeTI/c3lbTo6lpbr09/e1yr+zlurscH0TV76rdbv+u6uqGXyzWzc3tsH/1SL9WVfdx+nF1 Iw6YmDCxx6Yf1XLcGc0+fDyOiePYk3nyOCYfx9RxTD2O6eOYfhwzxzEzjt0+7Opu3Ww/Xiy+ fI7j1+163d7Xqx8f8a+G9krob6tdHfevMsm92v3A4Zlmf/LpvP48kNZWzbA46XfNalN9Jhux fdt3mL2eHjk+mzti4+Tdcw6raqiOj8ueEU8u/kKW8bXosiF3vHzYXD0+An21F3zd9MNlvau6 ami7I/aPCePqfNUu31Ak0dc0LkOZSnvIdVx/gfUe/lc0hlrz0pwGofNp6ZU7dcmGUzW27IWg PoGnfx8C8fiS//V/AAAA//8DAFBLAwQUAAYACAAAACEARRBbnSUVAACT0gAADwAAAHdvcmQv c3R5bGVzLnhtbOxdW3PbuJJ+36r9Dyw/bO0+ZKy75OzxnPJ1k9o4yYmdnWeKgixOKFKHpOJ4 fv3iRhJkAySbhGVNziRViU0AH4H+uhtAAyD+9vcf28D5TuLEj8Lzk+EvgxOHhF608sPH85Ov D7dvFidOkrrhyg2ikJyfPJPk5O+//vu//e3pbZI+ByRxKECYvN165yebNN29PT1NvA3Zuskv 0Y6ENHEdxVs3pb/Gj6dbN/62373xou3OTf2lH/jp8+loMJidSJi4DUq0XvseuY68/ZaEKS9/ GpOAIkZhsvF3SYb21AbtKYpXuzjySJLQRm8Dgbd1/TCHGU4A0Nb34iiJ1ukvtDGyRhyKFh8O +E/boACY4gBGAGDm+SscxkxinNKSCk5CcDDTDCZ53pIfJ87We/v+MYxidxlQJCoah7bO4cDs X/ayX6lyrCLvmqzdfZAm7Nf4cyx/lb/x/26jME2cp7du4vn++cmDv6X69JE8OV+irUvF//SW uEl6kfju+clF7LuB8zX0qXIS5+6epW4uwkRfzkvg41P2zuUqpsnf3eD8JPQD8Sxww8fsIQnf fOXYxZvzR0t/Rd/mxm/uL1jBU9kQ8b/SvF31N/7f5Yr/n0Y7WAGyTsHDZZSm0RY8jv3HjSYz SZ8ICeFzt9rc06wq7AdZfbXCp4A7aljUzO6FtdNUsv4Qed/I6j6lCecnAyYa+vDr+8+xH8XU os9Pzs7kw3uy9d/5qxUJlYzhxl+R3zYk/JqQVfH8H7fcKuUDL9qH9OfxfMr1KUhWNz88smM2 TlNDd0tf/ZEVCFjuvV+8nBf/ZwY2lCLWld8Qlzk6Z1iF4NVHQYxYiURprR5zX2k7z4V60fhQ L5oc6kXTQ71odqgXzQ/1osWhXsRhXvJFfrgiP4QhwtcA1CYcgzWicQzGhsYx2BIax2AqaByD JaBxDIqOxjHoMRrHoKYInDTyTFqoKPvYoO31uM19RDfc5i6hG25zD9ANt9nhd8Nt9u/dcJvd eTfcZu/dDbfZWeNxxVDLeU/NLEx7W9k6itIwSomTkh/90dyQYvHZnx081umR2EojLcAIzyY7 4t5onst/b9YQbqTd+/OUzQ+daO2s/cd9TJLeFSfhdxLQ6bvjrlYUzyJgTNJ9bJBIF52OyZrE JPSITcW2Bxr4IXHC/XZpQTd37qM1LBKuLIsvQ7TiFHKFdvfphhmJb0Gpt64XR/2rFrnW/MMH P+kvKwbiXO6DgFjC+mhHxThW/7kBh+k/NeAw/WcGHKb/xEDhzJaIJJolSUk0SwKTaJbkJvTT ltwkmiW5STRLcpNo/eX24KcBd/HqqGPYPnZ3FUQsXt+7Hvf+Y+jSAUD/7kbGTJ3Pbuw+xu5u 47D4th5WbTP2PZfR6tl5sNGn5Ui2xvVcRa5oq/1w31+gJTRbxpXjWTKvHM+SgeV4/U3sjg6T 2QDtnZ35zP1+mWqNliO1Mtp7N9iLAW1/a3PT/hpWGMCtHyfWzEAPa0GDP7LhLKPThucratm/ YgVWf7OqeiWr1ZOQFmoZRN43O2743fOOxHRa9q030m0UBNETWdlDvE/jSOiaavIjTkkrk7/Z 7jZu4vO5UgmifVefrfQ7d+6ud4M+B64f2uHt5s3W9QPH3gji3cPdB+ch2rFpJhOMHcBLsZBs C1NGAv/zN7L8LzsVvKCT4PDZUmsvLIWHONiVb6GTEUjRyhISHWb6oW+lD+V4/0uel5Ebr+yg fY6J2FyTEkuI9+52JwYdFmyL+sUn6n8sjIY43v+5sc/iQraM6sEKmBI2TPbL34nX39V9jBwr kaFP+5THH/lQl5e2B9d/mFCC6z9E4GzS7oHpr4XGluD6N7YEZ6uxV4GbJL5xCbUznq3mZni2 29t/8ifxoiCK1/vAngAzQGsSzACtiTAK9tswsdlijmexwRzPdnstqgzHsxCS43j/E/sra2Rw MFtMcDBbNHAwWxxwMKsE9N+ho4D136ajgPXfqyPALA0BFDBbema1+7e0yqOA2dIzDmZLzziY LT3jYLb0bHztkPWaDoLtdTEKpC2dUyDtdTRhSra7KHbjZ0uQNwF5dC0ESAXa5zhas1MXUSg2 cVuAZDHqwOJgW8DZIvk3srRWNYZls14WIqJuEESRpdha0eHwkuW9a03FHjZk238a/TlwPbKJ ghWJDW0yl6Xz5fud68kwPVjuaxX2/MBPetxv8mi/CjMbNJbMJuylYs0v1Ml8NqopdkdW/n6b VRQeppiN2xfmGl0qPGkuXIwkSiWnLUvCd86aSxaj5FLJecuS8J2LliW5nZZK1tnDtRt/0yrC vE5/8jmeQfnmdVqUF9a+tk6R8pI6FZzXaVHJVJwLz2OrBZCddjZjLt/OeMzlMVZkRsGYkxml tV2ZIeoM7Av57rOeHeM0+fvy3RPA7/NBdCvP+Y99JOL2pQWn9oe63tOBU5gQR4szbr9wVfIy Zjm2djdmiNZ+xwzR2gGZIVp5ImNxlEsyo7T2TWaI1k7KDIH2VrBHwHkrWB7nrWD5Lt4KonTx Vj1GAWaI1sMBMwTaUCEE2lB7jBTMEChDBcU7GSpEQRsqhEAbKoRAGyocgOEMFZbHGSos38VQ IUoXQ4UoaEOFEGhDhRBoQ4UQaEOFEGhD7Ti2NxbvZKgQBW2oEAJtqBACbah8vNjDUGF5nKHC 