From 271c134f89213ee3d15858753f6bc888357b4142 Mon Sep 17 00:00:00 2001 From: github-actions Date: Tue, 12 Mar 2024 14:32:45 +0000 Subject: [PATCH] dist-docs: Update OVN main manpages --- src/static/support/dist-docs/ovn-appctl.8.pdf | Bin 29687 -> 29687 bytes .../support/dist-docs/ovn-architecture.7.pdf | Bin 136341 -> 136341 bytes .../dist-docs/ovn-controller-vtep.8.pdf | Bin 25816 -> 25816 bytes .../support/dist-docs/ovn-controller.8.pdf | Bin 61029 -> 61029 bytes src/static/support/dist-docs/ovn-ctl.8.pdf | Bin 32483 -> 32483 bytes .../support/dist-docs/ovn-detrace.1.pdf | Bin 21892 -> 21892 bytes src/static/support/dist-docs/ovn-ic-nb.5.pdf | Bin 39233 -> 39233 bytes .../support/dist-docs/ovn-ic-nbctl.8.pdf | Bin 55576 -> 55576 bytes src/static/support/dist-docs/ovn-ic-sb.5.pdf | Bin 52747 -> 52747 bytes .../support/dist-docs/ovn-ic-sbctl.8.pdf | Bin 53331 -> 53331 bytes src/static/support/dist-docs/ovn-ic.8.pdf | Bin 38758 -> 38758 bytes src/static/support/dist-docs/ovn-nb.5 | 5 + src/static/support/dist-docs/ovn-nb.5.html | 1673 +++++++++-------- src/static/support/dist-docs/ovn-nb.5.pdf | Bin 218470 -> 218629 bytes src/static/support/dist-docs/ovn-nb.5.txt | 1673 +++++++++-------- src/static/support/dist-docs/ovn-nbctl.8.pdf | Bin 111478 -> 111478 bytes src/static/support/dist-docs/ovn-northd.8 | 4 +- .../support/dist-docs/ovn-northd.8.html | 12 +- src/static/support/dist-docs/ovn-northd.8.pdf | Bin 197700 -> 198092 bytes src/static/support/dist-docs/ovn-northd.8.txt | 12 +- src/static/support/dist-docs/ovn-sb.5 | 4 +- src/static/support/dist-docs/ovn-sb.5.html | 83 +- src/static/support/dist-docs/ovn-sb.5.pdf | Bin 210488 -> 210465 bytes src/static/support/dist-docs/ovn-sb.5.txt | 83 +- src/static/support/dist-docs/ovn-sbctl.8.pdf | Bin 74269 -> 74269 bytes src/static/support/dist-docs/ovn-trace.8.pdf | Bin 56114 -> 56114 bytes 26 files changed, 1789 insertions(+), 1760 deletions(-) diff --git a/src/static/support/dist-docs/ovn-appctl.8.pdf b/src/static/support/dist-docs/ovn-appctl.8.pdf index 0f45e976cc755a956f7b6107c651fc21f132753a..20d13903d16b0abc500e796baa6da18b792f1b27 100644 GIT binary patch delta 164 zcmezVobmf}#tp}Fd5m=pjY14ftc;DUj3-~t)j}2E%sV8QVwz@ZVv?k5XklroYiO93 zxcN@rH%1O)LnA{IVz| Tk(-mDk%gTNAr+Hv7s~(uReUcV diff --git a/src/static/support/dist-docs/ovn-architecture.7.pdf b/src/static/support/dist-docs/ovn-architecture.7.pdf index 36efcef8e7b76e1160a8e451b17cf1b512ef164b..e724508fd125848c2a52b1ca007e2523672c6ebb 100644 GIT binary patch delta 194 zcmbQbl4I&hj)oS-Elgo-JjS|)Mj?hKR>nqF#?zD7n6ywuX0S0G5==2oGc_?u(lxZO zwA3{;OiSFJ&Cc|VQOnrS$k4>t$k;N$tvHnT8yGcq%_Fmg0^GB$8_HZ(PKb~1HwF)%bXb#yeavmvBndW8s+EC8;hFG2tS delta 194 zcmbQbl4I&hj)oS-Elgo-JVv?(79mE)Rwiavrqh$yn6ywuX0S0G5;QYTH8U}`&`nEC zv(Pm(Otajc&Cc|VQOn4{!pPXf%+xZ$uaHg_^|ax(%_F6NdlPG*KKF2*LV78WiBZq8ROnVd`dJWa;Q^>1<-*WMb-M=;UNzXG2KEzRX>8`?b2N80H!w6db2Bq_aWye;cC@r`Gj}y|wzDCmVzTEu82}+0HJ$(f delta 185 zcmaEQhxzFp<_!y<@)+qFScDiETbYW0jZw?k(8$ol*vP~n%D_M!h%~wMee+XX5=&AwT&#=?fD$kjn@y?%nd4k7oZQ?D zTrJ$3Oxz4zoJ<`p3@r`K-CT{09F1H|%$)6P2&#zXva{nVE=epZsVGWK<1#ihwXoz; KRdw}u;{pJe88{69 delta 209 zcmaF-m+|pm#tr|=d5m-oEJBQotxU|V3?_3|XrT%?RvZ#EOEF7JOtR2TOHH%TH8f1K z+$>W0jZw?Uz{1Gb#N5Cj%D_M!h%~wMee+XX5=&AwT&#=?j7$t*DmI%`2QtT*o47c- z8M~TUSXx+EI+{6}xwx4anp!wIn>(ABxS2WI*$`9_%VlTBRa}x-R8motn#N@e)NaY8 Ks_N?R#svVHVmJT* diff --git a/src/static/support/dist-docs/ovn-detrace.1.pdf b/src/static/support/dist-docs/ovn-detrace.1.pdf index 19d81c552eec1c013ef318c70d65ebc4840ff2bb..6bd0644e226246f220c13df0abc400578141bbc7 100644 GIT binary patch delta 185 zcmZo!&DgS5!7p^>49v5|>El!1Xd5NUGh`{t*(B$lLVxL6q(03~25HXjX2WOA}_adfkA nF?BL9bTx7`G&OK_G;}t1GIKU|akR8_b91w^A*5n*MyLz`^;I#+ delta 185 zcmZo!&DgS5zyfrXK=iMfG6l!1Xd5NUGh`{t*(B$lLVxL6q(7?~KrRBS#Pl*r`d>}G6f mWCjwmFm$xAbT% diff --git a/src/static/support/dist-docs/ovn-ic-nb.5.pdf b/src/static/support/dist-docs/ovn-ic-nb.5.pdf index cc3a00baeb47f5dac3048f056544134de1787f31..b50ad3b1e17ab4d320022e6081410c859cdac150 100644 GIT binary patch delta 188 zcmX@OiRs`brVWu3d5m=pjY14ftc;DUOeUvJ)It@QJ@JrWN}73UVsetMp@pTTuAyOC z;^w?b-xxWJ4UG&GvmvM=mdnnLtGFbwsHCDOHI2*I!ob{;OI6j?-;E0ZEh#e~ delta 188 zcmX@OiRs`brVWu3d5m-oEJBQotxU|V3?`>e)It@QJ@JsBS&CU&Vv>b!T56hwuAyO? z<>tIe-xxWJ3@nU{P0S4@=S-1;b2j%)31x|MGbbai%eGBUC-a<+7KG<7yIH8*s0 raWOEpFmZCRvmvM=mdnnLtGFbwsHCDOHI2*I!ob{;OI6j?-;E0ZXpuAF diff --git a/src/static/support/dist-docs/ovn-ic-nbctl.8.pdf b/src/static/support/dist-docs/ovn-ic-nbctl.8.pdf index 4f11ba12e4a159963936ea3f646822a027782494..d32d7850b54bc03ed4cf2218ca1d2c54ffb03fe0 100644 GIT binary patch delta 184 zcmbQSiFw8*<_%vi@EGeF8ig2|SQ#5xnM}H4C}V`mdr o7js7gVb!T56hwuAyO? zThDL@a#zrOvQ3eL;K%~i~@0*|El30?e;bLWE0F;2K*u3TVPgW-bGgAvo o3uj|P3nvR>OCx7f3ky?2XESp*S3`4WXJbb@8$v23zdtJj00YT1eE?tX3owA pW{!@=7KY}g=B9?`=01^^IDG*AEl diff --git a/src/static/support/dist-docs/ovn-ic-sbctl.8.pdf b/src/static/support/dist-docs/ovn-ic-sbctl.8.pdf index 5ca653efed8543214afc4b8408165e07bc90e5dd..d3b8c875c068705967a206005a7f440805ed2b56 100644 GIT binary patch delta 209 zcmcb-fcf$Q<_+~Hc#L%ojY14ftc;DUOeS}q&_WeBc;b*?N}73UVsetMp@pTTuAyOC z;^rwQzcFeV8yXp!7#o=wL>U;U1Cb_|zHfetOJYf?hKrSv0Z;;_V)K^Mjx2G;hR#mr z=EiPr7A7VJ7G@?uKF|OYS7TFSCo@A=Cp#O0Dq^|p?6`_c5{pVIic-_KOpOdJ&AC)n IUH#p-0A<=aK>z>% delta 209 zcmcb-fcf$Q<_+~Hc#L!nEJBQotxU|V3?_G<&_WeBc;b+tS&CU&Vv>b!T56hwuAyO? z<>o0TzcFeV8CVz@o0uCIL>U;U1Cb_|zHfetOJYf?hKrSvfsu&;OvUCcryW`1Ox&C; zTwD!I4UNr=9Zf8qoXyQGEsflqOk7M&fh==78-glgx$Nw?ic1oUN-By{)3{8H3@y#M KR8?L5-M9digE`Is diff --git a/src/static/support/dist-docs/ovn-ic.8.pdf b/src/static/support/dist-docs/ovn-ic.8.pdf index 53df40965ec6ac66008d72bfc7b7e67a392c0dcc..c5f6be9209f09ee3de5fa178306a26f22257154d 100644 GIT binary patch delta 188 zcmaF1j_KJtrVULKc#U-pjY14ftc;DUObjRYPtZgYIXdB>V5+5og`r83uAzmcrLLi2 zTH@yE6TdNP8ygxKniw0I7)BWwr~{EEm%eX)ic4Zis)mb|k%5tk0bIrA9g_o?olH&5 q&0I|!EuAeK9bL_wT;1F(EFH~_Tpdl!OpHt&-Rx`#shI3FT?POmz%y$A delta 188 zcmaF1j_KJtrVULKc#U)oEJBQotxU|V3=AgsPtZgYIXdB>pjnDpT4IugZdz)Zg|4At zn&sx{6TdNP8yQ#_8Jn0J7(^Kur~{EEm%eX)ic4Zis)mb|k%5tk0bIrA9g_o?os1ow qTn$_dEetK3OikS^EL<#{-As%f&CH!FjE!8JjqPj*shI3FT?PP+2{Z8k diff --git a/src/static/support/dist-docs/ovn-nb.5 b/src/static/support/dist-docs/ovn-nb.5 index a6b03f75..b96c123f 100644 --- a/src/static/support/dist-docs/ovn-nb.5 +++ b/src/static/support/dist-docs/ovn-nb.5 @@ -1088,6 +1088,9 @@ optional string .TQ 2.50in \fBoptions : hostname\fR optional string +.TQ 2.50in +\fBoptions : pkt_clone_type\fR +optional string, must be \fBmc_unknown\fR .TQ .25in \fIVIF Plugging Options:\fR .RS .25in @@ -1342,6 +1345,8 @@ If set, indicates the maximum rate for data sent from this interface, in bit/s\[ If set, indicates the maximum burst size for data sent from this interface, in bits\[char46] .IP "\fBoptions : hostname\fR: optional string" If set, indicates the DHCPv4 option \(dqHostname\(dq (option code 12) associated for this Logical Switch Port\[char46] If DHCPv4 is enabled for this Logical Switch Port, hostname dhcp option will be included in DHCP reply\[char46] +.IP "\fBoptions : pkt_clone_type\fR: optional string, must be \fBmc_unknown\fR" +If set to mc_unknown, packets going to this VIF get cloned to all unknown ports connected to the same Logical Switch\[char46] .ST "VIF Plugging Options:" .PP .IP "\fBoptions : vif-plug-type\fR: optional string" diff --git a/src/static/support/dist-docs/ovn-nb.5.html b/src/static/support/dist-docs/ovn-nb.5.html index 681f5924..c8100b95 100644 --- a/src/static/support/dist-docs/ovn-nb.5.html +++ b/src/static/support/dist-docs/ovn-nb.5.html @@ -915,6 +915,7 @@ options : qos_max_rate optional string options : qos_burst optional string options : hostname optional string + options : pkt_clone_type optional string, must be mc_unknown VIF Plugging Options: options : vif-plug-type optional string @@ -1236,22 +1237,26 @@ for this Logical Switch Port, hostname dhcp option will be in‐ cluded in DHCP reply. + options : pkt_clone_type: optional string, must be mc_unknown + If set to mc_unknown, packets going to this VIF get cloned to + all unknown ports connected to the same Logical Switch. + VIF Plugging Options: options : vif-plug-type: optional string If set, OVN will attempt to perform plugging of this VIF. In or‐ - der to get this port plugged by the OVN controller, OVN must be + der to get this port plugged by the OVN controller, OVN must be built with support for VIF plugging. The default behavior is for - the CMS to do the VIF plugging. Each VIF plug provider have + the CMS to do the VIF plugging. Each VIF plug provider have their own options namespaced by name, for example "vif-plug:rep‐ - resentor:key". Please refer to the VIF plug provider documenta‐ + resentor:key". Please refer to the VIF plug provider documenta‐ tion located in Documentation/topics/vif-plug-providers/ for more information. options : vif-plug-mtu-request: optional string - Requested MTU for plugged interfaces. When set the OVN con‐ - troller will fill the mtu_request column of the Open vSwitch - database’s Interface table. This in turn will make OVS vswitchd + Requested MTU for plugged interfaces. When set the OVN con‐ + troller will fill the mtu_request column of the Open vSwitch + database’s Interface table. This in turn will make OVS vswitchd update the MTU of the linked interface. Virtual port Options: @@ -1263,9 +1268,9 @@ options : virtual-parents: optional string This options represents a set of logical port names (with in the - same logical switch) which can own the virtual ip configured in + same logical switch) which can own the virtual ip configured in the options:virtual-ip. All these virtual parents should add the - virtual ip in the port_security if port security addressed are + virtual ip in the port_security if port security addressed are enabled. IP Multicast Snooping Options: @@ -1274,78 +1279,78 @@ other_config :mcast_snoop set to true. options : mcast_flood: optional string, either true or false - If set to true, multicast packets (except reports) are uncondi‐ + If set to true, multicast packets (except reports) are uncondi‐ tionally forwarded to the specific port. Default: false. options : mcast_flood_reports: optional string, either true or false - If set to true, multicast reports are unconditionally forwarded + If set to true, multicast reports are unconditionally forwarded to the specific port. Default: false. Containers: When a large number of containers are nested within a VM, it may be too expensive to dedicate a VIF to each container. OVN can use VLAN tags to - support such cases. Each container is assigned a VLAN ID and each + support such cases. Each container is assigned a VLAN ID and each packet that passes between the hypervisor and the VM is tagged with the appropriate ID for the container. Such VLAN IDs never appear on a phys‐ ical wire, even inside a tunnel, so they need not be unique except rel‐ ative to a single VM on a hypervisor. - These columns are used for VIFs that represent nested containers using - shared VIFs. For VMs and for containers that have dedicated VIFs, they + These columns are used for VIFs that represent nested containers using + shared VIFs. For VMs and for containers that have dedicated VIFs, they are empty. parent_name: optional string - The VM interface through which the nested container sends its - network traffic. This must match the name column for some other + The VM interface through which the nested container sends its + network traffic. This must match the name column for some other Logical_Switch_Port. Note: for performance of the OVN Southbound - database conditional monitoring, unlike for regular VIFs, + database conditional monitoring, unlike for regular VIFs, ovn-controller will register to get updates about all OVN South‐ - bound database Port_Binding table records that correspond to - nested container ports even if external_ids:ovn-monitor-all is + bound database Port_Binding table records that correspond to + nested container ports even if external_ids:ovn-monitor-all is set to false. See ovn-controller(8) for more information. tag_request: optional integer, in range 0 to 4,095 - The VLAN tag in the network traffic associated with a con‐ + The VLAN tag in the network traffic associated with a con‐ tainer’s network interface. The client can request ovn-northd to - allocate a tag that is unique within the scope of a specific - parent (specified in parent_name) by setting a value of 0 in + allocate a tag that is unique within the scope of a specific + parent (specified in parent_name) by setting a value of 0 in this column. The allocated value is written by ovn-northd in the - tag column. (Note that these tags are allocated and managed lo‐ - cally in ovn-northd, so they cannot be reconstructed in the - event that the database is lost.) The client can also request a + tag column. (Note that these tags are allocated and managed lo‐ + cally in ovn-northd, so they cannot be reconstructed in the + event that the database is lost.) The client can also request a specific non-zero tag and ovn-northd will honor it and copy that value to the tag column. - When type is set to localnet or l2gateway, this can be set to - indicate that the port represents a connection to a specific - VLAN on a locally accessible network. The VLAN ID is used to + When type is set to localnet or l2gateway, this can be set to + indicate that the port represents a connection to a specific + VLAN on a locally accessible network. The VLAN ID is used to match incoming traffic and is also added to outgoing traffic. tag: optional integer, in range 1 to 4,095 - The VLAN tag allocated by ovn-northd based on the contents of + The VLAN tag allocated by ovn-northd based on the contents of the tag_request column. Port State: up: optional boolean - This column is populated by ovn-northd, rather than by the CMS + This column is populated by ovn-northd, rather than by the CMS plugin as is most of this database. When a logical port is bound - to a physical location in the OVN Southbound database Binding + to a physical location in the OVN Southbound database Binding table, ovn-northd sets this column to true; otherwise, or if the - port becomes unbound later, it sets it to false. If this column - is empty, the port is not considered up. This allows the CMS to + port becomes unbound later, it sets it to false. If this column + is empty, the port is not considered up. This allows the CMS to wait for a VM’s (or container’s) networking to become active be‐ fore it allows the VM (or container) to start. Logical ports of router type are an exception to this rule. They - are considered to be always up, that is this column is always + are considered to be always up, that is this column is always set to true. enabled: optional boolean - This column is used to administratively set port state. If this - column is empty or is set to true, the port is enabled. If this - column is set to false, the port is disabled. A disabled port + This column is used to administratively set port state. If this + column is empty or is set to true, the port is enabled. If this + column is set to false, the port is disabled. A disabled port has all ingress and egress traffic dropped. Addressing: @@ -1358,164 +1363,164 @@ Ethernet address followed by zero or more IPv4 or IPv6 addresses (or both) An Ethernet address defined is owned by the logical port. - Like a physical Ethernet NIC, a logical port ordinarily + Like a physical Ethernet NIC, a logical port ordinarily has a single fixed Ethernet address. - When a OVN logical switch processes a unicast Ethernet - frame whose destination MAC address is in a logical - port’s addresses column, it delivers it only to that - port, as if a MAC learning process had learned that MAC + When a OVN logical switch processes a unicast Ethernet + frame whose destination MAC address is in a logical + port’s addresses column, it delivers it only to that + port, as if a MAC learning process had learned that MAC address on the port. If IPv4 or IPv6 address(es) (or both) are defined, it in‐ - dicates that the logical port owns the given IP ad‐ + dicates that the logical port owns the given IP ad‐ dresses. - If IPv4 address(es) are defined, the OVN logical switch - uses this information to synthesize responses to ARP re‐ - quests without traversing the physical network. The OVN - logical router connected to the logical switch, if any, - uses this information to avoid issuing ARP requests for + If IPv4 address(es) are defined, the OVN logical switch + uses this information to synthesize responses to ARP re‐ + quests without traversing the physical network. The OVN + logical router connected to the logical switch, if any, + uses this information to avoid issuing ARP requests for logical switch ports. - Note that the order here is important. The Ethernet ad‐ - dress must be listed before the IP address(es) if de‐ + Note that the order here is important. The Ethernet ad‐ + dress must be listed before the IP address(es) if de‐ fined. Examples: 80:fa:5b:06:72:b7 - This indicates that the logical port owns the + This indicates that the logical port owns the above mac address. 80:fa:5b:06:72:b7 10.0.0.4 20.0.0.4 - This indicates that the logical port owns the mac + This indicates that the logical port owns the mac address and two IPv4 addresses. 80:fa:5b:06:72:b7 fdaa:15f2:72cf:0:f816:3eff:fe20:3f41 - This indicates that the logical port owns the mac + This indicates that the logical port owns the mac address and 1 IPv6 address. 80:fa:5b:06:72:b7 10.0.0.4 fdaa:15f2:72cf:0:f816:3eff:fe20:3f41 - This indicates that the logical port owns the mac + This indicates that the logical port owns the mac address and 1 IPv4 address and 1 IPv6 address. unknown - This indicates that the logical port has an unknown set - of Ethernet addresses. When an OVN logical switch - processes a unicast Ethernet frame whose destination MAC + This indicates that the logical port has an unknown set + of Ethernet addresses. When an OVN logical switch + processes a unicast Ethernet frame whose destination MAC address is not in any logical port’s addresses column, it - delivers it to the port (or ports) whose addresses + delivers it to the port (or ports) whose addresses columns include unknown. dynamic Use dynamic to make ovn-northd generate a globally unique MAC address, choose an unused IPv4 address with the logi‐ - cal port’s subnet (if other_config:subnet is set in the + cal port’s subnet (if other_config:subnet is set in the port’s Logical_Switch), and generate an IPv6 address from - the MAC address (if other_config:ipv6_prefix is set in - the port’s Logical_Switch) and store them in the port’s + the MAC address (if other_config:ipv6_prefix is set in + the port’s Logical_Switch) and store them in the port’s dynamic_addresses column. - Only one element containing dynamic may appear in ad‐‐ + Only one element containing dynamic may appear in ad‐‐ dresses. dynamic ip dynamic ipv6 dynamic ip ipv6 These act like dynamic alone but specify particular IPv4 or - IPv6 addresses to use. OVN IPAM will still automatically + IPv6 addresses to use. OVN IPAM will still automatically allocate the other address if configured appropriately. Ex‐ ample: dynamic 192.168.0.1 2001::1. mac dynamic This acts like dynamic alone but specifies a particular MAC - address to use. OVN IPAM will still automatically allocate - IPv4 or IPv6 addresses, or both, if configured appropri‐ + address to use. OVN IPAM will still automatically allocate + IPv4 or IPv6 addresses, or both, if configured appropri‐ ately. Example: 80:fa:5b:06:72:b7 dynamic router - Accepted only when type is router. This indicates that the - Ethernet, IPv4, and IPv6 addresses for this logical switch - port should be obtained from the connected logical router + Accepted only when type is router. This indicates that the + Ethernet, IPv4, and IPv6 addresses for this logical switch + port should be obtained from the connected logical router port, as specified by router-port in options. - The resulting addresses are used to populate the logical - switch’s destination lookup, and also for the logical + The resulting addresses are used to populate the logical + switch’s destination lookup, and also for the logical switch to generate ARP and ND replies. - If the connected logical router port has a distributed - gateway port specified and the logical router has rules - specified in nat with external_mac, then those addresses + If the connected logical router port has a distributed + gateway port specified and the logical router has rules + specified in nat with external_mac, then those addresses are also used to populate the switch’s destination lookup. - Supported only in OVN 2.7 and later. Earlier versions re‐ + Supported only in OVN 2.7 and later. Earlier versions re‐ quired router addresses to be manually synchronized. dynamic_addresses: optional string Addresses assigned to the logical port by ovn-northd, if dynamic - is specified in addresses. Addresses will be of the same format - as those that populate the addresses column. Note that dynami‐ - cally assigned addresses are constructed and managed locally in - ovn-northd, so they cannot be reconstructed in the event that + is specified in addresses. Addresses will be of the same format + as those that populate the addresses column. Note that dynami‐ + cally assigned addresses are constructed and managed locally in + ovn-northd, so they cannot be reconstructed in the event that the database is lost. port_security: set of strings - This column controls the addresses from which the host attached - to the logical port (``the host’’) is allowed to send packets + This column controls the addresses from which the host attached + to the logical port (``the host’’) is allowed to send packets and to which it is allowed to receive packets. If this column is empty, all addresses are permitted. - Each element in the set must begin with one Ethernet address. + Each element in the set must begin with one Ethernet address. This would restrict the host to sending packets from and receiv‐ - ing packets to the ethernet addresses defined in the logical - port’s port_security column. It also restricts the inner source - MAC addresses that the host may send in ARP and IPv6 Neighbor + ing packets to the ethernet addresses defined in the logical + port’s port_security column. It also restricts the inner source + MAC addresses that the host may send in ARP and IPv6 Neighbor Discovery packets. The host is always allowed to receive packets to multicast and broadcast Ethernet addresses. - Each element in the set may additionally contain one or more + Each element in the set may additionally contain one or more IPv4 or IPv6 addresses (or both), with optional masks. If a mask - is given, it must be a CIDR mask. In addition to the restric‐ - tions described for Ethernet addresses above, such an element - restricts the IPv4 or IPv6 addresses from which the host may - send and to which it may receive packets to the specified ad‐ - dresses. A masked address, if the host part is zero, indicates - that the host is allowed to use any address in the subnet; if - the host part is nonzero, the mask simply indicates the size of + is given, it must be a CIDR mask. In addition to the restric‐ + tions described for Ethernet addresses above, such an element + restricts the IPv4 or IPv6 addresses from which the host may + send and to which it may receive packets to the specified ad‐ + dresses. A masked address, if the host part is zero, indicates + that the host is allowed to use any address in the subnet; if + the host part is nonzero, the mask simply indicates the size of the subnet. In addition: • If any IPv4 address is given, the host is also allowed to - receive packets to the IPv4 local broadcast address + receive packets to the IPv4 local broadcast address 255.255.255.255 and to IPv4 multicast addresses - (224.0.0.0/4). If an IPv4 address with a mask is given, + (224.0.0.0/4). If an IPv4 address with a mask is given, the host is also allowed to receive packets to the broad‐ cast address in that specified subnet. - If any IPv4 address is given, the host is additionally - restricted to sending ARP packets with the specified + If any IPv4 address is given, the host is additionally + restricted to sending ARP packets with the specified source IPv4 address. (RARP is not restricted.) • If any IPv6 address is given, the host is also allowed to receive packets to IPv6 multicast addresses (ff00::/8). - If any IPv6 address is given, the host is additionally - restricted to sending IPv6 Neighbor Discovery Solicita‐ - tion or Advertisement packets with the specified source + If any IPv6 address is given, the host is additionally + restricted to sending IPv6 Neighbor Discovery Solicita‐ + tion or Advertisement packets with the specified source address or, for solicitations, the unspecified address. - If an element includes an IPv4 address, but no IPv6 addresses, + If an element includes an IPv4 address, but no IPv6 addresses, then IPv6 traffic is not allowed. If an element includes an IPv6 - address, but no IPv4 address, then IPv4 and ARP traffic is not + address, but no IPv4 address, then IPv4 and ARP traffic is not allowed. - This column uses the same lexical syntax as the match column in + This column uses the same lexical syntax as the match column in the OVN Southbound database’s Pipeline table. Multiple addresses within an element may be space or comma separated. - This column is provided as a convenience to cloud management - systems, but all of the features that it implements can be im‐ + This column is provided as a convenience to cloud management + systems, but all of the features that it implements can be im‐ plemented as ACLs using the ACL table. Examples: @@ -1524,52 +1529,52 @@ The host may send traffic from and receive traffic to the specified MAC address, and to receive traffic to Ethernet multicast and broadcast addresses, but not otherwise. The - host may not send ARP or IPv6 Neighbor Discovery packets - with inner source Ethernet addresses other than the one + host may not send ARP or IPv6 Neighbor Discovery packets + with inner source Ethernet addresses other than the one specified. 80:fa:5b:06:72:b7 192.168.1.10/24 - This adds further restrictions to the first example. The - host may send IPv4 packets from or receive IPv4 packets - to only 192.168.1.10, except that it may also receive + This adds further restrictions to the first example. The + host may send IPv4 packets from or receive IPv4 packets + to only 192.168.1.10, except that it may also receive IPv4 packets to 192.168.1.255 (based on the subnet mask), 255.255.255.255, and any address in 224.0.0.0/4. The host - may not send ARPs with a source Ethernet address other - than 80:fa:5b:06:72:b7 or source IPv4 address other than - 192.168.1.10. The host may not send or receive any IPv6 + may not send ARPs with a source Ethernet address other + than 80:fa:5b:06:72:b7 or source IPv4 address other than + 192.168.1.10. The host may not send or receive any IPv6 (including IPv6 Neighbor Discovery) traffic. "80:fa:5b:12:42:ba", "80:fa:5b:06:72:b7 192.168.1.10/24" The host may send traffic from and receive traffic to the specified MAC addresses, and to receive traffic to Ether‐ net multicast and broadcast addresses, but not otherwise. - With MAC 80:fa:5b:12:42:ba, the host may send traffic - from and receive traffic to any L3 address. With MAC + With MAC 80:fa:5b:12:42:ba, the host may send traffic + from and receive traffic to any L3 address. With MAC 80:fa:5b:06:72:b7, the host may send IPv4 packets from or receive IPv4 packets to only 192.168.1.10, except that it - may also receive IPv4 packets to 192.168.1.255 (based on - the subnet mask), 255.255.255.255, and any address in - 224.0.0.0/4. The host may not send or receive any IPv6 + may also receive IPv4 packets to 192.168.1.255 (based on + the subnet mask), 255.255.255.255, and any address in + 224.0.0.0/4. The host may not send or receive any IPv6 (including IPv6 Neighbor Discovery) traffic. DHCP: dhcpv4_options: optional weak reference to DHCP_Options - This column defines the DHCPv4 Options to be included by the - ovn-controller when it replies to the DHCPv4 requests. Please + This column defines the DHCPv4 Options to be included by the + ovn-controller when it replies to the DHCPv4 requests. Please see the DHCP_Options table. dhcpv6_options: optional weak reference to DHCP_Options - This column defines the DHCPv6 Options to be included by the - ovn-controller when it replies to the DHCPv6 requests. Please + This column defines the DHCPv6 Options to be included by the + ovn-controller when it replies to the DHCPv6 requests. Please see the DHCP_Options table. mirror_rules: set of weak reference to Mirrors - Mirror rules that apply to logical switch port which is the + Mirror rules that apply to logical switch port which is the source. Please see the Mirror table. ha_chassis_group: optional HA_Chassis_Group - References a row in the OVN Northbound database’s HA_Chas‐‐ + References a row in the OVN Northbound database’s HA_Chas‐‐ sis_Group table. It indicates the HA chassis group to use if the type is set to external. If type is not external, this column is ignored. @@ -1577,12 +1582,12 @@ Naming: external_ids : neutron:port_name: optional string - This column gives an optional human-friendly name for the port. - This name has no special meaning or purpose other than to pro‐ + This column gives an optional human-friendly name for the port. + This name has no special meaning or purpose other than to pro‐ vide convenience for human interaction with the northbound data‐ base. - Neutron copies this from its own port object’s name. (Neutron + Neutron copies this from its own port object’s name. (Neutron ports do are not assigned human-friendly names by default, so it will often be empty.) @@ -1590,13 +1595,13 @@ options : requested-tnl-key: optional string, containing an integer, in range 1 to 32,767 - Configures the port binding tunnel key for the port. Usually - this is not needed because ovn-northd will assign an unique key - for each port by itself. However, if it is configured, - ovn-northd honors the configured value. The typical use case is - for interconnection: the tunnel keys for ports on transit - switches need to be unique globally, so they are maintained in - the global OVN_IC_Southbound database, and ovn-ic simply syncs + Configures the port binding tunnel key for the port. Usually + this is not needed because ovn-northd will assign an unique key + for each port by itself. However, if it is configured, + ovn-northd honors the configured value. The typical use case is + for interconnection: the tunnel keys for ports on transit + switches need to be unique globally, so they are maintained in + the global OVN_IC_Southbound database, and ovn-ic simply syncs the value from OVN_IC_Southbound through this config. Common Columns: @@ -1604,7 +1609,7 @@ external_ids: map of string-string pairs See External IDs at the beginning of this document. - The ovn-northd program copies all these pairs into the exter‐‐ + The ovn-northd program copies all these pairs into the exter‐‐ nal_ids column of the Port_Binding table in OVN_Southbound data‐ base. @@ -1622,8 +1627,8 @@ Details: name: string - A name for the forwarding group. This name has no special mean‐ - ing or purpose other than to provide convenience for human in‐ + A name for the forwarding group. This name has no special mean‐ + ing or purpose other than to provide convenience for human in‐ teraction with the ovn-nb database. vip: string @@ -1646,19 +1651,19 @@ See External IDs at the beginning of this document. Address_Set TABLE - Each row in this table represents a named set of addresses. An address + Each row in this table represents a named set of addresses. An address set may contain Ethernet, IPv4, or IPv6 addresses with optional bitwise - or CIDR masks. Address set may ultimately be used in ACLs to compare - against fields such as ip4.src or ip6.src. A single address set must - contain addresses of the same type. As an example, the following would + or CIDR masks. Address set may ultimately be used in ACLs to compare + against fields such as ip4.src or ip6.src. A single address set must + contain addresses of the same type. As an example, the following would create an address set with three IP addresses: ovn-nbctl create Address_Set name=set1 addresses=’’10.0.0.1 10.0.0.2 10.0.0.3’’ Address sets may be used in the match column of the ACL table. For syn‐ - tax information, see the details of the expression language used for - the match column in the Logical_Flow table of the OVN_Southbound data‐ + tax information, see the details of the expression language used for + the match column in the Logical_Flow table of the OVN_Southbound data‐ base. Summary: @@ -1669,7 +1674,7 @@ Details: name: string (must be unique within table) - A name for the address set. Names are ASCII and must match + A name for the address set. Names are ASCII and must match [a-zA-Z_.][a-zA-Z_.0-9]*. addresses: set of strings @@ -1681,27 +1686,27 @@ See External IDs at the beginning of this document. Port_Group TABLE - Each row in this table represents a named group of logical switch + Each row in this table represents a named group of logical switch ports. - Port groups may be used in the match column of the ACL table. For syn‐ - tax information, see the details of the expression language used for - the match column in the Logical_Flow table of the OVN_Southbound data‐ + Port groups may be used in the match column of the ACL table. For syn‐ + tax information, see the details of the expression language used for + the match column in the Logical_Flow table of the OVN_Southbound data‐ base. - For each port group, there are two address sets generated to the Ad‐‐ - dress_Set table of the OVN_Southbound database, containing the IP ad‐ - dresses of the group of ports, one for IPv4, and the other for IPv6, - with name being the name of the Port_Group followed by a suffix _ip4 - for IPv4 and _ip6 for IPv6. The generated address sets can be used in + For each port group, there are two address sets generated to the Ad‐‐ + dress_Set table of the OVN_Southbound database, containing the IP ad‐ + dresses of the group of ports, one for IPv4, and the other for IPv6, + with name being the name of the Port_Group followed by a suffix _ip4 + for IPv4 and _ip6 for IPv6. The generated address sets can be used in the same way as regular address sets in the match column of the ACL ta‐ ble. For syntax information, see the details of the expression language - used for the match column in the Logical_Flow table of the OVN_South‐‐ + used for the match column in the Logical_Flow table of the OVN_South‐‐ bound database. Summary: name string (must be unique within table) - ports set of weak reference to Logi‐‐ + ports set of weak reference to Logi‐‐ cal_Switch_Ports acls set of ACLs Common Columns: @@ -1709,16 +1714,16 @@ Details: name: string (must be unique within table) - A name for the port group. Names are ASCII and must match + A name for the port group. Names are ASCII and must match [a-zA-Z_.][a-zA-Z_.0-9]*. ports: set of weak reference to Logical_Switch_Ports The logical switch ports belonging to the group in uuids. acls: set of ACLs - Access control rules that apply to the port group. Applying an - ACL to a port group has the same effect as applying the ACL to - all logical lswitches that the ports of the port group belong + Access control rules that apply to the port group. Applying an + ACL to a port group has the same effect as applying the ACL to + all logical lswitches that the ports of the port group belong to. Common Columns: @@ -1736,7 +1741,7 @@ Health Checks: health_check set of Load_Balancer_Health_Checks ip_port_mappings map of string-string pairs - selection_fields set of strings, one of eth_dst, eth_src, + selection_fields set of strings, one of eth_dst, eth_src, ip_dst, ip_src, tp_dst, or tp_src Common Columns: external_ids map of string-string pairs @@ -1754,89 +1759,89 @@ Details: name: string - A name for the load balancer. This name has no special meaning - or purpose other than to provide convenience for human interac‐ + A name for the load balancer. This name has no special meaning + or purpose other than to provide convenience for human interac‐ tion with the ovn-nb database. vips: map of string-string pairs - A map of virtual IP addresses (and an optional port number with - : as a separator) associated with this load balancer and their - corresponding endpoint IP addresses (and optional port numbers + A map of virtual IP addresses (and an optional port number with + : as a separator) associated with this load balancer and their + corresponding endpoint IP addresses (and optional port numbers with : as separators) separated by commas. If the destination IP - address (and port number) of a packet leaving a container or a - VM matches the virtual IP address (and port number) provided - here as a key, then OVN will statefully replace the destination - IP address by one of the provided IP address (and port number) - in this map as a value. IPv4 and IPv6 addresses are supported - for load balancing; however a VIP of one address family may not - be mapped to a destination IP address of a different family. If + address (and port number) of a packet leaving a container or a + VM matches the virtual IP address (and port number) provided + here as a key, then OVN will statefully replace the destination + IP address by one of the provided IP address (and port number) + in this map as a value. IPv4 and IPv6 addresses are supported + for load balancing; however a VIP of one address family may not + be mapped to a destination IP address of a different family. If specifying an IPv6 address with a port, the address portion must - be enclosed in square brackets. Examples for keys are + be enclosed in square brackets. Examples for keys are "192.168.1.4" and "[fd0f::1]:8800". Examples for value are "10.0.0.1, 10.0.0.2" and "20.0.0.10:8800, 20.0.0.11:8800". - When the Load_Balancer is added to the logical_switch, the VIP - has to be in a different subnet than the one used for the logi‐‐ - cal_switch. Since VIP is in a different subnet, you should con‐ - nect your logical switch to either a OVN logical router or a - real router (this is because the client can now send a packet - with VIP as the destination IP address and router’s mac address + When the Load_Balancer is added to the logical_switch, the VIP + has to be in a different subnet than the one used for the logi‐‐ + cal_switch. Since VIP is in a different subnet, you should con‐ + nect your logical switch to either a OVN logical router or a + real router (this is because the client can now send a packet + with VIP as the destination IP address and router’s mac address as the destination MAC address). protocol: optional string, one of sctp, tcp, or udp - Valid protocols are tcp, udp, or sctp. This column is useful - when a port number is provided as part of the vips column. If - this column is empty and a port number is provided as part of + Valid protocols are tcp, udp, or sctp. This column is useful + when a port number is provided as part of the vips column. If + this column is empty and a port number is provided as part of vips column, OVN assumes the protocol to be tcp. Health Checks: - OVN supports health checks for load balancer endpoints. When health + OVN supports health checks for load balancer endpoints. When health checks are enabled, the load balancer uses only healthy endpoints. - Suppose that vips contains a key-value pair - 10.0.0.10:80=10.0.0.4:8080,20.0.0.4:8080. To enable health checks for - this virtual’s endpoints, add two key-value pairs to ip_port_mappings, + Suppose that vips contains a key-value pair + 10.0.0.10:80=10.0.0.4:8080,20.0.0.4:8080. To enable health checks for + this virtual’s endpoints, add two key-value pairs to ip_port_mappings, with keys 10.0.0.4 and 20.0.0.4, and add to health_check a reference to - a Load_Balancer_Health_Check row whose vip is set to 10.0.0.10. The + a Load_Balancer_Health_Check row whose vip is set to 10.0.0.10. The same approach can be used for IPv6 as well. health_check: set of Load_Balancer_Health_Checks Load balancer health checks associated with this load balancer. ip_port_mappings: map of string-string pairs - Maps from endpoint IP to a colon-separated pair of logical port - name and source IP, e.g. port_name:sourc_ip for IPv4. Health - checks are sent to this port with the specified source IP. For - IPv6 square brackets must be used around IP address, e.g: + Maps from endpoint IP to a colon-separated pair of logical port + name and source IP, e.g. port_name:sourc_ip for IPv4. Health + checks are sent to this port with the specified source IP. For + IPv6 square brackets must be used around IP address, e.g: port_name:[sourc_ip] - For example, in the example above, IP to port mappings might be - defined as 10.0.0.4=sw0-p1:10.0.0.2 and - 20.0.0.4=sw1-p1:20.0.0.2, if the values given were suitable + For example, in the example above, IP to port mappings might be + defined as 10.0.0.4=sw0-p1:10.0.0.2 and + 20.0.0.4=sw1-p1:20.0.0.2, if the values given were suitable ports and IP addresses. - For IPv6 IP to port mappings might be defined as + For IPv6 IP to port mappings might be defined as [2001::1]=sw0-p1:[2002::1]. selection_fields: set of strings, one of eth_dst, eth_src, ip_dst, ip_src, tp_dst, or tp_src - OVN native load balancers are supported using the OpenFlow - groups of type select. OVS supports two selection methods: - dp_hash and hash (with optional fields specified) in selecting - the buckets of a group. Please see the OVS documentation (man - ovs-ofctl) for more details on the selection methods. Each end‐ - point IP (and port if set) is mapped to a bucket in the group + OVN native load balancers are supported using the OpenFlow + groups of type select. OVS supports two selection methods: + dp_hash and hash (with optional fields specified) in selecting + the buckets of a group. Please see the OVS documentation (man + ovs-ofctl) for more details on the selection methods. Each end‐ + point IP (and port if set) is mapped to a bucket in the group flow. - CMS can choose the hash selection method by setting the selec‐ - tion fields in this column. ovs-vswitchd uses the specified + CMS can choose the hash selection method by setting the selec‐ + tion fields in this column. ovs-vswitchd uses the specified fields in generating the hash. dp_hash selection method uses the assistance of datapath to cal‐ culate the hash and it is expected to be faster than hash selec‐ - tion method. So CMS should take this into consideration before - using the hash method. Please consult the OVS documentation and + tion method. So CMS should take this into consideration before + using the hash method. Please consult the OVS documentation and OVS sources for the implementation details. Common Columns: @@ -1847,53 +1852,53 @@ Load_Balancer options: options : reject: optional string, either true or false - If the load balancer is created with --reject option and it has - no active backends, a TCP reset segment (for tcp) or an ICMP - port unreachable packet (for all other kind of traffic) will be - sent whenever an incoming packet is received for this load-bal‐ - ancer. Please note using --reject option will disable empty_lb + If the load balancer is created with --reject option and it has + no active backends, a TCP reset segment (for tcp) or an ICMP + port unreachable packet (for all other kind of traffic) will be + sent whenever an incoming packet is received for this load-bal‐ + ancer. Please note using --reject option will disable empty_lb SB controller event for this load balancer. options : hairpin_snat_ip: optional string - IP to be used as source IP for packets that have been hair- - pinned after load balancing. The default behavior when the op‐ - tion is not set is to use the load balancer VIP as source IP. + IP to be used as source IP for packets that have been hair- + pinned after load balancing. The default behavior when the op‐ + tion is not set is to use the load balancer VIP as source IP. This option may have exactly one IPv4 and/or one IPv6 address on it, separated by a space character. options : skip_snat: optional string - If the load balancing rule is configured with skip_snat option, - the option lb_force_snat_ip configured for the logical router - that references this load balancer will not be applied for this + If the load balancing rule is configured with skip_snat option, + the option lb_force_snat_ip configured for the logical router + that references this load balancer will not be applied for this load balancer. options : add_route: optional string - If set to true, then neighbor routers will have logical flows - added that will allow for routing to the VIP IP. It also will + If set to true, then neighbor routers will have logical flows + added that will allow for routing to the VIP IP. It also will have ARP resolution logical flows added. By setting this option, - it means there is no reason to create a Logical_Router_Sta‐‐ - tic_Route from neighbor routers to this NAT address. It also - means that no ARP request is required for neighbor routers to - learn the IP-MAC mapping for this VIP IP. For more information - about what flows are added for IP routes, please see the + it means there is no reason to create a Logical_Router_Sta‐‐ + tic_Route from neighbor routers to this NAT address. It also + means that no ARP request is required for neighbor routers to + learn the IP-MAC mapping for this VIP IP. For more information + about what flows are added for IP routes, please see the ovn-northd manpage section on IP Routing. options : neighbor_responder: optional string - If set to all, then routers on which the load balancer is ap‐ - plied reply to ARP/neighbor discovery requests for all VIPs of - the load balancer. If set to reachable, then routers on which + If set to all, then routers on which the load balancer is ap‐ + plied reply to ARP/neighbor discovery requests for all VIPs of + the load balancer. If set to reachable, then routers on which the load balancer is applied reply to ARP/neighbor discovery re‐ - quests only for VIPs that are part of a router’s subnet. If set - to none, then routers on which the load balancer is applied - never reply to ARP/neighbor discovery requests for any of the + quests only for VIPs that are part of a router’s subnet. If set + to none, then routers on which the load balancer is applied + never reply to ARP/neighbor discovery requests for any of the load balancer VIPs. Load balancers with options:template=true do not support reachable as a valid mode. The default value of this - option, if not specified, is reachable for regular load bal‐ + option, if not specified, is reachable for regular load bal‐ ancers and none for template load balancers. options : template: optional string - Option to be set to true, if the load balancer is a template. - The load balancer VIPs and backends must be using Chassis_Tem‐‐ + Option to be set to true, if the load balancer is a template. + The load balancer VIPs and backends must be using Chassis_Tem‐‐ plate_Var in their definitions. Load balancer template VIP supported formats are: @@ -1901,7 +1906,7 @@ ^VIP_VAR[:^PORT_VAR|:port] - where VIP_VAR and PORT_VAR are keys of the Chassis_Template_Var + where VIP_VAR and PORT_VAR are keys of the Chassis_Template_Var variables records. Note: The VIP and PORT cannot be combined into a single template @@ -1915,34 +1920,34 @@ ^BACKENDS_VAR1,^BACKENDS_VAR2 - where BACKEND_VAR1, PORT_VAR1, BACKEND_VAR2, PORT_VAR2, BACK‐‐ + where BACKEND_VAR1, PORT_VAR1, BACKEND_VAR2, PORT_VAR2, BACK‐‐ ENDS_VAR1 and BACKENDS_VAR2 are keys of the Chassis_Template_Var variables records. options : address-family: optional string - Address family used by the load balancer. Supported values are - ipv4 and ipv6. The address-family is only used for load bal‐ - ancers with options:template=true. For explicit load balancers, + Address family used by the load balancer. Supported values are + ipv4 and ipv6. The address-family is only used for load bal‐ + ancers with options:template=true. For explicit load balancers, setting the address-family has no effect. options : affinity_timeout: optional string - If the CMS provides a positive value (in seconds) for affin‐‐ - ity_timeout, OVN will dnat connections received from the same - client to this lb to the same backend if received in the affin‐ + If the CMS provides a positive value (in seconds) for affin‐‐ + ity_timeout, OVN will dnat connections received from the same + client to this lb to the same backend if received in the affin‐ ity timeslot. Max supported affinity_timeout is 65535 seconds. options : ct_flush: optional string, either true or false - The value indicates whether ovn-controller should flush CT en‐ - tries that are related to this LB. The flush happens if the LB - is removed, any of the backends is updated/removed or the LB is - not considered local anymore by the ovn-controller. This option + The value indicates whether ovn-controller should flush CT en‐ + tries that are related to this LB. The flush happens if the LB + is removed, any of the backends is updated/removed or the LB is + not considered local anymore by the ovn-controller. This option is set to false by default. Load_Balancer_Group TABLE - Each row represents a logical grouping of load balancers. It is up to - the CMS to decide the criteria on which load balancers are grouped to‐ - gether. To simplify configuration and to optimize its processing load - balancers that must be associated to the same set of logical switches + Each row represents a logical grouping of load balancers. It is up to + the CMS to decide the criteria on which load balancers are grouped to‐ + gether. To simplify configuration and to optimize its processing load + balancers that must be associated to the same set of logical switches and/or logical routers should be grouped together. Summary: @@ -1951,8 +1956,8 @@ Details: name: string (must be unique within table) - A name for the load balancer group. This name has no special - meaning or purpose other than to provide convenience for human + A name for the load balancer group. This name has no special + meaning or purpose other than to provide convenience for human interaction with the ovn-nb database. load_balancer: set of weak reference to Load_Balancers @@ -1997,11 +2002,11 @@ See External IDs at the beginning of this document. ACL TABLE - Each row in this table represents one ACL rule for a logical switch or + Each row in this table represents one ACL rule for a logical switch or a port group that points to it through its acls column. The action col‐ - umn for the highest-priority matching row in this table determines a - packet’s treatment. If no row matches, packets are allowed by default. - (Default-deny treatment is possible: add a rule with priority 0, 1 as + umn for the highest-priority matching row in this table determines a + packet’s treatment. If no row matches, packets are allowed by default. + (Default-deny treatment is possible: add a rule with priority 0, 1 as match, and deny as action.) Summary: @@ -2010,16 +2015,16 @@ direction string, either from-lport or to-lport match string action string, one of allow-related, al‐‐ - low-stateless, allow, drop, pass, or re‐‐ + low-stateless, allow, drop, pass, or re‐‐ ject tier integer, in range 0 to 3 options: options : apply-after-lb optional string Logging: log boolean - name optional string, at most 63 characters + name optional string, at most 63 characters long - severity optional string, one of alert, debug, + severity optional string, one of alert, debug, info, notice, or warning meter optional string Common Columns: @@ -2030,26 +2035,26 @@ Details: label: integer, in range 0 to 4,294,967,295 - Associates an identifier with the ACL. The same value will be - written to corresponding connection tracker entry. The value - should be a valid 32-bit unsigned integer. This value can help - in debugging from connection tracker side. For example, through + Associates an identifier with the ACL. The same value will be + written to corresponding connection tracker entry. The value + should be a valid 32-bit unsigned integer. This value can help + in debugging from connection tracker side. For example, through this "label" we can backtrack to the ACL rule which is causing a "leaked" connection. Connection tracker entries are created only for allowed connections so the label is valid only for allow and allow-related actions. priority: integer, in range 0 to 32,767 - The ACL rule’s priority. Rules with numerically higher priority + The ACL rule’s priority. Rules with numerically higher priority take precedence over those with lower. If two ACL rules with the - same priority both match, then the one actually applied to a + same priority both match, then the one actually applied to a packet is undefined. - Return traffic from an allow-related flow is always allowed and + Return traffic from an allow-related flow is always allowed and cannot be changed through an ACL. - allow-stateless flows always take precedence before stateful - ACLs, regardless of their priority. (Both allow and allow-re‐‐ + allow-stateless flows always take precedence before stateful + ACLs, regardless of their priority. (Both allow and allow-re‐‐ lated ACLs can be stateful.) direction: string, either from-lport or to-lport @@ -2059,74 +2064,74 @@ from a logical port. These rules are applied to the logi‐ cal switch’s ingress pipeline. - • to-lport: Used to implement filters on traffic forwarded + • to-lport: Used to implement filters on traffic forwarded to a logical port. These rules are applied to the logical switch’s egress pipeline. match: string - The packets that the ACL should match, in the same expression - language used for the match column in the OVN Southbound data‐ - base’s Logical_Flow table. The outport logical port is only - available in the to-lport direction (the inport is available in + The packets that the ACL should match, in the same expression + language used for the match column in the OVN Southbound data‐ + base’s Logical_Flow table. The outport logical port is only + available in the to-lport direction (the inport is available in both directions). - By default all traffic is allowed. When writing a more restric‐ - tive policy, it is important to remember to allow flows such as + By default all traffic is allowed. When writing a more restric‐ + tive policy, it is important to remember to allow flows such as ARP and IPv6 neighbor discovery packets. - Note that you can not create an ACL matching on a port with + Note that you can not create an ACL matching on a port with type=router or type=localnet. action: string, one of allow-related, allow-stateless, allow, drop, pass, or reject The action to take when the ACL rule matches: - • allow-stateless: Always forward the packet in stateless - manner, omitting connection tracking mechanism, regard‐ - less of other rules defined for the switch. May require - defining additional rules for inbound replies. For exam‐ - ple, if you define a rule to allow outgoing TCP traffic + • allow-stateless: Always forward the packet in stateless + manner, omitting connection tracking mechanism, regard‐ + less of other rules defined for the switch. May require + defining additional rules for inbound replies. For exam‐ + ple, if you define a rule to allow outgoing TCP traffic directed to an IP address, then you probably also want to - define another rule to allow incoming TCP traffic coming - from this same IP address. In addition, traffic that + define another rule to allow incoming TCP traffic coming + from this same IP address. In addition, traffic that matches stateless ACLs will bypass load-balancer DNAT/un- - DNAT processing. Stateful ACLs should be used instead if + DNAT processing. Stateful ACLs should be used instead if the traffic is supposed to be load-balanced. - • allow: Forward the packet. It will also send the packets - through connection tracking when allow-related rules ex‐ - ist on the logical switch. Otherwise, it’s equivalent to + • allow: Forward the packet. It will also send the packets + through connection tracking when allow-related rules ex‐ + ist on the logical switch. Otherwise, it’s equivalent to allow-stateless. - • allow-related: Forward the packet and related traffic + • allow-related: Forward the packet and related traffic (e.g. inbound replies to an outbound connection). • drop: Silently drop the packet. - • reject: Drop the packet, replying with a RST for TCP or - ICMPv4/ICMPv6 unreachable message for other + • reject: Drop the packet, replying with a RST for TCP or + ICMPv4/ICMPv6 unreachable message for