8l0MFaJ0MVSIgjZUCIE2VAiBNlQIgTZUCIE2VAiBMlRQvJOhQhS0oUIItKFCCLShiqOG3Q0V lscZKizfxVAhShdDhShoQ4UQaEOFEGhDhRBoQ4UQaEOFEChDBcU7GSpEQRsqhEAbKoRAGypf LOxhqLA8zlBh+S6GClG6GCpEQRsqhEAbKoRAGyqEQBsqhEAbKoRAGSoo3slQIQraUCEE2lAh RJ1+yiVK0zb7IT7qadyx337pSlbqi3qUW4Uat4fKamXGan8W4TKKvjnag4djPt9oB+IvAz/i IWrDsrqKy7dEoBY+P13Vn/BR0Xt+dEmeheBrpgB80rYkiKlM6lReLQkmeZM6TVdLglHnpM77 qiVBNzipc7rcLrNNKbQ7AoXr3IxSeGgoXuetleJQxHU+WikIJVznmZWCUMB1/lgpOHWYc66W nraU0yzfXwoQ6tRRQZibEerUEnKVuWNoGG1JMyO0Zc+M0JZGMwKKTyMMnlgzFJphM1Q3qqGZ YanubqhmBCzVEKET1QCmO9UQqjPVEKob1dAxYqmGCFiquztnM0InqgFMd6ohVGeqIVQ3qmFX hqUaImCphghYqnt2yEaY7lRDqM5UQ6huVMPBHZZqiIClGiJgqYYInagGMN2phlCdqYZQ3agG s2Q01RABSzVEwFINETpRDWC6Uw2hOlMNoeqo5lGUEtUohpXiuEGYUhDXISsFcc5ZKdhhtqSU 7jhbUhA6zpYgVxnnuNmSSpoZoS17ZoS2NJoRUHwaYfDEmqHQDJuhulGNmy3pqO5uqGYELNW4 2ZKRatxsqZZq3GyplmrcbMlMNW62pKMaN1vSUd3dOZsROlGNmy3VUo2bLdVSjZstmanGzZZ0 VONmSzqqcbMlHdU9O2QjTHeqcbOlWqpxsyUz1bjZko5q3GxJRzVutqSjGjdbMlKNmy3VUo2b LdVSjZstmanGzZZ0VONmSzqqcbMlHdW42ZKRatxsqZZq3GyplmrcbOmOFvEtfALqfuvGqWPv e3Hv3GSTuv0/Tvg1jEkSBd/JykE39fSpdGcVewe/q47mT2lD2WfLlTNGK/HZVgnIM75f5XdL scKsRo68RUs+5hWXa6z85zihE2GZZzC4HA9uprciV839X1HIF6KTP+SlVcnO9Uh+/xVVj/MT d59GUkzqJWGokpWbxFBly9eN4V5buZMMV1i5uKxasJIZ3GgGL5grLnPTXgqX/JG9aySXkZM/ rli50jP16jhEW5Rr4rhyNahjroByE8AQqGBxa5mUFNX8T7mY86+08sSQffNSprCPYEpVopae Pc1ec7VxY5Fa+KAsj/SyZn0fX09GWX8gKQj32/yH93nWKYc6VZKZ5FhrmL6so5gweXMxuuuU xOI3jhuJj3N9+B7k783Y15PObxXkR8HZh/Z/j+J37LpABs3vDYQpFV0Yc9570jcy0ie9e4U+ WUzug1DpUz2PhsBRCwLL3rIHp35QsJC53DwREpVlKRO17C/dsVG6UoAV6aoyRMh2fADZfiNk 95FWiT9jv3ygMkxETXVil+rzctbFX9DFujJnqybeyGc11uewWztT5fGlv5I2yT1qLr2b2XTB t1XxzHwYRb0tH0TxLpw/Zjv7KNCcd8I9tWxi1LKsZ7CiZZMWWlYMgF5F6TK3hFU6s5ZxxOPQ Ml/8eyXaX9K54fRscXXZUucubeicuPVUp3Nyu5odnZsev85JG7Ooc1m/fmye7fBaNjNqmQwP 2NGy2fFrmbQqi1rGEf/qP6m45kYtk5zZ0bL58WuZtCqLWsYRj77/PLzOLYw6J4OOdnRucfw6 J0tb1DmOeISebTRnf6taxm7/K3TswWe3yl9LJVACPzKaUgr8ZPPWPop4ZlREqR52FPHs+BVR ytyiInLEo3d+r6WWHtUI15N3HRii3PLOsvyjW/zGsqrCGi42MyhbVuMGZTPXO2ULJDV15gso teF5scZitIbW5pAuA6FS9If3IVPaJxnjFTVd/XAFFE2/IkFw54rcPMRvyCrD+DR1OOCfuK2k 58F6Q/ksIG8AOC1XRvxaryfi/lZfnDczroawtSuNuPnhx76SbqnDhWvNl6uqFSpSGqokfcU+ e87uEhQqg/T33j6hfN2zDFWhiXvXbsU10KCmPNH5D3e7+29H5uE1k86MWgFfuaL/Z0U49ewN uyihLRmMsgB4lvd3r5y12TuyegTfSep7rvORiDv7uPPTJXj0rRexT+3ra+h70Yo4d/eizuXB Hv9jV5Rs7QKG0vm1XjIQahYbs7hcarOialnWosdh3Qs7nMq3TbFfvuxZVdSFJoQsHXHQ2ShS Jb2lZEf8TwfJFr6TLw1V5Sie8vdVF4xkxE/X5RdyKweTD6NyS/GvrsO9vZ0MhrLiRSV50pt8 fS97km1CUHtY8cyu9sKlCq69ZflWVXG04B6+tyq+qlnnYsiXJquSqF+zlCIqj0fPzqZXN3Jg 2M4a8y3lemPMk9G2qGrTWM7wVW0Sz+xqk1aZdHKaD2ezoezzgJJJux2Ku/ikys35RpSjUDm9 jIsnypi4i1ds6LrZiKgq5ux5C1/p8wEj63wo+IxLeOOGj7S0+J3n7baofQgXOrsQxn5o7eZD d54Cdz6IrVM8Mdv9gO2Ji50gvTprfaJGjjfs70tJCPYpqoTK6liMDVnQTQw2uw9ofioxwoGl Kkbpbcpu9eZ6vlhkHROu+zGKDtNBadOg3Pr32Wx6V3ySuyonvqGxSBb+xBzPgtMxscemLvB0 uxhdX8tcxg5MuFfZgU35V1FgB1Z2yXMxe2ICC1ksZu8G8saGZsPIIkN+WBNTKiWWAkqllCKg xB4XAaUX6O+KEYS4qYNfalGltHSLRxOhaiBSAa2NRbaOvpT1YHEzGY7kKp0kpRDRUDOIF8+a RVQKMdQNuyrtqxOcU0igIj1twK1Olkg5vobQchFdRVt2T3PxqaaqjJSbSeM8E05M9jSKzh9m LyIcvdFJ4WiNTpEL80Uou1NwX8LuCin1N6FqVatikOlWTEgVdx8TqtUS83bhrlqS35tRlU2e