other IPv4/IPv6-based protocols. - • pass: Pass to the next ACL tier. If using multiple ACL - tiers, a match on this ACL will stop evaluating ACLs at - the current tier and move to the next one. If not using - ACL tiers or if a pass ACL is matched at the final tier, - then the options:default_acl_drop option from the + • pass: Pass to the next ACL tier. If using multiple ACL + tiers, a match on this ACL will stop evaluating ACLs at + the current tier and move to the next one. If not using + ACL tiers or if a pass ACL is matched at the final tier, + then the options:default_acl_drop option from the NB_Global table is used to determine how to proceed. tier: integer, in range 0 to 3 The hierarchical tier that this ACL belongs to. - ACLs can be assigned to numerical tiers. When evaluating ACLs, - an internal counter is used to determine which tier of ACLs + ACLs can be assigned to numerical tiers. When evaluating ACLs, + an internal counter is used to determine which tier of ACLs should be evaluated. Tier 0 ACLs are evaluated first. If no ver‐ - dict can be determined, then tier 1 ACLs are evaluated next. - This continues until the maximum tier value is reached. If all - tiers of ACLs are evaluated and no verdict is reached, then the - options:default_acl_drop option from table NB_Global is used to + dict can be determined, then tier 1 ACLs are evaluated next. + This continues until the maximum tier value is reached. If all + tiers of ACLs are evaluated and no verdict is reached, then the + options:default_acl_drop option from table NB_Global is used to determine how to proceed. - In this version of OVN, the maximum tier value for ACLs is 3, + In this version of OVN, the maximum tier value for ACLs is 3, meaning there are 4 tiers of ACLs allowed (0-3). options: @@ -2134,70 +2139,70 @@ ACLs options. options : apply-after-lb: optional string - If set to true, the ACL will be applied after load balancing + If set to true, the ACL will be applied after load balancing stage. Supported only for from-lport direction. - The main use case of this option is to support ACLs matching on - the destination IP address of the packet for the backend IPs of + The main use case of this option is to support ACLs matching on + the destination IP address of the packet for the backend IPs of load balancers. - OVN will apply the from-lport ACLs in two stages. ACLs without - this option apply-after-lb set, will be applied before the load + OVN will apply the from-lport ACLs in two stages. ACLs without + this option apply-after-lb set, will be applied before the load balancer stage and ACLs with this option set will be applied af‐ - ter the load balancer stage. The priorities are indepedent be‐ - tween these stages and may not be obvious to the CMS. Hence CMS - should be extra careful when using this option and should care‐ - fully evaluate the priorities of all the ACLs and the default + ter the load balancer stage. The priorities are indepedent be‐ + tween these stages and may not be obvious to the CMS. Hence CMS + should be extra careful when using this option and should care‐ + fully evaluate the priorities of all the ACLs and the default deny/allow ACLs if any. Logging: - These columns control whether and how OVN logs packets that match an + These columns control whether and how OVN logs packets that match an ACL. log: boolean - If set to true, packets that match the ACL will trigger a log + If set to true, packets that match the ACL will trigger a log message on the transport node or nodes that perform ACL process‐ ing. Logging may be combined with any action. - If set to false, the remaining columns in this group have no + If set to false, the remaining columns in this group have no significance. name: optional string, at most 63 characters long - This name, if it is provided, is included in log records. It + This name, if it is provided, is included in log records. It provides the administrator and the cloud management system a way to associate a log record with a particular ACL. severity: optional string, one of alert, debug, info, notice, or warn‐‐ ing The severity of the ACL. The severity levels match those of sys‐ - log, in decreasing level of severity: alert, warning, notice, + log, in decreasing level of severity: alert, warning, notice, info, or debug. When the column is empty, the default is info. meter: optional string - The name of a meter to rate-limit log messages for the ACL. The - string must match the name column of a row in the Meter table. - By default, log messages are not rate-limited. In order to en‐ - sure that the same Meter rate limits multiple ACL logs sepa‐ + The name of a meter to rate-limit log messages for the ACL. The + string must match the name column of a row in the Meter table. + By default, log messages are not rate-limited. In order to en‐ + sure that the same Meter rate limits multiple ACL logs sepa‐ rately, set the fair column. Common Columns: options: map of string-string pairs - This column provides general key/value settings. The supported + This column provides general key/value settings. The supported options are described individually below. ACL configuration options: options : log-related: optional string If set to true, then log when reply or related traffic is admit‐ - ted from a stateful ACL. In order for this option to function, - the log option must be set to true and a label must be set, and - it must be unique to the ACL. The label is necessary as it is - the only means to associate the reply traffic with the ACL to + ted from a stateful ACL. In order for this option to function, + the log option must be set to true and a label must be set, and + it must be unique to the ACL. The label is necessary as it is + the only means to associate the reply traffic with the ACL to which it belongs. It must be unique, because otherwise it is am‐ - biguous which ACL will be matched. Note: If this option is en‐ - abled, an extra flow is installed in order to log the related + biguous which ACL will be matched. Note: If this option is en‐ + abled, an extra flow is installed in order to log the related traffic. Therefore, if this is enabled on all ACLs, then the to‐ tal number of flows necessary to log the ACL traffic is doubled, compared to if this option is not enabled. @@ -2232,9 +2237,9 @@ options : always_learn_from_arp_request optional string, either true or false options : requested-tnl-key - optional string, containing an integer, + optional string, containing an integer, in range 1 to 16,777,215 - options : snat-ct-zone optional string, containing an integer, + options : snat-ct-zone optional string, containing an integer, in range 0 to 65,535 options : mac_binding_age_threshold optional string @@ -2252,18 +2257,18 @@ Zero or more routing policies for the router. enabled: optional boolean - This column is used to administratively set router state. If - this column is empty or is set to true, the router is enabled. - If this column is set to false, the router is disabled. A dis‐ + This column is used to administratively set router state. If + this column is empty or is set to true, the router is enabled. + If this column is set to false, the router is disabled. A dis‐ abled router has all ingress and egress traffic dropped. nat: set of NATs - One or more NAT rules for the router. NAT rules only work on - Gateway routers, and on distributed routers with one and only + One or more NAT rules for the router. NAT rules only work on + Gateway routers, and on distributed routers with one and only one distributed gateway port. load_balancer: set of weak reference to Load_Balancers - Set of load balancers associated to this logical router. Load + Set of load balancers associated to this logical router. Load balancer Load balancer rules only work on the Gateway routers or routers with one and only one distributed gateway port. @@ -2274,14 +2279,14 @@ These columns provide names for the logical router. From OVN’s perspec‐ tive, these names have no special meaning or purpose other than to pro‐ - vide convenience for human interaction with the northbound database. - There is no requirement for the name to be unique. (For a unique iden‐ + vide convenience for human interaction with the northbound database. + There is no requirement for the name to be unique. (For a unique iden‐ tifier for a logical router, use its row UUID.) (Originally, name was intended to serve the purpose of a human-friendly - name, but the Neutron integration used it to uniquely identify its own - router object, in the format neutron-uuid. Later on, Neutron started - propagating the friendly name of a router as external_ids:neu‐‐ + name, but the Neutron integration used it to uniquely identify its own + router object, in the format neutron-uuid. Later on, Neutron started + propagating the friendly name of a router as external_ids:neu‐‐ tron:router_name. Perhaps this can be cleaned up someday.) name: string @@ -2301,25 +2306,25 @@ options : chassis: optional string If set, indicates that the logical router in question is a Gate‐ - way router (which is centralized) and resides in the set chas‐ - sis. The same value is also used by ovn-controller to uniquely + way router (which is centralized) and resides in the set chas‐ + sis. The same value is also used by ovn-controller to uniquely identify the chassis in the OVN deployment and comes from exter‐‐ - nal_ids:system-id in the Open_vSwitch table of Open_vSwitch + nal_ids:system-id in the Open_vSwitch table of Open_vSwitch database. The Gateway router can only be connected to a distributed router - via a switch if SNAT and DNAT are to be configured in the Gate‐ + via a switch if SNAT and DNAT are to be configured in the Gate‐ way router. options : dnat_force_snat_ip: optional string - If set, indicates a set of IP addresses to use to force SNAT a - packet that has already been DNATed in the gateway router. When - multiple gateway routers are configured, a packet can poten‐ - tially enter any of the gateway router, get DNATted and eventu‐ + If set, indicates a set of IP addresses to use to force SNAT a + packet that has already been DNATed in the gateway router. When + multiple gateway routers are configured, a packet can poten‐ + tially enter any of the gateway router, get DNATted and eventu‐ ally reach the logical switch port. For the return traffic to go - back to the same gateway router (for unDNATing), the packet + back to the same gateway router (for unDNATing), the packet needs a SNAT in the first place. This can be achieved by setting - the above option with a gateway specific set of IP addresses. + the above option with a gateway specific set of IP addresses. This option may have exactly one IPv4 and/or one IPv6 address on it, separated by a a space. @@ -2327,113 +2332,113 @@ If set, this option can take two possible type of values. Either a set of IP addresses or the string value - router_ip. - If a set of IP addresses are configured, it indicates to use to - force SNAT a packet that has already been load-balanced in the - gateway router. When multiple gateway routers are configured, a - packet can potentially enter any of the gateway routers, get - DNATted as part of the load-balancing and eventually reach the - logical switch port. For the return traffic to go back to the - same gateway router (for unDNATing), the packet needs a SNAT in - the first place. This can be achieved by setting the above op‐ - tion with a gateway specific set of IP addresses. This option - may have exactly one IPv4 and/or one IPv6 address on it, sepa‐ + If a set of IP addresses are configured, it indicates to use to + force SNAT a packet that has already been load-balanced in the + gateway router. When multiple gateway routers are configured, a + packet can potentially enter any of the gateway routers, get + DNATted as part of the load-balancing and eventually reach the + logical switch port. For the return traffic to go back to the + same gateway router (for unDNATing), the packet needs a SNAT in + the first place. This can be achieved by setting the above op‐ + tion with a gateway specific set of IP addresses. This option + may have exactly one IPv4 and/or one IPv6 address on it, sepa‐ rated by a space character. If it is configured with the value router_ip, then the load bal‐ - anced packet is SNATed with the IP of router port (attached to + anced packet is SNATed with the IP of router port (attached to the gateway router) selected as the destination after taking the routing decision. options : mcast_relay: optional string, either true or false - Enables/disables IP multicast relay between logical switches + Enables/disables IP multicast relay between logical switches connected to the logical router. Default: False. options : dynamic_neigh_routers: optional string, either true or false - If set to true, the router will resolve neighbor routers’ MAC - addresses only by dynamic ARP/ND, instead of prepopulating sta‐ - tic mappings for all neighbor routers in the ARP/ND Resolution - stage. This reduces number of flows, but requires ARP/ND mes‐ + If set to true, the router will resolve neighbor routers’ MAC + addresses only by dynamic ARP/ND, instead of prepopulating sta‐ + tic mappings for all neighbor routers in the ARP/ND Resolution + stage. This reduces number of flows, but requires ARP/ND mes‐ sages to resolve the IP-MAC bindings when needed. It is false by default. It is recommended to set to true when a large number of - logical routers are connected to the same logical switch but - most of them never need to send traffic between each other. By - default, ovn-northd does not create mappings to NAT and load + logical routers are connected to the same logical switch but + most of them never need to send traffic between each other. By + default, ovn-northd does not create mappings to NAT and load balancer addresess. However, for NAT and load balancer addresses - that have the add_route option added, ovn-northd will create + that have the add_route option added, ovn-northd will create logical flows that map NAT and load balancer IP addresses to the - appropriate MAC address. Setting dynamic_neigh_routers to true + appropriate MAC address. Setting dynamic_neigh_routers to true will prevent the automatic creation of these logical flows. options : always_learn_from_arp_request: optional string, either true or false - This option controls the behavior when handling IPv4 ARP re‐ - quests or IPv6 ND-NS packets - whether a dynamic neighbor (MAC + This option controls the behavior when handling IPv4 ARP re‐ + quests or IPv6 ND-NS packets - whether a dynamic neighbor (MAC binding) entry is added/updated. - true - Always learn the MAC-IP binding, and add/update the MAC + true - Always learn the MAC-IP binding, and add/update the MAC binding entry. - false - If there is a MAC binding for that IP and the MAC is - different, or, if TPA of ARP request belongs to any router port - on this router, then update/add that MAC-IP binding. Otherwise, + false - If there is a MAC binding for that IP and the MAC is + different, or, if TPA of ARP request belongs to any router port + on this router, then update/add that MAC-IP binding. Otherwise, don’t update/add entries. - It is true by default. It is recommended to set to false when a - large number of logical routers are connected to the same logi‐ - cal switch but most of them never need to send traffic between + It is true by default. It is recommended to set to false when a + large number of logical routers are connected to the same logi‐ + cal switch but most of them never need to send traffic between each other, to reduce the size of the MAC binding table. options : requested-tnl-key: optional string, containing an integer, in range 1 to 16,777,215 - Configures the datapath tunnel key for the logical router. This - is not needed because ovn-northd will assign an unique key for - each datapath by itself. However, if it is configured, + Configures the datapath tunnel key for the logical router. This + is not needed because ovn-northd will assign an unique key for + each datapath by itself. However, if it is configured, ovn-northd honors the configured value. options : snat-ct-zone: optional string, containing an integer, in range 0 to 65,535 Use the requested conntrack zone for SNAT with this router. This - can be useful if egress traffic from the host running OVN comes - from both OVN and other sources. This way, OVN and the other + can be useful if egress traffic from the host running OVN comes + from both OVN and other sources. This way, OVN and the other sources can make use of the same conntrack zone. options : mac_binding_age_threshold: optional string - Specifies the MAC binding aging thresholds based on CIDRs, with + Specifies the MAC binding aging thresholds based on CIDRs, with the format: entry[;entry[...]], where each entry has the format: [cidr:]threshold • cidr: Can be either an IPv4 or IPv6 CIDR. - • threshold: Threshold value in seconds. MAC bindings with + • threshold: Threshold value in seconds. MAC bindings with IP addresses matching the specified CIDR that exceed this timeout will be automatically removed. - If an entry is provided without an CIDR (just the threshold + If an entry is provided without an CIDR (just the threshold value), it specifies the default threshold for MAC bindings that - don’t match any of the given CIDRs. If there are multiple de‐ - fault threshold entries in the option, the behavior is unde‐ + don’t match any of the given CIDRs. If there are multiple de‐ + fault threshold entries in the option, the behavior is unde‐ fined. - If there are multiple CIDRs matching a MAC binding IP, the one + If there are multiple CIDRs matching a MAC binding IP, the one with the longest prefix length takes effect. If there are multi‐ - ple entries with the same CIDR in the option, the behavior is + ple entries with the same CIDR in the option, the behavior is undefined. - If no matching CIDR is found for a MAC binding IP, and no de‐ + If no matching CIDR is found for a MAC binding IP, and no de‐ fault threshold is specified, the behavior defaults to the orig‐ inal: the binding will not be removed based on age. - The value can also default to an empty string, which means that - the aging threshold is disabled. Any string not in the above + The value can also default to an empty string, which means that + the aging threshold is disabled. Any string not in the above format is regarded as invalid and the aging is disabled. Example: 192.168.0.0/16:300;192.168.10.0/24:0;fe80::/10:600;1200 - This sets a threshold of 300 seconds for MAC bindings with IP + This sets a threshold of 300 seconds for MAC bindings with IP addresses in the 192.168.0.0/16 range, excluding the - 192.168.1.0/24 range (for which the aging is disabled), a - threshold of 600 seconds for MAC bindings with IP addresses in - the fe80::/10 IPv6 range, and a default threshold of 1200 sec‐ + 192.168.1.0/24 range (for which the aging is disabled), a + threshold of 600 seconds for MAC bindings with IP addresses in + the fe80::/10 IPv6 range, and a default threshold of 1200 sec‐ onds for all other MAC bindings. Common Columns: @@ -2442,53 +2447,53 @@ See External IDs at the beginning of this document. QoS TABLE - Each row in this table represents one QoS rule for a logical switch - that points to it through its qos_rules column. Two types of QoS are + Each row in this table represents one QoS rule for a logical switch + that points to it through its qos_rules column. Two types of QoS are supported: DSCP marking and metering. A match with the highest-priority - will have QoS applied to it. If the action column is specified, then - matching packets will have DSCP marking applied. If the bandwidth col‐ + will have QoS applied to it. If the action column is specified, then + matching packets will have DSCP marking applied. If the bandwidth col‐ umn is specified, then matching packets will have metering applied. ac‐‐ - tion and bandwidth are not exclusive, so both marking and metering by - defined for the same QoS entry. If no row matches, packets will not + tion and bandwidth are not exclusive, so both marking and metering by + defined for the same QoS entry. If no row matches, packets will not have any QoS applied. Summary: priority integer, in range 0 to 32,767 direction string, either from-lport or to-lport match string - action map of string-integer pairs, key either - dscp or mark, value in range 0 to + action map of string-integer pairs, key either + dscp or mark, value in range 0 to 4,294,967,295 - bandwidth map of string-integer pairs, key either + bandwidth map of string-integer pairs, key either burst or rate, value in range 1 to 4,294,967,295 external_ids map of string-string pairs Details: priority: integer, in range 0 to 32,767 - The QoS rule’s priority. Rules with numerically higher priority + The QoS rule’s priority. Rules with numerically higher priority take precedence over those with lower. If two QoS rules with the - same priority both match, then the one actually applied to a + same priority both match, then the one actually applied to a packet is undefined. direction: string, either from-lport or to-lport - The value of this field is similar to ACL column in the OVN + The value of this field is similar to ACL column in the OVN Northbound database’s ACL table. match: string The packets that the QoS rules should match, in the same expres‐ - sion language used for the match column in the OVN Southbound - database’s Logical_Flow table. The outport logical port is only - available in the to-lport direction (the inport is available in + sion language used for the match column in the OVN Southbound + database’s Logical_Flow table. The outport logical port is only + available in the to-lport direction (the inport is available in both directions). action: map of string-integer pairs, key either dscp or mark, value in range 0 to 4,294,967,295 - When dscp action is specified, matching flows will have have - DSCP marking applied. When mark action is specified, matching + When dscp action is specified, matching flows will have have + DSCP marking applied. When mark action is specified, matching flows will have packet marking applied. - • dscp: The value of this action should be in the range of + • dscp: The value of this action should be in the range of 0 to 63 (inclusive). • mark: The value of this action should be a positive inte‐ @@ -2496,7 +2501,7 @@ bandwidth: map of string-integer pairs, key either burst or rate, value in range 1 to 4,294,967,295 - When specified, matching packets will have bandwidth metering + When specified, matching packets will have bandwidth metering applied. Traffic over the limit will be dropped. • rate: The value of rate limit in kbps. @@ -2508,13 +2513,13 @@ See External IDs at the beginning of this document. Mirror TABLE - Each row in this table represents a mirror that can be used for port - mirroring. These mirrors are referenced by the mirror_rules column in + Each row in this table represents a mirror that can be used for port + mirroring. These mirrors are referenced by the mirror_rules column in the Logical_Switch_Port table. Summary: name string (must be unique within table) - filter string, one of both, from-lport, or + filter string, one of both, from-lport, or to-lport sink string type string, one of erspan, gre, or local @@ -2526,34 +2531,34 @@ Represents the name of the mirror. filter: string, one of both, from-lport, or to-lport - The value of this field represents selection criteria of the - mirror. to-lport mirrors the packets coming into logical port. - from-lport mirrors the packets going out of logical port. both + The value of this field represents selection criteria of the + mirror. to-lport mirrors the packets coming into logical port. + from-lport mirrors the packets going out of logical port. both mirrors for both directions. sink: string - The value of this field represents the destination/sink of the - mirror. If the type is gre or erspan, the value indicates the - tunnel remote IP (either IPv4 or IPv6). For a type of local, - this field defines a local interface on the OVS integration - bridge to be used as the mirror destination. The interface must + The value of this field represents the destination/sink of the + mirror. If the type is gre or erspan, the value indicates the + tunnel remote IP (either IPv4 or IPv6). For a type of local, + this field defines a local interface on the OVS integration + bridge to be used as the mirror destination. The interface must possess external-ids:mirror-id that matches this string. type: string, one of erspan, gre, or local - The value of this field specifies the mirror type - gre, erspan + The value of this field specifies the mirror type - gre, erspan or local. index: integer The value of this field represents the tunnel ID. If the config‐ ured tunnel type is gre, this field represents the GRE key value - and if the configured tunnel type is erspan it represents the + and if the configured tunnel type is erspan it represents the erspan_idx value. It is ignored if the type is local. external_ids: map of string-string pairs See External IDs at the beginning of this document. Meter TABLE - Each row in this table represents a meter that can be used for QoS or + Each row in this table represents a meter that can be used for QoS or rate-limiting. Summary: @@ -2567,26 +2572,26 @@ name: string (must be unique within table) A name for this meter. - Names that begin with "__" (two underscores) are reserved for + Names that begin with "__" (two underscores) are reserved for OVN internal use and should not be added manually. unit: string, either kbps or pktps - The unit for rate and burst_rate parameters in the bands entry. - kbps specifies kilobits per second, and pktps specifies packets + The unit for rate and burst_rate parameters in the bands entry. + kbps specifies kilobits per second, and pktps specifies packets per second. bands: set of 1 or more Meter_Bands The bands associated with this meter. Each band specifies a rate - above which the band is to take the action action. If multiple - bands’ rates are exceeded, then the band with the highest rate + above which the band is to take the action action. If multiple + bands’ rates are exceeded, then the band with the highest rate among the exceeded bands is selected. fair: optional boolean - This column is used to further describe the desired behavior of + This column is used to further describe the desired behavior of the meter when there are multiple references to it. If this col‐ - umn is empty or is set to false, the rate will be shared across - all rows that refer to the same Meter name. Conversely, when - this column is set to true, each user of the same Meter will be + umn is empty or is set to false, the rate will be shared across + all rows that refer to the same Meter name. Conversely, when + this column is set to true, each user of the same Meter will be rate-limited on its own. external_ids: map of string-string pairs @@ -2594,7 +2599,7 @@ Meter_Band TABLE Each row in this table represents a meter band which specifies the rate - above which the configured action should be applied. These bands are + above which the configured action should be applied. These bands are referenced by the bands column in the Meter table. Summary: @@ -2610,13 +2615,13 @@ rate: integer, in range 1 to 4,294,967,295 The rate limit for this band, in kilobits per second or bits per - second, depending on whether the parent Meter entry’s unit col‐ + second, depending on whether the parent Meter entry’s unit col‐ umn specified kbps or pktps. burst_size: integer, in range 0 to 4,294,967,295 - The maximum burst allowed for the band in kilobits or packets, - depending on whether kbps or pktps was selected in the parent - Meter entry’s unit column. If the size is zero, the switch is + The maximum burst allowed for the band in kilobits or packets, + depending on whether kbps or pktps was selected in the parent + Meter entry’s unit column. If the size is zero, the switch is free to select some reasonable value depending on its configura‐ tion. @@ -2626,7 +2631,7 @@ Logical_Router_Port TABLE A port within an L3 logical router. - Exactly one Logical_Router row must reference a given logical router + Exactly one Logical_Router row must reference a given logical router port. Summary: @@ -2640,7 +2645,7 @@ Options for Physical VLAN MTU Issues: options : reside-on-redirect-chassis optional string, either true or false - options : redirect-type optional string, either bridged or over‐‐ + options : redirect-type optional string, either bridged or over‐‐ lay ipv6_prefix set of strings ipv6_ra_configs: @@ -2662,13 +2667,13 @@ Options: options : mcast_flood optional string, either true or false options : requested-tnl-key - optional string, containing an integer, + optional string, containing an integer, in range 1 to 32,767 options : prefix_delegation optional string, either true or false options : prefix optional string, either true or false options : route_table optional string - options : gateway_mtu optional string, containing an integer, + options : gateway_mtu optional string, containing an integer, in range 68 to 65,535 options : gateway_mtu_bypass optional string @@ -2683,21 +2688,21 @@ name: string (must be unique within table) A name for the logical router port. - In addition to provide convenience for human interaction with + In addition to provide convenience for human interaction with the northbound database, this column is used as reference by its patch port in Logical_Switch_Port or another logical router port in Logical_Router_Port. - A logical router port may not have the same name as a logical + A logical router port may not have the same name as a logical switch port, but the database schema cannot enforce this. networks: set of 1 or more strings - The IP addresses and netmasks of the router. For example, - 192.168.0.1/24 indicates that the router’s IP address is - 192.168.0.1 and that packets destined to 192.168.0.x should be + The IP addresses and netmasks of the router. For example, + 192.168.0.1/24 indicates that the router’s IP address is + 192.168.0.1 and that packets destined to 192.168.0.x should be routed to this port. - A logical router port always adds a link-local IPv6 address + A logical router port always adds a link-local IPv6 address (fe80::/64) automatically generated from the interface’s MAC ad‐ dress using the modified EUI-64 format. @@ -2705,129 +2710,129 @@ The Ethernet address that belongs to this router port. enabled: optional boolean - This column is used to administratively set port state. If this - column is empty or is set to true, the port is enabled. If this - column is set to false, the port is disabled. A disabled port + This column is used to administratively set port state. If this + column is empty or is set to true, the port is enabled. If this + column is set to false, the port is disabled. A disabled port has all ingress and egress traffic dropped. Distributed Gateway Ports: - Gateways, as documented under Gateways in the OVN architecture guide, - provide limited connectivity between logical networks and physical - ones. OVN support multiple kinds of gateways. The Logical_Router_Port - table can be used two different ways to configure distributed gateway - ports, which are one kind of gateway. These two forms of configuration + Gateways, as documented under Gateways in the OVN architecture guide, + provide limited connectivity between logical networks and physical + ones. OVN support multiple kinds of gateways. The Logical_Router_Port + table can be used two different ways to configure distributed gateway + ports, which are one kind of gateway. These two forms of configuration exist for historical reasons. Both of them produce the same kind of OVN southbound records and the same behavior in practice. - If either of these are set, this logical router port represents a dis‐ - tributed gateway port that connects this router to a logical switch + If either of these are set, this logical router port represents a dis‐ + tributed gateway port that connects this router to a logical switch with a localnet port or a connection to another OVN deployment. Also mentioned in the OVN architecture guide, distributed gateway ports - can also be used for scalability reasons in deployments where logical + can also be used for scalability reasons in deployments where logical switches are dedicated to chassises rather than distributed. The preferred way to configure a gateway is ha_chassis_group, but gate‐‐ - way_chassis is also supported for backward compatibility. Only one of - these should be set at a time on a given LRP, since they configure the + way_chassis is also supported for backward compatibility. Only one of + these should be set at a time on a given LRP, since they configure the same features. Even when a gateway is configured, the logical router port still effec‐ tively resides on each chassis. However, due to the implications of the use of L2 learning in the physical network, as well as the need to sup‐ port advanced features such as one-to-many NAT (aka IP masquerading), a - subset of the logical router processing is handled in a centralized + subset of the logical router processing is handled in a centralized manner on the gateway chassis. There can be more than one distributed gateway ports configured on each - logical router, each connecting to different L2 segments. Load-balanc‐ + logical router, each connecting to different L2 segments. Load-balanc‐ ing is not yet supported on logical routers with more than one distrib‐ uted gateway ports. - For each distributed gateway port, it may have more than one gateway - chassises. When more than one gateway chassis is specified, OVN only - uses one at a time. OVN can rely on OVS BFD implementation to monitor - gateway connectivity, preferring the highest-priority gateway that is - online. Priorities are specified in the priority column of Gate‐‐ + For each distributed gateway port, it may have more than one gateway + chassises. When more than one gateway chassis is specified, OVN only + uses one at a time. OVN can rely on OVS BFD implementation to monitor + gateway connectivity, preferring the highest-priority gateway that is + online. Priorities are specified in the priority column of Gate‐‐ way_Chassis or HA_Chassis. - ovn-northd programs the external_mac rules specified in the LRP’s LR - into the peer logical switch’s destination lookup on the chassis where + ovn-northd programs the external_mac rules specified in the LRP’s LR + into the peer logical switch’s destination lookup on the chassis where the logical_port resides. In addition, the logical router’s MAC address - is automatically programmed in the peer logical switch’s destination - lookup flow on the gateway chasssis. If it is desired to generate gra‐ + is automatically programmed in the peer logical switch’s destination + lookup flow on the gateway chasssis. If it is desired to generate gra‐ tuitous ARPs for NAT addresses, then set the peer LSP’s options:nat-ad‐‐ dresses to router. - OVN 20.03 and earlier supported a third way to configure distributed - gateway ports using options:redirect-chassis to specify the gateway + OVN 20.03 and earlier supported a third way to configure distributed + gateway ports using options:redirect-chassis to specify the gateway chassis. This method is no longer supported. Any remaining users should - switch to one of the newer methods instead. A gateway_chassis may be - easily configured from the command line, e.g. ovn-nbctl lrp-set-gate‐‐ + switch to one of the newer methods instead. A gateway_chassis may be + easily configured from the command line, e.g. ovn-nbctl lrp-set-gate‐‐ way-chassis lrp chassis. ha_chassis_group: optional HA_Chassis_Group - Designates an HA_Chassis_Group to provide gateway high avail‐ + Designates an HA_Chassis_Group to provide gateway high avail‐ ability. gateway_chassis: set of Gateway_Chassises - Designates one or more Gateway_Chassis for the logical router + Designates one or more Gateway_Chassis for the logical router port. Options for Physical VLAN MTU Issues: - MTU issues arise in mixing tunnels with logical networks that are - bridged to a physical VLAN. For an explanation of the MTU issues, see - Physical VLAN MTU Issues in the OVN architecture document. The follow‐ - ing options, which are alternatives, provide solutions. Both of them - cause packets to be sent over localnet instead of tunnels, but they - differ in whether some or all packets are sent this way. The most + MTU issues arise in mixing tunnels with logical networks that are + bridged to a physical VLAN. For an explanation of the MTU issues, see + Physical VLAN MTU Issues in the OVN architecture document. The follow‐ + ing options, which are alternatives, provide solutions. Both of them + cause packets to be sent over localnet instead of tunnels, but they + differ in whether some or all packets are sent this way. The most prominent tradeoff between these options is that reside-on-redi‐‐ - rect-chassis is easier to configure and that redirect-type performs + rect-chassis is easier to configure and that redirect-type performs better for east-west traffic. options : reside-on-redirect-chassis: optional string, either true or false - If set to true, this option forces all traffic across the logi‐ - cal router port to pass through the gateway chassis using a hop + If set to true, this option forces all traffic across the logi‐ + cal router port to pass through the gateway chassis using a hop across a localnet port. This changes behavior in two ways: - • Without this option, east-west traffic passes directly - between source and destination chassis (or even within a - single chassis, for co-located VMs). With this option, + • Without this option, east-west traffic passes directly + between source and destination chassis (or even within a + single chassis, for co-located VMs). With this option, all east-west traffic passes through the gateway chassis. - • Without this option, traffic between the gateway chassis - and other chassis is encapsulated in tunnels. With this + • Without this option, traffic between the gateway chassis + and other chassis is encapsulated in tunnels. With this option, traffic passes over a localnet interface. - This option may usefully be set only on logical router ports - that connect a distributed logical router to a logical switch + This option may usefully be set only on logical router ports + that connect a distributed logical router to a logical switch with VIFs. It should not be set on a distributed gateway port. - OVN honors this option only if the logical router has one and - only one distributed gateway port and if the LRP’s peer switch + OVN honors this option only if the logical router has one and + only one distributed gateway port and if the LRP’s peer switch has a localnet port. options : redirect-type: optional string, either bridged or overlay - If set to bridged on a distributed gateway port, this option + If set to bridged on a distributed gateway port, this option causes OVN to redirect packets to the gateway chassis over a lo‐‐ calnet port instead of a tunnel. The relevant chassis must share a localnet port. - This feature requires the administrator or the CMS to configure - each participating chassis with a unique Ethernet address for - the logical router by setting ovn-chassis-mac-mappings in the + This feature requires the administrator or the CMS to configure + each participating chassis with a unique Ethernet address for + the logical router by setting ovn-chassis-mac-mappings in the Open vSwitch database, for use by ovn-controller. - Setting this option to overlay or leaving it unset has no ef‐ - fect. This option may usefully be set only on a distributed - gateway port when there is one and only one distributed gateway + Setting this option to overlay or leaving it unset has no ef‐ + fect. This option may usefully be set only on a distributed + gateway port when there is one and only one distributed gateway port on the logical router. It is otherwise ignored. ipv6_prefix: set of strings - This column contains IPv6 prefix obtained by prefix delegation + This column contains IPv6 prefix obtained by prefix delegation router according to RFC 3633 ipv6_ra_configs: @@ -2837,23 +2842,23 @@ tion requests. ipv6_ra_configs : address_mode: optional string - The address mode to be used for IPv6 address configuration. The + The address mode to be used for IPv6 address configuration. The supported values are: - • slaac: Address configuration using Router Advertisement - (RA) packet. The IPv6 prefixes defined in the Logi‐‐ - cal_Router_Port table’s networks column will be included + • slaac: Address configuration using Router Advertisement + (RA) packet. The IPv6 prefixes defined in the Logi‐‐ + cal_Router_Port table’s networks column will be included in the RA’s ICMPv6 option - Prefix information. • dhcpv6_stateful: Address configuration using DHCPv6. - • dhcpv6_stateless: Address configuration using Router Ad‐ - vertisement (RA) packet. Other IPv6 options are provided + • dhcpv6_stateless: Address configuration using Router Ad‐ + vertisement (RA) packet. Other IPv6 options are provided by DHCPv6. ipv6_ra_configs : router_preference: optional string Default Router Preference (PRF) indicates whether to prefer this - router over other default routers (RFC 4191). Possible values + router over other default routers (RFC 4191). Possible values are: • HIGH: mapped to 0x01 in RA PRF field @@ -2865,7 +2870,7 @@ ipv6_ra_configs : route_info: optional string Route Info is used to configure Route Info Option sent in Router Advertisement according to RFC 4191. Route Info is a comma sepa‐ - rated string where each field provides PRF and prefix for a + rated string where each field provides PRF and prefix for a given route (e.g: HIGH-aef1::11/48,LOW-aef2::11/96) Possible PRF values are: @@ -2876,26 +2881,26 @@ • LOW: mapped to 0x11 in RA PRF field ipv6_ra_configs : mtu: optional string - The recommended MTU for the link. Default is 0, which means no - MTU Option will be included in RA packet replied by ovn-con‐ + The recommended MTU for the link. Default is 0, which means no + MTU Option will be included in RA packet replied by ovn-con‐ troller. Per RFC 2460, the mtu value is recommended no less than - 1280, so any mtu value less than 1280 will be considered as no + 1280, so any mtu value less than 1280 will be considered as no MTU Option. ipv6_ra_configs : send_periodic: optional string - If set to true, then this router interface will send router ad‐ + If set to true, then this router interface will send router ad‐ vertisements periodically. The default is false. ipv6_ra_configs : max_interval: optional string - The maximum number of seconds to wait between sending periodic + The maximum number of seconds to wait between sending periodic router advertisements. This option has no effect if ipv6_ra_con‐‐ figs:send_periodic is false. The default is 600. ipv6_ra_configs : min_interval: optional string - The minimum number of seconds to wait between sending periodic + The minimum number of seconds to wait between sending periodic router advertisements. This option has no effect if ipv6_ra_con‐‐ - figs:send_periodic is false. The default is one-third of - ipv6_ra_configs:max_interval, i.e. 200 seconds if that key is + figs:send_periodic is false. The default is one-third of + ipv6_ra_configs:max_interval, i.e. 200 seconds if that key is unset. ipv6_ra_configs : rdnss: optional string @@ -2903,7 +2908,7 @@ ment OVN supports just one RDNSS server. ipv6_ra_configs : dnssl: optional string - DNS Search List announced in RA packets. Multiple DNS Search + DNS Search List announced in RA packets. Multiple DNS Search List must be ’comma’ separated (e.g. "a.b.c, d.e.f") Options: @@ -2914,46 +2919,46 @@ If set to true, multicast traffic (including reports) are uncon‐ ditionally forwarded to the specific port. - This option applies when the port is part of a logical router + This option applies when the port is part of a logical router which has options:mcast_relay set to true. Default: false. options : requested-tnl-key: optional string, containing an integer, in range 1 to 32,767 - Configures the port binding tunnel key for the port. Usually - this is not needed because ovn-northd will assign an unique key - for each port by itself. However, if it is configured, + Configures the port binding tunnel key for the port. Usually + this is not needed because ovn-northd will assign an unique key + for each port by itself. However, if it is configured, ovn-northd honors the configured value. options : prefix_delegation: optional string, either true or false - If set to true, enable IPv6 prefix delegation state machine on - this logical router port (RFC3633). IPv6 prefix delegation is + If set to true, enable IPv6 prefix delegation state machine on + this logical router port (RFC3633). IPv6 prefix delegation is available just on a gateway router or on a gateway router port. options : prefix: optional string, either true or false - If set to true, this interface will receive an IPv6 prefix ac‐ + If set to true, this interface will receive an IPv6 prefix ac‐ cording to RFC3663 options : route_table: optional string - Designates lookup Logical_Router_Static_Routes with specified - route_table value. Routes to directly connected networks from - same Logical Router and routes without route_table option set + Designates lookup Logical_Router_Static_Routes with specified + route_table value. Routes to directly connected networks from + same Logical Router and routes without route_table option set have higher priority than routes with route_table option set. options : gateway_mtu: optional string, containing an integer, in range 68 to 65,535 - If set, logical flows will be added to router pipeline to check - packet length. If packet length is greater than the value set, - ICMPv4 type 3 (Destination Unreachable) code 4 (Fragmentation - Needed and Don’t Fragment was Set) or ICMPv6 type 2 (Packet Too + If set, logical flows will be added to router pipeline to check + packet length. If packet length is greater than the value set, + ICMPv4 type 3 (Destination Unreachable) code 4 (Fragmentation + Needed and Don’t Fragment was Set) or ICMPv6 type 2 (Packet Too Big) code 0 (no route to destination) packets will be generated. This allows for Path MTU Discovery. options : gateway_mtu_bypass: optional string - When configured, represents a match expression, in the same ex‐ - pression language used for the match column in the OVN South‐ - bound database’s Logical_Flow table. Packets matching this ex‐ + When configured, represents a match expression, in the same ex‐ + pression language used for the match column in the OVN South‐ + bound database’s Logical_Flow table. Packets matching this ex‐ pression will bypass the length check configured through the op‐‐ tions:gateway_mtu option. @@ -2962,22 +2967,22 @@ A given router port serves one of two purposes: • To attach a logical switch to a logical router. A logical - router port of this type is referenced by exactly one - Logical_Switch_Port of type router. The value of name is - set as router-port in column options of Logi‐‐ + router port of this type is referenced by exactly one + Logical_Switch_Port of type router. The value of name is + set as router-port in column options of Logi‐‐ cal_Switch_Port. In this case peer column is empty. • To connect one logical router to another. This requires a pair of logical router ports, each connected to a differ‐ - ent router. Each router port in the pair specifies the + ent router. Each router port in the pair specifies the other in its peer column. No Logical_Switch refers to the router port. peer: optional string - For a router port used to connect two logical routers, this + For a router port used to connect two logical routers, this identifies the other router port in the pair by name. - For a router port attached to a logical switch, this column is + For a router port attached to a logical switch, this column is empty. Common Columns: @@ -2985,7 +2990,7 @@ external_ids: map of string-string pairs See External IDs at the beginning of this document. - The ovn-northd program copies all these pairs into the exter‐‐ + The ovn-northd program copies all these pairs into the exter‐‐ nal_ids column of the Port_Binding table in OVN_Southbound data‐ base. @@ -2996,20 +3001,20 @@ status : hosting-chassis: optional string This option is populated by ovn-northd. - When a distributed gateway port is bound to a location in the - OVN Southbound database Port_Binding ovn-northd will populate - this key with the name of the Chassis that is currently hosting + When a distributed gateway port is bound to a location in the + OVN Southbound database Port_Binding ovn-northd will populate + this key with the name of the Chassis that is currently hosting this port. Logical_Router_Static_Route TABLE Each record represents a static route. - When multiple routes match a packet, the longest-prefix match is cho‐ - sen. For a given prefix length, a dst-ip route is preferred over a + When multiple routes match a packet, the longest-prefix match is cho‐ + sen. For a given prefix length, a dst-ip route is preferred over a src-ip route. - When there are ECMP routes, i.e. multiple routes with same prefix and - policy, one of them will be selected based on the 5-tuple hashing of + When there are ECMP routes, i.e. multiple routes with same prefix and + policy, one of them will be selected based on the 5-tuple hashing of the packet header. Summary: @@ -3034,54 +3039,54 @@ IP prefix of this route (e.g. 192.168.100.0/24). policy: optional string, either dst-ip or src-ip - If it is specified, this setting describes the policy used to - make routing decisions. This setting must be one of the follow‐ + If it is specified, this setting describes the policy used to + make routing decisions. This setting must be one of the follow‐ ing strings: - • src-ip: This policy sends the packet to the nexthop when + • src-ip: This policy sends the packet to the nexthop when the packet’s source IP address matches ip_prefix. - • dst-ip: This policy sends the packet to the nexthop when + • dst-ip: This policy sends the packet to the nexthop when the packet’s destination IP address matches ip_prefix. If not specified, the default is dst-ip. nexthop: string - Nexthop IP address for this route. Nexthop IP address should be + Nexthop IP address for this route. Nexthop IP address should be the IP address of a connected router port or the IP address of a logical port or can be set to discard for dropping packets which match the given route. output_port: optional string - The name of the Logical_Router_Port via which the packet needs - to be sent out. This is optional and when not specified, OVN - will automatically figure this out based on the nexthop. When - this is specified and there are multiple IP addresses on the - router port and none of them are in the same subnet of nexthop, - OVN chooses the first IP address as the one via which the nex‐‐ + The name of the Logical_Router_Port via which the packet needs + to be sent out. This is optional and when not specified, OVN + will automatically figure this out based on the nexthop. When + this is specified and there are multiple IP addresses on the + router port and none of them are in the same subnet of nexthop, + OVN chooses the first IP address as the one via which the nex‐‐ thop is reachable. bfd: optional weak reference to BFD Reference to BFD row if the route has associated a BFD session route_table: string - Any string to place route to separate routing table. If Logical - Router Port has configured value in options:route_table other + Any string to place route to separate routing table. If Logical + Router Port has configured value in options:route_table other than empty string, OVN performs route lookup for all packets en‐ - tering Logical Router ingress pipeline from this port in the + tering Logical Router ingress pipeline from this port in the following manner: - • 1. First lookup among "global" routes: routes without - route_table value set and routes to directly connected + • 1. First lookup among "global" routes: routes without + route_table value set and routes to directly connected networks. - • 2. Next lookup among routes with same route_table value + • 2. Next lookup among routes with same route_table value as specified in LRP’s options:route_table field. external_ids : ic-learned-route: optional string - ovn-ic populates this key if the route is learned from the - global OVN_IC_Southbound database. In this case the value will - be set to the uuid of the row in Route table of the + ovn-ic populates this key if the route is learned from the + global OVN_IC_Southbound database. In this case the value will + be set to the uuid of the row in Route table of the OVN_IC_Southbound database. Common Columns: @@ -3092,35 +3097,35 @@ Common options: options: map of string-string pairs - This column provides general key/value settings. The supported + This column provides general key/value settings. The supported options are described individually below. options : ecmp_symmetric_reply: optional string If true, then new traffic that arrives over this route will have - its reply traffic bypass ECMP route selection and will be sent - out this route instead. Note that this option overrides any - rules set in the Logical_Router_policy table. This option only - works on gateway routers (routers that have options:chassis + its reply traffic bypass ECMP route selection and will be sent + out this route instead. Note that this option overrides any + rules set in the Logical_Router_policy table. This option only + works on gateway routers (routers that have options:chassis set). options : origin: optional string In case ovn-interconnection has been learned this route, it will have its origin set: either "connected" or "static". This key is - supposed to be written only by ovn-ic daemon. ovn-northd then - checks this value when generating Logical Flows. Logi‐‐ - cal_Router_Static_Route records with same ip_prefix within same - Logical Router will have next lookup order based on origin key + supposed to be written only by ovn-ic daemon. ovn-northd then + checks this value when generating Logical Flows. Logi‐‐ + cal_Router_Static_Route records with same ip_prefix within same + Logical Router will have next lookup order based on origin key value: 1. connected 2. static Logical_Router_Policy TABLE - Each row in this table represents one routing policy for a logical + Each row in this table represents one routing policy for a logical router that points to it through its policies column. The action column - for the highest-priority matching row in this table determines a - packet’s treatment. If no row matches, packets are allowed by default. - (Default-deny treatment is possible: add a rule with priority 0, 1 as + for the highest-priority matching row in this table determines a + packet’s treatment. If no row matches, packets are allowed by default. + (Default-deny treatment is possible: add a rule with priority 0, 1 as match, and drop as action.) Summary: @@ -3136,17 +3141,17 @@ Details: priority: integer, in range 0 to 32,767 - The routing policy’s priority. Rules with numerically higher - priority take precedence over those with lower. A rule is + The routing policy’s priority. Rules with numerically higher + priority take precedence over those with lower. A rule is uniquely identified by the priority and match string. match: string - The packets that the routing policy should match, in the same - expression language used for the match column in the OVN South‐ + The packets that the routing policy should match, in the same + expression language used for the match column in the OVN South‐ bound database’s Logical_Flow table. - By default all traffic is allowed. When writing a more restric‐ - tive policy, it is important to remember to allow flows such as + By default all traffic is allowed. When writing a more restric‐ + tive policy, it is important to remember to allow flows such as ARP and IPv6 neighbor discovery packets. action: string, one of allow, drop, or reroute @@ -3161,13 +3166,13 @@ nexthop: optional string Note: This column is deprecated in favor of nexthops. - Next-hop IP address for this route, which should be the IP ad‐ - dress of a connected router port or the IP address of a logical + Next-hop IP address for this route, which should be the IP ad‐ + dress of a connected router port or the IP address of a logical port. nexthops: set of strings - Next-hop ECMP IP addresses for this route. Each IP in the list - should be the IP address of a connected router port or the IP + Next-hop ECMP IP addresses for this route. Each IP in the list + should be the IP address of a connected router port or the IP address of a logical port. One IP from the list is selected as next hop. @@ -3179,7 +3184,7 @@ options : pkt_mark: optional string Marks the packet with the value specified when the router policy is applied. CMS can inspect this packet marker and take some de‐ - cisions if desired. This value is not preserved when the packet + cisions if desired. This value is not preserved when the packet goes out on the wire. Common Columns: @@ -3191,7 +3196,7 @@ Each record represents a NAT rule. Summary: - type string, one of dnat, dnat_and_snat, or + type string, one of dnat, dnat_and_snat, or snat external_ip string external_mac optional string @@ -3200,7 +3205,7 @@ logical_port optional string allowed_ext_ips optional Address_Set exempted_ext_ips optional Address_Set - gateway_port optional weak reference to Logi‐‐ + gateway_port optional weak reference to Logi‐‐ cal_Router_Port options : stateless optional string options : add_route optional string @@ -3211,19 +3216,19 @@ type: string, one of dnat, dnat_and_snat, or snat Type of the NAT rule. - • When type is dnat, the externally visible IP address ex‐‐ - ternal_ip is DNATted to the IP address logical_ip in the + • When type is dnat, the externally visible IP address ex‐‐ + ternal_ip is DNATted to the IP address logical_ip in the logical space. - • When type is snat, IP packets with their source IP ad‐ + • When type is snat, IP packets with their source IP ad‐ dress that either matches the IP address in logical_ip or - is in the network provided by logical_ip is SNATed into + is in the network provided by logical_ip is SNATed into the IP address in external_ip. • When type is dnat_and_snat, the externally visible IP ad‐ dress external_ip is DNATted to the IP address logical_ip - in the logical space. In addition, IP packets with the - source IP address that matches logical_ip is SNATed into + in the logical space. In addition, IP packets with the + source IP address that matches logical_ip is SNATed into the IP address in external_ip. external_ip: string @@ -3232,14 +3237,14 @@ external_mac: optional string A MAC address. - This is only used on the gateway port on distributed routers. + This is only used on the gateway port on distributed routers. This must be specified in order for the NAT rule to be processed in a distributed manner on all chassis. If this is not specified - for a NAT rule on a distributed router, then this NAT rule will - be processed in a centralized manner on the gateway port in‐ + for a NAT rule on a distributed router, then this NAT rule will + be processed in a centralized manner on the gateway port in‐ stance on the gateway chassis. - This MAC address must be unique on the logical switch that the + This MAC address must be unique on the logical switch that the gateway port is attached to. If the MAC address used on the log‐‐ ical_port is globally unique, then that MAC address can be spec‐ ified as this external_mac. @@ -3247,8 +3252,8 @@ external_port_range: string L4 source port range - Range of ports, from which a port number will be picked that - will replace the source port of to be NATed packet. This is ba‐ + Range of ports, from which a port number will be picked that + will replace the source port of to be NATed packet. This is ba‐ sically PAT (port address translation). Value of the column is in the format, port_lo-port_hi. For exam‐ @@ -3263,88 +3268,88 @@ The name of the logical port where the logical_ip resides. This is only used on distributed routers. This must be specified - in order for the NAT rule to be processed in a distributed man‐ + in order for the NAT rule to be processed in a distributed man‐ ner on all chassis. If this is not specified for a NAT rule on a - distributed router, then this NAT rule will be processed in a - centralized manner on the gateway port instance on the gateway + distributed router, then this NAT rule will be processed in a + centralized manner on the gateway port instance on the gateway chassis. allowed_ext_ips: optional Address_Set - It represents Address Set of external ips that NAT rule is ap‐ + It represents Address Set of external ips that NAT rule is ap‐ plicable to. For SNAT type NAT rules, this refers to destination - addresses. For DNAT type NAT rules, this refers to source ad‐ + addresses. For DNAT type NAT rules, this refers to source ad‐ dresses. - This configuration overrides the default NAT behavior of apply‐ - ing a rule solely based on internal IP. Without this configura‐ - tion, NAT happens without considering the external IP (i.e - dest/source for snat/dnat type rule). With this configuration - NAT rule is applied ONLY if external ip is in the input Address + This configuration overrides the default NAT behavior of apply‐ + ing a rule solely based on internal IP. Without this configura‐ + tion, NAT happens without considering the external IP (i.e + dest/source for snat/dnat type rule). With this configuration + NAT rule is applied ONLY if external ip is in the input Address Set. exempted_ext_ips: optional Address_Set - It represents Address Set of external ips that NAT rule is NOT - applicable to. For SNAT type NAT rules, this refers to destina‐ - tion addresses. For DNAT type NAT rules, this refers to source + It represents Address Set of external ips that NAT rule is NOT + applicable to. For SNAT type NAT rules, this refers to destina‐ + tion addresses. For DNAT type NAT rules, this refers to source addresses. - This configuration overrides the default NAT behavior of apply‐ - ing a rule solely based on internal IP. Without this configura‐ - tion, NAT happens without considering the external IP (i.e - dest/source for snat/dnat type rule). With this configuration - NAT rule is NOT applied if external ip is in the input Address + This configuration overrides the default NAT behavior of apply‐ + ing a rule solely based on internal IP. Without this configura‐ + tion, NAT happens without considering the external IP (i.e + dest/source for snat/dnat type rule). With this configuration + NAT rule is NOT applied if external ip is in the input Address Set. - If there are NAT rules in a logical router with overlapping IP - prefixes (including /32), then usage of exempted_ext_ips should - be avoided in following scenario. a. SNAT rule (let us say - RULE1) with logical_ip PREFIX/MASK (let us say 50.0.0.0/24). b. - SNAT rule (let us say RULE2) with logical_ip PREFIX/MASK+1 (let - us say 50.0.0.0/25). c. Now, if exempted_ext_ips is associated + If there are NAT rules in a logical router with overlapping IP + prefixes (including /32), then usage of exempted_ext_ips should + be avoided in following scenario. a. SNAT rule (let us say + RULE1) with logical_ip PREFIX/MASK (let us say 50.0.0.0/24). b. + SNAT rule (let us say RULE2) with logical_ip PREFIX/MASK+1 (let + us say 50.0.0.0/25). c. Now, if exempted_ext_ips is associated with RULE2, then a logical ip which matches both 50.0.0.0/24 and 50.0.0.0/25 may get the RULE2 applied to it instead of RULE1. - allowed_ext_ips and exempted_ext_ips are mutually exclusive to - each other. If both Address Sets are set for a rule, then the + allowed_ext_ips and exempted_ext_ips are mutually exclusive to + each other. If both Address Sets are set for a rule, then the NAT rule is not considered. gateway_port: optional weak reference to Logical_Router_Port - A distributed gateway port in the Logical_Router_Port table + A distributed gateway port in the Logical_Router_Port table where the NAT rule needs to be applied. When multiple distributed gateway ports are configured on a Log‐‐ - ical_Router, applying a NAT rule at each of the distributed - gateway ports might not be desired. Consider the case where a + ical_Router, applying a NAT rule at each of the distributed + gateway ports might not be desired. Consider the case where a logical router has 2 distributed gateway port, one with networks - 50.0.0.10/24 and the other with networks 60.0.0.10/24. If the - logical router has a NAT rule of type snat, logical_ip - 10.1.1.0/24 and external_ip 50.1.1.20/24, the rule needs to be + 50.0.0.10/24 and the other with networks 60.0.0.10/24. If the + logical router has a NAT rule of type snat, logical_ip + 10.1.1.0/24 and external_ip 50.1.1.20/24, the rule needs to be selectively applied on matching packets entering/leaving through the distributed gateway port with networks 50.0.0.10/24. When a logical router has multiple distributed gateway ports and this column is not set for a NAT rule, then the rule will be ap‐ - plied at the distributed gateway port which is in the same net‐ - work as the external_ip of the NAT rule, if such a router port - exists. If logical router has a single distributed gateway port - and this column is not set for a NAT rule, the rule will be ap‐ + plied at the distributed gateway port which is in the same net‐ + work as the external_ip of the NAT rule, if such a router port + exists. If logical router has a single distributed gateway port + and this column is not set for a NAT rule, the rule will be ap‐ plied at the distributed gateway port even if the router port is not in the same network as the external_ip of the NAT rule. options : stateless: optional string - Indicates if a dnat_and_snat rule should lead to connection + Indicates if a dnat_and_snat rule should lead to connection tracking state or not. options : add_route: optional string - If set to true, then neighbor routers will have logical flows - added that will allow for routing to the NAT address. It also - will have ARP resolution logical flows added. By setting this - option, it means there is no reason to create a Logi‐‐ - cal_Router_Static_Route from neighbor routers to this NAT ad‐ - dress. It also means that no ARP request is required for neigh‐ - bor routers to learn the IP-MAC mapping for this NAT address. + If set to true, then neighbor routers will have logical flows + added that will allow for routing to the NAT address. It also + will have ARP resolution logical flows added. By setting this + option, it means there is no reason to create a Logi‐‐ + cal_Router_Static_Route from neighbor routers to this NAT ad‐ + dress. It also means that no ARP request is required for neigh‐ + bor routers to learn the IP-MAC mapping for this NAT address. This option only applies to NATs of type dnat and dnat_and_snat. - For more information about what flows are added for IP routes, + For more information about what flows are added for IP routes, please see the ovn-northd manpage section on IP Routing. Common Columns: @@ -3353,13 +3358,13 @@ See External IDs at the beginning of this document. DHCP_Options TABLE - OVN implements native DHCPv4 support which caters to the common use - case of providing an IPv4 address to a booting instance by providing + OVN implements native DHCPv4 support which caters to the common use + case of providing an IPv4 address to a booting instance by providing stateless replies to DHCPv4 requests based on statically configured ad‐ - dress mappings. To do this it allows a short list of DHCPv4 options to + dress mappings. To do this it allows a short list of DHCPv4 options to be configured and applied at each compute host running ovn-controller. - OVN also implements native DHCPv6 support which provides stateless + OVN also implements native DHCPv6 support which provides stateless replies to DHCPv6 requests. Summary: @@ -3368,7 +3373,7 @@ Mandatory DHCPv4 options: options : server_id optional string options : server_mac optional string - options : lease_time optional string, containing an integer, + options : lease_time optional string, containing an integer, in range 0 to 4,294,967,295 IPv4 DHCP Options: options : router optional string @@ -3396,24 +3401,24 @@ optional string, either 0 or 1 options : ethernet_encap optional string, either 0 or 1 Integer DHCP Options: - options : default_ttl optional string, containing an integer, + options : default_ttl optional string, containing an integer, in range 0 to 255 - options : tcp_ttl optional string, containing an integer, + options : tcp_ttl optional string, containing an integer, in range 0 to 255 - options : mtu optional string, containing an integer, + options : mtu optional string, containing an integer, in range 68 to 65,535 - options : T1 optional string, containing an integer, + options : T1 optional string, containing an integer, in range 68 to 4,294,967,295 - options : T2 optional string, containing an integer, + options : T2 optional string, containing an integer, in range 68 to 4,294,967,295 options : arp_cache_timeout - optional string, containing an integer, + optional string, containing an integer, in range 0 to 255 options : tcp_keepalive_interval - optional string, containing an integer, + optional string, containing an integer, in range 0 to 255 options : netbios_node_type - optional string, containing an integer, + optional string, containing an integer, in range 0 to 255 String DHCP Options: options : wpad optional string @@ -3447,14 +3452,14 @@ Details: cidr: string - The DHCPv4/DHCPv6 options will be included if the logical port + The DHCPv4/DHCPv6 options will be included if the logical port has its IP address in this cidr. DHCPv4 options: - The CMS should define the set of DHCPv4 options as key/value pairs in - the options column of this table. For ovn-controller to include these - DHCPv4 options, the dhcpv4_options of Logical_Switch_Port should refer + The CMS should define the set of DHCPv4 options as key/value pairs in + the options column of this table. For ovn-controller to include these + DHCPv4 options, the dhcpv4_options of Logical_Switch_Port should refer to an entry in this table. Mandatory DHCPv4 options: @@ -3463,7 +3468,7 @@ options : server_id: optional string The IP address for the DHCP server to use. This should be in the - subnet of the offered IP. This is also included in the DHCP of‐ + subnet of the offered IP. This is also included in the DHCP of‐ fer as option 54, ``server identifier.’’ options : server_mac: optional string @@ -3477,14 +3482,14 @@ IPv4 DHCP Options: - Below are the supported DHCPv4 options whose values are an IPv4 ad‐ - dress, e.g. 192.168.1.1. Some options accept multiple IPv4 addresses - enclosed within curly braces, e.g. {192.168.1.2, 192.168.1.3}. Please + Below are the supported DHCPv4 options whose values are an IPv4 ad‐ + dress, e.g. 192.168.1.1. Some options accept multiple IPv4 addresses + enclosed within curly braces, e.g. {192.168.1.2, 192.168.1.3}. Please refer to RFC 2132 for more details on DHCPv4 options and their codes. options : router: optional string - The IP address of a gateway for the client to use. This should - be in the subnet of the offered IP. The DHCPv4 option code for + The IP address of a gateway for the client to use. This should + be in the subnet of the offered IP. The DHCPv4 option code for this option is 3. options : netmask: optional string @@ -3521,19 +3526,19 @@ The DHCPv4 option code for this option is 121. This option can contain one or more static routes, each of which - consists of a destination descriptor and the IP address of the + consists of a destination descriptor and the IP address of the router that should be used to reach that destination. Please see RFC 3442 for more details. Example: {30.0.0.0/24,10.0.0.10, 0.0.0.0/0,10.0.0.1} options : ms_classless_static_route: optional string - The DHCPv4 option code for this option is 249. This option is + The DHCPv4 option code for this option is 249. This option is similar to classless_static_route supported by Microsoft Windows DHCPv4 clients. options : next_server: optional string - The DHCPv4 option code for setting the "Next server IP address" + The DHCPv4 option code for setting the "Next server IP address" field in the DHCP header. Boolean DHCP Options: @@ -3568,14 +3573,14 @@ options : T1: optional string, containing an integer, in range 68 to 4,294,967,295 - This specifies the time interval from address assignment until + This specifies the time interval from address assignment until the client begins trying to renew its address. The DHCPv4 option code for this option is 58. options : T2: optional string, containing an integer, in range 68 to 4,294,967,295 - This specifies the time interval from address assignment until - the client begins trying to rebind its address. The DHCPv4 op‐ + This specifies the time interval from address assignment until + the client begins trying to rebind its address. The DHCPv4 op‐ tion code for this option is 59. options : arp_cache_timeout: optional string, containing an integer, in @@ -3598,30 +3603,30 @@ These options accept a string value. options : wpad: optional string - The DHCPv4 option code for this option is 252. This option is - used as part of web proxy auto discovery to provide a URL for a + The DHCPv4 option code for this option is 252. This option is + used as part of web proxy auto discovery to provide a URL for a web proxy. options : bootfile_name: optional string - The DHCPv4 option code for this option is 67. This option is + The DHCPv4 option code for this option is 67. This option is used to identify a bootfile. options : path_prefix: optional string The DHCPv4 option code for this option is 210. In PXELINUX’ case - this option is used to set a common path prefix, instead of de‐ + this option is used to set a common path prefix, instead of de‐ riving it from the bootfile name. options : tftp_server_address: optional string - The DHCPv4 option code for this option is 150. The option con‐ - tains one or more IPv4 addresses that the client MAY use. This + The DHCPv4 option code for this option is 150. The option con‐ + tains one or more IPv4 addresses that the client MAY use. This option is Cisco proprietary, the IEEE standard that matches with this requirement is option 66 (tftp_server). options : hostname: optional string - The DHCPv4 option code for this option is 12. If set, indicates - the DHCPv4 option "Hostname". Alternatively, this option can be + The DHCPv4 option code for this option is 12. If set, indicates + the DHCPv4 option "Hostname". Alternatively, this option can be configured in options:hostname column in table Logi‐‐ - cal_Switch_Port. If Hostname option value is set in both con‐ + cal_Switch_Port. If Hostname option value is set in both con‐ flicting Logical_Switch_Port and DHCP_Options tables, Logi‐‐ cal_Switch_Port takes precedence. @@ -3631,10 +3636,10 @@ names via the Domain Name System. options : bootfile_name_alt: optional string - "bootfile_name_alt" option is used to support iPXE. When both + "bootfile_name_alt" option is used to support iPXE. When both "bootfile_name" and "bootfile_name_alt" are provided by the CMS, - "bootfile_name" will be used for option 67 if the dhcp request - contains etherboot option (175), otherwise "bootfile_name_alt" + "bootfile_name" will be used for option 67 if the dhcp request + contains etherboot option (175), otherwise "bootfile_name_alt" will be used. options : broadcast_address: optional string @@ -3650,7 +3655,7 @@ DHCP Options of type domains: - These options accept string value which is a comma separated list of + These options accept string value which is a comma separated list of domain names. The domain names are encoded based on RFC 1035. options : domain_search_list: optional string @@ -3658,10 +3663,10 @@ DHCPv6 options: - OVN also implements native DHCPv6 support. The CMS should define the - set of DHCPv6 options as key/value pairs. The define DHCPv6 options - will be included in the DHCPv6 response to the DHCPv6 Solicit/Re‐ - quest/Confirm packet from the logical ports having the IPv6 addresses + OVN also implements native DHCPv6 support. The CMS should define the + set of DHCPv6 options as key/value pairs. The define DHCPv6 options + will be included in the DHCPv6 response to the DHCPv6 Solicit/Re‐ + quest/Confirm packet from the logical ports having the IPv6 addresses in the cidr. Mandatory DHCPv6 options: @@ -3669,17 +3674,17 @@ The following options must be defined. options : server_id: optional string - The Ethernet address for the DHCP server to use. This is also - included in the DHCPv6 reply as option 2, ``Server Identifier’’ - to carry a DUID identifying a server between a client and a - server. ovn-controller defines DUID based on Link-layer Address + The Ethernet address for the DHCP server to use. This is also + included in the DHCPv6 reply as option 2, ``Server Identifier’’ + to carry a DUID identifying a server between a client and a + server. ovn-controller defines DUID based on Link-layer Address [DUID-LL]. IPv6 DHCPv6 options: - Below are the supported DHCPv6 options whose values are an IPv6 ad‐ - dress, e.g. aef0::4. Some options accept multiple IPv6 addresses en‐ - closed within curly braces, e.g. {aef0::4, aef0::5}. Please refer to + Below are the supported DHCPv6 options whose values are an IPv6 ad‐ + dress, e.g. aef0::4. Some options accept multiple IPv6 addresses en‐ + closed within curly braces, e.g. {aef0::4, aef0::5}. Please refer to RFC 3315 for more details on DHCPv6 options and their codes. options : dns_server: optional string @@ -3692,21 +3697,21 @@ options : domain_search: optional string The DHCPv6 option code for this option is 24. This option speci‐ - fies the domain search list the client should use to resolve + fies the domain search list the client should use to resolve hostnames with DNS. Example: "ovn.org". options : dhcpv6_stateless: optional string - This option specifies the OVN native DHCPv6 will work in state‐ + This option specifies the OVN native DHCPv6 will work in state‐ less mode, which means OVN native DHCPv6 will not offer IPv6 ad‐ - dresses for VM/VIF ports, but only reply other configurations, - such as DNS and domain search list. When setting this option - with string value "true", VM/VIF will configure IPv6 addresses + dresses for VM/VIF ports, but only reply other configurations, + such as DNS and domain search list. When setting this option + with string value "true", VM/VIF will configure IPv6 addresses by stateless way. Default value for this option is false. options : fqdn: optional string - The DHCPv6 option code for this option is 39. If set, indicates + The DHCPv6 option code for this option is 39. If set, indicates the DHCPv6 option "FQDN". Common Columns: @@ -3715,14 +3720,14 @@ See External IDs at the beginning of this document. Connection TABLE - Configuration for a database connection to an Open vSwitch database + Configuration for a database connection to an Open vSwitch database (OVSDB) client. - This table primarily configures the Open vSwitch database server + This table primarily configures the Open vSwitch database server (ovsdb-server). - The Open vSwitch database server can initiate and maintain active con‐ - nections to remote clients. It can also listen for database connec‐ + The Open vSwitch database server can initiate and maintain active con‐ + nections to remote clients. It can also listen for database connec‐ tions. Summary: @@ -3734,17 +3739,17 @@ Status: is_connected boolean status : last_error optional string - status : state optional string, one of ACTIVE, BACKOFF, + status : state optional string, one of ACTIVE, BACKOFF, CONNECTING, IDLE, or VOID - status : sec_since_connect optional string, containing an integer, + status : sec_since_connect optional string, containing an integer, at least 0 status : sec_since_disconnect - optional string, containing an integer, + optional string, containing an integer, at least 0 status : locks_held optional string status : locks_waiting optional string status : locks_lost optional string - status : n_connections optional string, containing an integer, + status : n_connections optional string, containing an integer, at least 2 status : bound_port optional string, containing an integer Common Columns: @@ -3760,20 +3765,20 @@ The following connection methods are currently supported: ssl:host[:port] - The specified SSL port on the host at the given host, + The specified SSL port on the host at the given host, which can either be a DNS name (if built with unbound li‐ - brary) or an IP address. A valid SSL configuration must - be provided when this form is used, this configuration - can be specified via command-line options or the SSL ta‐ + brary) or an IP address. A valid SSL configuration must + be provided when this form is used, this configuration + can be specified via command-line options or the SSL ta‐ ble. If port is not specified, it defaults to 6640. - SSL support is an optional feature that is not always + SSL support is an optional feature that is not always built as part of Open vSwitch. tcp:host[:port] - The specified TCP port on the host at the given host, + The specified TCP port on the host at the given host, which can either be a DNS name (if built with unbound li‐ brary) or an IP address. If host is an IPv6 address, wrap it in square brackets, e.g. tcp:[::1]:6640. @@ -3781,54 +3786,54 @@ If port is not specified, it defaults to 6640. pssl:[port][:host] - Listens for SSL connections on the specified TCP port. - Specify 0 for port to have the kernel automatically - choose an available port. If host, which can either be a - DNS name (if built with unbound library) or an IP ad‐ - dress, is specified, then connections are restricted to + Listens for SSL connections on the specified TCP port. + Specify 0 for port to have the kernel automatically + choose an available port. If host, which can either be a + DNS name (if built with unbound library) or an IP ad‐ + dress, is specified, then connections are restricted to the resolved or specified local IPaddress (either IPv4 or IPv6 address). If host is an IPv6 address, wrap in square - brackets, e.g. pssl:6640:[::1]. If host is not specified - then it listens only on IPv4 (but not IPv6) addresses. A - valid SSL configuration must be provided when this form - is used, this can be specified either via command-line + brackets, e.g. pssl:6640:[::1]. If host is not specified + then it listens only on IPv4 (but not IPv6) addresses. A + valid SSL configuration must be provided when this form + is used, this can be specified either via command-line options or the SSL table. If port is not specified, it defaults to 6640. - SSL support is an optional feature that is not always + SSL support is an optional feature that is not always built as part of Open vSwitch. ptcp:[port][:host] - Listens for connections on the specified TCP port. Spec‐ + Listens for connections on the specified TCP port. Spec‐ ify 0 for port to have the kernel automatically choose an - available port. If host, which can either be a DNS name - (if built with unbound library) or an IP address, is - specified, then connections are restricted to the re‐ + available port. If host, which can either be a DNS name + (if built with unbound library) or an IP address, is + specified, then connections are restricted to the re‐ solved or specified local IP address (either IPv4 or IPv6 - address). If host is an IPv6 address, wrap it in square - brackets, e.g. ptcp:6640:[::1]. If host is not specified + address). If host is an IPv6 address, wrap it in square + brackets, e.g. ptcp:6640:[::1]. If host is not specified then it listens only on IPv4 addresses. If port is not specified, it defaults to 6640. - When multiple clients are configured, the target values must be + When multiple clients are configured, the target values must be unique. Duplicate target values yield unspecified results. Client Failure Detection and Handling: max_backoff: optional integer, at least 1,000 - Maximum number of milliseconds to wait between connection at‐ + Maximum number of milliseconds to wait between connection at‐ tempts. Default is implementation-specific. inactivity_probe: optional integer Maximum number of milliseconds of idle time on connection to the - client before sending an inactivity probe message. If Open - vSwitch does not communicate with the client for the specified - number of seconds, it will send a probe. If a response is not - received for the same additional amount of time, Open vSwitch - assumes the connection has been broken and attempts to recon‐ - nect. Default is implementation-specific. A value of 0 disables + client before sending an inactivity