wF+4URjs1q7BzWQ6vxAZZV/31xb1w29Rt6NLbQ2wtNm7qmEy0Rn2Nb3sLUa7k7yVAxXT4eBa 6mPtoKvNTm4mhV5hHA0XbSe6SC7Evm0TFyNLXMgWtuRCXextz4X9RdUl5KvDTpJ2Rvb0cuc7 kBohdpubNGJsSSPk5PVFrfP4drL92XRB7Ak36cLEki7IRrfdOIKMxL/+DowOG2tfqWcW+7FN fE8t8S2Hs39uvv+kDIu90CaGZ5YYloH6n4jhF3P21hkW+5BNDM8tMSyHZz+tz/7z8C32AJv4 XljiW8ajfiKLPop9kc30ip21JnrPLNErWfxpzfnYyS6+NyE/NwFXn+EnKfQn8A8Ru1Y/MCEZ L4l7MWB/JfYmL+gFxBWSUOYt9Ne1H9DUmxn7206uhj3vD3cfPsds3/bWTVOygmZDMzilHDoJ Gve6V+AL03sZybbcU3g2lMMtU4bhYiwDMKYco3m2D82UYzzLLpgx5ZhMM8ZNOaaTs4aazibD hprOx6OGmi5G2WUMNQJrqOlwMJg3CZW6vYa6Dodng4bKDkeLbKhgzDKeZ0cQjFkms2lmOEJb QKC3uj3gKtrHPomdj+SJwcg1/8pTFsRUHwmNLhxjvkNHcYwtl/tb94I6m2s06969YtWR4Ky8 0Vk2sJF1jfB7MTiqDvzJGLnmdb9f/k682lXGRGbRMQRWztR9biBRs+Ym3/8S3nlyMTobXZeo XIo2yEHHYY1D0+Cq0LM1TZnHbBjadVyzdHtZhEaMbb+VZBT3MUdTwegObvmCozvZubzC6G54 MxpeHOHojh9ZAZLbiMc6YdUdWiRxGwfR7BEuJ9NBeaujZrwm9zw62VBpphkqVY7XjMUYBfTo diaWsvVVWYokG3PKjJGaI1BGOSJdwlF+Ps1w7GqtnLRqqawC6V9VWZXWV2Upkvoqq3r27V9V WR8+Xck4EBCyeh+gTsgyTYYiTCfGNTtvzTpr3oyrOU3S5hR46ch3pqh56l/bjl5825GAFHum xS7pyYIX0O2ShmdSOOPmGW1TIPEQK3hZgKW0YycbwR3cmGHwMI08wwc723zwgVXpC1mRNeUF b89lG76eDs8uZFSkZYCLKQvPr+uAAj7YOD9ZRWp/JD6pnPdHqgJmm/bzgwnozzcYItMVleh5 UvbTFZwkMBb104JDs9jqXF92gks999DukO5rih2eamJi7/5Bz6MQuzShYxU7G4SFdBym3Z3O xswsEb83XYV9iXDQYDQeZOtFtgWqOwFgO34E5FMVfZbBypb4Esk4JmyIvTmo2pqTwwSUAE3m gy25idg/1vKqRpAFUb+TOL0I/Me8Jcl+R+LEi/0db0B3yQZB9ERW5i+6wBy2BIt1NuPJYHhW lnNpBHt7Oxjc3lZHsGt9/fe5IP2OH57JZcgOYV7ug4BAz83PZ8o0ndiKrwb00D9Nn6if+Y3B 1A9870J8nBrOSprjGaWvGNW4XP4Qjs/l4wZZmDdF1ze88o10ZGvyug/5H1D3T2LCxj/FZBye 2vhOU2cB5GNOowCyn5Jf/x8AAP//AwBQSwMEFAAGAAgAAAAhAMqdKIsBHAAAJHwCABIAAAB3 b3JkL251bWJlcmluZy54bWzsXdlu5DiWfR9g/sEwYCD7oWyR2o3ObmitqkFWT6Eye+pZjpDT QsYGKZzOrKdGf8q8zCfM/8wP9C8MtYZCCyVSkkMRvvmQjtDCuBvJcy8vL//812/r1dVXP4yC 7eb9NboVrq/8zWK7DDaf31///ZP7g3Z9Fe29zdJbbTf+++vvfnT917/8+7/9+eV+87x+8EPy 4BVpYxPdv+wW76+f9vvd/d1dtHjy1150uw4W4TbaPu5vF9v13fbxMVj4dy/bcHmHBSQkn3bh duFHEWnH8jZfveg6a27xrV9ry9B7IS/HDUp3iycv3PvfDm0g5kbkO/1OqzeEORoiHGJUb0pk bkq5i6mqNSRxNUSoqrUk87XUwJzC1xKut6TytSTWW9L4WqqZ07pu4NudvyE3H7fh2tuTr+Hn u7UXfnne/UAa3nn74CFYBfvvpE1ByZvxgs0XDorIW0ULa3HJ3IJ6t94u/ZW4zFvZvr9+Djf3 2fs/FO/HpN+n72d/8jfCPvynr9jbxfPa3+wTzu9Cf0Vksd1ET8Gu6OFr3tbIzae8ka80Jr6u V/lzLzvUs7u0DU92KspDg33Iz+S/XqWU01tEQg+NxE0Ub/Qh4fg3c0rWxAoPP8wlmpJwUc8B JG8A1xpQFkFPk87bSKVJ+CFvltqJfLZm5LyZ6Pv60NVfdp+HWcuP4fZ5d2gtGNbaz4e+/xJP wwxtZVZX7gnRMGI+Pnk7MiSsF/c/f95sQ+9hRSgiNnRFzOAq0UD8P9HKVdzprv9CsIL3EO1D b7H/2/P66ujbz0TpBHOQN+9DnwCNML6Ywgrjce+HZuh7X+JH4lY2Udzm/Vdv9f7aTf6p1vVd fGf9vNoHH/yv/urT952fPxMTu/KTy+lj+/Vuld+0XRuLuqyld1Zf4xsB+ZP/WEJM/jBKnyKQ x10XF5f+Ilh7WdPkzU/+t+LeDbotrv/HIr+68h/36eXdr2FCEBFF9jd/hvwGkcf9bku0hDRB iJ+/OzwZbGIRxA1lt8m3J2/zOQFsopI/nrR/l/x88rck8k59oAH6sLn1IVuaI+kYz1ofkkTV R3x7fH3gAfpwuPWBbVXQXHPe+hA0qj7i2+PrQxygD5dfH7qqyYYya32omKaO+O742pD4tZEa D5c2TEeVEEIKvzYenlcrP5NuRRn/+uf/jtE5hk0eL/dh9sfdbvZRLPhoERAc8/H7+mG7Sl41 iEyPLgSbfWxnjx6RaNZY0gqnbuUBus2EzqFbB+tY1R1jzrodNhHNQbfKAN1mgyCHbnXRwkgz BqC+6XU7bFKbg27VAboVuXUr60gR7CGIfnLdDpog56BZbYBmM8VwaNbVdUt1rVljn4OymlQb 36WollMb+gBt6NzaUG3ZQbqZgadZ9rNByphDP0NcQREBO7aKdOr0+PT9IQyWv8T3Vs361WRV c0W9EduSj/vdakE+SoIuCAJ6NY2feqA8lkQcIzmWROwV3u/9zd7bB1/9+InBktmyyoUb91nb 5zDww6u/+S8l6VSuLqL6g2xSiyMZx1KLEf7IUvvXP/+HVW4YcY4Iv5On47XSqCS142tsAkqN 6LiDTSAg5g6HtROAzmPRxH7+/HockcOse1zav+bX4ySRcwgfu8fFbugce5wsnMCFPxZN7MXN r8fJKudY/Uo9LvaQ5tjjFIlzCB/e41ixL9cClCDqpiqadiqAZuybXG1BvYYhWFiwsgWTskbH 8TE5RsgjdcXfqepiRrBjcHV7c3DK+3fgI8bi733s8Cd/9dXfBwuPdMxnv2SMDTeqoni5f0j/ t+IGU3tJrwfV77UnFt6ueikiAllZDdf3YfClsLbs4rLx6vZ5vwo21avRk7fcvlQu+mT8jmp0 r3ekTxSayK5utr+G2+1jtdWNt/u0/TEsdZb0xldvE0RPVX63q22YX5MsE0npkPbkr30rvvf+ 2lssyHCWovn48kdCNhnYzGx1K9p5C6LaSrtVtr744aZyifjuQZwmVKX/j/yCKOVXamp6zr9v tpvECBI+yO3kXybJx0d/UcgseTA1i2XBcP529EfccvyBMONnnxuajJ4KoS5WvhfWHyMXHoNV TGjpta9+uDdWweeC1Qcv8mODyFVeJ3LlHUT67YecTt+L9kYUeOVrD8EyKL5nGvEX/9WgbCTd f17FBkc+hN4yG+vIlyj8/GCtwuRG+nxB/F3+VvZkZrLk48PqOfwtbSX5vgyifelLLJL0c/Tt 8PF78fHL4eqXw1Vv9XmTiaEfaSlB6bOh/7giGk9MqoFAIrrS51/jyFH2zd8sD7fIl/K9VrYe SS+wh7OZKWZPBtr/zEcJ8v2leJaMSO+vw80y+7beEY6iOI/s0NBiH2bi2mxdYn1Zm7sw2tte bAW58KLtKljmP/kQT425HEu/nwmedHpfXKZfFt7aD72knbhRAuTC/dP2c+jtnoKFG5KhO2+U WPnT/rfgc2pkARnx90+h7/+6LwlwnxEbbvfJxZV3kPAqzkzOPof+18x0ExLzpnPNlwnchdtd JC5TBX7bh89xivNPBxkSCgnO+724EHPxi0cQRnDU7dJf8fbPBI0cpFa+HU+X23B9uFmed9L7 H/MBseWRaP99RYwqWHz091F2bbHZfyNDRDwD5m/leI0aYUm6+/BZ/fYmW4jpP7FXo3KHxY5x EIs4Im+3N9lM0p89TUlCEAV78fcx2Usz5UZj7/ZGZuUQCUIy1RcsJhfG5FEencfbm0Ocui+b SD6G1smFMdlUpmDz9kZl5hTrx1g7uTAmp+pEnN7eHJZxeYPfpSSJcZjVpmP29iZbj2PgV9aO B6TkwjB+WT11rtREQVEUUXEza2b31NOwCso8/bKCxvHU/8SqiZ6Lu8e09vW/CdD2ww/+nki0 mV7MTG/PRLxjevsii4Te37Zrb9NMrshMbt80zmN6x0AL724kdmp7JgEfU9t38u+yhnc3MjvF PdPIjynuO5V32MO7G4WZ4K7lugknZbVXqsgRsTJPb+s7r3aODho7wR1rfcPmxq7hQWemV8ST ZN0jrjRvQdEN2ZWpad7dGRiGqWMVqUYhikLMCaczyMA4RQrNsSRmmoHBm535xjMwuLPRx14P nm0GRsc08go9bqYZGB3D/6l73FwzMER9JjlPc83AkJST5zzNNANDmnfO02wzMBDnED68x7Fi X65NdYKuSRIWs3gsL/aVZSTYupGtk5b1WsK+ii0rgi47PfU4Qvb/CPGeilWiOHufxyq7I0LM HPGFWGpgEplDWKIFjZo4CuPVv3aWqogSFduqKCzV4Z/LyRLV5qRXCiPUINt0RidP5rgfs1TD U5MZncJudDVQ1cvo6ghoEqNjj111QaCeqGU6o2OPbnWBl56QYjKja4x/0Y2uhitajI4VBHDt vhYMTRIMhQoCIA2TfRkI0jAhDTMZciANE9Iw046avZU9CWmY+WdIw4Q0zNXxvJPehzTMMRAL pGGysAdpmK1sQhrmaJxCGuY4zJ5pGiZXLS3BETQVIe40TNe0LFXHkxVQZVUEeOrjeuqFnWTf L9xn73bCkaxrVhr3qznh6eoOuxOOck+Uxw3HGXg69rlTxltcbHaHF5A3IG9A3oC8AXk3cgrI exxmzxR5c1U6FRwkYOwMTJRxDUXSsJudgFBWU2IFUKYvYbIqCSjT1y01KNPXCcSqAoIyfW0Z R1CmrxcsrEoNyvQdCQjK9LWKBsr0QZm+kySJc9WCFxzdkEybO+qs6a6AZfNc8sPaYOkYpL5i KPlTsPajuKddpamLBxNruBN3zurlhKCHwgiy75AGVr7RHYE+yniaLLuruADJXZDcBcldyTdI 7so1D8ldM15iagtXjEfw+OtGbXGEUWmeYjGozZUfm/ApVnjavOwJaJ9i2abNE56G/CnWYtq8 0sk4mGKBhddz5Dq3SiCOn2JbmTx4V01M0dZsN4eIZdkn+oJVk4TJqiRg1aRbarBq0iEgWDVp FQ2smsCqCayavGaPg1UTWDU5xapJMjIwY1+EDAsbKnXVpAf2tSUNyy4c7AnYF7AvYF/AvoB9 R+9xgH0B+/L1OMC+fD3ujLAv18GeCGNLwvSDPbuxL0aaoCt5XaqyXgH7AvYF7AvYF7BvLhjA vnw9DrAvYF++HgfYl6/HnRH25ToqD2FbFyWcpYlxZMu7suQ4hlHItdAo1GiBaqrHl95OGr0m W5Z2KJtaqaaatj5d7dTMBYX0ekivbyMN0ushvT6hCtLrk7f45nCo4FRlDyo4DecRKjjxswkV nBhD3VDBiZlfVr88Dv+w++USEhRTM1PO2P1y0TAlRdNms4td1S/UL9fF0/nlVS+8yefu71tP dUhI7VCPhmqiVFdvvmiudqrdhcE5hPHF4zlReRN4TkZvBc8p8hvCc7UzKC8cz+nSyfEc19G1 SBUkpJsZw7w5RqItCdh2GyviX0GOUSKJUo6RbViWYrnpIb69uf6/f/z34G7YiQNaUeAhVm3E Ubarv2+CxXbpX/3ykYoR4xXYxhcg1QhSjV6n40GqEaQaQarRa/Y4SDWCVKOTpBrFAuOAwKoq