probe message. If Open + vSwitch does not communicate with the client for the specified + number of seconds, it will send a probe. If a response is not + received for the same additional amount of time, Open vSwitch + assumes the connection has been broken and attempts to recon‐ + nect. Default is implementation-specific. A value of 0 disables inactivity probes. Status: @@ -3837,12 +3842,12 @@ in the status columns may be updated depends on the target type. When target specifies a connection method that listens for inbound con‐ - nections (e.g. ptcp: or punix:), both n_connections and is_connected + nections (e.g. ptcp: or punix:), both n_connections and is_connected may also be updated while the remaining key-value pairs are omitted. - On the other hand, when target specifies an outbound connection, all - key-value pairs may be updated, except the above-mentioned two key- - value pairs associated with inbound connection targets. They are omit‐ + On the other hand, when target specifies an outbound connection, all + key-value pairs may be updated, except the above-mentioned two key- + value pairs associated with inbound connection targets. They are omit‐ ted. is_connected: boolean @@ -3850,7 +3855,7 @@ status : last_error: optional string A human-readable description of the last error on the connection - to the manager; i.e. strerror(errno). This key will exist only + to the manager; i.e. strerror(errno). This key will exist only if an error has occurred. status : state: optional string, one of ACTIVE, BACKOFF, CONNECTING, @@ -3869,7 +3874,7 @@ IDLE Connection is idle. Waiting for response to keep-alive. - These values may change in the future. They are provided only + These values may change in the future. They are provided only for human consumption. status : sec_since_connect: optional string, containing an integer, at @@ -3880,48 +3885,48 @@ status : sec_since_disconnect: optional string, containing an integer, at least 0 - The amount of time since this client last disconnected from the - database (in seconds). Value is empty if client has never dis‐ + The amount of time since this client last disconnected from the + database (in seconds). Value is empty if client has never dis‐ connected. status : locks_held: optional string - Space-separated list of the names of OVSDB locks that the con‐ - nection holds. Omitted if the connection does not hold any + Space-separated list of the names of OVSDB locks that the con‐ + nection holds. Omitted if the connection does not hold any locks. status : locks_waiting: optional string - Space-separated list of the names of OVSDB locks that the con‐ - nection is currently waiting to acquire. Omitted if the connec‐ + Space-separated list of the names of OVSDB locks that the con‐ + nection is currently waiting to acquire. Omitted if the connec‐ tion is not waiting for any locks. status : locks_lost: optional string - Space-separated list of the names of OVSDB locks that the con‐ - nection has had stolen by another OVSDB client. Omitted if no + Space-separated list of the names of OVSDB locks that the con‐ + nection has had stolen by another OVSDB client. Omitted if no locks have been stolen from this connection. status : n_connections: optional string, containing an integer, at least 2 - When target specifies a connection method that listens for in‐ - bound connections (e.g. ptcp: or pssl:) and more than one con‐ - nection is actually active, the value is the number of active + When target specifies a connection method that listens for in‐ + bound connections (e.g. ptcp: or pssl:) and more than one con‐ + nection is actually active, the value is the number of active connections. Otherwise, this key-value pair is omitted. status : bound_port: optional string, containing an integer When target is ptcp: or pssl:, this is the TCP port on which the - OVSDB server is listening. (This is particularly useful when - target specifies a port of 0, allowing the kernel to choose any + OVSDB server is listening. (This is particularly useful when + target specifies a port of 0, allowing the kernel to choose any available port.) Common Columns: - The overall purpose of these columns is described under Common Columns + The overall purpose of these columns is described under Common Columns at the beginning of this document. external_ids: map of string-string pairs other_config: map of string-string pairs DNS TABLE - Each row in this table stores the DNS records. The Logical_Switch ta‐ + Each row in this table stores the DNS records. The Logical_Switch ta‐ ble’s dns_records references these records. Summary: @@ -3933,8 +3938,8 @@ records: map of string-string pairs Key-value pair of DNS records with DNS query name as the key and value as a string of IP address(es) separated by comma or space. - For PTR requests, the key-value pair can be Reverse IPv4 ad‐‐ - dress.in-addr.arpa and the value DNS domain name. For IPv6 ad‐ + For PTR requests, the key-value pair can be Reverse IPv4 ad‐‐ + dress.in-addr.arpa and the value DNS domain name. For IPv6 ad‐ dresses, the key has to be Reverse IPv6 address.ip6.arpa. Example: "vm1.ovn.org" = "10.0.0.4 aef0::4" @@ -3942,13 +3947,13 @@ Example: "4.0.0.10.in-addr.arpa" = "vm1.ovn.org" options : ovn-owned: optional string - If set to true, then the OVN will be the main responsible for + If set to true, then the OVN will be the main responsible for DNS Records within this row. - A DNS row with this option set to true can be created for do‐ - mains that the user needs to configure locally and don’t care - about IPv6 only interested in IPv4 or vice versa. This will let - ovn send IPv4 DNS reply and reject/ignore IPv6 queries to save + A DNS row with this option set to true can be created for do‐ + mains that the user needs to configure locally and don’t care + about IPv6 only interested in IPv4 or vice versa. This will let + ovn send IPv4 DNS reply and reject/ignore IPv6 queries to save the waiting for a timeout on those uninteresting queries. external_ids: map of string-string pairs @@ -3969,28 +3974,28 @@ Details: private_key: string - Name of a PEM file containing the private key used as the + Name of a PEM file containing the private key used as the switch’s identity for SSL connections to the controller. certificate: string - Name of a PEM file containing a certificate, signed by the cer‐ + Name of a PEM file containing a certificate, signed by the cer‐ tificate authority (CA) used by the controller and manager, that - certifies the switch’s private key, identifying a trustworthy + certifies the switch’s private key, identifying a trustworthy switch. ca_cert: string - Name of a PEM file containing the CA certificate used to verify + Name of a PEM file containing the CA certificate used to verify that the switch is connected to a trustworthy controller. bootstrap_ca_cert: boolean - If set to true, then Open vSwitch will attempt to obtain the CA - certificate from the controller on its first SSL connection and - save it to the named PEM file. If it is successful, it will im‐ - mediately drop the connection and reconnect, and from then on - all SSL connections must be authenticated by a certificate - signed by the CA certificate thus obtained. This option exposes - the SSL connection to a man-in-the-middle attack obtaining the - initial CA certificate. It may still be useful for bootstrap‐ + If set to true, then Open vSwitch will attempt to obtain the CA + certificate from the controller on its first SSL connection and + save it to the named PEM file. If it is successful, it will im‐ + mediately drop the connection and reconnect, and from then on + all SSL connections must be authenticated by a certificate + signed by the CA certificate thus obtained. This option exposes + the SSL connection to a man-in-the-middle attack obtaining the + initial CA certificate. It may still be useful for bootstrap‐ ping. ssl_protocols: string @@ -3998,18 +4003,18 @@ fault when this option is omitted is TLSv1,TLSv1.1,TLSv1.2. ssl_ciphers: string - List of ciphers (in OpenSSL cipher string format) to be sup‐ - ported for SSL connections. The default when this option is + List of ciphers (in OpenSSL cipher string format) to be sup‐ + ported for SSL connections. The default when this option is omitted is HIGH:!aNULL:!MD5. Common Columns: - The overall purpose of these columns is described under Common Columns + The overall purpose of these columns is described under Common Columns at the beginning of this document. external_ids: map of string-string pairs Gateway_Chassis TABLE - Association of a chassis to a logical router port. The traffic going + Association of a chassis to a logical router port. The traffic going out through an specific router port will be redirected to a chassis, or a set of them in high availability configurations. @@ -4030,11 +4035,11 @@ chassis_name: string Name of the chassis that we want to redirect traffic through for - the associated logical router port. The value must match the + the associated logical router port. The value must match the name column of the Chassis table in the OVN_Southbound database. priority: integer, in range 0 to 32,767 - This is the priority of a chassis among all Gateway_Chassis be‐ + This is the priority of a chassis among all Gateway_Chassis be‐ longing to the same logical router port. options: map of string-string pairs @@ -4047,11 +4052,11 @@ HA_Chassis_Group TABLE Table representing a group of chassis which can provide high availabil‐ - ity services. Each chassis in the group is represented by the table - HA_Chassis. The HA chassis with highest priority will be the master of - this group. If the master chassis failover is detected, the HA chassis - with the next higher priority takes over the responsibility of provid‐ - ing the HA. If a distributed gateway router port references a row in + ity services. Each chassis in the group is represented by the table + HA_Chassis. The HA chassis with highest priority will be the master of + this group. If the master chassis failover is detected, the HA chassis + with the next higher priority takes over the responsibility of provid‐ + ing the HA. If a distributed gateway router port references a row in this table, then the master HA chassis in this group provides the gate‐ way functionality. @@ -4082,12 +4087,12 @@ Details: chassis_name: string - Name of the chassis which is part of the HA chassis group. The - value must match the name column of the Chassis table in the + Name of the chassis which is part of the HA chassis group. The + value must match the name column of the Chassis table in the OVN_Southbound database. priority: integer, in range 0 to 32,767 - Priority of the chassis. Chassis with highest priority will be + Priority of the chassis. Chassis with highest priority will be the master. Common Columns: @@ -4096,13 +4101,13 @@ See External IDs at the beginning of this document. BFD TABLE - Contains BFD parameter for ovn-controller BFD configuration. OVN BFD + Contains BFD parameter for ovn-controller BFD configuration. OVN BFD implementation is used to provide detection of failures in the path be‐ - tween adjacent forwarding engines, including the OVN interfaces. OVN - BFD provides link status info to OVN northd in order to update logical - flows according to the status of BFD endpoints. In the current imple‐ - mentation OVN BFD is used to check next-hop status for ECMP routes. - Please note BFD table refers to OVN BFD implementation and not to OVS + tween adjacent forwarding engines, including the OVN interfaces. OVN + BFD provides link status info to OVN northd in order to update logical + flows according to the status of BFD endpoints. In the current imple‐ + mentation OVN BFD is used to check next-hop status for ECMP routes. + Please note BFD table refers to OVN BFD implementation and not to OVS legacy one. Summary: @@ -4130,21 +4135,21 @@ BFD peer IP address. min_tx: optional integer, at least 1 - This is the minimum interval, in milliseconds, that the local - system would like to use when transmitting BFD Control packets, - less any jitter applied. The value zero is reserved. Default + This is the minimum interval, in milliseconds, that the local + system would like to use when transmitting BFD Control packets, + less any jitter applied. The value zero is reserved. Default value is 1000 ms. min_rx: optional integer - This is the minimum interval, in milliseconds, between received - BFD Control packets that this system is capable of supporting, - less any jitter applied by the sender. If this value is zero, - the transmitting system does not want the remote system to send + This is the minimum interval, in milliseconds, between received + BFD Control packets that this system is capable of supporting, + less any jitter applied by the sender. If this value is zero, + the transmitting system does not want the remote system to send any periodic BFD Control packets. detect_mult: optional integer, at least 1 - Detection time multiplier. The negotiated transmit interval, - multiplied by this value, provides the Detection Time for the + Detection time multiplier. The negotiated transmit interval, + multiplied by this value, provides the Detection Time for the receiving system in Asynchronous mode. Default value is 5. options: map of string-string pairs @@ -4180,7 +4185,7 @@ Details: Configuration: - ovn-northd reads configuration from these columns and propagates the + ovn-northd reads configuration from these columns and propagates the value to SBDB. logical_port: string @@ -4196,19 +4201,19 @@ Override dynamically learnt MACs. Chassis_Template_Var TABLE - One record per chassis, each containing a map, variables, between tem‐ - plate variable names and their value for that specific chassis. A tem‐ + One record per chassis, each containing a map, variables, between tem‐ + plate variable names and their value for that specific chassis. A tem‐ plate variable has a name and potentially different values on different - hypervisors in the OVN cluster. For example, two rows, R1 = (.chas‐‐ - sis=C1, variables={(N: V1)} and R2 = (.chassis=C2, variables={(N: V2)} + hypervisors in the OVN cluster. For example, two rows, R1 = (.chas‐‐ + sis=C1, variables={(N: V1)} and R2 = (.chassis=C2, variables={(N: V2)} will make ovn-controller running on chassis C1 and C2 interpret the to‐ - ken N either as V1 (on C1) or as V2 (on C2). Users can refer to tem‐ + ken N either as V1 (on C1) or as V2 (on C2). Users can refer to tem‐ plate variables from within other logical components, e.g., within ACL, - QoS or Logical_Router_Policy matches or from Load_Balancer VIP and + QoS or Logical_Router_Policy matches or from Load_Balancer VIP and backend definitions. - If a template variable is referenced on a chassis for which that vari‐ - able is not defined then ovn-controller running on that chassis will + If a template variable is referenced on a chassis for which that vari‐ + able is not defined then ovn-controller running on that chassis will just interpret it as a raw string literal. Summary: diff --git a/src/static/support/dist-docs/ovn-nb.5.pdf b/src/static/support/dist-docs/ovn-nb.5.pdf index c1550683d8fd56f85b27a4567fecd6012b1eb7f2..56988eafe20b3e15ab01f2cb9687051e2e0d8208 100644 GIT binary patch delta 130545 zcmZUaV_TpNxV5wGnrz#)ZQHi%&Ne37w(Ta{n#ne%rh1=!9Q*yWzpbCJ)_I-RNi|}4 zEn?$#Iw0q?&5hFkp>;E72%%f<;6N^$Tv_^s`cdFj8A(wS zvuwXJ#^|q1I-A3`KXXTz6-KJ|y=9d)C*PX2J8%7o)s{#taf`)PTZOfFHH&QoXxCaH zqD%CL`%j3(x?7qfKaLd;L!99>Ibd-MH)+oz0MW;)fbV0t#}25Az_M+>+638*%ie151Wfs0w(}`_I2cERnr(@?RPCnn*-vD_@tmhZt2uY0DEABC_6=IQ@% z0xzDnA}HmWb&n4HTt9h7E8;v1gXoh6;wk>18R$~mv=%q7$wGOqNp3lg#8*j$=ngBS zm-lYuais;+zI5+fg@3JOL$j2E!s|Z&F>}h0xH`G6Bk8P;>AFTw?M@(>dfXZ+B8cM- zM)Ii;e^8GL>DN-NCjI&2X;!*MwWv%u9f-T7Tl`!1#)=9}rE0hEFVDSgx*$35OrYJG z=tHS1hD|3w5o5v7e@&UcjO3VSYOPWwOwY-c5c^pAa`0$dkwMoAlJ+D)45!7PtR{_G z8EN9nO!+*hhXXbboave57Qf+lxEf32iBs1HK37j#wT=fIA}L!G9g1RQvc5^bE)d)f zg4By~9DN*ntD;&5q4@KSWKOPkEj!9a6w-ob&-rbg{Q;e>uIz%`Qj+jQfjr9rck^|( zYB!ZPc4VC9V(Fw&G(edoF{NPDGXer5oLW*h6a;0ilp&F}T7^TK^57gqZM@1crO?Xg zu@s|Zrj3L(L4Yxf*DDp_KpJk90=QPwa8HsK6}WhuiRo#Sj97>E!?A120}0b2G(NS= zgvsMz%q30BMOd#n{=U3JN~UV!)Q=t~stl3p_d|XAw-st12cF~HdTfE4i2By~M6)4q z_bC$nk3y&B+@(Kn8LP&t>}Is{e6-@ZS97)fU2&);;M>;&Q~?YB+xNaHA85}%_gglQ z6t-hb*S?-VDouEl9veBI3)k*=Abc|}yfm~G+;t^U;_Ok0dg6Yo&Q4tCN8>j99a*km zeH**{?pKg*f;X+qcjr5Z2Y<4!ME>SU?z4%|!~9P}!Y4+>j2OsCw>8!G&s+GX7_O2c zgW6xnkz3?RN^owRzX!Xe18~O=%kKTMH-sMbjF;LRFDc;s%r+sCs}yq2Q_uOlYg$A< z>?bS`-y;zowaX2K;s2fR+Mrp^S>{|iQ6zodp%1qgabvgBf&eh3x! zb|e8kRGr29O1G#fm^%ktV1}^Fpi3swewzrL$9DhtK0T$;ZjMy!n=k#-1R=%_!M(zn zkf>xpx=JX=!NYx>F@5Ul*{Mp~k86*!47m;4e@!u=suXms++xG0??-TOZZ++UHO~-f z!_I6jroPU2_IUR70)$P+2MK9Jpj`!6|}+QM*UbPMw)YHRBghQ|gEcjFN zu1?ycX_@AJ#+DPu{)kqWo+A7d3$*xh>2aa5xHW$InCUA!ljy4yXlOuxU!xIlzdV6&RLhC&i%P~r<&&MV`bBy{h*blOP~I8H zqynY%s&A%k{ZU&Mevu7<@7i0dkeE6%&wf8GTje2j1PsNENbfB~_K3`5;k8Mq=fl3} zHHrBBeeK76<@PkMo3?&So%XvxO}n;S0iJRn#X`n2{!Q{`im7Szsqz7CXYco(NzYAA zOGHCG>v4KxSBH@7=CTcdL_W?ZcrDUZ@&hfTA*3Id7AQl0GlT^#vhbhTmb{d zJmEVQD(m|%6M6Vp-@2ay&R~b!u&)JO%2@1{oSR&WdKTdMV?LmqmOWG~3SmlT_yDF% z_7eFkl2gsLuO6Zp+s+Ar}rDtVIfGM?a%i!<8P zF%j0{_H@1nxNa>N0G}j$S zB;>S|^fHA9ixz2~3Y%Q1y73}j8vYmwLhmGMWSYTkL<)6>g zVyW-$^{atgeb27TJ`w;)IX`S-M8JQ_@QmzQnf+Dk*-48}{9_gpZMdUFu+tI!@@d=5 zz>78{m)09}w`Dl=FkK20Vog#*^RUT?oaaEkG#LVZ%i|X2jo2HPw*=(&8p0z-n5xMF z*8ou@(j-YH)-2$HY4M9Y4meUwG1~@NfpKqiSWao`-j>-lLA%KEY)dy^-{s;cgquz% z#9r~_4KO}F$ca7E=$}n`+D@ zK_$MOxgzkn55f1~w2zLY9)fVT3m-v{Rf!Hwhn1I&ur%fgF87OiFgx}P(J$BMwGmY| z42zgSUDQ~rt-5a3TAeYPW%IEnoh?rTj4hYi;ymRleL*~BoD&KXle6lOqT-oK@K6FRlm>Y;B5j%lR7f%Ls zL&fdw#5R{o=zkq|Vm8ijYao__xqBHULO*zf*d#B^h=Acmo@n`ymeddGt5J*&iS^nI zLy=}0IVyGj1bLX1DQZbSJOs;vNB|-Dsxdtc4D~k}=Z_xr0t)Gm`JUoKEbWI=xRR@3 zc2G(Up|WUw2vt7&1j6g3?>PO6i7%r&5`+e~<+;%H0=i!!7&MI}1P1~wXutz~{Hl;c zJygVEL3OKi(MeURB|&E;wJUQINPhgmUZV_*BQK<`QVD)%{P?Aa+kGyZ6$tmqxTUZT?jlT8kzJmmih9Aya8E3;fM$3ze0{(t6(v!HJE{Cyc#1K0@Npr& zgk17{s?{R_)s150$RH9ZMozGwi?eX0k{PrV@ z8q%JRE08ylsgHWke2;SaIh}l36 zndW2~38X=@9WY!U(r|%fxL3aIF+s4(=ZhEY^Ek0%Q4g*4pL>GnJ4St>LWZ;_jP?KA zFUqsE0eh_2AsSCzR3^qS+%Trh(lTcfV&cv=*Lix8J32N6(^v6X&Oy<0sTDq}yg~BTWeZv*V-8qyxIl|dB+z7QXQTUG3o7hG5m+AgJk$uPKKI5Nj57RN zLEjjP9YNbGfGJXJy*^p==G_v}jac3Q`Yk;r<58dF?`-X(xUd^)`!~6ZCy@Y{6;@@@DG1*6A5hd0U)y{z`|Py)%tGq1E|rtY}$| z^H8j_q}ns~%35A?`0@0|yT6M2T7WQWg)SYoHvLb}^B!fG7j{6Nmc}n7RprvE)f;5J9>iavNAqLbS!4$NgAb=U4>SmD?B~i^w??@yoD;{p2N>R zndV@^2vQCnc(Ed+{2}Q~Z#u~Y6KC3^`UCIY%-taMghGYb;~mWa_wF3=Ia39pPO|rQ zN6z|!n(gsLj6D3aO$srjI-9x3>Ky823Z}p$R1 zI$@`xL^fGOD%b>MJLYE56YLBVq+m?YG^dX~4XEa(%T{9m>WnlfD` zfhO|b0^-FVgLsO}2MUPnfb)ot-^h!VI1#NoA^ZZbW3htkb#{?|{5L2QyFU0$;g+Z8a0UT2k7f(kZ&-7Hx zuN^gSGU4W(=(p`+H|B~cfdXELlJISHUNN7Jb$id_YNEg;NxahurF_^1z?k}%_*?`uM0OKE zYc?5pZQEB9@VS3Z65il-t|HWG=F8#Umon!cKIa+^z@2gKj8=P2Z#kNKt;S@i=!}zg zI&JCw%QdK9;(q%lQ?S))-&=D(p-p$`oh)UOf`jbzVQbHedBH5>op!vFjj#VY`_i5u zAEriNf(^}2k0R?fcWi}i%18$MczcaK7*9Up>~u*>rzJ+7b)4ARqEy`_d#KDs8qgY$ zCpEmlh%uEl+4t*WxEgydceI2CLw?C%2`LlvF>0~J9Nufj@L3RSR*{e<_!&iAKz~;A zBRzG4kAkkN`8xx#=e$RtIBumX$xA>iq(eHqO>Zc5B&u^}COPpCgC!G4bNf0na39-H zz~)a+QBJc+!|IwoxSfX+{j;-Vvk4+Sa$ksV3!0+C&E`!CCkUxN5E_KE9IumhH1?~@ z1K78}2)@pC;^d{ROCf`Kxi1X7)-x=9ITh-CcV;RWC>LrzZP*7)xnN!}a9&OOoZ9HXRLI6ahF_d5ifrFDO^mQm=)s?spiQvsZM{r z@1?bED>qhG&Y;~T(OfdJ!!?bCFR$e`G6O>Q9)dUXK)3ABIaZe4+DYQGLGa zTVrnxSRGyul1m5`=5lMh#}1!0&tEW7yjx+IinrvS3|<6=)|W1Z!mynb(GGu87>qQ# z#eHNhAjO(17xn-b6Kj3G)%6_50cfoxJ_0@@+9dnRm%zQuIYf~@QQtFIac~NlU3XvM z*Xmq8jYaoFoZhjqF4CH3BM`S^r%^^1#qR}#XEu*Nza7KhuxwJG5<`hH1Kj+$LKbXa zZpwIBqr*fyh0D0te4j7V7BEm-R(vqkp}l$W?auUen;ihR7PRrFobE^@UiXV53RsdQ z)=Wr3>*7Wd#k&`LA1mh!w8|ZLSRrVB;}-guu_D5|ukz5`N04N$w@~GO>etA8hY2Rq zw4xTF4@1#N*%=$2By41qp5V}9NS~=zF{dc*7BMH7DzXrJzt~#47hd}F2{k#fs=|ctoc1WR>Dt|3yx`xE3HLVgCzDMY&?Tc*yj5Rx^?GTL)s4<@ z-RGVY0X3P`-FvICw9`}61zU`+XP3uAjqLf2*2-8*N)l;BgP7A>m*V`FJDR)lhAlg7 z1pF*Vn>(CoY^93lTqNiXN31DXN6X9I4s6=18j`?PXH})H3fg$Cs8PD)O|_1K@F?pK zcs*29z5P7=WH*SNJpi-!LX%Xk7;M=2u#Jk8M5D!Kh^GCdt+8m&Oi+a%R9*y7HD9n@w1P|KWtaB z=LCn})HNX|19KJO-loddOdHLV?+i4DJ_1mSii87}Lm|can<|Ly+C&g%q7O|)AA*)8h z#18`t!ToCg;gJkV16AO{bFM+yr6VTpP6@s?Qmf&SU{5TvZ)L&KJ zKpv+I-Kf(@V8VJ@k(BFXC<>g3_Jj`>(kQ2rl~c+7J$D(6ucAxY$%Kf>6bI`>-(=Ux zktzovAv}>UnnRGtH^%Yu-xZLTa%uH*EGU{&dGg85sJhCZ39cdJVfE&@Zee~p+H0p*nDG{c#tp%*YymdBwtb6bR*PS4S%wW4DnB)FJp zoG?@NuPzYcTDm1uX9Zv%zrM}!#IajJyaJmkT0r%)(e$m7U(vzMoL^c#w3H>_O%dhh zpI~J%T@h_rp`ABZzSUD^pJ>_^+eDF*UGEJ<3F^#TC&L`hvamjzhOU*5=?dh3n&lSd z&X3Cu6O@no&QlS)pE5P1T&5))1BJ@_6}p&*&JiVhOH-oQ-3Q2>KBqVX)B#Pea+LYw z5C|O7yUZ`t-^$;hj5fY~Fm%>s2d_Ol7@1(DSz4!gIIAlif8&g*uS>&)Ki?p91htY& zXZZ|ltmKMfYqkjNOjWWapgHj`6wJ8#-2#MKa%9b>@zq5wQ!tMC4W*MZR;{ny%A{*6 zm4)OZ!`8r){pSEUce!m?E1`vu(CK?eTgy#JW;v}>k5_^%LW(gSydEt?^cGrN%S=3 zcLxK}ya4rI_E)cmdzxn24js0&bvA2)M0c!-%|fWxxl$6pncU3lrRXKp-n2M|os|My zi|@}i;&xq(nS=rtRv*s$)>L%Ysx@OP=Q2sHA*&Pox-9p)%Ss`0wtsC0B4GFC6GhBX zv0-I)08)Insr1Xo|k=; za{@lzH$L7NcT#pyQooCpMQy7;bfEtVhhy3-p21q@d>nDsvumBpsC z>PKPQUg_RLyQi@RU+CCWVNZG0JlY}}zPDcG3LU-=O|(DC2VlKCj6G3$rk4jB?uBJq zVW7XqKxVv5fPQK0_rfnKb^R)P$qe(`p8*;|Y@i0tJ(Z13Fdju1dV2z$ARe!TQ!T3f z?xnJYKz`4BxGSEoZ?_LHRsL%4XIJPcdq}Ba<>A=C$#swAJf)o~)Z<_B__eH0VW1|+ zSNjs(5T}IPvVF}(qkqw|g_@q%f zB=Cb34U~>v8A*u-jKL1J!1?4ZT?u3Me&q**q+QWP+zS>PVRVhcpxlXeJ*+>E3Ej_s zgB(H){`)^Oj+^y=XB-Jrb)@w| z)Zxe2ne0wJP%BrTA`QZ}D^M|i?)b(AOG8HT)wzEeS(CJ56wq&aqW34Tj%YG*x`t=3 zP2Xs@H}QVh)z5;+l>CJJX9_)0eaMAN`#%D#;1708Q7W_>ZO8f$SHt?dC1BR?x>4*&T)D#AF+0gPvPo1gJ_lxbqGr5@herLP}}_zjZONg z*1U=w1pzaeBo2kOnXi_A>%bsb9Zl$%*nm>lhd+XG&IE3TI+Z@OO|p}-ma6*eUtR`j zGqL7|i*}L;15GQ()j7PM%y{s(+HD1V9i(s_Gq@d+y6Eu^t3|UHSy7=p^}H;snrUOn zdJLtkteVBi*NkKq?@1#3(zXbs8nD1_&a!zfZ5B7#66cS6LNoPdM&M}zqrs)x#m3FW znNi8ZtI#?4GRkKlZgB*fr?&nduD%vqXBI61^c+P`1XRu2;19ocG9^x*<+UymcyZR1 zJ=hKB!(JFnMktnJcE#>OsMm9p0GY)8rjI1h3At;| z;(E!OTVhzEh%UB|Cb&ATu*QT+(kh~9%*y7enBmBr)9kQYMCZttC_0m|E6{q@P&J{IFFaEzb8HrJ(YlNC218v9Fev#g|okQL6jc z%8ls@i#MWh1iv!7xh%BB8d^>(i+N!jv)eDvaSdfm36ABvGBjH55TJ$%hB2s|5;+~Y zSYS+BxnM)&rTmq#G#Z94-}{w%R}=PTb}nT!7nJB1l4-+0De?!Yp1gjFH)m5~&H~n& zOy@>9e4B3AB0zc)i|Jer<{Dd>=KOIN+KMB8H}o7uP9ncGlF1lpto++}WONvb=YiV{ z$$GVD0|Y-?Y>^b~wuQAujhql3fssAldx?N3T^6T@1o8IwxY(X%WW-KCU=@|o>ti)+ zQN;WJQN;fg0U~oloDOt(AQW-qF>q(o=5jSaHG;p#1DzFEJ&_g)Btz9K!-B;DIJ$>a zFuKe!EF5z>-k%75k^DTXi9`{R6~fSA{!PB4Y4@Ys2zEK*T<=t9Q|U{B%cAx1kn@Wv zEVUqM!bK0YX?IQwXflThuOo`rjPS5W<}j+3Pb0$P@G$t~*z?2-@2WRCeCcp!>Vm-< zjqW(CKo}odGx27Ihs%cfqbUb4^E&Hqm&z44^ceX!0FG$HSm-E3gi(Y!96MElqZJ`) zhNyHCZXSxgl3f+fM3X&+7tWiFL5N);4K5WMTzXMk?%IueX^PGd9DhU8uo>-AvLi1j zM)>_Sq#MtgFi{li+0~|)iF$cidXyas(w)l?_;#yw&Gyh32?I;;Q6c{1(%Hnr0bfi- zc5;a79jBJ?sN{bzX==d(#}K^R-UG*YSoUTi92xSy+h+{m&wZf+Yc+DOND06lFIo>Q zEE)YNkAlp34o&80AY7k+h8TCApctRCecxS@a1 ze|HNRm#L}Kq=DNc|Fo+NQM^F3_x95A6P4*dR zy_I^qZ2+epI>o(KDz^jvOqI?X$oPsdMU6^TF7En8wSk9Y7r%$&Sk)pxO}&x{2y<~c z0lrqWo3%DSWc4>!O0 zwrV=^*R#pE9e*7yti>sEZjToc5T3NgFxtR%&xD^pK@-w<{<>29tw7FTL!qw-0n^HK z0XJl#Q$ze$;J5%KBO;byZ(w{<8THQCF&d5(j6wz*W5gJ1R}Bo@5slyx1}2twWF>`m z?>xt~BQ7eNolnjCb}8A^CO)11F_H3SaRPz1u3uhs_ENfadvHxI6R)rbkg^Y9Peii@ z_kkCM@c64OMEQbNu&O-R9->_%1+u|$ub0ih5bk-OkZ^CE zXC;t0RUs#%+=IJreSCMPP?K(1BYF4vIz4)hfN;>Dn~@R2##mNMT`1L{LFQ);p=%14 zsdKJ~9#ON*+E9u>s@C!ZAO&gHs1R%U@Gtk#97lnhThQcbof5*E&_ZuSB&!*A+948S zI-sZe*Q8+R{N#wK8^A6?`qxt#771P$Lsx5BFpR}eCOOXRaZVl369elNeK2$#cG3(s8vHQ3}C znmFkD!J*QO|CCe?6kI8Y3i8~zTDv!42_TV$@5oQo!ID4c!(u^#hp5k)L}IS6ORBus26 zn}3NHZZq6>!8*M(tU?;EaSBtt;{P_~-NO`4hT87VJMg^xFo3iLPx$Cua&fQ>Jl~3k zbYUlb7Pnke_Bxr20JqjBn-GD7O9TwGBAS({5^|vC_ap( z`ADMpL$L0OdZZCddWYHF*F$AW5XYA+f4HQ2l9b7X0?YML{{qK+rbWU1n;3e6IOE&) zoK;99P~AY1@PGR&JfqEK%sVT#zJ(p!DkrquoMyiOVRJKa**|t<6ro!2xNe*d8dj6$ z$lR)*6G}oUYu5fuYpDnDzbcQYOzQ>&({N)wFy4n3W1jq_WrC8E#=&{^UR?2)E3pY9 z33H)(u=SN6$`tddG!LUxJhPrm11w)G7C_v|0#07JRi3>0%9RYOCeWL2g{$Msj1RmK z{cqU;?i#f^$r*nl-8wQp%eNm@lE1>>#64(h$X*$ZX%Ebdf?dewp7z7wC-e*l=g&E_ zpV(fV7)9(#fz6jVt_)`eUM|1>n_?*0ItF}$K3|n(&=i#=nQwRu17+N*Q##(nbs1Uoj{m{1Q%%w@0n>h0bKddLF079 zdt$18QgmMtpkiCJdYLpa>)$6=ByT-e&G*=lVU&g%-Oj~5f*UhzBib3@g60oze1rc8pofvf__6!g^yo1 z&A#m0EJu_p*vl&7weu{`xZ8m3eZka@XK{u8m;e=j@F-rn?$pu zvBarw+`4%8rE@bsl)orwkW`0^o*k>2WBwUZ-p_ty_HSG<&d7y~5yplFIZVM<2-b0a z50Q8?9`_djl%V+=_Ds392D?jI`@Kq$9q5FT^;Z4ZBBRU1<~bkmrzPlt`b`~DI*ah6 zuwB^UCoEb*&hOWT9)E-TepL(7ofS>A`+zl!y|guOPH&hJq6`Z*A@OH?fa-mq3bH+Q8HtW zqQ~E}m>*{=h#$_+Epu*&YaLcP)SYrtN)05{45GG0vk4PmFY6_V6W!;!P*TWNo3zDA zRQ+vDe%w>X64J+`L@529NSkm4ozzmN5OF3zC4J&4p9Lr2<)PA%BTf#r-$s7{X;Fs%PuQB~ zzu&lOOXQCpg9vN5rCt3`l7yVA=luy-VJuVLXn)v|MqazPGygV^bXo+;>y|2qD>5MHVRgJsC6n61UUe98kAA$b11D1 zybz4Efsd(7Q`ymC)fZ`{r736tRxa)NvIXCUQj_KX)#iG8Wp?q85fC;cH_|Ayf*pv;0eg1ip(8wBoBANM+Swyr&bIDs?d?bt%cHHsoR3h7GlX&tkMPEivP=Yz zo++r_ek-v?Zh1zTTxT8CDky79Y!_RZE9H6>A3%lXH$2LjKv&{VcGKv1Kr6NSqt?;b zRF-xua}<9){OVrKBaP{d!x%|;UUl8nuWJ2DMyAZ?pfFrH^#q7p7n48zJmR&B?#4yQ zuvdyPT+VIdcdVl+tL6j$cq0)mP<8YC(-rnwLiKDbS;d?~B}zUVq{CUW_*=}^36UhE z@ro#4y`7r`NA0$3i4((3aWH0{vH(Hg>Smm93Kl<(|y=5qE|y zrP|p|myvQh+cn^~IR}dX!H;05YnOageX`*jfvTF{`IY(><0F{ex<;HcM2j)^B@&ql z6Q7-HA;yI0gEEi8#=3yd!XYx(4}ehIvX?~!o|%K(qiveoxAu+W(D)PC5DA)*8(=DE zG1SJBHEU*}b()vW(AMRZ@713B9GT~hR<|;q2Zg7i{00nd)2wJZ;JgYinjx!kN<+CH z@>w>5Mf-pFtmB>K~|;BRTR15>t-BJ$VG`t_@x z0j$IkRb)98R?KL3B|m*pjU@KuncV(F{Dt5|k^(IEMEttzK4Qx6j=wBTY1yx-aY8z^ z4@%7{-U}RS$&uaN+O~|33~jgfl;J$WbyfJxq8*#OrjzOZm@ZLO*@00z1mGf&E}@!z ziQgo(>Urw=kmKnm$poKRr7D8JV69VT0xRI>JY@YhD3;T?IWk^v`!BoGcLX}|6Q zKml&=mA>(`UdH$4VuZ4bGK#I)M#gQ+1%4emqlV!Hn|Y74C}DPRK7Elk&NOy80!)}2 zrIJ!joq++v#Ru(t`5tlNFiEPyz8S9^qt!A?MYA&?z|f3{=!h5&a)B&5Qn(fF-N zhvNdXPH@)Br!QUJn@9_xxOOgmFEXzC6T5|`aXHbBJ&~f>%XcEe@0!9Fs>0U)pI}a( zE05?%d*r{)je#N}8ieMC3P`x}TA=R4F#z7~sEL~h;aikB!E09`;a+hMp=NzTPYI@) z*k4DSaW*W#Z%;@yi~=90ddBJfqP|)x%g-o}14X`_-EAJiEptXED8`B3f_nSo!nJ&2 zNtucK<-d;zA^p#p7jFZa^q|ST z$Ms!J`t3MBDW>XtJLqJqIdG6{DL0*^JK>M!`(A#J%+Nkz>rVU~aHAx8b`1?~K(ET? zcJFR$H!#P!h9mIDT;BqjFMVt}aB%nhc)DYGIz*A+6+3?u%@AF)Ju}k=x6rUcOTr53 zs$Iy|$@7GXlPs{jXc41|ZEJ!%S;vdt~2+9U#W5_;ua8PxY4jB~*xUo(X!?FcXRQoU*&$wr0KS|zbKY(mp6_-Z5 zkgz?88c@(+ePmH(EZ&l{p5L+SjqPmgN8tB|KQ8n?;f{P9jpmW{@D~?%LGyQ}TEL+N zxmBN2u*pW!yhvcT}B4q@UaH~&v|6g3@N`$U)SA*$7gcC?~CSE2b+-Me`kwR zl|R$emg~sad(cc@jiv*H)7gdxI#;peYl)B-!5?188b((eHNAun0s>DfoJ04zwuT=g zmNt4TNG4c+O-9#Dim%E(jb-zQrsO==TWd=zidT@k_)>|atMcDdh!Q?hKF|AsZat#c zk(X+QM2F3EkNsAyf-6u{*2LIJB{iFNCL$`&*qP0M!_Qw9q{EQ$L>(FTE)I zzW-oL@->=m*B*orCuMmVIoyqw(?o!`&#cz~hTqSovurn!8#c4yZrAbaS_-o-3dyg> z5gHtRj{C(-`OmXWwB1%O_;zi8+|e|B!V}{z+i{%O@=xy{-vX7`0d2=E9l1Z4Qh%)T z-?If|pGYftT*Y*iA%8YHYVkjpA%trM5>C}?)xZd?6?vkfZ&aYW*7%llykg`m2JqZ9Rh9 zL6yhiYeFD7jO?QSL&<0~i&t^+DpG7Vo6iC9A!ZX{>nPw0mH1tRfF_}--$kpUWf(W@ zO(qR;ZJH^K$a&4@MtnyJ5VsUaD0?lNulLfBlD>#+U$YWCf_ofR`Xvehmkh@W|JP^& zB%=T54)fog#cFnKz0_?0Yh#lEdT zf>PS=-0#oN=+6Kq1W(XiW6@hWk50o7zpFJhIR=+i5Ue^w_GJpXk@Mzn`ob=?YI}K6 zInp^f5w~!I^W=xdn&3}zUmjgiQCRY7k-*A_scZ)BcYh*i`qwh_wwp?dTZ#1@WCC9% zeP}Dwuk`^p5LQ$OI0g>5X&%z?`O)OFtK)KWYjOzbwQ@lxZ*m+ow3Suj&o`iv5B96X zhwu6PPx6;+g0ufN)+DV+80Msq%FCFnGocPdt|DU>5kV%;@fcAuZeIrSW6roAyJ#_r z(EOv1naKh-g34xbU}q<#3`6-Va#oGod3)(;?O}3WP@4w_bWRVCd!O1Sa9DkHO5iCi zo_up#ATtizvva7I+xA~eLV!X{{oSp{efcrG1iQTkwli+VQj+~Rfz_XRbW$|}H%*A~ zXS<$0qWyyCbb1u6(@m=8h8_Q^1?$34(-o;TB8qt-}2v~zcU zU(FBoCttq^pcCe|{?z?7$iI9Xm;y?ca77C$Vx)Ci?o;?myuzCY3OiWbk0SSKM7y>Q zI1cy;@<5CV&gSR^9S@H}wp~wmN(28KsxTBcp&un@&)1EG8Y>&_GqDw=*8PM6#qESu z65DqL<(s)jlDP7#$G7CEa+;b)G2tvaFf^BjKE4?001OLZnNI(l732})zE|w4i+0qU zJ1KRTaz%iP*H$0Ny?JvZv_`%m-Q4@z1GB>BAn)n88@0emIOCp3ny-bDekG*Zl$AX> z#5&x8oC={Ispdf=IFo810!L75RjV1O=43atuKKvXw@;4<9xmc8!F2JvE;Ysvo52x? ze$UP>;66WtoUqbWnklkKOAZu!yc(q7l`&%>|FniFC%2N&?Uh{#Tt&(43nC^j_Qp{~w&BzxqLcNP;x^K9UQEL4YjX zj!sa^hx_^!JAQ?XlQ!6f#k9wJpLuA-Vu3nl0MRL0WO-Jihq4~@2R0>9VCN2Un#hrf z*6M=?;RXhNWoy@{G$}ELe%}`<8UkUTWFIisyX^8*)-W6eW;U?nk5qNAnN+Q`(OccUmf&!IJ~D**Ed%pRM3W9eLho@c za_XTs4B4Wxko%RMs)}(Y6jBDFNwSkxf(3RlNDKpRMh_!AYI3D=V#6FI8Tkk^MxsOu zqyse0#2yXvhvz0W(xW2VX}Qn^m%9+mw^RkQzwYbZ*|)R?pt7a{x1e)eVf}%Xz@;nj zt9zVQxWil$(Ze+PS$m$Cpyw}gh$@!=#j3JaL1b46v6ZpT!MjnzKUZJ#1xwgUpae(O~CHEDG^}e!2b6kwV^l0L${k9fy}z=8TJd zTIYCbFrO`RKO>vYaF*U7#lJq~yw>3)HN2(+oT*N<2w^7r))SRVU z-J$L6<+$qikd#Syb?_zZwBky@{L?5nRa?&cTVvM-s&s1dvn}(pfi6Y}R5Z$iB}_z) zT=fX=ZMd_Ns_u4T@^y0bb!SIy+t_YCe48T}*5DFfs4SRQ$1-Lc{hk?FFzf`5A@Bi3(B+K(GaPz!&ggEWgL zE(!PS@P9;-K`$I@ z6rf}N1bZ2MTcW)E*y&H}A$bxYqAIP>i-O^w9!r&+%>p!&2XY9>PlmKxPPtUoJhRvp zDuioT>@2rosd)5t!+qP}nHadA@+qP|| zV{~lWHab2%-nROig69FK)GnA90AR`^I#$P8U=@I$OC@> zxTkT}`6x*%txBkrNELW=(JV84e44kSq)4(nU94zWmU1OAV?W@;$_TmecEOq1F?dk5 z>NP=ZQNvKqT@x)Yqb!6!>VWV_@IrELqp3S=;-6us!wQ}ejI9bGSK@ToRCoEv%wl}D zq;~;$RXh_&Km2sIB$=98)-)^D!?Mf|WVx;N-L9W1uC3&)6oMH`$*7r6CNlPbQ$nmX?VY6JjvgJ3osu=5Bp1t@V0WN;maJsSf(is|8i$5%hX5%Hn&@g!}ksRjw_;O%*ka}7_G zuf552lx&4~y2`G5Rfd+(aP|}fkwOI=g3~Nzak#{%Eh9~m#oMBl1Jdn_vHB6H70`H& z(&2uPj>j7XrATW9QfW5Xy#giVzz~sQ(lSY!dRveppBE3W7-$2^?X3QA^5mbt!qBuo zT{&bfQuY4n*h9^zACmhUi5sK)i`GW-`0+S2tGv)Y$EJHJUWL<`%efGi_#g=o?$2wo za2MmCjB4#kU YWJHgFL4n3;161w;_vNf`h{C!z*1hUdB->kGj36wz|1Ed{54YA z)XH|g38xw*kbd^8R3pY4+0Qfk{L{OtCItG7w4n8dn3=3T#sx#hL?UQu)tSwl(K!iY zRMRC*Qg2m{>*FIVnvQ&{$Bcy4bM+$XR-@w5YN?E{{!eB_mlc8qRwOaEX1`M($qE0&Rv^lF@{juhF+ykFPHll2)bY^M?N z*HfS7M{~kn1Ebec?>1hVeUY|y(y+b1W& zKo=l~Hq{bYgKpJQn7!WNY~GR3rJeWC8AawpPYimtID`InHfUD((|dG>&`lgy48t{Z z*hAY2W6Q6Hv3ohKm%hrhu~8|jrsF|;Tnk8{%9~JX>`btjcBx)3=fu3l;xig?(5#PA zs9&ERLR%Pc20j#fLM!PEeiT&ScH4YLTaa?**6~nn=_skw3cu83&#CK5TgH9=6$EGj z3emp!3`_m7v2bEVvqm|qm)!Ok{kkvHazQ`Q1}s+X;J>2Z_Wmh@X3@kR6fz=vf|{(S zKvpRpkslNA2(WNAF&Hm~t3>m*#6wgp584wsdP7t(9uLXx+BqLA0}P{LHYAK$ThJJF z((77moBq92B8=-M9AOxfKd=lg_X1>`s1g<>l#^1NPCJQ=J~Fu$B*%6(HVX0Kg0)r{ zr9!_{w-c@#d-l-NYP6WW{&wKS_5P)Wsn5*063qsh6TFzn25FEzwSPsZ8~bIaxtm67 zCSIsEAZm+|xdhQx!EE}+S65ehP&|WYh}3%E>j@C&R};Uz zk|$*`KT=+aJ=!sdJ~Y{+qr0h2<6MSiQ&Z!h_?KMxTLu#OrTkCA3?R3}70nlu)|Huj&~N?1 zRfDsJE!1JiqgeCVp#4fqy9PiVj_X<8R04rRNCfoQnQdfU6XMdQbLEN@i-#Ki;OEqH zMetFLl4rKS-9znRf9sqTi5l-pK%IWL3fz|?O-7wWwB|+t9$Xp@lbKerL)aDmXFqeV z5QjnVw#Nr1d9D=0+qii*Fl?x*i}b{9veiN9X$;gd3^`(G9@i^xL>b_;iy$6e)zOa4 zh)!5XH$l)Aqq0uRMQ*>v0i`)0(CcS>JyQY=?M0;A2`#7Bc7bnV0Ka68?-cxBPU3qCZl zReP@AfxwnChxQ4Kdj|*_I$6|x@iw815lzaNECr$Y)88w+i7s#H6G{HTnX)&?wD`cd zI)ED=C&y_kL_7>YgzNxA6$)l-2h8rxMfq@}N(PAQkSQh>pDJ>hprH8q zlvU;8<%l_DDD74%P(-u5YL^(3m`y|yM7Ng0B9N_Tzl`ee_%Z`%OjHaSp3Od{n54?~ z`5dY8zprhqp*_? z<`(s=j78F7gU4S6Fk3~VG2M`;IbElXcDpAvPp6&|xh;GfWIR+Nk_!tQR?OAe$SW4q zSc*k9tY5ye;kiaUzs9|@>#+|G`Mv>aRC%u!dfIbA|NK`PRUAFd^qj(p|K32J|U;0Kc!*`V-pYEL&vdz)z&0D z97YFYqZ@*dfX;>RLO{5&_6(9)+Iq+HXV5R@71O8A$;E>aiFZq8J-XJrK+ zL=>vBsZ`Sq!oN;4ai(R#!Vgk#jNHa4+{1U{Se~unN*n}MyANqgh8v{9 z;CJ>Tr(_FdIRtRZh1O3g9@c9-nSYw{Xm^)$32Y&Hff51}T8U@*uj#60Mge=uKdePy zqDu%oxm|hqBnXu#b2QE4*n`k}X8dr$C@WKy+r-wwanAs-CyL5wQ zi4!C8HhGAw(kwQ$rQ+X`YD`u{x_@grDitZt@j$HhB8_8q;^$|Hw{j)U`SoIJ@6ASw zB=X-_S4iWrV&DEoW?cPbAOM_;ld-H&Z;wwD@AD#16ZG?S+=Ol(2{z-)Sd-4E`0b*` zMQPc{!EWyuK@{DLfhJfb!_x9k{K8-q?E4!l6kP?FM(HIzN6W^>?N-Dak?ti99&MWY zALYnkOF6SgBqp5-ITF1PY7A#0RHcSX@b4v~);*7Ai#~q1f{&)&Jpp=xm+Jpu7hjc{ zi9gF?71to9rx3Fn0Bj>_tB6`DtDWe&ylg+#LkA}JtBDVimaroc#HwP=*fA~kqZO20Y65yNT z=>H~AAIl1v!2(>zYc^BHoUBItcouCfYD6dz5)-5XU?rAE`0v!Wv7AjtHX#|8QkAMC zYv8lrez)AG0{!)LcigaNl0Ui*vmhRTm*<$tK9(=VPIJNC9Q_4-&f|4OLe(xOSI;tn z13GlNSQ3wB{>QHH$83Np@>V+F!#Kkd`KCiV-}~CUyGT~hZ)$omlaMk{Y1KRBuQytA z_89B!O0?tb`iK7V0w`a!U*hmZo6yeP-G?cE8t#kk{7rP215ca06JOfJ*tcbK3jGDd z%rk!af0PG?p^%%mqw7sZd(RnA!9C|2{NDvk8Yrz!SsJD05tG15*}Tq#VLUx-~idpz2i3Aee3I>xp>gX6sl)X?^J$3+jRjAY_(M&9&{)e~! z#y8RnBsb!2fF8ExDyfz7=-Y)wUy(X z8PvBP0A4P(9zYSLd+7YsRd5;(8$?j~JJhm$1hY%ktYL>id3t1A7=kU7vV3WrZ{vHJ zgeUv?mv0AGGr{9cb=w6oR>6wjVr^6zH`3Ve8`?>tI;t40QOa}DvSlAJ}H-LlIJP%;X4bjEWRSw7iE}=dHr6+t|eNhii1N z)jV64sjerul#R)>PG@Y&&{v-zJ9^F3di355jd|Ud-L+3SQ94(rl_i}}K<7-n$Xpfb z7`(XD$AHzz+&hAqoDbo%hIMz7USBDJTOo%4PAS&<_iy_Feu5)^JR3i>x#PL<^P^4b z9qLb^1wS1OVHT~y{3pv0ITY%_95=epb1#v=fzype_@?vo7md# ztpHGn)vib!vqGa^<6-*hE1r;TwC{}!uka=`sqL4RJR+f{V?;eX7c1L@zGLuX9HU+SD1xZp(Fvbh)09xk zg_=}-16K|h(TMnAhR+(&h_^nfWSYb>M-)Afy%y`Or4b{jYuhos=%<|{Ovzy*hXC}* zZ2|{bc@h&y@+I367MU{oBOVKQ_xp)}XbUqT$LCL=_vB1bpM}$S&AXKle6T~x-<*U2 zI>0%Y<;>KL;@Mv?jMBe;i(n*nV!H66`>?vX6fC~KY)TV_%_Acr#>sZF{G z?X^+jBX-*~(!CZBbKpKRv94)DWQd>JMzvsGhYg0A}_jngs zb6g*XiiKA7vN5D&+;I)y%!>`PDb-dd&hz$Llq_e9v&z;kHk`jqXVn(?&;llw?`r7x zfEwFq{;Z$;`OONc!Bs$Rv|t1k9t!1Nj+douZwmTYBl=Thj#&%hV~W~rKCB#FP|Z$! z?Xl#B2n$Y}G22}$n^#s<&A|>=VAD(zeER~g^VgS>5WQl+tQ?4b&7IdON&(At>^IAF zlv`i~>yu@sA!Rq(;>=Aiy*t^tjic}TuQ15T zwk@93>e4dNY+c+Zt+hpw)$_~EdIT>iZd+Y=W4$I6>+HM>dE)Xe*}{ADsriT`xTO^s z#!Cl0nHG}##G{s#wE~IXJar->ucu6~u3gQCvj{=%VuvWRXaP!DjTr!)OGcegFgH4G z={9>p_>TGaAXb(!&$>yV+#FxFTxpwg=9sXjZobBDgdpE2&$Q)4cZz^WiSvzI z!`;iIYe+RJ9(fnDoR?TW=7ciJDvKwuvyIm5_c*I=8AJCkwGU+std_nlJ2`#%FTCt| z28cEszb0e2QVz!WeUG?R29QOj)?g0(gGC_5+`)knKI%!5gr+)_oj{2(Bsa9+6b1Bp zbND?L_e#3)C=$S=f6uFUvxzV7_Dr+qc7>-3!^#5mWAndVXN;=2v3?Z}-E=GD8)(MX zB%FvCgl3d)ru>pA(J#nn(1M34Un@p*2Zl8w+jA$JcUvU9 zC>AE8?;e&hERUn^fx?V6QgJF)jMToKdgFKlvbqiT0VOD%uNNic%D2xV7r2;0xsTSG&znAY?*5q*90XLQzQF*bb?fX=_GzZ}k3cSA2TbZL?M;b$ zArBc zL?kqW;zVi=EQ8*S9MiC(NOdFTf(oI-1I^u^G!km7Z?DB3i{E;olwWb}@TOgn(SRAX zk9h$nHLT;}DsgXYfQXLAEGRE*b9#%fGA+&G!5d<)kKZ{4c3_EBk%^z7?Douw8P{Yv z$eo+?6Ag1MYAjVNj{Fs(F%QzXVpVyZ*MV1*yXwzh7NL0u?))j+a(IR0{-cH{V~PfV z45^&a$fD_3X4!?+2Q_teu4v+sVpqNP&mX`MKHiQfUfw?c^u?mtL$bhW((3>lFxRy2 zArXAb^>5~2UNuW=mh!8L9nfS_O+U?=Q^(Nq_T>eT06y=$F18DUdRz4aV#^ESE;5>; z=2A{zML4-*U!^Rh?L0%N8{5{oX4DZ+RX&I4{b-d|5&yEkTdQ5Zn#S=V`H+mg8P9+v zTYY+Nt*i9*dcg_wMlai06DZp?qUbw!a|DrR%MPCd2Pks=!77htl96@AY6n6Kb5FC?JebUwKdy;9LI)-F? zeI+PQL@JOhd7KQ1F5mn^-g{S^Pys-=V;&y#`I4lfVSPuMamwuCFi&%AewLgVvtKTl zGAyfL)33ir^X|K|h5%=Ev(X%-Hy|0cjDLp|~XbaWm6eS-W~>#>f=)r=KS1WGDR)-=rVY;lSDCcoNp_Zt_JM=lQbviarw_TezfP(8h=Qm| zPR4$;Yc0Y2a=uuKU)slilxyb^F`HE%m&Dn9UktJl8PZr^QN*)|>A||RW}9w2{O=V3 zTwr;$OsC=udy&y2bhe6{wvY48ui{?3V=Ble0_7t6B2sSm-f8;g4>oZ-4i_suLavdS zNjJL!F)FS!SDyix zFiFL#6QdCXti9Jdmc4Ig`Y-uPyEUBE-I1J59*?%MUFI%`5~uV*6>Or5t(F{saG2Ax zgJ-%A`)@Z0;HOcUyv@zo^ih4UIMcyacbf2kGZHUf0Uudr&8%2TE8oFx-N1=G*LVRA zV6=sv5|sqR6MGh9c%bYnsz(pZ|6BFBZCf2dK?m@_sXADH;bWxHyxz47pUB9zJhKU~x zL}1|050a^EFTYc-F1-9Zo7p3c=^hoc;Oy`+-U8Nx$&C-Zr}fF4d)_Fn%{@da0x`pj z;$la?uF5B5VR{A-Hy@f$Av3tpW-=B<3?Vc>8oT)jXd~y$eeYVgk1-ek)~HOn7Y|}n z182#jud@1t7VFZMI8>0G4E-J9)Mp^rJDx}{`99(!=ogZyVIk59Z-lL& zUAB#r@{KLk{R^qj_c#7rU^K=d&SZc=L?UclzyeKKW20At9g^t$bz7=r(CFRr`VAXEE2j4)0B9Iw~`lA2s3DAn}m1O<;~5J4;js!2?lPX?pdz#0I(1!+3y zbbwesK2XC{g3B*~2`o3@Ws3{Lb`uo>EO9|P&SbGky)WjojqK>^N*kfou@+p(x;I>_ zsCA4kQjY_^ndn`&Snnvl>A|yL1!8}!>&?q`+x|LL2vI9pYiJ!XSytZ_$sA*fGvrgx z90r{NyZ3_Nccvk~3|Gnw>8|_q%b6E)Sy(F3^4Y`c-ABJYn3f1tfhI85%_SwKvb)_v zjpiL{9QMoWlC}G8LvPEEyTPVm}Z-tvS`*|yUP$^)5ZF57=F|{g-wOo^LUk} zL7a|-q{fP+c4Ar6%hN7?iGr?sS1T3Ab{z*TRjH7kiDvtG{(HFFsJCHy`7ZN$@PeC~ z0wbRXbm)Aif6|VIQDh(a@*h>7p*b3ttLQ?b+ubK|v;+$B-HF*uDhjal)EesQ}| z_!%Vg5yOAB?pyJz-WJx1GjMT*{Oq*y##~$lI6bp(9(KIlb-(%VD%Th3DAVhobku-MHv_w}onbR$HFVfH7Q#l^+*C-SlbHX~ROD(q&`` zE+d`HLw^TQXsaqpu7-eSwp_bPJ_kazvEYUgZ|N!;!ZuQZ#4uo8vhSE}&sjd`?YBuM zrw?Sd7x<#|9_Zu~!ZXG1Z)BC-1r8e6Sf$>s8?bKwHt#*R`z+cUXKu>W((Hr?(8x*HB(d zq$x{qjtjljUVp?SJ$KDeiMkuOw3YzYfSJ1%bUSy8m8PK+UpO-KqmK3aS|@O6%E_Uh zWcBuwSjx1pT*cv0hRHk=JafQsIoAyv_&1eF8((apow#h)+AkAa&d7+S$7UAas4eD( z&szhaa~V3!XE>ICF~FW6bf@$UCM1LW9=GIqxA;JWkeN0{tWU*RHlfc@lq0|voOyNv zGle8In1M1M$?fgf=xv#3G$r*5RWK0$lDMLCW94{*@7M`%mzjcLxfeuT4nZ&#%=CO> zcacgE%QC!!OpPC}RqoN33&|2Fy}1XbFXMRyI*-6v0jmU~BAd-vvz%ns zlBo_EB?9KxxoKNTAWD{NM%4Q33T0bP+jAjd)$}oy80~7@rnkYGK?_4>+Y>og9?Ad& zJ)kE0Qe;VFg6g-6hXWnoVKN*Z(P@F5dBZ4CsDU*K-m*lOm9B$Ac4G`1<8-1PX~n`A zF$v@y-aVIAae~6MSo5{3d`mGS!yks?*)PAY>s;+3%eMx@F&v^85R`6Bk#l1i$}@LILqX!H#HR1x}>T&ncjcUsy=~@Q&m*=&C0j@^wlfy$y=hJC@{WNfgLZxG2qgvC@!g z5Cz!AhedySm|nn{@y`s0|7HRt9}cJQt`^3YqftzlMW4LFg!6w;KDr@9g@)Z(Dy`=Y zz}R`v4J;D5_N1fWSg6S{K1ks#j9mP7jsp!&Fz6DH~F*^lN!>BSU?v(9|eN!gF{$jxq-jbj4QRwPqQm zlt;HP9OLxQe_71=h#Wwo583haBZ}OPrp`O?MDeW}BDk=+Vk{T)r8_&dCY&KpS4J!t z&qno|HoBRkse2R}A-FDP`&Dn;RW6y4K}6@K26Wqj4r(Wp>M#;F0laD6|DmLIQoBnF zX$P9H|D{Ke3<@4W*6RrnFVdrOzPgfgH#RY54>nV) zST~5yWgxoMhX@nj`-zb$s)l znEyw#JXARKp35iS-4tTK#ksK4nO60wlR;1zBJFvlo(REiFL9zKQLqo6kk~vO5c@H z8OVxXdsQI>@Rs`>aV*7?=$91}Iv<<=EGvUl8IOEcr#T|d#SbXXg|bz}Z8*d-0FF)K z?Y!_4iS0$hLHl6*2MlM9xMC!j2mvuY^X(Lc>T?K6ba;-M9jbvck?7w1~MMH%JJ^evEuN#Jh}c050s0QD|zNi0`Q-rgw_8pN&xy-lpxQi zntgS{#Tsd0kVB6tE{sBnQjw6-`yT$4`ZdN61Z7~>$&&pLY>y)3S*)19I9*Rx5)*P# z{-KX&LA*ZmdnUtArps_7ut$Fe!(zE9WZUUl zVDkj{)9o8c`;OjIZl{aVe>;cSOSfNlZ@c{N0FQB}#Xv@^j2IUgwwM-mqPp~%L5VUw zET|&9Tr^;R1knEo9IElOf1azTFz5Jh#%!4YoYUSgtH_tb_^Ll)E0-mfWiX>!mP1Lk z#jqz?+E0o9j&vn1Fv+QO7~^Bn!TzOdZecZoXUsrjGcz0L@Uudwurb-Dyk>Be_UF5q zWs-YYZlinPx89m2tnMP8?M4BlSyYn9yH~-A|Ec#)<@~Ej{rGp#I50Z-it&BYn&YoS2c?AcI`$venMX^?8^@y#VyvyE zMRbEJ>pm-dZ#zETGxxl&myLf-j|_Xdr0*ZcA)>$Fy;#vr)I~*C6RaT%%hN>I6yv!p zZ?Y4~E5#zv;rf2XnqXc^Vz6FBLtx4r5CP{(@ae30li0Fd#dFTCecGXPbRN4sRMo1~ETj#!#RHo8q?tTC<>2#5 zdfp_{#x92~mKV_E;tFmSQ(n4weB%MuG>*eeBPD^k7-fycr z3rJt_Rzduh$_JNjCv6a&B(8I9QO#Bz&(h2%G-xq+ckHdxa1}>KMppDVOl^n!_aCh~ zTo>6Eo>mAO;ZjHVN4|^Cf;vn#Ks3q3w+VN0S?zwRsR)pE3Fw0uhW61vL9l_ocS)<5 zS=8hUUtql@uxUyl*){Kl7kQ*6l`1Yf=%&M3n9l2dWHV3Pse4-xhtnfEvdCQC%a zi<_ROk`fJ^V&u31I)juxk}WzT2;Y6Tq|?bMH4rH7PDkIk7sTQ2PGr8BVDk-e1T>P& zPwgz(JG()x)B3K8ew`f$@aZfzQ1GT=QH=BHM>D``b74#Xml1eH$T-Als*^Ivt|%xm zs;||!WT<6mpes~fxOCJ6N{-<)bEmLv%@k#2At)F2-)QGl(iID_-MpQrY>`P$CAo02 zn|;)RK*N_!r=>2}Ppq7DQ%j#*><}9)d}`J3eTYZ69SmYG+waE)T=1R5uw5lOX&=I# zsnLjVV4P2gY^lA>aa7h*F1Oh9T0Q&UkA!5)5Xa_Ty3Z)_-gCly?H4UL!o_U%EJ1wW zgW*r1BHO9+bAY#si(brjQlIj%P$LD_g@Zs?4-e%Y`&7@t7ykn50~X!bJXDUd7Z{Of z)=%A4e;3?Ty(PPTQ*?_DJmxgy|M2sg|PZN z&aq_Y&7_1aqTW^OfM(LFA1N(c3-XgCmF7e#V=MUB7!tnswS}yzB1eP9er!do53iE!hqk*Os{DH=C6Kvpe zt8p}#4C^NwNV=7gFoTNqMwn_+K=MG>;N`;D;qwN$0d7-*c>6AiIVz|ZB)q0G;%OLU z`v^00-b|YZG^*21UbMeZL7o`!#stGgZm<)0o%Y2n2gfdpvaGV_<${k@6|A<+xPwBt z9YRHo3$3XUcr^sidl=TjE#PN{Gc@D*>2G1WvqCb@QymJk-xLWG{{~h`-cH_vJpDxn zo|s~Hw_#0C@dMPx90PhQW6wDJwp^-iP?lQW7$^(?uoHe`#RyICF22U!-Vz9^mn+bg zzsU#o)ZEfA5$PEI8UqB&==OooU@u}#f3{|N2dHWHSSb(mQM`Md8N$OBBuxGbUHQy*;8!QH?3o>IPE++pfL|g412H zXkJh`%;S@pmL89vhHgO~*pWqa=2nUI7I`nv3j}_EuGz3n>d0iGs~KupsZo>hSJvBX zOhERKVd~Ngh`cEZg|j6FSMc_bLF)+4Z>U~$TwAv|`Vz0$*HwQUjquWVB$t(u0yKMR z3|-g!5$H&)zsd&;pAHC#ROHqYA5yUOJJCL+PmhO$&p9qhrN$ST_Tc|U5-B9-8+`-6 z-?=}4W8Ji(Z~uL!IZzgQ8E?Hm2^9QQ zWwp#=o;+P`r$g7dRsQ=f)KU3;y~?T(BO&B~f&CYS-y^u|Y?Q>HG7u|tvFlQWyU{u| z%NEaCnO%OUopu9!`(BwiGODs?D(6EFt2qYQO>8)I(-yiHCkJE#@{poOLx5T_oYA$m z>0%vr%9dj7jbbWsb7i;2uN%-*C3n{}{b5SF&cs@!>=XL5r=#2>d}BY*4ar_B3ion= z)NNr?xIyyr>Nin$uUx(Hyw7Pz(Jio zLWnFG3>mwE;XEB)H)Z?F2{shC_a=nUuoWS7++FnrLZGKLpKTRd=+Jr4-LAJ-D8lEH z2q$A7qOHM2nTw*KzMV8IMQgi4DxFXOz9he1cT3Fm`Aii~jTmiOQQ|44xU^IKr;{0%IBH=68@*tx_xwl6-MqtKRwozK_Y5Q&`q$ z*bTEnZu%j^c5BA71?X8Ni_dauKMnBJstPE^*~52r_0!%>1!n87^@%cYyVhlZxTa@>G;Vq7s4K#y7iq?`rRy&U}Ag&R6CgbWAYFuJmf(yd^6(6_#*zUeat z4Q*9DO(E%vT%Ye0g^~~d)R&tg=#ZNrX7HRet{7*#5T=lo^e{=PCB#iL# z@8+EqRBmQ4#uMMGC})Nga%(VvS-yKpQr!8JLvxa_a>ON=y&cV^2|;5eTLJe4MqPwE zuU734Zk9_TIHbWz<^Ay3DGkmvWQ5T9I`=vdm6`6@AODv|ENlLt=KC0x+nU%5bUN4~ zpTL^rK;##$?K#~K*YG`dc`cvMLyXS*&B=o(UAjIOXfHtt-$?iy-jSpE{?a9yjV($7fGAtryiw6IwsCMLZ<+KNI%gaA(i7CE)NDV7m){n{EpOj1R)XoE`-O zECF!9sWqfaSENFGO?)F(sd0X!BKmIgsru>^lHlCHOwm zC`5@MCQa|_&2Y00)kmO&ReZJVX1htuJG{7$ZUK}(TBYYdmZzFEs;956Tbm%OyR}^- ziANGqKx!ATXKqic1qYzltPehT(2N>4W&lnn=C;01FFKy>q9mXb*{&2IMWJHV;n?3X z$EV!yZcLfI{UXv{M7XRMa5w3Q&aLakhD9}TD7J1nxRy@xt*hUjI`Ry$z@|pREiDpx z3BdQ@51;*6+j}D(x>K1XI?|Ey+B*#Lp&G98(CEM8F>mV`P7E~!;}81f zmn1<&QCne;(5f7|`N#<89P3+q;a)eQXfmQX>NADak+6dqEA}%V9b)P&3UD-2g-oS? zs!+tKqE(v3$&XTZ3!xrD+2p0?NG`u!!mXb|IJ`B)ox>QadZ}4da|CU!j|c$t4I}}lVSP8b;&de#S>(T zR`yEzA~Okp1_M!8NW3Y*BQApS^o2XQk8*q%x@T<06}qn+?ucpNqC8xMTM*PE3Wu9S zelpBp_ig(HXmpeCRu$mYkeB~y%43kiGDJLNDbit_stSSh3hIMnNH5CifG1N%g&H3IU4i0p8ZJbkb}mn4bmj6H~ZAq1qc)eKP$9 z8pK&k`WQC1z1qhh*4#?M0-zGq*yhD$SIsuEYLedYh)*C9j2)vPJvYj!HR_= z|5{A!uCVj*L>oS|TVkH%kuN?tU&6WnN58rbf;K7Gov)&=9&CHE zyrPI$cESME#@ZUf=F`871lftcPF_Pu>VI^GwS2J$)+0u40*;r!=yB^Wa24*g^U8>l zSjSAgd9KTxA{+>4LHEg1vbIJyt?kMnpYg)h40K^d`YR09dLTJR|q*h(N|7Z;znb*nGy2>n%A_>a|4KE(v&atRF4%R8BT0x(0uY^ zra1_=OSe(0!OY|TcJu?Xt}OutdGoxFMSrFRQaYNT0Y#IK)|XQ36L3`3IW;R~eQnXr zQz!ct#68mOZ)FPm%raT2M){u{l!9;(R=?Ib1uy;qm$WJs*>ZhjWT4+iPjBa4nmMgQ z&;l>^iPS*Ch)*Uud$gwggJ=5?3k+EQuiDD|KYmkYRt|0$^K?-pU{S!j%O(ffzgu{( zR&7kA!R0>tfD7MqYdDtOuOfNAABDcUR4P=~>=pN&_HE1n2uw=ZV9A4xz*}tZV8?Yv zzrQ}hC@SK+WjA^{qG0*#G9t_H-z~gW(B3>RR-Z*L;V2;fK5*q=#;J_Pj0PQOk*%!s z3wQP#h_r!WAcwLs03FbLOf^pVR_p(CqI%#lrWF>leySG2g^V)oQM~6$Bp5$GW}kHl z&z6=Ey1+ncG0=Xw-DR*Q zFc%VTF{Hk)ScE3xlD7+H&i_-1w+Kb4JQZBDUbN0doN-45QwDHkoE<}wu3^qrQ@8dGqRaV`8i|t0+^(mR_4x6|A?|e zM)ev`r>s@S68*2ury24{467v3Kq8xk14u6yey|X9=>Q&hS zAyd@!>_4UT;;~ci-c`q&{`EAmV(X+3La zHpP&hWu5?2vPCn!sIuJetk0K9q(owJFgc3W7H5su|MKRpgXk4-fZBZKML;$ZqU-~Q zjA|N03G@#g_M$iky1t-}-QWm*D#arl4dP;vTMu|ll}?VPEuq7+Ugp_UCscJ%P)aPP z0A{HB9f?}y-RXdZf<#dT$~iO}Nl z0R?FNZ6jwNgfnQi$raQ`7zP3s%WCQTdnZabf(Ys~4Z0V&-C`~=h&jpl{LWS9J(BS^$RA*Ln*~K-oNz9bsMa<;^31$wXy)>3RYc#A z1o@{uHgX7TY>Vvyj>Y)sz02e8^C;MsELQrjjPPD*rEfLIqTdATk@p!0=*IH{UyizJ zP>0p|BQLmWf&>sSAst_E=z5&lu{4B=(^{+Qjg&C3?nPA>D(Pjj17(#qq))%TT7d!H zqQ{F=7fRPtU4W+9f_}7h%jxoed%g53L1NLHf{$ZZB^hR>i~t*7^@)2E%Ey1v;&U}w z6Q$h-^AYG6ae_0OvkD@-sN`35`X)_1KZbfDRdLUm#z=5=Y%jBq9dUw@hQqU(H9I2i znHc}-MPuYx-uW^_cNlU#klOWMy)^)cfVmRfQ#sTYI7OYJb{l6}QCtw0Ki@7X=e0{x) zGDn1))TB6FgrhbH$EDZ4vRy#_A>+5;1OMB@;hqj8{=B^JfUtqhd?>$=Ul;&SWbBEb z$s4|lG#QGA^xDBmkrFxOpg742gp>|$JrDRSU(w(s;7`rCrbQ36&myMM23x@lsFN2V zc6vNye?QE|^g1KxquoT-?ziXQMPb4v{BPbi(FwQ4xi5Xh67$5urawY1&%ITN8xGBq z;gW`Fs$W8;;G!c-U<5&GpU(gp!|ayhX4zit=e8nW^|$pQ1E_0-(-iyFbNsCh`bp38 zq7~Oj7s-q5MP^PDV$E`jE#5zT!_}Q53y{&f&BPkP$L=PnW9$X9~ z>}S4iXdNm?)js&75j{h=x=R@PXz^z0$BiKFdB*w{MLdf2xs5r;`UGFaQp4l^6opY# znUWA1>>l6fy1|7D^Xw>d`6qn6)`_T#pn4a1A9C7biFzK0cYMPJf2yfB!xm+?n|zgBSVA z8LKoLhVJg+eH8HiQx5*&l)$dP=Y0@vUGxv{)PFtJ-DG&X=Bxbge7J%=EO(vx$^UQK zLv)Hm^-r8DG|wsVM{71uS!lGq)hFes)+|DK)@i$PQ3mrz8f$!gSnlSG1{gB@2&e?m z$`a6=JA(CC;U*EjLu+G#&l#XeeCYFLOp^*S?dbVF%uOh)_>E=hG{JPO$Ikakp$H1G z@$XisThL}Nt|@YxF?wH|%6yL<`ZI2Pz?uUQPF0N|{vTWC_?HR5 zb?a=`WZSlF+qNci>aOlwlWp6!ZDX>VY~!8xIp=(O&Ofn#d#|tc0K?Lx0qB|1!lg159_0KoviOo|Fh;YP(S-jN2zK@!0Ida#aO@0B#XdcYT zN$PRG)LgskpQ`GgG2PqakE96H%<<2~ooQBCCt|7|XCt=1@c>4aJ(!w5soocrL+Xj7 z2IFC;wEjddpF;;rZYr_SdFE_TNBCXsY7%OOm0W6pjDqr<6EdmSH z942@Bt~Gnj5^?W6j!{E@@WxR%TOI%HEp`T*ae;M$3?E>Y-{RVX3!qG#sn^?D-`sqa zq1Dt#6Y#vV@=u!TW_*9wFuI~B_}=klPUybU0^oOUu~~e@PQn(J&{FX=e-ituXl|LQ zZO|+$9>+&HvctKqp(8Fm@2(<=@JV%hNSHeAd^GmiXIc!;Yq|2U%3dhkDib3JTMs0@P#b#HGOeE1s|f$E;L^l7f* z1bClJ{G@q+F9P#K6M~PVcO55;5Ys>&6bUd6<=v3Ia#(*_>s#B%#emGavltchF4$%s zGAYB&xYG99+#wdhh)YCGEYY*O9d5F&vxMxD&hoE$^pvktBowE6D;e&f?x+D}_i4vb zryrz$IQV7Vm3G^pzI6qwg&xP+fa6W82WWBpqnXGADYud-28#~sU?8V$m{{gJ8?tU%$Wwt{6tSQ@d%tJSWph{kaHmGy{p z4v}hp!^CRk(O^l$o;hcGnZ^{s0j~cUUZk}|5SMjXUvZ^FH*eVwr&I*Rv(y>FD;@*% zhy)v~@>nF$;IEHH7n(MBhWj9w1vGz!f$0Q6!5*>aSD3aN7`q_{F+YjBC-qG$wbqLY z_)AO8VZu0i^2f1bi&SyaCKa=WAb3fEGBer7efQQGG`?KXPxa?TSQPW|SZMT(I*7NH z=o~q_3{)A?)r3~%Ih3?p@T%Gt#JmuDV2I+)UxEp!cYi1!K>zBMT0C9<4Jcy9-$mjD zdeIYA&~qMXzPHK4Ltq;_X^e9`+Jg$+1nRAlG2v^JK}5Hk*?d>~VdJJs z-L7@?ATTXh2blD89I2jfY**@5QpqeTNK%7j(J`+>Kj7WD04~%q=E`UvCJ^WHSreVp zi0)BEaL4`?q6Y&rSL(#k053XcaYWXKKt^HVpZ@4+G=ca76R9#IZ0t0x=@Y(-)azze zV@FF^ghl=dLVL1PfCDN0TcMbfaqcJ=E%8te*^K2eItaIYr1_DdY*&vRe4SRinB~w6 zJqN5SiqRKo3g))7bNoI2`r?K(nXduw_>8S}SRT;7l3?6^_r&N9_R-p_U-J*PB6Wo5r4A@hFR zj#zAAjRwe_nb4HtTQpo)&eC8PL1sBXnZd1fb<_qYC5RMia|avucXK%GN%Qirl#52Q z;=9kJKsETSP{Bhz@S!+&{pVYgnHZo>7%dTE=z=h(7;V zBO3Q0uui#RM?dEi9PkC%mh@Zce>Y`9P|nm{Qcx+t#($RMDZM@h)c##0jZ5Gq`45Nn z`W4M13B_{Ze;gbr&lU6J_pED1?+k?z#!L}{KvQ+L#(Uf79&MhOa%Y*$VCHkNf zIDk-OB>xC{YbJcH4kz8)=_pr-H{Ww2JIwM4zv3sU;@ah6$n%WcHpALE(E1cIhsr;V z@~mE1@aE;I{A`u)slr~-LIHXD-*#*``Ctdwptp$HBtZffid<)vEhh2Dl+#<`tM}ij zckng;tT|gVbH6ZILVi#@46ENvc$dI%0(6^GRWW3l)fUWI4JPQAnQ3XS{BU>bfC=zi|9xlkLUAAM+}3sZ6zvgyG43_A&PDY6M(I;32|+=l;NJ9u zR^i6I1 zVHI|}z-k>HWV;;a#@ES~%}pUDz&V-{(KSG$q>H(P`xSL~Y*fD2-Cim*hUM`vSl}K= z-3aZVfyO=3w;^Gz=~so6sDN%B=SN_(65)R}ZGrCu;tZ2N0{V~9kqBeS8T3`1nV6ON zq4lc~y^8KR2=r#O1>&}9GPD|k&)t-a?fdPR#lm7VN8I3@t)4b76lz7-FHsOb-(!QQ>l1F(k%GZvj_cuAMA=l=NuCvBK%L3Vm zUqw(3w`vOuQ%00oNdRy=df6*E6QMfFbdqLqjF+la^CY%LDuiv_$=}CTbsnp2S?*8c zk{AZ$sgDfjH#|KtMuK|)RNjHm3bpuBvO|+KvAVByRBu?WM~HbRNfj?!$9DLYtyoNt zIju-15wCYXxrr|r?9BN`5Y4~Yfgp)z;J|faFw#hx*hW7Sv4^sr7ys&OdO&etFHV37 znZ``7yoI}COHB17Om7WWcD`@BS$Q7g{DDQqwvZ$hDxV;|Oo8|aShMPlL3I)j3J+yf zl`!HJ1A-C}40XKGQyPkNk@EU#2Zu|V&wNEqT0_z{)3_y^?MBFVDEo>XpJY?r*S!Ot!~IO#9qSIi-`9ROU>u^z*jtP(~*>vF@T8hD#lfU!8#eB9M<64^SBS4cvM(tAax zQPqD1Bv*RaBgDEe$FA?GM7I!W?DAdT`KTzv!kS)}q)yHyhCuNC4P1ID6+j4`ka{t; zCJB^qVv(7BS{_t{av&4r!f3InHVP$SS5A<(@z=cy1N)o>*c{!fNr8JP^{0aOE>s2| zXt3TGTedkf;_kj?Wj637AOI#&6hnh!NI=v$<3Vh$!Z@LpNej#wTz*!XqFAF2n~~9h zslUqafns~<2L}fd$4AzhAunTtI`2W7@JoW=#LsYOA0$0Pz!AH1s{f)5$5zxZssZ7Y zr5x^633nj`92b&P?(mk=@B--JEo8frXl{WtaEZU#2$RPH@HnIo^Q=E^{Dcq2M(0rG z46q?S&LY2AU>PS+xzN4<;JDQoGg=d-7&4s;@{;07cJX3J*=55WwSSJk8q2s&qAVgk zT_*Ft4Wv(9U^VUWSg+Vxo8 z`g`b?pGZ(GmkR(V}oX_AXtn&EZpVw7)&v{NPjR%%2We_*yj4 zjmbYrAjf&Ln~0jnRCFTcGWcArx$yLO|Ey*)V$;le(=oRQEA?@yLM};CZ2a^(slk>K z6O&Xzqc|(F@GTPQ{999EgBiGJFV)7gc|G9>;3~{=O9RO&mm$B9$6PqS$fg?B_RY&C z(WEfZHYkC@cWnIe#*gQtEsz`#K9^Joq=BZQY2c1Ra8pwCp{YmyEY8ETSW47xpUw{^ z)rduzNf1!B_VZASY9J$^!BE9yK~+pqqvyPQYYOY5FFx7!_I)stZ4Z`SC7xTCrK>Cl zOqsRXx1RU-x5j<0_Xwa(K3iyji^(GByd{Bho=3YE$HdS2m(Lw!Dd3HN_JNYDp)I4&2U@XFvU}-lTmD zMH>-&NWbmVE-cULcYQvpPdwP5dKHuVjnZ7G-mh4LWr~db1k*{VM@#2ir>*%a=>JU z;!1j4TCRwl`#@hS>e8Cf6C)uF!0FT!h@3zoo7Mb~m}J(OVIneO4k)};fux35hwq3K z#=vTnxNoj(*oEt~vUXi$2E%)otWVC6zcxbY!Ug-~hYfvB#~@kA2iB#3Y_`$ZugqnX zvn(kl5m!G5N=*J+;qT{VNtXLxR~Q9o8)q+ErF14DjoOY%PnuKv$-E1PfSGrl^-y9= z6G^Cs^W2UIS~=Fy2EH;(jlf{P%Y0kh1|S9)=w$F%Zqsue9I>1GgSBjl-62nE=;jd| z2Gb*Xr>X4ZvG^?@;eq>HPx`hA+tTNfn#P4so|!_o{V@R+!;$4j^sDvP9FdY~kQY7A zPGYEbp2JPji+TmQ&^lyITq5vNV5@xLS5gUJFIFCW$osE`dVFLv6_ zAqFkNX<-#M_}s^;3x%17raS}w7#a`oRT!zxm1xu8Q)D@sjj+WlEX#O>f98L?8P%?B zoT!(+ndz+t1YpNX&-v>q@goiPkFO!6t#$ajlssg}o~Zc%9`gM?a^5|5{ctvzr@O_L zH$4^BGb8SzAw}_{|lk)pv_@Fl=NKfCPN|m!Tw${3Qxi+{9pY+0_|w6F4lv zXwH*ksl?TNNQe2a4+mzl{VD@lN-5$sk&@ma$6g}XzH)66GpQ{_llZv@PJ*3VDs~OY zUj=%prqtIvR|7eob!fqi%9L#HPr$#?)ua9|pGxy)$vI z*X%*(mWgkolu8)V!CBpGc#IC?C?U>4Y1{rr{;EC| zrs5b1XpgO$=c|NH(f4)1O^v)+zx`}1m>&fL|Dr7AX$Xukjis6kzUa%CMJ_$ivSnE} zWg3^VNK(1TCBv%N3ADpldxHyMgjl>4D&lZiTVe1~vZ z=cohlQHS!g*vj6c*4Tg$im?`dtkdfcp@qqIxg}@f2^O|pXB!91%tE?uY^*2t{X+-;8-_I7YEp*9u&^Pz zR}d0~Qas1l#u~lYP$Y`g(Cn8x&BG0YKc`Q@Kfpk_^%3I_RhATnN=^~p$?pWCp#D8a zh<=P1*ULzrbzE?;V^vi|`>f2Eb@q;k#GHnR|u($B+gk>_Z^zh927uNJEwiH6| z71DvLVdaN%7RR4>5ozzOORF`@y_AXK4?+32QB+JTR!(f5BfTh)FFR&{vBl+_=N_-S(+5IB|F?q2t#9 zDoPgTb*>gMycg_xmUlWF+V-_!Kj`ow&OoG6Y04!Nm2AyxUDOQjE71#4d7}YPjhc;0 zVZJ&L4RSp!n|3|y)_#_S0$seX6VpBRNJrq86;Mhq$duhGu(btKCj2c%1scm0Nsd@) zuP($O7~*|%rsE>s@wr|?0#-j)`RbW){t)E~jx}OC-xdhxoSke$0S-=t5(g?O{`*ma z?O%)mmiVWsEgTyc4|^&o>p!>C1O zg4$Fr9!`elRvsYwEOgBSA{~_UV>CU6&_1FqYtpmFb)VF%w&cN2V~G-m@`}cP16kM^dM#LXrfCHXe2nfS-`? zj*89c(%5p8IUqlL;)z15C`hC4oeFvu`S4dXympVkON*vaGVP>ihmTn`y7OqJU~0UJ z`_Xo)&N*YOch>S*r>%+E8NkwNih3It8BQ-AWak+4pC0cxIn}d|#iy1Ep%qt3@U4qV zm+JG^>q)>Y_wVZ9Pk;nJRPvTUss{V@>R+KyG_lRYu{H z{)ojj>k=31+lr^t-9Q%cLU`!7F&ag%&fRNXW(x^k8`1;ibxtp6I#=n!K1q;d8$5m- z^S`+skQpGD8wCSlM!&{BlDwi2Nt?oL;@eorxRBA@DrBWjxi#UVEVs~fKW>}3h3P{+ zyo=Q@l0}G;12EbJflB#%Q4rib2}Ek(JgCpJxxi6yvUvKg`%Z&U7(4}q*6rn)Rj0^` zzGA7dY1NTy&`tEyY&|WTqPa^9v>&rZo*j8JaGn4`QiKLIN}JE;*-YsuKGc^lf>ju3 zYqZfxmRw7t^oslW%b$^&Shr~Z3iKa!eD;NErCIA)5^zXbVnZq=d2y71-9T8h*XL0c z<$S_qS3q7OT9O^nCsvO70BR(wPVY~@6~k{79zE&y4sLwH|ghiuyxU(P7U zKo}3X!=h0``N5E8SIxDmIVj|q7j=IggN!mqtH%*UVrogMm#6hl09&G=!yCQNf)4S_ z-XYZx0+!JORAx_GRx3Y#c84ZU>p&h5sW?j81Gqp3AUWBRl1lqa#p0LEVu1@sf5Ojv zu}+(2&kc5cZsEoq!?n5!U2hNVd8g0tO$z&PL6pO?7^^*{+J<;6VTuy=Mn=i+u(|o* zy5)168FXMcY=ECnrDo3h73{;3eC@XPy z0))Wgn|;i*FS0|ac@h0}K5eR!h3{nf@J?MWz4$`l)dWMgujZP{Zt|U>?jC*@pR8o= zu5;RDbiKA^fd_*M@;iz8{aXD_SVrO%^D{fwParu8h% z&jX7j#F0W5p*k56erwpkGUoku)u*I3&K5L&$i~trJaj>4|Dl{i<23q8dLcJo4j8j1 zzkBY7I8ESzHg}KdT9%JTXQ5SB@~W&bR{>z!B8Mou6krmv=p^z2pV^YUwlZa|AUvV;ldV0g+$D<;oi6ZYlyzJ15kN*s{ zp7#`v==i?l05ZG2Pz5hkLs{`lA;WF=B%n}mGSJv66iQy9tf3L$A~3r+!bCwy*ngb`~eZIz{8!}+tyJtE1%6qHy%BhnR$n_W{` zuOLc81^1l7($SH)0O*7s0C(ZY>5Ei3OY@FU(a6IZKoxP$bWei{{PA^{IpSeRDrkg1 z%Y4E2Fu+oET-h&|r?$7;i?*AN3|F$noNu~C8HI`k&uRl=0lrgchtfHi;E{Vr^p+y* zc6P~=h5FGT8RsATXBD+zb8}oFre!p&?V{$a@iu%Szc56RQC%Pw@B+I&Ydk=Apznwy z`)1!=a}u|oWJ)`y(70ya+119!Rsqj*3B?^tbE9_QKA1lUR$u(%kVYT56>X!9g?e=Q zkrQ@ndy6foQgPeU@1dZVzt?Km)Tj7oN zLgNs7PY_1csTkh_K-E$v2a<0lC(Gu431Ng3#5SSxrlw(a z7hrM>jHbglpWx>be(PYm)7Vyo=eS1fjp0= zha=kCJztrUqweQF^)lbk&-nMsEc4pU-TL|x*l)p}EQCUlu(9pvWH?qOIeS_5v_5Iq zP+Q64iY<6-H^jWIh1le1Fyc84IaqGJxjOSywp%uS0|(N%WnI^)XDUf?UC(A8pq!`X zCnPl_KL`2&plCk@-&wQ3AG<;{{TQ3!ttj4%D1f`4$s+z0{;q9e=oS-O1 z;YHk2u-i(T>VV-^J|WwVO%o#F?pP0La&5mw`PqFNKM`u+-pqz%-9W%jAWTLJzuGASy6!ufz&4k__!;Avq$CH34Sj_w1A!2hMfRdx`i7TU8767t1H#3jzJcam+ zpwA@v7C~f|9X<-RKR;S&QDzN8LvDQXqEf5!fX12Gg<(c8fg95~Eao~UTjTu}5N7H7 zeE}o&eikp{D#BiuA}CUF>()HSVZhM6kNSs$(^fSjJ` z`!Ye>{ub}LihtRkh%UHz88KiEma!gfIc{=j*|Bqyb@VNpt4@CQXZ<(X3ReIi~^6OPz`JG<9s3Az7z+EY(`!<_j!EARhXfy-4 zeq5UVf>-Exo(6F~HP+xZszWIY80lxyI`nB??u;(NkoEE+UZf6z9%zB-WwiPZnf(TR zlYeYaJ>mb4r2{1Zst735?~A66FIaCaLd5Kpu3wY@2Hhb{6_?A5*al{kG=%5}^+ur_#yAMn67Zzn%o%Kk z2|@i`)WCICzdGB;U!@)u)y=+N)6-?ds!8n4pM(|ZQ_`9+@!Q)1o3mdvU))h)gvac$ z_$VpkX}jG67g+#AXL!;<(`*b30>;De^JxO~f@o&J>htbJ!`5tQNWM;%=0E)-BruDP zeKpPs)w>o$e_=ni18)Pc`QW!S2TT9a>^zI@8W)_4JxUg5sO#$SUFk9Cg82hy%EI$@ zTA);npg@iuP>gElt|belxQd1cS;U#J#~bSvCzI6KLel|}(ZwtOCS8oTh&apg6#IL& z4gmP4WrwR~+g=%U`(|zut z2Z)6@;j4$YEb$SKQj7cRuVbET-kOw%Es^o2wx|B+ROjx(PlsMHLpODHNq_7jeLw9I ztp}%=EEhm}f(ng_mx?=qG~I43aR5k z|L#8JL1^DhN3xCE?6~nNY5ny%Z5)=!av0S+kPSdmSoj_LWv@A>Ize-zl&BT=D}FR* zSX%92<7ufrZ8k|!QoK$A6iTOB<)2lKWx&pk5@;J$jhhfqJwOESAL|fFYu99J2H;zJ zcKq25g_nepv>DSiJDNw9Rn}t>Nx(Yz8psp*fWk}YOIyK+ur#KcH7Rw4{1%=0%Q>rX zvI)RZKSmPhuw$&fSa7F7kjbWuaX(G88H%@7E0R~`%W165%-#P^ ztMHFXu*8zY3`D+@-CACLd^xK;drdA%ipThF%&pwgkmc0sHDvi@s3)o<@OJlY9@1#7 zti0YndKtVNOkN+7o{?dsXx}oR_#7R+oF#@>0VJ!3H^kNLd-x^0OpWlXnAP91 z>G-~Ai(_yB`%*0kWYLzJL`Y?_C@G6Gr%Bqrx#OrgX2*hLlw??Fs9SJ!?8Zg#uqakL z0320jwvO6L(@N-4H<;@iWx*MqPWD#s9*g}{q-hhBC~9&F+oXt{4#LV4Q6b-IdU?Jy znvT#97^`Xuh4AK?=#*=jmM%H#sUBCp4)dw%v?2G?N=$`MUtm9C_4X4B1*i8qg;tGk z*!ZAJirRP-v6JoFm3C3Mgs#k6 z!(t2NhGk>*s11)6TS%H(`&J`ShQD=5Y5HbR$&`_WR$zOEqggjqIqf`CLy^TECcx%e zMq@zG`=UFmp$eguGZm>vZ&gj;BBO>-ruaakZ!ewg-k_mYvzLCiD4~+Hy!2F@ zo4>HAy_HD;_t8{T4+KB4BGYFM)qEPfe8ewllVTO5G_9~$x`TwAJh%Z)R&%Q) z^c%7(akVRHwRmEWjZa0N1<=-|b^VL`mjfbX?~KM*m#yb`2M#7e-oOiVNX|S;o+*fU zCnblt;3+q_Ax!WT&1=9uu`653L#L1~JvLjpj%@pAMp3RDUrc6sD=WeZC?<66yH{`3 z?f7LnQ}c<~!ey8&2_jTSrCIp}k)oYq4&7BCQau7FBf8Gr3v?Q(6u|Sg$g#5Aa28Po zq$jK@D@qcP6hQz}K#{nvdeoUx4VLy!{R1c6^#nXTRF@?cA_aq8P6tDJ-42%he2~WXXZRw)Y3hw*M>JP|x-ZyiB{) zr@5_u5nwsGd6}Z98oAmnYP_ zGDAW7xnO8~_GnsxNX=PV3#X#b5O&LYxl9<;pVP`tBwU);;eLC;=2ft4d2lE!Kjqg;F{|x&X3Z2gU{;$qW zV3J{IhEofeC?`L(kQLi4V>v*K3iM^*EjQz_3&Owr2oOUmafmwkOHD~*@gMu-n5I|p zz+@nbvVyfdl*dj_jeU-IzsN;eVfb6i-VJs-RFrfV8oqqr66MAP|6K!oJK(F53=!qM z{8b&fqjEl*83`g`m8)Zvl1!NH)f%@+AM^sh?%PJs1vxk1r`lFNSfxMqne&dPUDIvF zbw{{L0RWCmSsD7`yGJ66mR}Kcqfs1Q9YiCP3J4;ap&28B?Sj?tz^VAjdXL>CFz>wi z6z1_;SM#Y9tf0;|lLO`8$d4^vjEgf930KizvN?wW$qgU4iA{b}!A!XPWThVHv2d2) zQaA~B(N(=6kR^`d`KUuv>Tm9}M*n*e4uYOA3ow$*s<@G-Llo+dwVr|vG%bu?gMY&7 z&rJIDGa=QLc$FMt^XIbT&dREzJa}&2UoPIVUXobJNnez*;sPZF`cqI*lCq!eMmyRD zkDi(uk}M$)Q^KBO8{4Jm z!v&#cCZQ&`AVed+U-g&+75C-AW+pEI$N39eVS12>g-SY1aQH8h2s1y&@<}vD<(46* zqfE0%9V7?M*UFm#A*(U)8+YrMY(`LR06w62pm?n<7Cve0W0!Jm;5rx{MhfM$(<>Lv zktmA`H|ZRy)2DBbl3Qc;6KbDco)W#7S|<&*reFfK<4wAl^~Y4cc0}dln7sygQB6P} z&p;UiLg*g%$ZwoNp~B!D(iQC4qXzx9W8U>AGi*W70r2*H)NUR)`vXoHH8$Sk02Kgj zz$&sOYx=$uwh~RlrjjC22~MvSsTHH1E1RMsp|4ZPBAV_nn#p9%_yz9y0gF1OfqYl- zweO2A*DZ{!wv;ifs?k^!@CosW36UIbC@tNCwk>zJF*s+MpT!w@tK$n|%~5r-XdV&m zN*y?TX>^s~`RInt-h}-&Q6wu^jQ|+Y+~TK@lRlBxKN}HRJQagZ4deNTdqvU6XZ+I_ zxN_dk>?Rp!rNgQTHBvU~nb#EV=HjRK28B+a!V zZ5>RUx!S{-<^ivmLQQmvYV5~im3(Xuvp?syIfs6133%4V#8G0s-J}NhwE^Tl{Hs11 zF;z~VR$Cx5%6di3?fD=gr0tBSZNS$25+NWe`8wk7+{eK{F;#gcuc44>PA=X%qWy{qS$oWg4y75HdsDdbF_LXfpE;SoFI7mTTl8IfG(Sed)$97r~ z6DeI_R3O?sPk(dzdB4#Xi#aw$AZNoEEZvI3Z1p_db^uH~)YmOi*d!Aa`dWN5;~M z&ktSr$t{o$hfH(>*00OM^H^;svnQ?-EQpM=++7{bZ-Qpx_%#Q>b?#P zig)MGcwV-)5d?oKNqRn(7okSkM9z1V7yo$pWJAUns{j+4n>{%Bq8B!WXtxWrEnTC* zILg`BgH&ja0Rr%NC|Uwq+|EG1aOrHP}0y{Z&@K|L+Tios*dP|2Su?EX@Cx=nTh_Xkvw)DxwO?0l0zz_Md1T5sy0; zB+=8LP4ZN!GR9>c4M6=XRZRWkS~HTa`-2fC}843=$yc}zN@W3WAbsh@fpXjzN?!V88$`YU(%{&(*WY~)ASXd zv%e!qPUnzClb#Dp1mL<{by{h44gc&mlgJ)D^-QYhjY?(j-322EH9iXI+o^>pKztW0 zWn-H15AXXKX2wx=BP)0qisp_zG#V~_W;Wp+aA51EZlvFmO7+2`u|%c*wFzbkXB4a510(Ll@YJWKtW z*fd8kHryE)CZ{=1J3cs86Ynazww_mIDe5SEeZ|>G>CfHE_>~Pm^xSH^?CO{JMg^9dF72y(j z?t40VTb1aK;*Xcf3(d(KlVCk29j#W&$!z}lN2GqQ27tdN=4*W3V4}cR=UyuNE2cMx z$=n3w{*GfK8H8uAzySo&g&zFsdhMo83vl^o5CnR_>C!;_prwaM8Q5$G`PgJ64qQ=WsBK6=43q`wTXW@eouq%>U^NpS zZ+iZ);E64Eiom7629f)XBfFgcvCPH>xqeva3^?P)fnM@uCJx1`n?=~z%GZS2t?1=k zPk_%MC)E7*-DgP8kzl~QLjY%)RqWy(9e8x@HHPWl{G~=D_l-1v`Wntx12|oG*dX9o zM-NNglH5^14|rEbtg>CR{!z2eUXh7I)nI>kr=$O9vps-=R&IwMJY z1V|ra&o0=k0u(>;HTTeER_qwCqI+y|ER|yJe#>`+JIFB&9}QVIS=6*%aQ^vvN@;F0 zF9og?uK77Gg?{AKZlCK;sYDYwZT}2|`w^Xjy^lqLpFWb<&KmKX&b@!bp0-07um{NwJ3Pw!y7gSrH_xBqf=m(xKQ2q&f` zE^y5>uJxPKZKt`?MMJ1>pvNNAEl<7f6(e8?q7PHmw^>rEKcKIMh#?BzM)Y{c5O6}P z!nM4N-E80GdqjprN9yS!U->t5x??MQ2aTnV;Zm#BpmVS}&+g5ov}@AksRGB$*M@Ml zmEKAFg8Hiwm5LR1i$gl7=-A7Ej6uk&+?*vjQP;k>^Jluxuad^do=C*+s+SbiC+)`}wL#C7PMW=NayPgg9_6Qr zXPfwTT13h0Nn>%TnE1A58G!x^IU~KcU9rp|`IpL-%JxCU*~9>K@B))040Olb3?HRd zJ;E{itySbpVZHF>*a>%5r8rSoS)>}gQ;b-DKNNMytHg(TY zY4Laie^T3{h9k#A*X(?(eBNhU-R8~v-MzkHj@)zlMAz3YI1P~o0-yrZ1T@5IvH9IQ za-PHB-U-sAl;?J+V^qC_?S2DH4NQ1ne4SGGmYT4(H&>oB%7CQkq^#-{%FHGR0X4o= zUW-A0Pj&QIL=EgwmcsYjq}&4X2kXcE*-`BE)q&MpZV~}*lVO}(RfiI$j zi?W#wjeL+2u$n1Oh`c>)B699_s332Af_mw-GDI9+E1bSfKt9_)Se1KWUSZDew|7|> z+!;L8P`--L69jek0*0el#E%~if1=2L(iV<;kvZRBJNG){YXfA4dbH^u5P|-}AIs5D z`9}>!UO|vQgWi;FQ5`PG*QJv&{{&?<3%X@nO088d0#;|F7)kT*1T+JdGF)SA?T0iB zF(bgnu;RC4#97Ei zy=8Blg5fX2n*nqV1JS$?f2FNn?^B`ToiR4_qwgaG4YlBLq+lWu-m=4Dqeo4yVipn{ z4){OPi@Kq5wzO<%`HIwY4TleH#a564o zk_Hl3&$>H@La1dCWjc=&YTmani^|cG?7+W0W#e1Ato4}^%qx}bsmr91yxB>{zDeA@aR=X?z1ZYgIyeGQT0amf`MmU0kd26wnOXLh|Sd0&oI4Cpx`(Di{> zFoBfLar4rNwi{`6>|xnwBS2riitNO=F^YX6p?*=fgz1ln7)n#h5qn~W0I-P^jzcho zCrg<6H&Qq?Mk|QF?B&2Y)SeEu8qp2Mb(}ZvZGaK=35_ozwE>TZ)DEQ@t}atQcxdNo z)?72oi(aCgr@t`FpRt^^9miQg&rjp^xWDxRJ_bB3*lt#Aw*T}oU1SX24XKh{pv?#Z zg{9tla)yh&8J_bc2}|r?VG0#HKY(^%hU5MYUJ6zDALRHR{E!q(Z#e_Y^QhF;a}9^> z3h;Y@9?g0mTm^V(pz`aEW^IX6dLtmtGGDk)=1l<{bZO{){2WH`M@1>A2*o@kNwJS= zo3}Quls|%#oL!>pHI5qGVb7SAy_~)SG{flX5avZXm=%n9JkC# zdYs6He8ZV%{Np0Kfp}3#q|n&nF7GF!C4k&YR(KM%w#vSPE3rm@U{b&U0o1=!x@z<7 z@AQ#YJOoQ^ym;g?mbCz+tYJeoEuJX}TBGbB`4dYKhpDEpJ$H4a)bHh|#aHgZp5+28 zUF)O)rUYJm^a^|X;rOh-Ri#e<(gvw{+__a;e-5)oBYG|kttjRg9=7||iZ3#feF5xn zT1N~69dSBN8nuMiHOi8uFwm=CDBFPcrdHsTVK2#i>jW_hm7px51BsPy@u-iOr*f(X zyCQq4@4Xv+EW8o%`CU_K3%a)q=Xp9Z8ygWErOy+C`XMwff_qZ815gtgh5JY7*dae2 zsPDN<(N=0kj(`kXV)kElP-Zd3O@QV*-%@x$@nmmWK{s7xXam&L=As-a&@wYC`AXf# z>=4%I^}2J64sRLAE%&*}uFuYgYe)t(#KT_rTT0N4r&4Q~d(H*$!J7rD?-6KFQYl=O zk#B#o(?+CqR{6WKBII+D5d0A0P{fd6+aVni82C-yTaPd+Dw=f?cE~T+2RK$aJv(bf zgFwZJ(F9ugyadDL$c{c&KaXG}^G=WC#0f)Qnr)O)H@L2Xs+!(_`||ptlNZ3Z_V&DB zA#N}|j=y`HI{4rS9LZRt7neGIVZ70~%hiremrY0I1oqZw^QM!+sPgpCmyWlN7jO57 zJ`&5Ud*zsvFt0mMcK;&>0uEPJ?ei*X*Lo^-eJX3^acVMt|EWae$fV=IPo{~NM*bhN z&M7#P07|2=ZQGhy6Wg|JCle=sY}>YN+qP|U;+?HUZPmW^b60oWd%yFYFA4jM*#|)m zKgL4c^F#VB4=hoHgI85Atjw=ee&4+-LKySKpP8p^&P==xl<>84M;3TVTfq5mKZMrV zjpXM+9dC0mBmgDkh( z(Y7xv?{9vMyv}xjS=X z?fltC&o-U_f99{6KBVe@&a!qw8sNmv$i+fD_#WGHx3*aN$uRRAB{wR_CB5E zK#9ik#a7Ieeec4+GNNys<=hToAKU-srW$`RpGV9~r&FWn<`hflU= zp}W`cIm{9b!c8Qx8g#qwH)=ULe+HmdOnIOhScf9E0fvWcn`ZL0J6~C{oyr8mJ*>B) zSdVm3Yd4mMUk9SSTXldeRbgBa97k+%v-Da_@2^i4gkjPTYWtC{0?}VSi6EOOo!39E zlYfmcpbXV*gwG#|Og4#DtSeqbXvt!uU}qAJBrjmC&+Tq?koZy`BU`Ff>|$sW( zB=AuQ04C{tccY}2%Y7lP$C7al*dys|tS*HG;K1^hyTP>3@&`6r?p`^%`LRXiKJl2n zR{R0QhgN6ncWH=KGt_5;g+{lQ=nnx~8krkWFVEkoUNn^v@VXw{pfp^>oF53q1h%tq!tA&?92Z`>XBRaSf3M&Y{9uK z0hp5yH(#xnTaU7MO;IYH$%j$x)o&vl;UG}2&~^18CoK7NUjG7O?xm8KeXAbJ6uM`l zHc4O1g5kM#(ZDX)PXz>yYw zU~>UF$S1@`x~Aehny06Yt-{0l26Mn80`#On{%I>NHC0w2{mzR+ar&*=w4Hx?b(rUd z6?jvcQc9eV(lB|>nG3Bjk+bYN74%ys` zti~{s7#%!Ff@TSmYgcfjD->m4Un?e0ZMkdWt~gp%fCxFu^ zHV$si2J4>0>F6_E!K778q?Xu|Ir9&-=br@hC@5je2{G>lHe;uF_)6{IUL)XrpQ@nc$&WOi8nn zQWaP}h4r6A*&8^%ZQl447=Fu(;rJH>dw8fXP-?{3lb~C2KyIM(5!TgH*(UM_b;>_! z7831ZU;zu~n7on7d?v|>13ZLELywm;PaMktGAGb3ayHaVqq#dRzCA-uZ1b^Q zbV~oBY*hpwqPgt|+DM8Q|Dd(6VbR!=NE>dbgmyMttq2_aaZ`1qizelo=0ja;l9c&K zBUB2DTgqkN+zH%tL(DZ+i_}laj0F>^sX{GNh;DDBki=j7vYMKlfXoLvSbT^OZ++?+ zJ|62&C|rVp*=tj{M+9Q~P|>Jm;Av>N1$>z&)y3HCWdmUTJZ;SCkWw$p3E^8IPT|B7 z`q0)(Uvar01(-7Ic{_o?eOr$j25S(H-9m~yuKtA!k8w3*)4W-ciuQ9Ej}8U5;%wbF z>Qp*0W!;*sA*@p^fSs`QWcH9EC7Q)sBe>hmX2*!1lfCCfvj8b2HhjqAyP9)x??j7$ zfu4h7S7mB)U+(GTXH{jg*w0GBUeusP;bu9u^H?&o=2N3uO$i@+V)(V7e1#%D=jWv< zF$PMXYj?J%Z*fM?;-J$&p{A2!v>46RzfF#p^!mLFDjv5f02dNo*1P9yqWdNnu^0h9 zX+yqLqEB$@YPr$S49|fYMg8%m!pb%{rnH_cbN=tp_2iz@%I-iEf&J-HSFb(-hm)o^ zKe{u6MZXRtL08M0D~=*B@kn1u>SBAz;dZx0A+n30>$W)|g+$%&fG>;`rHY{PQX0P> zhi;|(dH54yz&EtvP5@t6qOdsJ^~cR0UcvxNk-)FDi1Ru&jP}1 zZuK+h-=A~h#mGMv45$Y5QKg2|Ey;)4f~F}D#r|r9ohc{TzI{7~8kXSm!~M{>R-wsF zbfC=`r5N?9Y*?)Kl;}J$(FBL~wPB$G(s*)cO{*N308*KZ;Tz8pjiqGE+8Rjq;FMXD zT$0W?8NvW|-DG!G#1m^SVXKpw&WZk@Way|nNjhDuUEP?d!3n&FD^shrPFqWH_DFJ@zJNS}22O4|!V8-axBMsnGH3 z?RDPG+9;`ZK-|Vy$i%z9l5q$yb(vR&(0=A6pnDgI=B4vmki_RtC=KomJTDHC!Zv38 zYHB0`m~*!EYJXM*b1Oy-GLch;H`epKU)cP3n}8RKw8vG5Z5|sGWrh`}3(OOX8|8b@ z%Ha%oy!tE`|bBRJ#zI*wAX5=|n_P+*JPQ>oNgS{!5HEK5WiU?S~ri z>yKhA*~F)Q^$&^^=HHl}9rI_QaU*9_oA`&q`)PJi6?(q!xmt<{Doyv7y>&GtPbS;n z$>Zn<^U$VX0g#%E;Rus4oMb*1BJc zWLPL!g@1bPCO(eeF_Az{Nv=NPj~tA;b=`+6+LmK`K2ZMHOXCIoYvW7`}h_Vu3tYGkY%1%z=q0KVeb#|gf88Dbnu{7_B#Bx>?@x=>ipz^)1(4_f(c}*0fOyDM-XOR>zPhI~sQn z9F(uF*wA-XOeP$^ESp3-YnO1CKQ=BpT@7tbxfFy^1@)AHB?SGYsvSUb6NCHfBJKzT zNfLCO2Y30Y08SBPJIEY2ZhqYMXH>(cjOLGVzM9J>KFmdP9(-^&q>kXG?JfF#nlTFC zKkI$M4|CE>B`b)F)G|92%$>_HpwV_eKLw2P2OaBJLuGV17*mZ4zv84aeNtDtF{twu zkvDo4RYsvF@;Mvxfl?P&{rSiCpF24#r$1;32l~De0qRdsP@!rnWiG9|ZNb2E{I(td zPy2%_V&5u`IawQ5`x_gYQ`|4``Z7*Vy9#@8Rr&RS+?{FQl@;G+T{h8{_l_u5+DB0N z>|x^J07qdb^B!{3`5{Z--oiEkOT%*LW3XW5O%o&sW?tsgQi^fFJ z-w&MWV~n^GW2V<|wo8WIl;Ma|vS02l8LXKxj{)<>qLNTojje9o>eo8Yn4?xR{*3Tw zw~Pwv5nuitR{Hm>GRT82VT*~N({y5t8})n9$e#bkNlPG7GF*eFU#iJvRSJ4)Fq-l< zfHo@^NPP~Urxd}>*Hh(k?C{@fZN`gJKDjs#KafI4rq1YXvkquE(1EUNWRjN?_EAAB z`O~2LoqgSOke`CT6McHQnTD!^G=ZPgp$6GdOLnSXE#Xzw)DggX@vWPK4?