Y2PgFlPDcjQTOQnoP9YrQOAGCAxp9oB9AfsC9gXsyyA3wL6Affl6HGBfvh53RtiX6yhUpMuq 5BjZkij7cr6ji5YoqYfV6UKjkGZ/MWn257GcP+Fxo7wJApCA2t/AIQF1EHuQgPpaCQuQgDoa p5CAOg6zZ5qAGrtK7IjV0jTJtKhHiFIRKzIFW8gTUOO50/8QbL7ktz/GFw6ws9DevOHsEXzy nveJf3hhSBZOYiouwklMK9gqCltFYasobBWFraJ5T5+Lp36O7vfZ+tTn7Cifufd7/i7tRfip vM4n1xm+yFYtRXCslFx259PVNcmZ0XIJ7H6E5ZJyu7Bcci4gDHZ4nv+CCezwHIdN2OF5CnQJ OzxffcGE6/RQjBwLiUImOnbMmuZjoRw3VBdMUPKvkGahvXEA7S2rmuL8rLKWKvlaE8NUZnI7 APj0uIOZ4trELAuN/tgxySOjCXaq1cThO1CtSD3iKONjBGbCMa4sAcYW00n4JBM/O+1qxQuL vbJO2qeazdmHElyNn8SYu5P+CedodhbU6qQV995OFqadeZm5qKW9twWyGOdTMVkSYJ5PsW2I SKdWwOreLiaZWLNcRK+YoEmKIyAnrRPQrY5y6vMuSWTI73wgDq8Jm8l6yK0iGdhMxiM12EzW KSDYTAabyWAzWSIg2EzWKhrYTAabyU6xmUzkOq8Qm6YkW7qdCoAjNVcQNUnWGzFxP32dJvsW NpPBmS3F1eaE29c4mmXYmm32Gw1rtm3ZtBy5rZCf2kgg5KdCfmp+AfJT83sT5acOnrZhJykL e7CTtJVN2Ek6Gqewk3QcZs9zJ2nip7G7q5bgKraRAV/ehRxFlzDB7o0pvVe1uFY/xUHdPw7J wFINnz3BUg0s1bxSj4OlGr4eB0s1sFTD1+NgqYavx53RUk1sZszYVxSQhBWJWkWlG/sSBG3Y hpBthyvrdS7YtyMd+O1i3+r2IcC+/eRW3fUA2LeCfeWTe5szxb7VbGLAvv3kps/E25wr9pWU k3ubM8W+0ry9zdliX3Qyb5MV+3IdeUhGYl1GOFuW4tgQp4iWIbiH9Z5Co7NMU2qDpWOQOn7u URscHIlaKHdEw02j0gzljqDcETf5UO6oZTGVd6bkOhlNlB1NEhB1qxttplQMwTKLFday1CGh FxJ6jy9dXEJvXoaZUHCaWkuQtxt/hLxdyNstPkPebscMBnm7p/LJBrMHebtz8fQGswl5u3P0 HwczC3m7Va+U68xCUVMcLODsBBeObaaSpjlSOvoeKwi8UvBKjy/BNtO8FXBXwV0FdzVrFNzV w01wV8FdBXe1kUdwV8Fd7cUpuKvd/M7AXY3z3NjdVVMwsGBn1szurkq6bri6kUHpsoLAXT2t u8qc0z5ef2LlDcDKIPYArABYAbACYOWcwArXAXeihbDo8h9wp+uqYtsOgJULja3ntGUKvvQo e4/j0B1F0dL9L7V4ero/qHT4Xnp8xLQR9vR8h4kj7BAmBOQNyBuQNyDvRk4BeY/D7Jkib65j +gjyViQLU8OE3RU5ZFG1sK0ZhdgKNSVWcLTb1B1Hcawa6ihH14azK9SjWMg8e2VX2xc//ODv iS6aOWI/xK+rkFwbKKmyZA5h6bft2ts0c9R4yF8YLya3slSr8Yb6HH1WL0rhcrJEtTn24/+6 KrK1YY9XMzr2gwG7aqm1QY3XMrrG4wLpRlc/562P0dXrMkxidOznB3YVJWvDDq9mdOznCXaV E2tDCK9ldI1nC9KNrlbpq8XoGEFAonp2EOAIquRi7vCb5UrYlGU4QeVCw2/p/5Da2hiKg9RW SG1NP0NqK6S2QmorxKxb2IOY9XAeIWYNMetenELMupvf08esJa4DPyWsqkixqVWkqZX00miA XQisUNA47uqfWDXRUS56mBPaHXlmppcrlt4XWXSGlZnJ7ao6PR1aeHcjsVPLFdbvO/l3WcO7 G5md4o7q1MOm8g57eHejMBPcdZTMhJMyezy3q7T1sHl1gmgt36pH37mRKxZLH307SmTzzm1c p4NJ2LBFXaXWvutej0WCLBmS0RiQvcqD4o4iK4JqGaOMc+yTHvP5YMxB2oJTWLuFtdvXGcVg 7XaA0cHaLazdvuW1W64jlSRNQUTh2boQL2BwBE2yddcoZFFoogQYZp3ABXgB8ALgBcALgBc6 2QG8MMDoZoQXuI6hkUzDRIY0MOHblLClWTIcwcgCKOAIxh5SgyMYOwQERzC2igaOYIQjGCfo cXAEY6to4AhGOIJxlB7Hin25DpaSRZUgXzGTJHviCCI9Djsm7HNgi/RNt8/hIW8tC3/CHoXD TzXuOei/wwD2E8B+AthPAPsJYD9BK2+wn4CFPdhP0Mom7CcYjVPYTzAOs2e6n4DrZCdZlnQs 5OcFc5zsZKvYEfC5uIXn5eudHaw4R6xwtgDgnGf1M5+qz3/+vYhJlXem5DpUQlYEE+N0OuGZ KbFuO6plO4UUCqlDAPUkAVQoFDNWEDbaeLtP2x/DQ2ehRWdnVUEmm9qiP2pqOQ4CX2V0vy9F ONujwg/LgsH87eiPNLqVsONnnxuajJ4KIS5WvhfWHyMXHoNVTGjpNY449Mo7CPXbDzmdvhft jSjwytcegmVQfM90AjHsBgIhhg0x7PwCxLDzexDD5vFLIYbdg0eIYUMMuxenEMPu5ncGMWyu E5Rk1dZlxx5YN0CzsIOd5nOUriCtP5EEpPVDWj+k9b9mj4O0fkjrh7T+1+xxkNYPaf0nSevn OsNItlRBVdVsVYm7ZpasY9tuzuKo6vU0AwNzBYy3gn07imMA9m2WW1cZRMC+HTU93i727agM Ati3WW618iOAfSsQr6OgydvFvh1lUQD7NsutVntltthXTtZMmbGvq0iyanEf3eUQ1KsL6QLG sUZPk5Gl6heakaWLfBlZn4K1H8Wd8iotSnSwxoY7cT+uXk4IeshpzEL7kKN1dKM7R6ucZ9SR jJV950nFKi5AJhZkYkEmVvINMrFyzUMm1ikzsWorrBeWioUwvvhcLFF5E7lYMnoruViK/IZy saqpCpeei6VLp87FkrnOJ1OQrkmCkomOo8wUdjHW7IOLWSgIfPJZ+ORj7JKq+ttN3nV/L7rb gZUsEyWphY2bjPLLH4l3QdxB080o6HPMNNXZAzwHeA7wHOA5wHN1ZgHPvTqe4zqTT8GqjVSB WjKfhud0STNcS4GyoVPjOdj1Hl+dZkVl/tvY2xHqeIVLIV7Kna0IO1fPDV3DztULQ9ewc3VM ZmHnahVdcx1gSVw+F+mmnXLGjq413RWwbJ5LTakLgcyQlsQDoiEtCdKSIC0J0pIgLSm7AGlJ +b2J3Oxz9J3P1iE+Zy/3zF3X8/dHL8LJ5PUcuY4yVmRXlDUxUwW755idFJ3lOpSlPo7nyHPg +pF0ex19PZrryExuR17Q9HMlM8WomhMhCz1mnpFnS3aqVXw87yhSj2ln/PmSmfCkVHiZ8Nhi OgmfZL5kp12tJIfFyWKdtE81X7IPJdXqREm6Uyf9E06Y7Cyo1XyBuPd2sjDtjMnMRW3Ld9u8 zzplcp2AqqiO KssadwF/V5U0ZOQHAJTFzjVl7j4SH6z44Z98L95de4i4XmCaQyPHB3FCCsSM o7c9wrGOomhpAYFaCkRaYKGUZJuOx51x20FJEemACUkR5X7LhUAb++0hWHOxCRONfB8CPpec TNHI+iFodPGJFo38HwJPbyEJo1EEh+DVG0nQaJTCIQD2dpI3GgVxCKJdbmIH17Gaii5JSFKz 8BpvWUZBdBTbtIxCbIUKEwuZQVlG7vKDl16Xkbu+4Fuvy8hbdvD34G3UZeQuP3jpdRm56wu+ 8bqM3GUHx+5xs63LyFt+8NLrMnLXF3zjdRlVfLJzN1jBb2x47ODXlA2sOwPP45EtxXLNdNHs WK9zAb9Qk7xZLlCTnG9cgJrkUzkHUJMcsO+oPsObwb5Qk7xFMFCT/NJrknOdRamYloYsmZqX 2eM8HtHGpoUaK5NX9QrYF7AvYF/AvoB9AfuyyA2wL2Bfvh4H2Jevx50R9uU6i1JxsaKIadIt T4K1rCFDVuTGdId++nrVahZ1dTEj2DG4Op9E6Zy2LFMXUqYlZFqOmYxNDSnTKRGQIL2B7ezj jDdQNY6FPaga18omVI0bjVOoGjcOs+eZXJz4Ucw4m7hfInKdjGGOmsymaqmKNJszNi6qatzZ wYpzxApnCwDOeVY/86n6/Offi5hUeWdKrtOoVM1QZDGvj8o+U0rYcQRBPwxfhdQhInUJEank /9c+jerUZwVkM0ND1Ice3YFIDkRyeqEziOT04BEiORDJ6cUpRHK6+Z1BJIfrdC3VkgxVce2U M3Z86iBTsAUtw7fx9Bpv0v8QbL7kTyQXEtWwMsR1oIHqaBjLmLvGFhxoUO4crNTCgQZwoAEc aJArsk4kHGjQjzQ40AAONEioggMNkrdgqQaWamCpppl2WKp5g0s1m8Rj3KSeYuruHLmP+e9L yQh4lzxaey8daBvfQzkdTe+l413z7+Vm1PReOuY0vlfkYTe9l3b5xvfSc3db3ku7WzN/uUfe 9F5q543vpfsKW95Lrav5vaSPtrynt7+HaXSi1CVv/kGaIhDNYvJxrPFFiskUjnnjixSbQTQb RRSjQTSjQRSrKSq5N75IMZsCDTS+SLGb4syExhcphiNShUOxHInGI6ZYDo1FTDEcmqViit3Q zAZTzIY6slGshqYJTDEaqjwpNpMAo7b3KCZD68CYYjG0kQZTDCaZvtpGfIq9iDSDESkGg2mU ihSLUWgmI9JGGpruRYrNiFRSKUYj06xUpFiNQn2RYjZp6LftRdoURZ3yKYaDaBYuUSwH00xO os1RNHVIFMuRaYOURLEcTFOHRLEcTDM5iWY5tG4l0eYoqjooloOoUqVYjkTVI81yaC/KFMuR aHqUaZMUrXfIFMspvIvGFymWo1BJpVkObQKQaRMVzQBkiuWIVFIpliNSf5GGbqg8UixHpv2i QsPFNANQKJYj02xVoblSNB4VGsChDR0Kbbaqk/rz8hdvYeytle9tnncFT6Ueny4u/uX/AQAA //8DAFBLAwQUAAYACAAAACEAdD85esIAAAAoAQAAHgAIAWN1c3RvbVhtbC9fcmVscy9pdGVt MS54bWwucmVscyCiBAEooAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAIzPsYrDMAwG4P3g3sFob5zcUMoRp0spdDtKDroaR0lMY8tYamnfvuamK3ToKIn/+1G7 vYVFXTGzp2igqWpQGB0NPk4Gfvv9agOKxcbBLhTRwB0Ztt3nR3vExUoJ8ewTq6JENjCLpG+t 2c0YLFeUMJbLSDlYKWOedLLubCfUX3W91vm/Ad2TqQ6DgXwYGlD9PeE7No2jd7gjdwkY5UWF dhcWCqew/GQqjaq3eUIx4AXD36qpigm6a/XTf90DAAD//wMAUEsDBBQABgAIAAAAIQCBiPTI 4gAAAFUBAAAYACgAY3VzdG9tWG1sL2l0ZW1Qcm9wczEueG1sIKIkACigIAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyQwWrDMAyG74O9g9HddZIuTVPilC1Zodexwq6u4ySG 2Aq2MzbG3n0OO3XHncQnIX0/qo4fZiLvynmNlkO6SYAoK7HTduBweT3RPRAfhO3EhFZxsAjH +v6u6vyhE0H4gE6dgzIkNnSs55bDV5E8nbZpUdBmu89o2zzktMzalD43za4o87zMH9tvIFFt 4xnPYQxhPjDm5aiM8BuclY3DHp0RIaIbGPa9lqpFuRhlA8uSZMfkEvXmzUxQr3l+t19U729x jbY4/V/LVV8njYMT8/gJrK7YH9XKN6+ofwAAAP//AwBQSwMEFAAGAAgAAAAhAOht8Gu2AgAA KQsAABIAAAB3b3JkL2ZvbnRUYWJsZS54bWzclltv2yAUx98n7Tsgv7e+xLmqadWbt0lNH9ZW eyYYx2hcLMBJ8+13jJ01qZMu7qY+DBQHzoE/8PM5JGcXz4KjJdWGKTn1wtPAQ1QSlTK5mHpP j8nJyEPGYpliriSdemtqvIvzz5/OVpNMSWsQzJdmIsjUy60tJr5vSE4FNqeqoBKcmdICW+jq hS+w/lkWJ0SJAls2Z5zZtR8FwcBrZPQxKirLGKE3ipSCSuvm+5pyUFTS5KwwG7XVMWorpdNC K0KNgTMLXusJzORvmTBuCQlGtDIqs6dwmGZHTgqmh4FrCf4i0O8mELUEBoSl3TQGjYYPM7d0 DO0m09/ImLWgzx4SZPJtIZXGcw5KgAbB6ZATrp7VYudNbKDVRGIBox7WYq64sxdYKkNDcC0x n3pBH2oYVMyGwQC++8HQ86uBJMfa0EqjHhjV5gwLxtcba0oJ7MSyJa29BbMk3ziXWLNql7XL sAU4SjMPQKwpXm0JIe53LVFrTG/XQpzOaNcSbo2BNf2aQovGIxPUoHu6Qt+VwHIvlgjqIOgB jhg+EbTi/VjcSq+xaKfbhcgt7Dm6TZIXItdgGY76Vy0i47eIuG5Y6xxP5FqVmlFdMTlAYwgE xo5KRSPuREOolOp9ODL2TNPjWcS9j2DxAy6h6vI1B9KlVf73dPlK+ZJaRjCER0kdFcztPfg2 O59hvigl+qJszkhzslYEBcCu1yxX9bpEEC6t6pZO1XuKtkOoMgzHN610Ct8k1hjCbsQuYVsc PUkGP+MUzR4O5NQV3DCxy6m67icy2kvErJgxnZAkwyS5TLaR3I5vkqq8RtLbWA4g6SXds2o3 iNCMpqwUf8XlH0XK9ht+iRS45toXb/TnSBm7We/GcscWud2XYddKzyk/nFrxx6XWpVvldWq9 Fxj823gbWNMw578AAAD//wMAUEsDBBQABgAIAAAAIQC3TtLsWgEAAJ8CAAARAAgBZG9jUHJv cHMvY29yZS54bWwgogQBKKAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAACckl1LwzAUhu8F/0PJtW3aTlRKm8Emu3IgbqJ4F5KzNaxNQhLX9d+bdmvncFdCLk54 n/PmfCSfHuoq2IOxQskCJVGMApBMcSG3BXpfL8InFFhHJaeVklCgFiyaktubnOmMKQOvRmkw ToANvJO0GdMFKp3TGcaWlVBTG3lCenGjTE2dv5ot1pTt6BZwGscPuAZHOXUUd4ahHh3RyZKz 0VJ/m6o34AxDBTVIZ3ESJfjMOjC1vZrQK7/IWrhWw1V0EEf6YMUINk0TNZMe9fUn+HP5supb DYXsZsUAkZyzzAlXAcnxOfQRM0CdMmReKqMsmLtgBq7soUHqZltR65Z+DRsBfNaSN8FKaniw KhXbQZvjv0iXZWAvuk2StCfGa34ay/EJ4IFvJzs2Pygfk/nzeoFIGidPYXwfpo/rZJLF/sRf XXUX+WfD+lTAvx0HA9JXfPmlyA8AAAD//wMAUEsDBBQABgAIAAAAIQBn2jMmoAAAAPwAAAAT ACgAY3VzdG9tWG1sL2l0ZW0xLnhtbCCiJAAooCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAACsz0EKgzAQheGrhBzASBddiApCu62FQFfdJHE0gSQjyQh6+wYpPUGXw/v4YVrd SNySgcwkeDAEk6TDQ8ffw3OQbid7nxw5jOM8OwNj9C5CtWfP2QkfKhRcLGcvSLnAjl8524OP udEdt0RrI0Q2FoLKFa4QyzZjCorKmRaBZ/iGZgsQSVzq+iq0097hktRqj2/sL6m+Fb+H+w8A AAD//wMAUEsDBBQABgAIAAAAIQCLSKyJCQIAADQVAAAUAAAAd29yZC93ZWJTZXR0aW5ncy54 bWzsmEFv2jAUgO+T+h8i30vshDg2KlSqqkqTdtq6H+A4BqzFdmQbUvbr5wQodOzQnJaDL+Tl Oe/jPT6LBB4e31ST7IV10uglQDMIEqG5qaXeLMHP15d7AhLnma5ZY7RYgoNw4HF19+WhW3Si +iG8D1e6JFC0Wyi+BFvv20WaOr4VirmZaYUOi2tjFfPh1G5SxeyvXXvPjWqZl5VspD+kGYQY nDD2MxSzXksung3fKaH9UJ9a0QSi0W4rW3emdZ+hdcbWrTVcOBfmUc2Rp5jU7xg0vwEpya1x Zu1nYZhTRwMqlCM4RKq5AIpxgOwGgLmsxzHwiZGGyiuOE+MwxRnjDkq8gUTxxdeNNpZVTSCF jyYJ0yUDuH/t32wVdkgt9+50TLpF3zvKCCTlHKNhvTL14XlY27MmLIK0z4b98U2s/TkL37Pf 5Wb7j/SraW+TT8Z7o/7Khz6eattH/lKjw74G4cT97q/rg5ZxcYq5aUzYjmznzRHRXHU2rrL6 0NG4Wns9+ZjS9DL0MfyoI0cYI0wxjTomoaMoCS1gUUQdU9Axx1lRUohx1DEFHTjrb8p5kUUd U9BBypLmOIfxy2oSOmieEYwIzaOOSeggCJI5RSTqmIIOBPunXJjBePOYho8clrBAGMZfHtPw QSDNKS5ofNadiI+yJATTrIw+/peP49ENwdV/nas/AAAA//8DAFBLAwQUAAYACAAAACEAnGfr zOYBAADmAwAAEAAIAWRvY1Byb3BzL2FwcC54bWwgogQBKKAAAQAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcU8Fu2zAMvQ/YPxi+N7KTNu0CRcWQYuhhWwPEbc+a TCfCZEmQ2KDd14+yF0/ZdppPj4/00xNJ8dvX3hRHCFE7uy7rWVUWYJVrtd2vy8fm08VNWUSU tpXGWViXbxDLW/H+Hd8G5yGghliQhI3r8oDoV4xFdYBexhmlLWU6F3qJFIY9c12nFdw59dKD RTavqiWDVwTbQnvhJ8FyVFwd8X9FW6eSv/jUvHnSE7yB3huJIL6mP82sddhzNrG8cShNo3sQ FdFTwLdyD1HMa85GxJ9daKO4/rAgasR8c5BBKqQeisureXXDWcbwj94brSRSf8UXrYKLrsPi YTBdJAXO8hJOF9mBegka35KXPOSftSUPi+slZyMkf0Hug/SHKOpqmVxOMd8paWBDbRCdNBE4 +03we5BpxFupk8cjro6g0IUi6h805HlZfJMRUvPW5VEGLS2WY9kYDNj4iEE0Gg1pT/EA87Ic 60tRDwUEzguHYPBA+NzdcEJ86Ohu+A+zdW528DBazezkzk5n/KG6cb2XlnrMJkQt/h4ffePu 0or86uE5mc3+WeNh56WiqVwtqsUi34Isx3fEQktjnaYyEfye7hBMOoH+tXtoTzV/J9JePY3P VtTLWUXfsEgnjlZhek/iJwAAAP//AwBQSwECLQAUAAYACAAAACEAduTmepkBAACxBwAAEwAA AAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRfVHlwZXNdLnhtbFBLAQItABQABgAIAAAAIQAekRq3 7wAAAE4CAAALAAAAAAAAAAAAAAAAANIDAABfcmVscy8ucmVsc1BLAQItABQABgAIAAAAIQCy sz0V2gEAAIILAAAcAAAAAAAAAAAAAAAAAPIGAAB3b3JkL19yZWxzL2RvY3VtZW50LnhtbC5y ZWxzUEsBAi0AFAAGAAgAAAAhADFh/WKKjAAAEqUDABEAAAAAAAAAAAAAAAAADgoAAHdvcmQv ZG9jdW1lbnQueG1sUEsBAi0AFAAGAAgAAAAhAPgKfdJXAgAA6gkAABEAAAAAAAAAAAAAAAAA x5YAAHdvcmQvZW5kbm90ZXMueG1sUEsBAi0AFAAGAAgAAAAhAPrwKP56CQAAAysAABIAAAAA AAAAAAAAAAAATZkAAHdvcmQvZm9vdG5vdGVzLnhtbFBLAQItABQABgAIAAAAIQA+w7z2yQIA AL4KAAAQAAAAAAAAAAAAAAAAAPeiAAB3b3JkL2Zvb3RlcjEueG1sUEsBAi0AFAAGAAgAAAAh ANgD9svNBgAAylcAABUAAAAAAAAAAAAAAAAA7qUAAHdvcmQvdGhlbWUvdGhlbWUxLnhtbFBL AQItABQABgAIAAAAIQAtc2HyiAsAAA8wAAARAAAAAAAAAAAAAAAAAO6sAAB3b3JkL3NldHRp bmdzLnhtbFBLAQItABQABgAIAAAAIQBFEFudJRUAAJPSAAAPAAAAAAAAAAAAAAAAAKW4AAB3 b3JkL3N0eWxlcy54bWxQSwECLQAUAAYACAAAACEAyp0oiwEcAAAkfAIAEgAAAAAAAAAAAAAA AAD3zQAAd29yZC9udW1iZXJpbmcueG1sUEsBAi0AFAAGAAgAAAAhAHQ/OXrCAAAAKAEAAB4A AAAAAAAAAAAAAAAAKOoAAGN1c3RvbVhtbC9fcmVscy9pdGVtMS54bWwucmVsc1BLAQItABQA BgAIAAAAIQCBiPTI4gAAAFUBAAAYAAAAAAAAAAAAAAAAAC7sAABjdXN0b21YbWwvaXRlbVBy b3BzMS54bWxQSwECLQAUAAYACAAAACEA6G3wa7YCAAApCwAAEgAAAAAAAAAAAAAAAABu7QAA d29yZC9mb250VGFibGUueG1sUEsBAi0AFAAGAAgAAAAhALdO0uxaAQAAnwIAABEAAAAAAAAA AAAAAAAAVPAAAGRvY1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhAGfaMyagAAAA/AAA ABMAAAAAAAAAAAAAAAAA5fIAAGN1c3RvbVhtbC9pdGVtMS54bWxQSwECLQAUAAYACAAAACEA i0isiQkCAAA0FQAAFAAAAAAAAAAAAAAAAADe8wAAd29yZC93ZWJTZXR0aW5ncy54bWxQSwEC LQAUAAYACAAAACEAnGfrzOYBAADmAwAAEAAAAAAAAAAAAAAAAAAZ9gAAZG9jUHJvcHMvYXBw LnhtbFBLBQYAAAAAEgASAJEEAAA1+QAAAAA= --B_3607670956_359145768-- From nobody Sun Apr 29 08:34:15 2018 Return-Path: X-Original-To: stir@ietfa.amsl.com Delivered-To: stir@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15AEE1250B8 for ; Sun, 29 Apr 2018 08:34:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FoXWmrslTJ86 for ; Sun, 29 Apr 2018 08:34:12 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D10212421A for ; Sun, 29 Apr 2018 08:34:12 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 6964A3005A4 for ; Sun, 29 Apr 2018 11:34:10 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id w3eYdcwskZfm for ; Sun, 29 Apr 2018 11:34:09 -0400 (EDT) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id BBF14300435 for ; Sun, 29 Apr 2018 11:34:09 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Message-Id: Date: Sun, 29 Apr 2018 11:34:15 -0400 To: IETF STIR Mail List X-Mailer: Apple Mail (2.3273) Archived-At: Subject: [stir] WG Last Call for draft-ietf-stir-passport-shaken-02 X-BeenThere: stir@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Secure Telephone Identity Revisited List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 29 Apr 2018 15:34:14 -0000 This is the STIR WG Last Call for "PASSporT SHAKEN Extension=E2=80=9D = . Please review the document and = send your comments to the list by 13 May 2018.=20 Thanks, Russ & Robert=