+*<=f2P$ z2yR+7Td=IDR{ym8tMGAR5SF*!P9XOZ0eEWE_uz(6MSXih0%MmezvX)@5eMx)zhU>9 zb@0_S`rsvq!?n5?X1W|5`hf*j_SDrNq#CMh3gk9i6p^ba(U~Xt8I~7Q7Lr^bv|-8; z5| zGqF_;0F7y&wO9b_IDQOtvN^fh2?z(<%v$6xWO122MzsJhKqdqeagz8#itwz!Ugx{X zRwkb=Erf62R<_a+WfQO_M~NT_0RV3>`uT*!rBn2-nF@Wp@w#yY2k|}z0gc)2Ra*3C6i^+gzM2&EphBjiuK27Kh4(ka;I&+LpuqsPD0IRMA%h zN|QpJ#q_aLnVzD>wU{=jwQ_%tnv8w&ZigGyrrK&F*Zp4Bdn`ge;@T>503%}dX9dAbHi%!N20F+cO?M6PecAR&Sm-C)T{i3(=%TmZZV$ewvYXDq?Fz1N0MO#$oGPgqb$ECQmtP2#o!2O8CDlIC_np?78Ac<=y4Zp)B3$Sv zva_2aPDQra7H)s2WjLvtHl$5tP8IPnPp- z`}TXbD6u*6m$@$kyE$?v@5fhEiT4FBql7j~N6kd$o|o7JV>+ln|J0Q9#MEsS1} zqRl5vG2N2q-zrx72G8*1i(1uEHQM!#?rO~Aj6c_QW&aFj0cvsTJkf(98Os5W+0Lnp z3m$d^PZ};~^+3F_9%gEGp9tT1sOd6`lMVw8!~l*GkKK^vS1o<&{91n>QV{kp|7QL0@*Q z)R}J;mGuvvwalI~c4mFTXyYVn@HF$cmD_X8@Rf%C5kX;#jIwld0J~17vQ05au82X_ zM!^%bSjel+OG7u_xN{t!H5p-pW_3$z^D#NaFgkY&I4BLTN9$&+nfmGm5P|iiK~_|f zFLu>(*^{C(=4=*F8!NO|3iIQLKFA60h0KD)_xS7rLicZ<|S%rC4uKYILO^iJkOj5gxforA(lM)j3c26OOa4aExhy zZe6L<{g`47RBCwSO0ByQ*lCIeB&pZwudJzoG2&a8ofe1EMF;LG{8YW@$1wj&x5U={B zD47J_)J~n_ICh}79LbU7qebVFomSzV1i4V}wd@QYkSv}YSRWgu=-<5ck{OtCn=zN` z;9El-wm|e21`^C`gp0WGj6=N|?mB`2B@*w!d_Q9+&D58GcFpZo9(mJn$$0SsRDI3YRW!IaWg=>f$Nj0gLi zYTH4B7P?5!fA~NX+*p-KR?PLOtJhrqs7X`JHE0F|;?RSn%PbmQtt+ZnAU#>kciZ+l z%tNr53^nIiO>|#udZa)edzKCvwcpGiLEmuzK9nsmn4nWXaUFUV+$oOC3?zNg+9Ywz zQi4oeYjpT4nD+c#Tm0IjlxNpVxYlbweE3x|`H7_wvX78Q-PFFV9x0ZgL~~hY3pGcYIW4|!6G$efHHZ5HSpa~VWL$N zkZc39w#%4z@*J$IwHr)jSy>y<_IKt{h08xWhH$&tJN4>kZ`sa>c-ab>_b4T+-Q&}h ziuyC9)nZPlEHyM>!bN%mU3z?KH!E}jaKlm?DEB7|^o+62BJBJsyn^fN_fX&7-P?bP z{Mounx=yjs9^9oqC^c`J;-E<)9^%<&oW~URQ#a~m7&4vO^tkS~t$L25T76=!e$czWYA0t zf)>fv%rh-BG7e&4OXD6c#yDWc@}G%@O0?U8>Mlu8Nv$vhJn(gO>V>a=d z(UnZxSWu%b8IJjTR%i~u^PVFDqTuu+R%(ed`Ga5WV#bud5k5H)uAr^&5+Z6pKbx!L z!KlB}+F`d}Zjk(@?Rb|qo9meY4BflajZP7g({hY}1A36WXc@%>=u{0|c z(nvnQt9)95V*l`Gk^(v`xSmwjr_RoKY);fQgywdS73KK}TtFV$JciBMp z5V3TIXPS+@N}#Tld6$V7f~H}%ze3@@YPwvlA+$KrQXzxi_5c#@xfC9|OKYG+Bm&I{ zKR~vr2{@jngMfo2xblj%hf0{j&)c4t^jIXg0#nVDfGiRkeIQT*jJ_&yhjlts#tZ{Z z{T`A_WgDxEhnYQK<`+BOp;TwBX{*LyGdS1E<`O>mW|E?UpU}l+jbEwGvYp`FSTrnC zOgD+wdSw;{3d(yowh7#dO<=wK=jQabWfJQBaQ_wlR=YX#4Y1N?Dx`+^>ZoloRY#Dz zCpFuEVKBw=?|#_=6z`&NQw%)s1@+716tZjX#xXM)pGYS`TM@L9-;z&&aZ4UAfOp4z z3Z%p74M86Wzh%y}CjA3AroSLZ>ky~}G^|7^+ALChEqoLUVwCVmV5wzf7&GEz2w${| zmv2=y&O{^4dPldEVHARC;f;UaYQl_gC0VMu56v`>_*S9% z;7h1bfEkN+L_WCWP2K+sPxfK4*t&>7o~%nJb#6at&yS5llnpx0*bz#1vOb`1QCo`F z$B6+8A3j5waGW*vOo)>=Yd!%R_m&fYi1LkRVPwJrmOaBjU%#h>U`W>DTu}l&m zyOn)n|FjGYnqmCe!<bdR%!;JuI~vEcx7{ZA$)C=O+6EzF z5iWtfZ{)nngkN{|(_q++?|ffikPDwWHH19@SttZu0*-E}q_gn^NM|~D5hKFzPJB+l z)W7h2$Gi*2%bwS9#&u3zU%8<%MHK(OhGo0N8{E1IH@9lu2s%zi7x}c2wC@@eG1)`;;2WIwax3fbD-;+`ORwq z2;Wk=nT;i1$)evULDXu-^vZ0dogVtOJxY||8PoB^pB>7UaJhq)?~xO3AI3AaoUw`;i3hJ~_i+Gu;vPa#Kp`zv%_6K_v>Xv-#}fFxM& zeXY*MdI8;4UeAaXEK-AtU~@YAyfp8CyFAnK-MGr{JCpCRAaP=miDNXUSL_wM&O#>5D-Ilp!|j!X1(I8=SS z+^X#*6?da6xS4dN#&$7xrhj^gi24r361z#{x;GKVN zR^b7-TnUk!jT8N7*`c2Bbt*ocJ+0Q}7s5|fJWgqM-%_Bww2i#~Ui(13BFszu`rKW- z8j$8gv0y@JLdSL&Df6tTWuL{J1HbOKr~BuR)>D{Rkb(Z*1;q??{K;2PGj6N7&64*mc{IyD4zn2E0y#?nAT)$Ks}S+$tq1pp7Be7 z+!$lTAW6owM-o{acK;^fnz@3DaswS$?;X*sNeHB4jo;_u@jCzg?hg>*O%7`6t>3@h zGjl3}|38QvqrwV;1jv_$a#U{FinhMH#r0Q%^zgm|Ym~V}@R5XCjn^OFiSN;Cv45v~ zY*FnVn`0tzGXIgwo7Gy}_v~PuI;0;K{>d-Rv6~rRe$@BYsZXlctJ2Fx@}57sIlA5w z_x;Z&QG6(L$#l^quHF2w8=;Svy9UVazfPr&HNorwI<>O_X6sdV^TVNAzS;Mj(B!hQiq4QZ2PC96VT1B0WZo>Z+@s|8$WzrD}b*s1p#m%LxL z&En}jA(KUQL~Y7ZY=2>z{aU-w zIpUcG3~+M7-M!p~b_A~K`?v${U*I>@ee}2be-P<;E;qLa-%c-kbE$JoU~E%7W{TO` zakex?#vT=*L5b6fSot<1bi4Jx-(hy0twjPt>wP%fyKykX+i?h&raSCzJh`0`?l{e) ziP>Is&QT#_H!BQfRjVu6%+*0Fy@V8?Kn-C4xxgc4!?N|4mDD3j0n+p%9Q_yJ)s@p+ zSrkE>P!WT6jIf|Mrk%U$@K?cmPs>33teiW(Br}|N2`#uCgWj!iqv>p?AydEBYR+av zVHgw@9n?KyHk;j^mF(-2EJup*fT0#eNEI-CuQZ3|UwEpypwn)alu!8E-~oO2tf_kf zh`k$2EtbQik?$FqYlgs;yNQN|dafb22>5nEJJ>6XT@+#b(MmDqAioqIu=q#(Qr5BN zbXlTfmIyiQ=X|RWB~|6CpaLAvG8U&AV12h_|lf) zzLw!95o9nCGfc@T5=3-d?}~Bb(6N?``w#^r(r{R^wVM1g zvxWUoAkHU9dlf?~;6T8WXZ9scsqDy$(D+r)z)321>WN0|a%&7A2*1HJDs$gY`GpRa$gzt^$N~xHtW%U-ZCQ zq9#Ri{tkj}=VdcM4IK$Nf_CU{J_N)Py013tB|aWl!x6Diez7V5(*Uf};DU$j>N@jy zGxn;7su!pzuhLV@6zTPQ*g{qV))1)QpdkI+La!eu7i27tkZwz880nMpNOfp93~HP< zt`$9N4;nqDq&#x)3rERm+T5LqbH$5ttN;;h^p z%ON@heWt`ELaZNfNzOPOA*0XOhaSyNvFX;`Cwz{dgOb6A!T|vTa=;UAQF#a#pGUDc zCfp|qk0&+57{~MAa{K_36xP=V#Xd+SN@U8c?wS82Ntz)zmd}s(YvF=Pt@*RbIPu<} zYZ~G}2$kQ7g{In;Or_f<`yw$K>=1-MZ6wT?Qeud<2CC zVeLmD1CFP)ARQ`_1KTM{1NpOjc~r{y11_klQc*tmZYWfU)Njo1kPwWollVfDH1F1= z4$ZD`;ju8% znzGFYFuEih{bE&#lV)zFpX$mDX!RRbGV~Weq^@=eWphVdXsbmF7gPQ5_GjaaVXW{}bxS-fg;V3K7k z<1qpRSasuNY(GRMdMz)qkci^m1xU1WDN$2_M|21pM}{oJvqEe5DiCa|X7?tC1v$5$ zh{0Mu;uQ(b3oOC7G)iDtW-#P6#Xm$c^I0Ye41+dl{>{q=D;%iz)R%@6^Evo7aWcefHJ*kjUbVNo27#&$CYZ zQ_)8X-wrWzjiK5@V`5}To|+VvydgeIv&fbnq)mFuSV31+G^0m67TjKTLS(yHSV5&@ zO9>q2HwX(+v93cWq12G9x=W>N#XYqRZ~#L!_!Yf3dOQecnMN8ZgAcJST-B=1{rXno--PJ|MkSQ@AQlk~IwO01Om>4o zG!Oh<1#2@(Sp+~r$W*kq7j6uRGp&rwv_UMHW}!%Y8nWS9IgvGg|5%!xzYZikLt><%%4VE*`iv^g}M8gCp$yW`o4(Y z)wC`6>)Va0^THthaR8s^6X9NiShQR2@Rwl+u589}2`5YHOs&yE&0ZgGmOzbIhN~dv zzm6SuPy5oe&NKV~3Ny92+z=MqpR!EJ%I6VTqP2xy<{j(BR?*wSK0AO}BD)1-u(Gvj zH(y4RKsCYnwNuCZQ(f*42sEDgABCz<#z!k?h_s1rlDpe=t?{XWL!|7DH_rs=dSi1F zIvfe&x6AmL>;r?XGaIddPlWn%pZP51(gFL@lJccgpj1?+<`RFhaCpd#xRHu*&^VQ| z3g~2*3^0jrwzv%Jq&|S2qa5x2wy+bkV;6F9ds5+6nv4%I`vkoy8gj-MF|!FzlB$I)uLT_9W3R!gEgmjqu}5GRFsxLOUn8PcBquBSTi>`{b75onqDE50uNK9oeqIG781P#-`z8Uzz~=n-9n<4XB% zGryGScJBjGRX)S=$A=qIlcR2@ly6l|xHSCw=`T}%B2e-ufe(!Hbx=p&i;<*UqlE@V zxLj=N(%(KYKi6!0wl-0eD)5>cI4^)4>EW6Z<4A-c4*#;2S^!)G2?wpa)$DvJO(Z2L z3tq*k9U95Q*babYcUgHk>ygY+7}HD9vL!=yRev_-B8YGWc&5hX91Ld|c7@kZXZM!w zfl@HFu3cfA?qS*nyb+04ob3-2LQHXb@nt_#(0sn8`Yuk^kQF%C1a%{m=K!8=;|SSO z;~=3zPI1ysI+!O<_70Im7ALea>2sNwUN;9xteT)9;|{<=hC*}Qy*_$J;QIW65@B5+ z``~)Cwbn+R&24anwN|0&*d3ZZu1#>9>YrX3g_?Mc1xWXY9yI8qgeLSf%edZ^!eYA+ z^_uH%bC+^mBhG6vb^a}q^DPYh?3fL(2Xy^j2{347hU*iAEnG%pFk2G^$9FuBY%~=n zr#4@*mm=Uu%Q-#5__mELiNPQx3?o=PfD_iq7Ag&B#PIV(%cfEjsjxVugkE6MkqRTk zYNuZDP6(Q!>S}>`{AuAvs_xnfNq6`rL5*#64lTC(r-EDb$}@>)^6)QMYwc&n*+p}_ zOP*@@hiTTlegfysY;oNyce0_*m4M5z$gu9!yDQ+cGLDDcVt*`6_2XlI{5d#w6UV|< zA3Zu>+{cn5IUVYzpiai2Jd*2qn?uaDA`; zM+@Mte|yo~*+BG{BF~cJAUM9Z*7sZMium!D`2kCY&SN;%!R3ZjIQ?Jme z-q;!Qr=zmz{_$}z)Gt(ThCv7RmOAT>X>iJrg3Nw`+FO{}!#U4>IW^Dv`X`WDsflm6 zfE!k>-yOrUpI7|F{W4%Ov6Ak=`8_dMxF>+L3dzvN5b(lw7KL!!lS5h&GyTbJL))Zm zZEcITv~RqjNils_qrbT>I8v$DWYGH^O_`plEGFyJT_RP#ZO^!pK3L+hbbPWRuGf*j$1ak}2Z zedt=3dkm;UYmf*`sK48#^PGG>b8Bb6fq%X*t=gsnQoZ7U@j$s4Ia@R0fN?l!&2~Zea+kZfgFqXlRsDPz~HVqSJ#$&xo90 zE61#o4>Elb%P%w)sn0lsK0jUnJ2!LIWTw^G^f*>bYE53ff1lo`uYgY{I_s^zh9sx- z3)B0$z5SE=3y$9psRexKUOKF)(JX5vQ!Vxw(vt<4j1aUIIR^#B66CUAniMGiK-FG0 z4wL3FV;tC#0z$oBugV&w&Bf)B_6Q4t#FoA!mH zR`F!e$(jVqUk(R(pqMH}Buwo7k4FwWH5U^4Rj=fhlg8SvrrT~s<mMQ(b=Fg2>K;k-BJ8UX=rfxe>J2{$f0 z?6&%L`tckb{NGXtq964Yw~~tXvW8| zi+OkQb=B9-hRf7MXYvU;TQdC33d_oGOS6h7sdUH^sq6C(-gR`qio*Gx8@O-iW;D?N zoevPAm-KOxWNT3IhLT0zp`(7X_O+3eZ-?+YC5bSQ^msLOgseW>^AHBMs*)pa-bOwc zNbT>G%nRrC?h#{a<}_qm03ACaCS8nF7(*p0M1wlbiAvZOZE=;7{fN}McDLHfXy9?G zWJy^Nr&EcF(xy283b^_UygPX)yM5UT9=OpU;Dk$kFU+<#)1+~X8gpG8hj{eS;m5W`~oh}YCs$NBhPl88d`I{AF*^!JkLA)X(=MD{A%0M~o0T#Bvbamw(+ z)@7SM4{R>2Sg{ddE^&TJ5}z$@=+q&gDtD~qQ%87&$jT_kZCKEl8p!$sO>asx;@}+h zTz*DdLArsnMSa_{QW!?^xWI)`a665=uRI)V%cAN6)~{#s>U{Co>MIxk)i2~ zwNC?XCLRG`aetu=S8G%s;kPPdv?z4^%ppi&5p-UHFUkQ$xrby&;2_AAmpI*5m>Z3nU>*o&L z3$d0lF-0B}Anmtlq1_A%0bSu}kJl+TP>pbG;3hlm}`K+^^A;Ghl!zJfLaFGt1oFt7;7kUr| zu1?stR5K71%k>T`RBuI0!Y?;~5Y^Z2;37(hku1-B+wS_ z<6OSSlKtif>Ttvd(hHUEul!)Hn^1h9nR>LeqAd1?4FGEL3giUjDYDKZd>sh#YUO?+ z6BX1F*sjV)z!Jq!Zk*y_;B8{~aIMF<@3jDOA2p_WhRv@kebjsdBK*TtF+UKOTRNfe zjOEV}uXESY!(rl{WY;m5d%O@N;UyrxMyT@iRRtwMD!rPP4Jzva5p8p(WIY`KmIH?T zD_CIZsJ*BIPu5SXQ?JBZ7u+CZ;L;N8>7u#=H*rFhxMQx?Rd5UkZNaOd$z`9R1XPkXF678!t42P2ia zF^WP|TvCfc%x>5EI3&^G8xyeOWu2}X9)SS(tr?tg`a}F+v z@TW56-UbhY7A1%ZD0nT_a(e*oMBb4+VbA0kPVa$pc}Pdu7of3H5XQHqH!-se>~Opg zqf|&D>CS=h?2~c~uZy*OAwQ_SwagP%H#)s(v``WoQY)=bGAB&^yq$ByiLqs@<62+*l*qJQKa%0EmPpTTy<(jjw zY)(rG@O3ipKfNM_B(-xu*K!3nUq&hVI#3cBMBU!EjtsqNz2D2kQxBX1E3mrIL;Eaf zoHII19MgAIJP8@=sSZ)j+Ip8Q4i6fwfzu|cbe^A=M*1{mGpR2TGKvx07zgU3~3WB<9fc8=j z=iz7oaD|HP9Va(<^||G)?;vLhX9|usJzvh;i>avQvqng#elbwhT@rK3kca$(EKM1t z4Td(xQmY#zxzMT_Y$BC1Kz$Wjv7aM>^DYj5#?lVCwAnQpWf%h*Q>i`&iau(~bOfHy zDta{bH=J4%4Hb6u^ezjMszv#uWCsJsYJc3=yG({D(EBaZ*{`n9uz{KWQo z*}X6h%+;pxMnzm<=C!jmhI(j4i6i|AK6yliIC~>*`4ov2%&lySM=qMlkGS+T%F*$y z>_cNT%H)lz*y`5T^l~;`6JYKf*@{B_Ay)WQ*aAL{LxBUB+bwKbVmTDvD*+O6o_%&? zG7Q?79{;I8vko83I}A88hhv_FU#|0gnEq|{pX6e2MZQqr6YMwHM+>pFE~DH->+ZHS zRowG?dr{EuROlJR21cLjS^m=bBgpn&$dvuQ??F3;7BFQ-&Wheh5^x|o_~vbplKpjn z7S`?nQ-ukT8P#$L$SiqR`7qOc#(%IA;6EA@2NNKg{;O2XFnN9FBDEh5(8k@6GkkGw$anWGr^-@&C;U{#Q(p zgY~~rP-YG`=G5Zse@=~UyG?eqo>%2NB?zk&{sNH`JJH5`;Yio;dR%iVv~W#w9z#?JJHEZQ*Kuwhur8yywl$s~V2RF!g?GdVz5qh4n=z({c`L%p^( zX_vk}49a?Uk#T_L9~fneu?2Qu7Q=VrV#uyQ%@`@t8MOwExVqaw(JfAxV3cb!T~KZx zHPEtV`(fCsrN055Gyqc-q}c=|8srg%!NWYM)*o6`al$$xHOx#!+muBcAc^+*bn
    4Hzzo2JKT)(G?T{hLs$hj=qMIIc8QEvN`P2d5ZQx3DD1iwqsK>BnjWQN2 zdR$pMT-otaE2L=Owo*CQEw6Ac@Tt7pLSy1ORTSOx8~VE`CSl_~KhZ5fjfLe;(NT(@=* z_>&p=fh_gKJh?Wi&)c}G&H*HTAk#U4!4i#LA)2b^TN#zCoCl1ZK=@Ct2l%q^mm*RYhxu zWP`0wMHz*K;N)SJg4=~C@7Wcr(!^^N<|@9+9N$J|kFHRq;0QEo(p#r(u(O4iR0Lxm z>Keet_*LhI^=rzY;(FKRs{yyxzFeT zMhp}bOYpMF3RP2{^>1ET7n00xs-rUd;nT{AF6FeKxC-L0wKQLvgVS^KI-Sdo@rWV7 z-|r1~w)2M(+=A`~g1S#|zv7gUZxFfnSv8Ikq8r}Xsk zjo0dL<1LETvmiW$<``?cbnF}jCfMw2y6Rcx1ptJO3UTMQx0AQ~Ao`r_+* zOtAHria?yCwtAo1&N(03VutV#o|$J<&5cdJFg=(gOjJuC>pLf=9pCpCPP;z<$dv_R zsxC>aRkdXYD9+SPRpJ7;H}t8M0|Jl+948%8cmn}3+A`BoI!IAxCF-fZ(p+PGw1q^& zSP1za0E9q$zl`5Qcz`%+Y6MwN#a0QnyX*Pp!j)QU(PEIlJ;XKx(WS`O_ zQFrw=6&>ia!+T#hN*^Cad*R6jg-asRkK4YuOtJZqJH&%80U>K|?k)1>D2^H9zRQ`W zZeBktNUrC-dyCP#R*KTHc-rhMs9pEYW^1AiOu^U~pH3G@J7cG5IBZ#rKhOXz)7dQ03c}xqCpr(N~^1^U#>0>KlyaIh#>$!s0ClF5uiSaCaMuU_TPi3x#bBb zL&ll72RbR%DEmh!QW;|rM(0=y(W}VIUe=5fIH4kofJyzWt~Ci4vF`_ZIhfZ$je6Rj z)J+>C#0WHLAPkgkiqb^q!aWfk+<#qI{38{`xWH8PC3WInIjJuJ15f0Krr;v))5cAK z`DCBHdcp_}VoUm~<+UEe3~s5ej90;B>zf(ZSZo}GdOGrjs`qRafE*dzZgsb9lNE)X zt6jCO%XFVZnp=rlm@l5jCr%g+TN~z+C-NURLDUJyip-%o3%J9G;O!f94I6rwCn&}c zJ-m=H+|EQ0GHdd3Ir|NM{s!^ckeC0Y0UrS{mmj48MSsg~+c*^6`zwfUDgiM|ilQiW z*G#kMpbxY$W|IyATBc)7^l&9PZvJ6DdM-&(l;tMv3$QIL>PzOdQ_K?*+2=G)a29j4Ixd2*0sk7JPkU8s1)6dkCESV;Bk*v2 zEc$$hKFInYOD%McEux?%2DSeT%VMztl!64#xE5N*Ji#nROO|M{o8W`$Rf|?(MlfM< z9K5-Fe--|@`h8*;M3*!&R<9(WZyRkl!d#szplz6RBy>kWds_;yeTO13L% z3xE0~rN*(=ch*6nf8P29QeaKBGb@~7;wpZ>-gh%2@N`UZ(9D&gwkaF)yT9+P{*sYM z7u|td%X%|6?9r(nHCvbnNOaY-YUU#0IHe;3(=xZ0VDHo%M3MSJck@g!#<3XTY-Q0t zg{Il}MN`WXt(&G)vVJD#H-Y*NXhO=NwtwYq0U@3?ueVysy^hfqVmVZM4=~P8hrU7Y)NAiCkugjRVptHybcm8KNy8!{j6hCvBNbYV9WYtf*Ar=vRyS z#E{2YbmZs%Ys|g=QZO8A2QC*lBY&}3JFA^(uU_YO&OE>osl%ixc7}=IgvQS4F!8Xn zBAXo#PT({i<<^rP02H1%+OEGncfugIf~77p*-F#69ny2Kn{yE`JsA=Ih}2S?jn;r3 z>b}+GKd*cQq()fwTs^#@pxdjw_#39YT6mWP?B5+CSM4 z6k-~?^IvR;C58Ft+&8W8J!>!{*>z1`K-X+63r(mE^nqhy(`djN2^%cqE8l<=r*5_C z<7I7F#3falvjWL=n9ISugmz1GPn zc9&qF>~@B)c;ds3sJ$VzzRdOho6|=GeLr@M7lG@F&MTT=O36sP_+1zY@J6y=TbDtG2Yy1}?yNW`aIU*-=<#OCPm%A)AKV=vpr^nW ziZf~fuXG>gO?jwl4ba@HQ1R`d)#Q&hs>|B~Hjxet{wZ1=j@ro(NR?1QgNFiU31&(Q z*!%Z5q!H4tQ(p~5F@GUz|L?&+iI~ZKtF|Cl=gRb1(PQ*(YiGk_Qq{hH)DvqG*n?pB z@`M5j3}oUCq^&GFchYDlC+W*@>^bYA9}_4viPEvxAQV&VV^Nm+s_Ax8$1U@=>7bwB zOL%(##vvrmf}_1P>?V&G#gt4E&C<*VYGw(HclyBj;D&z^N`EF`3}e^L{y0mum8Z`$ z{F`qD7%)Dr-};0QGVGG{peFnnrT&Gig${i@@d+lzAmUeMg1qq(an0{8>w}&c>6gt7wi4PJ)$UN zC=>#%^MzMFE!Tg75|C4va}^1YSnn2I;TL~fbM^MK8eT_O286kLDgvy8MC;?i`{Kzj zOY~c%3-f?R60<-$F=7Rt?v81j9MGq@=;F)>UHZl-JPZ40|JW_(ixZ#}B(Rc3$QLre zTp*tZMr`AK(ygxVZ{lKy)=Nb&;ne%(=Hu=1kM*w;N5lST>1`agW7nTX;kZ~){QRO2E`~h z9-^)B@OVhUWK-!R{h>kl0HSfLQM@gOWJ;@Ff>u80SH1oxjgF^mf>$At^wI|~VDu(s z@#CSZ^$x{Jo0hhsK4%h#L3m1qebRp%$}ZcXEx1utS*mv!tqmmVd z+h?PGQW#fr0Xga`XP=#ymPMEZO7#LsnRR)A(&7b8GQ$Vd%_Y_9Q4fzO4) z5&%L299gluF3;oo`JEADbco#>(=yRdgI;&j)@kvuLV4G;keZp1fa2g3&&Ge-)k^>` zAz|c|l|_lq!Vr&%_Dq$pnA&)00hd&I4-l?-%&-GNh#4J?tkNZe(3Ij{QIAjr!vQ^Y zOxi z@?sR%z2A8Hn*j{CP{i4N3K)Mpr+~4zd0e4#k6ev?_d!*h*3E?p9!`+-Ubk_YHP?~U z$2_qaU^>S2u9=V_1po~fKLs1KL>Liz9c-gHA7qK)(7`omF9f2|2Q!<-R54kN`P%fjnn z7G!CjwrF40W4>30D<9LW+@>&5DwrmX27ccm5SksW&`!hr-Wfzg6`*dwvGqW-#^}d| zR{^KPID2zeo)C+XTK|8Jd!gBiwtjxIlme2$LT_lcQ6J2wkwCg4ZD-RS?)gw;H;DSV z(2vL6tnMMfau^Md+iE^x_;kXQ_3SawS#+}IRgdip@6{A=FSDh>Q8WSGtN8K)l>mYN z4V5pGsxKqV#7G+yQ)1VNjfG_%e@pW&N82TIrgf)-08yM}CD?y;^*=)AJIuPh;S8~G zUd73yi$L1$C4-&7mR`5b%gCMAky5OPxDEqY%))?OgMrVZv$1>v!nnpxm|G2gddJu; zi3CneV(FAQn`VlFh^y05CXKj>F4KvjMz`^xzWvT!gJoNafc~WaU}T8s)&0i-z+rT~ z|Dcq>@`F9sdKiCw*jo<`c7egscU_k&cj6X*INR6S%@MQo1>+bb4lsbP#>R`9GB=xJ z+?0h~il3IOM{}HY`n=i(CH=-4oAH6?;rMoe?;G#RsK4km$)=?6E+6Z}-I(k<<7eA| zZ}M)aW5CRvo)2hnOHI1**7?>K1{_2m-p_XtJEzC3C~i<)Ce zq2?|zzWLW?d=k9heaxRWH2gh-E+D{XWa&d6OOB=Y{s!H_#Lie> zGot^CxQ;V&+s2^Toe_3D70j_memPe~Lvq zb4s^dsiPMk5_>zwVdPPBPJ#$0L5LQQGv|{Neww4-cA``lNE~7sg@(-21P>n{vu3?T zzwol7o=Sj%wjZI?ti)~w$=@pY5$QB{hOQA&Q0;3Q7s&g?^T z4jmLFm<$f8D|OnL6Jsw1tGlDeVz7f@8;Vvos22C47UfzXjy9PMpk@)pe-Iy!bi@y0 z#67_@9z`x6xO;HY-#Ksz+JVpT#8#JvK92m6Up}@)!R!6CmPYzWl)Mm!##0h?Vq{Zi zpY=L#o2H*s0px#C@bkvQ>9t zu^)~gbLaf!X8Ee)`}UZxOMM^6dk<~E0#MwlGN~WEXcM`KU>e}SfA2}&cAQ?F;?!3! zA*W7G7>0st_4!TPDA7GYxmv?uU6gtYXr746_^NQ zW~p$i(lzcNA#p^SjlQfK*V;evee6x4VnBC=1muP-C%q=|LB=uAAFR6OQ)YPa%xet--(}U&Z^GR%`}++eDQz*W6{vT&RABNT4>t>9T?O( z-)k0r1gH)Mle67JwA_u%{rdD=nK>vfr;}Q9t@{jyjI7G9mq@h%EPoLiEVJ@{PD7{q z3BrzL6-|4t9{mVgDav%Y6LnUl+4{dBpx{s7m~Pmx$v{Y=rmSuj;G-GNmV%VzoS zs!G36?jPGZe2DV1oqq#HJqgo{+myNcd9H@%&<`E4KbO=5GwSQt%aLsmiiT&UnkHeY zSD@4Ho`B#WvQXX_`Y`$Qibd=Kg!CJ1?3LZ9hJJlorXm+GA;ICd7Js<^mGB-K^8cp&08ZUy z^aJE)w3tDHoqNys7=k@8>3dM_$2f_iLzMeCR9sG>+z%nurYHwjd2FOXJfIw^bq{lj z$!KVf!Yjzw=Wu@7`sHfBr_&409^ zq5e3bujQ!w696ggGyNOa0-XQ=`>^>bPj7x4&`H1Upw3KoKEs0Jc-`Y+#v)U#-<4|Q z&Xju~A)wM#8gvN^!4L4zQ`u>rx^@pkya?({KYNLhwFg_6Os{`&ly2L$=n}i;Yb{9G ztW_>S$L*?W%M_&?T)?Hcf`d$g+}t(FlTi03n|v^!>-+=RxsnPye`%pEz`ws#&gN#T`CuAxEf-MzTRTimu@!nC=>}-|TE2MX>ghiMp(ZIsYM{T1q zV}WA2o=-8GRA#x}ih`pxFO>zN1PlT!6snH)eR{dtIqHAJ+UL(M&nD8f4=~$p)OCun$&$By6zME4PU=kt2C~0Z&;WZrj4mZ}mv~_aMc;Y-5`8ofX4uE-AZ7uB zgCNw3zFExv2A}@`51_%?m#(=19sxF&&A9^x{wThtJmVU|OVNseUY8=Ozsf6Qsz2y#YyNouRK5(xs0zMMYYz;7(@ISc5Y z{(rN-2-x=Gw+k+xGX39X&%U|6SktK6&BfPmGJ0|QaG^fpEDKo{$Lw~0;dPIz+kasa ze~c^qC@S(8BW|k;uU)tI^y=$3h50)7lQam`dmg8L5hv{S>B4*KC2v>kr-Nwe1D+>- zm?mmiAO}4D{8W#d9s8kdk7YxHPGt)@KFjoH|Fc+17P&%{$9@#Eb(G2%hpr!edJ*|W zkcQ6ec@d-tFP2roLw%(Kt>$~G9dPXy``8M*%Pol)g@Kjpi zId_G79#~mb_`#aGeZOuxn)UU~V@i*EF%0aj_aO4%)vK@57%DA~W4A9yTD*B?ThWTX z97QEp=0V{H1zYpb>iN!l=({}|cY@U|Bz;)%zz>2f^2&|)YW2_Czg>jB+DTQfPGihe~5~G_si=KY0MtF z9vktMtL$-Cj_h7EUAx5}e;xj=2iM3a;zp?>s%XpmMj7Ko+$fSxYsBp)e+V4q zdWW&@TDZV{*EOP)(X-C{l+%WcVf`o!rHXG!x=q&{_bsbQ)zB`4E~|ar*24(TsEtc1 z_l`r~=;cv33JY@^PBeQYXNP|cP>uBMVT70Y?Dd1v$h4-|AI4|a_4GT9e;&JqhC(>y zYDTM~T6d zhq4)jf`*VLo(WpO*R3UIf+FIJ*b2&wELA;dVXo}&>gBFP=r;|5b4&iG!nlA9qD2^& zZNFR-y(B9A!`>zUoGa*Y;{b$F%cwR#8^(|U3O2Lpk_sYQhsF%W|b<1myxULn05BVit2T-1NGMYG+ zs>6?KyvBpi$W=bORq^MT1G>tC%$VaE zJ6p@SV+4N4bEAVh4;y*+MndVk8|ir3u@-Jci6{?qqy0i@-y11v*rsfuV~uoADnR2x zA_;PPk%q?Ex@y{l8ls-p5A;0obD0b58nI56qKDtHCzU0`f7pX#5u(D_e{A6>i^u{l z`C*}_@hTlt1aFC7SkSvu(Y2M)mB_#%I}LI&k}aO&OO}B~S$KJJ_Yv~gY;aeDJ(ayi z!vfhYOD8m>gd%B5tK7hPL6Z0}(Dd{D0PoV|#1{~OdWC2B#3Uk+CJhQp6!e=$$! z0Ro0bP?zi(<3?>iL~;)DC37Ok7|Q*mK*A3hXmH})eFtp9+?%eiRM^___hMJB zkR>E8Kh~5STdY?CEjB`-GY7&;pS%6jorer1YGNWf-$hNU!hsZv*ShHduZfFuBK zCGJ=`a8CH998Nh{fczPUpKtKU&!hNE@E=@9q#>FSN0Da45K7V~jf{hoUAZSgPn^#5 z>*>u9U$Gk;R8fGRJ4G&C*bfV$F-jWAlYyRd)Q{j2Hs9PSDgf=57Oderv|iguZ5w-5 z;?Q&we}<92y=O{2%1X#=1nyIYgU=?R@{X%!=ok&fq)_(frWj)>a*sSLTuX&9)ivpt zSSluIK5nVl)*ysA57ux4E2Cl2xqbbyry+re^}~78305m&P|vQVTaEHqkBxGFdEeY zFxrJ^SX-%+#~_6^FMWnO!AVi)ovO2Tsd@^kY-*&1gQk8K6+vpeZ&$w4JAJq9SD-@3 zce&Rc54!5oi#fQTAn{GS^4?vR$GLfN98dU=E7ex8K(dgizQxRlL_jFkgYpT@ ze;|}s=*TVnB(r4HyDvBIC60$Sc}8g_CnpU@amV249ppIglcp7dj+JdQ$9o?X?># zMV6Yc-rUT-f=lqJin(-)%`i!F6SQ@^e-R|`?Ar+LRHP=;J#XB-M?qpUo%Y|+RydKr zh(S-Lmj_W2q71SY^}c&teMK%%IDER`3X;Jz5tLFxGWR1Ork2F#0SrIQ{dW`+QH)1H z;SC!VsImzVf{qpwbK|MzAaY~Xr9{Ycxoj9~)IdUV0G@*8ScN`Fiaj%K<|mUSe_pC$ zsd$Bo0J#IXh$xX&bVT^zVdUH9($iWm63Ru^aR_xJ+-QFt`bMRX%&09k2y3f% zBtu0*dH}uaSP7quljI6ck3uyV1grOlhTyR#bX6Wt*i64(hpZ80-%<}nrx;WRi3GmH zR0pz(-~km7vVM9J&}KQv(XCLRe~Zx8l}VU_m;_GcOr1F?k?LYqkE<|Iz+S?gE9-BV zgD58{RIJBty)Ro0WtnD(8TYfmsPy?qRm~!BRPO<_F0u46&Xsdq-Lkjdq$;4qM9V`B z2Ic#by}n`la`^2i`m%yD-mb7y2y{F5}K?N$KDZ>vV- za8L#0vc7EUf8zmm*b*yKirE#IM1LV4reE# zVZz?V-`qa)i4#gj#&a&+f1pki&Q0EsQLL#PH5EGrlqvTETWg~XQ#cY(jc3)6nIc}7 zcnGXP_fvw<+e!xGv+J&`*7qPo?MC|ss3LoYk4>quYZp5i6kk1S5FK+yn7IpTlf2|r zQHr8u(LFiuRx?8+jureFbgok(5>gD)vH8AJv!Z26=BL0BE5im8n0e~6472boF5M7{j^D1xP4NZO`fQ1$!k&+MD;zm*wIP>hwP2HSV7 z$w!eA)#jr@AFC8vXJlmgFqR&O3JX7SwfIANsoMsX3^v3iwTu|9>x2-x)9LF_~>ii4|>Yizo@2cEA%n75|k7EZOXJ?LP>+OdY__M1P9p^~4bPTA3$_OAK z+rHcn>{Opge*&2@+anaeQ&QxK*OtvYI`f)$MFHKRncnM(;FTg{JG?9}k9XX|k@H3TM0#WkOa=f9)VC=sQZ$3(I2|cY67ODpqxE z;Ir2)o&D7$!MXax>^aC3O^FB|%$}ELq>)p|7J8xODQOa!G5Ua1_sUbZ+(1FEwL_Kp z?8H|))P6GiOO}d!Vq~%`%bbd8ZmFWkZM{Z~TUp`^OPlRXHf5WMD95b?CQiv)2a9%F5z`Hpa_UB#P+vBgGH{oyFwxq{fbU@n~ zljI9@oS#$oor8?wbeQ59ZvWE3t^r@gNV7nZtO;^|`c>II%`(%KnMl)*;beEDnj*Cd z=9w<51G+sRPfN?bsiD@1xtG+D?oI2EnzW17;jE1w#DKPxWRo#2$c9 zf6XNCN-Xna><3{w5fyE5*faz8iegVx_1e}Aa>;d+5qF)qp+n_CDfNn*@x$33VGLgB zcy7uSkWmkT63)Z3E{5?Dbi%)=k_3n1*~h~fY%s~3Xs+d$Z4}40UWo%mkE!;#7jW~TMqZf8ZFAvA(YgXy z0=7BpB5u0&f3e&Swk_*Cb8aWiM$cmLGQoW<&qJLb+I zpzr>2y7aW>I)e(WS-fwNhqeH5BIoUrC+5z@tj}K|&tSVLOT$~~c7xHgyvp!$>mezS zR8Pv=b5+RhTMJ{YN(>-e|EdJrQ=C_>e}9UwLOPQ69v)!GH~G2v7fk2j5E=5 zV&rsoY3Ie;VzQgKFaWVOv$K!aDQ1+=7kQ%GcP^YcMwYEwVYN-ZTT4e~mgry7TCZ zT7H27vmWTeA=}r#%WC+D^19J|vgO^EB1=+r_eGu_Q*nCV*VR_vWutz#EW~4ZK4S@0 ztnDaf`S8*uT=yC)#R-N`6-A-lZ9xA{)zyiT)&4HIlLf*IEu%9wqG$1e_ zZ(?c+G%z0y(2citj-5<2GR=70H? z{kS??(p#(i?1#&k9<0`9`XkO_!QvobtL>T7+$>iA!6JAsb$@+7O#-~JD$bmGSzpnk zA1+h-b>fDRC-ie3L~a^{Y;`!<$!SPvaKKt8dX47eNeG&R57wq>4G?ETAUuhmi)YN?qQ z+;_P@SQ3#XADpsQ2E17Wshg%Dciz8d**@Qtoy@z#Ub3Re4_jGxE?aHn;@_)(oh?Po zT`t%X|IzO2rm7m97&k&B?H<0`!a0`pHEVX{F1$N#N`K@j!@^nB$vuT(5=`z3MBDgv zBTq-t!9u&e+EWNO@IBt|8K&B=o3fCsZK{LX*JVF8-Nr_S9M>Xq)sgtM;?JMaWv}S!b$dsXQgLBuUzb51FfFH%*pETtBrN61X&O z%DU}jR(~iz4s|Un#6f{I;jW*AVt8MN{?L)XDok!dzmX?ylt$bFr|4bb>J|H-T+@Tl zO(KsQ2R=A!xo5!3aU-$n9?{)O*6fkUO2?9WuII(RiX~-OMY7wJEjy}k@-%Vd*zAzq zPVB;yQ6$~fU>A3TFto7;RJTprQTDf`j;9|ZOMgI}i6{ON#LD|xZNJY7*{tfgaBpD{jtSylc;5TpTFV|GISzSDA zDSx4`FSJvZI)w?a{aW*!7?6ANE12Ki?&K8De&G5ezW(6sx%fN>bk(=m<+T@%wgb}#~q#Q|MUN-ge{xC1cVFv5y2=&np zP=m&3=e!wXL?o7Q9JMp3x9#?zxu;B)RDT*X9!Pww)PK_L53}eXtRm{kyqSNF9h2en zbyl^r@0S7%!V889@DhcLi#19R(QIZ5`o5yAnLUU=G7CZM#)Dl?yFLc-lozPNbq*+x zxoj0B=p+V6M;IW9EX(&z+p2C;HP@b+}~8Xvgl)_?u1 zljHVI?7;ipe9XqQF>2bknkiD=$4CXp0Dv7@>QNcnG&^f%HctX7JBfQLKSkPpILZ?s z4zH+bVtwpWUrPe}CR=c7IU+`fY80Jz$1wmok`vl}n&aS4;6_8k&u-gu<&sE|i*zUk z=PwhTfIhNh;rw2X1C#U%A&QY^k$-N}91L0OR6d>8BQvWEh%$%Xq7wYmYjG5$h}QeHkfL< z-MAhFFN9hO`rZaFYh;^}UP)#^@KkY7-YhA(oh;b^Q*LB@u`1a=>szBC92L-eN5SC6AaA>N7+oxo&3qDH*M&J^?cIOl0E%pC2n ztHU3I<>LPVKOzk8!;eKx0#BkK8NLWCYOaPJ3y1M)gfLqf^DU(=@OtpD>jL7SPra#k zf@7mJjAa07qII6_+CxRj*MF(=kZF(4az_=bwHIN-Pc^^YL4s*vqwLNkC6A$f_you% zjWba>aN4AOkE!{a_^7PGwd;j4*bkj7m#&fXQRI#wz=3q_>S{#n+w2xJDc6TeRkvy^ zO^rX}*$Fz=GKu6!4MIS%6(zOEE6skMfHXyknGdx%M37(VAg})M!GAGpp(|wl`mH|X z9VyuFFMdV>E;`l%cvZpbrW?!}?I%c+ritF~dO?~367Nn?`CjCHOHJ*@!0OMEAbNvT zeIP`)M|wt8_2#`MDk?%n^5c4Zy%`f##QRF29!-_f)Xlyf!%IiLT%T&D05l$J$~6g+ zeKg3g)OQ0f81{(GQGY?jhh6|#M)7wPA-NSl94mSy8U&7}MjynGq|vk`li9|xmzQs! zj4~0?8K)0gyBjmo=z*k@i3SRVV&2Drb#Hk28wyAF@!2X%0Z|q|szK+1QwigfYBQa* z_y4EdyxNz=wPv)LhkX>Z;v6O>_bAV1bnt~75yJxeN}uM&l7E!O4WqUm3GuKdMU$|K z@*bNbH;6<}XOk-DhK3D_Da0{Q;Ya@Wz?hSb55t%XK7#SnNl~h)Ld)LJ`#9;QBI(Bx zkua3{{xwnBUTUFakIi=a&~18F@-&l(7#iFU`yM#z~72WAydWUc9U`Zk#t;3{0`m0mIXabU%KCA{)2x(;_AdHaq z2msc=aoqTLCg&LeQ+K@>*dAKyD{4qJgK0{qfbc=9mwqJNDDHK`Kp>heUMc~p_EZga zEi*M}+sn@fphBOJvSM4-1n#VZD#gF_pX{>dEAq2XGAN1#y@le&~t+wNg zuiGrgf4d!4yEB{&TrVDwhxPTmOAjZ_;CJZ<06kBp9mCFki>%A8vQ}y#PXoTI+xvJ8 z3@sk8`F{f$-P9eix6@P=D0VuE2`49LBc&4nE*nrz1Eai>|rHwv;$G_#2c< z1D(DiKhVjklIFA-M>uW5fU;wUn&_80W8E;h*3t{%plOn4&DN4&4TdrY*!xAGIplyD z`OwL6q)0U1S&29kfH?Mys5%9g^vwQkvOkHF$A8orUf}~()6`O-33XFGtdKZPAt~<( z!jDfVBroXY%s1Nmh(gk@4CXeq9o;Vd5OmJdDe9+nI+96%rWaZexEDBPQowzuEA=0f z&}sEiL~Sh4Uj}_a@i~?#o$?x*Qxa0)A}-POH(ywVttjsz)kKb=cO#g9-Zm8)Tc;;R z)E#BpwRe@cS^G}ZZLlH9DMW)1Z`)54t9!=2Bs0HLhim$$B*sHXR;r7SQlk?A`hP4` zgHoQ_7fef6u4+Bg9(JS~@bZnGgyRgGRR^hVRy2OBoN)d^ZysmTik`O0vfPYG(3vKF zqNw;lQ|HgdOcc|g)UcoM&4tNWr0ZF6qkvAQdkIa_O1d^=ADzo*9~Ywwq98?$ zYbS@I)q`GeNYeKKeSrz~<4{vJu7CKm)-kFU3RdfYHzB=aNbsem%1_$PPjB^1 zAokTkbP7})!-B}`RR9DSdpR4^Ip#bmcvNMNu~$eaYS`hJP$;x{lHK zQ|lv!3h%SY;3=3Do16-+MWvE781p4}G`z18hHGb+y-{a)b?!q0i4rlJI9?3-()X%#_00o& zi=bJ(kJ0?9EEW$^qvk~~hJVgg)v+59?8;r7uFy`Q_rDznn8VPXPe%*83B|25~?VASUdKtcp9|y!z?I#c!`>UwNm# zQn-myH`2JFBN($MErG+D@21{j$#Hu2-OzdQBYT%`$Q9l5E4pT5FeSFp54^PV*yGq!_Sli> z%tB77AhIc8Oae3jO4d4C=Tq{JIky`xf|NX?N+naOl4YVB_jT^M4}M`j7tE)h=HJC; z;o+a(=m5^@4!izG!SQPoUtBRenatbqiKZ?C#SDTA0UrlA;6;@Np1LvyF zVv+D5Y79OtIyHsQWoL=Et+OIe*Q~0`EWffYNfeI*=pmh{(vQiObMK6Vve)^4s$f~g zc9pZtDz_^Q8$5nz-^wbJ*VbryQnF{un<>KQ0~DSq>#Q;xI*=|FMY)7Rlo0e$}b(|6G_S!%nlLAZRXtphj>63{JL+&ftM$iwH zLtVBsl?_Uo(^2#7D_a#M-hP#TwHUOX70^A5;>K?`W&k}I51{8@m59!RR!nJC|Ku5d zb;@47{_Cq*YF6U(REVcKJ^|XCsL+X0k|!<5f1UNA1Hwd-xCiGR-XQH8k`S5ozNo6~ za&4?FH&dwr*g$*fdI$T`(wsU#3yly&LzuOYC#`_z0cQOJ%-Y!4n{Ot6^S|_W-~ROC z^~blP+y1fJ!(0FVBsFU-o4Wk~GRx&@Tw?B1QY zUYpW+jxuX82?P&&#^vva4hxYmtvNyoCmj@l^k-6su!wwsP&7bJWMqL%<__|R zQONO&yzV$W%kg_Pg#b(A>B2bkN!RvFdX(oY)|!&8*LO|H0+&Hur8Ey)Jn?yN1`yOn z0dQCv65PVRWe(eaAj}jR4XIm$yj9x0BmxQ%y5{Zc%J4BKXl0M|p>U`60c-U74^FBEe&?*N1bDv3Mt41NDFIb{HT zd@wgRS$+%)09*XO#e&V84h&MOuChSIhp=GFiUfA!HndVp7q8z74?(2p%OhB5sMx)} z(GJ-jS>+CY-~d%3$>XlGp_8^IbO71UScKWv@-g@bxQ_P$l2{Ye2qoR84N8jK%s_+X z5^g+1i$+b>T}qA>x`#IOe}OhmvH{Hv9ykKyFi4^aYr~$csA$#f^Ilt<06|@{!4Q|- zcPtyohq6J~M#rmmLxxseDfe>Jjstd;XxvrwU2-jdmw8nkZ@l8pCx0Y0BEg%NHo-`(2U6g(0Lrt6i5;*fHkaG$3lx ziTC$kShd@3ixM^Ow_Q~edWJ&{X+d4^SZ?Hs zvkvIIWk)B@en|P{RQt|dd~w2-fcfeNO!LlNQCHQ`U=94``mpMB#0dW0p=Zlw)_B2@ zRMq$6#T9ifE&Wk+$53zQBCoxRGOVtgGE;OhjlIqrTK=<))CXWgL@q#8n_i`Y4{zwY?q| z%+)J)GHAm!mqK@JP4FRaqBBit?cvJ!w*_WuH``E^!l*)NhiMoCF9RS!d`(2xcNEKi zTi1AMY5OL>HN~-BS}xrnNdd36W|4hcxV8p7r~B@*3qIl(hfTqyD&Yzn=26T`6|Et1 z`zkt5RRp-MiEz>}n%ww?f(VohTqxt1N3yLF4XXCTqQqb$;GH_Wm1dpZ9ghl3Nq9W4 z zg=3dz0KwR9UjVpqdo^mV?%N%I@t|D`_HT#Tc7f=8i*~54%zDMyD~lEZLWo+eZ_U0; za77>1oA#kTSQRSpn-f-^xONNuG<`w~KrT9y&%ISP)o7!n5MJH?SuJ`jVS^Zk-HEgRb)WwP9$<8>5qq-#RGK709Gg-U&z zHpK;VVi=D0AJ`Lju~*z54iA4yL4kvguZ+)DOro?pLU# zS(vN~wiQ7AUoxJ}Zw%WDdk8A%49#C354%gMKBvZCx~VW!O~(;(9k3Yz&FM_v*s}J! zS#Y|K{=uKlgdYTGD!dmzvJZ=Evq>2meohbKNTZ~BI=06AG@twpKmP$%GyW@OZe(+G za%Ev{3T19&Z(?ef>fr$n0XUcW;Q>p3`zx>uHD#d*5a7eRJgYL5PBO8&XW>k_XbP4% zkw}H4?07xfo=@q2oO|&iNXyA|Dhnwl2;9fH=bj6FB{5|r#((y++MmT_bN2O&>Aw>D zQSHf#)!7nPt*WzMK4th|b$e!BVkF}v6N0SvXHk2%Sp6F|fprBWFr%`(x)b&u_ z?9}34tG}OdDvf>am^`P8>w_a;Piwzn(w@x1>L)s{TW*T?lhyqxY1j zg2qK^t?Akzh&+v%doa3c_Te*M1$bYi&Z)aH*oNgk7wAf=UD+KKCDzV=p(X2jsW(oz zq)c$;ASI>*6xoiT zNofXg3`?ZmY{9uhSGQe%Jv@+MTQ;GaPbHjjfLHOeE;3pq&WylCIrvShDNV=fe5!D+W|eb}*ci&Xf$xxUQa6KI071lYmP8xXg(b?+ z4dM1VuNPbZl8Pj1%rbLYPE+R1D4UHUX^vP;B^b2+3m=UBISAwNQNyt1Jpx(P`kQO_@`>CsxRbFR$mb1g=9QZ1KFu& zGi)h={oSKH7TNfS)V+2AEqVw3CZ^t2f4hn{ohtDZ4U}Q4$lZcte7J~8C`V)P+n2w7 zyc1-2I4F{k&qz6cLk*OJdH$_|9jYy&0?4~+*NO;O@}?^{d({kjk%=E=slo7jrO-vJ zz*lYaZ1D_CN>hRH&43KD)WvsrGp3n=QAy#7f#GsZ0p=KTzW^Y_aR75bjK7gbWlt{E z0JgN9F+4SfbFk{834?^XVGgetF>E&p)Y6C}h}~+DX(|y>+maXcf5y2N!$yrwkESWr zFAaBa$tlZn&(X$27blyvf9=?DR(;q4m=*faSP6TTrfln z&!Q4i`s?a9@~ZBu*3*_oG0zezoNIR~EaZ`KA#4we6gP``MD+$?nI?epEc;QJUf(<% z%Dz8Ytt^S5nf^qVe`B$rV5P4e!AuPQxm69;@*kUHr`G4BQ-@CVka!3c*_S8^lnxKZ z>l;4nVefM&cnxaZ08T6*J1F5}2~~XT0g)JGSUwL(qz?d?jt=sI$|Pf+n=@PDRl7Ux z8+Yu71yV@Pi|F_Fpc5gY*d;XG&GDFF>n?KpDhfS}Z9%7DUsAx7V9ht4yo zTQ&iHVNaG3yvXs}MjBo}U6|OJ?@Rz)yJ0l< ztFXreHIgST3zkA`Cuq9?2)VoSEeyJP3!S08CByxsm&MR7GarF*Z+vchd3R`g)nAyh z17Ryem;Pft(mElrl?*Jc%Q0HDWYls%7JQWRG&V~xf1F#WP1oysquhZm$G@2dr{PE? zGlE6{bghN-`EEP}>TQhHeg({q(IGXUbJYHIy$40&ZG&mYAV3t z%|l2PrIwfwDr;zLMRVQbBDSvW_m1~Bcvy`8%)pf|*hT%rbuby|Hqr80KAMUV+l z5Txv%atp+L22|>M=J#Fu6LUQipAyQ&iBASw6{gy-T_6|Fs05eGY^qiJ>5d>$nRfsJ zFx>!3C`k+Uf2SP=DKu#^0vcuSwxDkp0w#<+f6t<37^Nm>G|ltG+JV@vpk>UgNnm;& z-8m?e{U95h7R*`eyOYUA0!76OPuc+g{b2xIAgv_8G4}_I0GP}YM+w!4DCh<}8T*e} zVx}}rSW^bjtkAT;`<)@k9N$19#fBtLB39%)9}m!CP{*iKUyn639-x^+S$D__yT^3V zf1eW+t%mzDIIsu?YsrOc=5DUkw6(5pjUh@$EgKL}^1hvyMiKO_8L+1t zr#Z~DBN-vp>VX~Y4V-#3|H05twLEs9e{wcI7LYmAgO?(IML{|toN8L|QZjnenu9XN z>^@=~ zL*O}z%;+dkZ#d(C2n}p|+3xqCG+*kMji?Eu5Yqzj8t6Us4GWh^2+QueUiYW99?WyW z<;}%@bTSDmpgbVY7!WSaht84VS(p`AaB~-3syT~;Sw+wgUK`u&u!s15`>LO52$=9E5PS_1a^8IRwSX{7^Z$QuX@v&j#|l zT|c_}D%@3U4C+JLxuD&2g0PhlUre|B;5*MuKHA5b@<#c(T2Io^u+V1hPFg6j=b7-;*A){so3 zD0$apqoEBm0~_yH!RF9j)I;N8_j)#yR3!FU@UzB4FbhiagF@^~u~#j+&-BFHR9K#_ z%w32;!jV<}9;)=bhv{j~gOgja0uT1<8e+o~89)DeM>M+um z4=&M$3cpM`T~^>+#GIhz_GtA$?!)o32n44y4}VI*fM9F2tU_KI9OH$mj$?J~P%7>W zz&O-zUQBNYBU=K-IA1kOb5m~n75*wl-0xo;hYA=67fTjP3Bz;r>IJ!k#=0*FXb*}H z@=U;B6^TM;ww&0pRmowTn!-?!#5G?bsTt2XSO1m$kJ}CK0g|H`ZEDMQjV%FW{Y>(eOAf2QR!o0Nx*thSUT;?$Jhe?$uRewN#dg0kmlz2-356ireC3q)>+Qcm z2%L+l=f!`KfD_x@$|*L*9e(xdQ{3Np!>uvYrD08^-lp?*T;-H##122F7)?H2;k{nA=gp!}u%y-Hf|UXYf^w9P{^pV8?`jAHGe^wl`pHZchxT|yq~&n!Z7=jF3)tYPUDN(2 zt)_9~5Lgz+cAjWApb22nUe&eQk+RPgt#}wv&fKZuocc?(YdNTG>BTq=gZ{}Ir>WO0 zauU>R8e>q6c`oZ^4Po3c$Ra47jfp3yO*wyOV>}@!wIUM!ynFM@$1bW@B&CWjVht5> zB#q1!G2xTNj#OoqCY`~7w#sv@NHGe3!^a-4j9>b&_=8cXkUmlg`{e9wneBu6E8s$PHl zK6TyDb7<$wF&Q`;9p-#K<+-dMuXW^x1i5k2>b8P#gdkT04me~U5*BpfXxbXInP(h+ z-)Eb4)1-R*ZTN_kN7E77&8ibRpNTsQ&Kx4ZTF zr?-7EN0_*fg95+pAFN9Y^LgM7&q2N1w(>4hGkshrMscZk05-n?(jz8<=C|ptA=e~L zHkp#}p}@Rj5Q5!Cg96s**$jNriQ!W|d{gE*RMVR>JLN@lJ@-y@Ub)%hfY^WCa^8;!!t(%wiFp58;M`v0yW7vxyA3cwE2ID%Z;Bb}X)ot^b=L+s7w_U}1!ckTB zc-H0@vetUbdaA6`Lt31(36leGTv)c+hXGGRFl-{ z9gwl+wVr&TNiYD#qL{j2U-gft(HrJS&$xIRo#CWN9sffbC z`ctP;k~WyYlx%HP^HZZSeZzrgFa-UhZG7@zFREGyT%Bjg9XZz2U5jIMM3hUU_8 zv=^N5F{g15%`zmQ!5G!+?Pv}IEDr~#h`=}njj%i$2cd3jgl+p{Gm|n33A>KB*fo>p zBj!Pb%?J1!KAyK6G1Pz0*xx?Mt6oS23;QDvUH4|>!$BX0idgh!s`iJ8`g+XLtkc-x z3`H=8vj#qdx|O>f%ms~!9TaLDj;O3Vb~T4i567pmNwqKrVRF$JO~IvWQ{9*f&no%9 z=WhgyvINyoty!$2u|8+9?w^DxG5%zznb(Kf<4;H0_1GxHdn$j_;8m9)wmuVT#zgc& zsJ(#4&xBe;e!K{^QGX2e?rGH>n84CPA|jf2Z@O4R*>f?eQ%9!)c{=Q%#t4T0Fzg;T z{bU#R8$`gOY$y1q0Auz;2}zhr03qjIWekwde-64Qsj=W27J-Xw2DJjSq({h*{;dnh zF{A;*&-*I+RkweI5EFlx3>oDjHtD3FwF(iyv9>sr61dI)DOt#tXPaYr%62$Aq2H`8 z0B9vi%Azm>mG0(y4F(z#elSk8HNm!==*O3$GP8{s&Lpxh6I;9NskslLM_x^vMAoxT z9XuNF5k>tDMbY$KT~?Lp+Bzil8HcQgf%KRrM`H?)z$1TrN-_qmwDyN|GL#F5R5UbJ z&kW_og#1QscZLCbl0&W!6=CJjY`j_IksY??%P^p79bxI_+XgJjTqcDXdIk^!v|eRu1EVd9NsXl`2AP2Mv$kr%yGFT zv+R+4Kb&f1stL3p_V!?&v@Y~RTr6Q4qKHqN!vp$*hA_tP#* zxHRSwTe`plv=ZlCaP`6NJH?Q4_@LhhCpng7(>1c+>!!64Mw*Y&ib=A~Lj;XS-+G-T z(jXRnfgyw{nH&w@c>xfy8xE+9BD zI`|kbMaF!n=StPU)_FhaXJz^IRO#LYfY)k`V_$PO@PN{hFr5fwwDA4ej5zZUoYq_D zP^Fd1Qox3NUFHT;HS%>J*Ugf+AM=HoC36XVPi;oY4Q|6js957L{68Sl|8Ebv)1$Gw zMk4+xDl;vbLBTLK)F8 zBAYNV4}R4@;=45q77Ak;r{w#x>jzRb&C{_Z`Jt&F$kjvD?DFc0bj@*4{k8jlByi&q z-@FIXy1@D9gQOw%K6K5@2az!DE)Q_j-H`7p<<1eYJ;!?#2`U)(9zEx?W4Iil&^~bE zLv>W7R|CoGy*G3)cW*>0X_h2pgVTI8Zi9WMQ$-ocrmO!yuBWDyT35+HLA+KnY#%xQuj z=U@jz+0^~D!N6KgzNl(XErmzdH^|5l=i5Mi9#psHaZu;gUAgbcH7SdKO{MbApe!RE z)M~%Me+U*%HjoN>0R$HazBm4QW;`&H%mdVF3-gNfLs!-h%iNso<1C~?c-NNc>0zk< zTNcaI6r6@4^>huR)IicU?Xk)YOCQUgJo!6~`AJB_G?ac%5*dyK>P$+#PEe_TffK-C zq{RI&ngf^PSSHh*cK@S)vOFZXP~!;r$bHuwV1gnx*_|2jB`cAQN$Oeo)4wJdBkD8# z$Gi7$?{0AZ-*RcIiF`3-Vr3N12SWlzUt`WzyRFzP8{LSZZuEfTzHd zg_%!4CM}@3=JKhmDzdYMU}(&q znuq@BN5j2k#F1p-xZM)oTJRh2#te0Ye=WQ&(L!i~7!xgc1$5YvLN#6keUh9_n$UF0 zJDad?n*+)gdD~RS12Xpl0OU@l#pZXC_4Qss4k z;s{Reo8ov-^+4T0Bb;0Sof)7W%ciwe@Q<(z+(Mh^7XXHwa{gBVl#l?%tIeF~#MwXo!MSwi-T zKO;+A*CsK4#g5qy?mcMP9o09Qwlx|V#~z{2j3rH`Gf$IDaIBcv)aCc4b7fTen)9W= zdB}yl>&k^d>Gom*?s;+DGVFb`*vPqVW5ic%?B;To%t^z9?f5iVt)7{(|Clc|6s1#& zaZ~6vJu6Z!%4^0i&bMzbz$Blk0v^`5s+lGbjtYd1`4!mM{v59w3zq7+>a`Ho^`k zh@Z~jyteu$B6CU@LrG&#jB_{P!f8BCA;$_kwV;-@m#}$yXdPnFSWSWt%|ls01dJ|r zcWqODmBsmDSYfa%j7A0Lk;7dprOy7D+cm;)T7#5~rJ-rc@f&$CpmSgz`EyXSy}WYg zL&Qg>opPuA`Y!9>M8l=$GKxGT#)Y1I3Oe`Agyn*0nITv9G8XeHk8n*$H@;U!6gitD z+zLeT2#%Hg60$g^a*}dH5x}B4HFjy=f*_m?v=J2T_csrG`VwI zpgUDG-QLdTmeCPpAstJ3VCMCu1#m}>FuN^ z4xm$;_W>gY){9pajblvkrAg?~+q2%iae_+5KCsK~ziOp!sX#El*T)ZjL@AQa&dxyxg5dN$;oW(H& zCHU@Jas#p-a)LgX>IX87(B}pZF*hf^+phkJzyASAuTD0X%KiZ!0W+8B{sDV`5eZ&i zoO|!N=Yl_oPZ{y$zwYm9Kl91m?8l6$tEBt0+LKqy*+Q;bu4aE+CGy5{Gt&<-k_05- zoGkY(l+n^#6fP1A&ujIxHFrt+M+6lMuW7+va>@rmGoVZZE?31O}iM`%s7pL&^&Xf zi>fZ#hoRXprYy{uMaj>Uqx&4`D&e*fl{Z#1o>Jy#gNP!=J{w0A2|EesS^(>PQHll; zIOMDEs#yGta&9&*+82Y@sdAP#n${@?o}|WOuNJx9_kuG(m}CZjbOgVv&OLI7lJ^@@ zR^4{6P~Kb3B5cQ&+-cvZPKp)W?o)yxnhWhTO3Fv^!&mI179`*8s(HX^mPXt=i8Z-> zz*aYEou7nWe%#^pU%fZDCLv-e13j2Xx-+1eKj({Q8~ElWIq0)4<@vk&l-n6t>c6Sdk! z2Ud{Kz^2QMcY&e=BW79Xm33c~GNrAbx+~@7oxpD}UKm^?aWe5dX4t*;&j#s?b12Xn zbTQq#?G)$18$ExasJ_~a$uXjlji#!%OqN?1d8cVO<360@JbfY~rilkKbSzbU5t?ML zO&?G7ll^OdWX|}u@6}?yU^Ah^_LHu{h*STq7|F)PK-b_)+50j)YnNYTfh zN58YwJc_?)fqQ3YTm=J5x1061Mu2as@;PfKk$*=Y--ue2D}h8CHz>rQubo%#-i+*7 z_8}0?Kjlc_uoP+Ik(N%)qY=pmE^VRw9Vy21(=059*{*rqAp?g zTd{6NDamXr+~J6Pyu-xdi#MXpi(T^+Urf?BL=WzX>$0%v3&>-?=M+sT zx>JpLg)55v9bP$0DGP`O&atHL%wQEsK#)OGU6(K#N0IG*FS^z!A6cQJB&jVeuQ~Kp z38#~P&{Sp*jC~Tj2~9VmSMGBl5`z=kW*g zxG^pqr$RJeBf#Xgx!QIuR${FxqB0Z`b>b@WL$mXHF?dOaF5UOL+SNlz#+kXXt(uNV zk_4U8$|1%0H>&>=qgObCUKxa(2h{2d`m%O^^^hO+7)i--EQ=pU0dxv%r7ix{!bhr6 zi&I{%iE0{M%F}V0XBbJGJpWY{aM?JUXK|L98@8r>ec4U9kZS~F&M6(IQaMvHPU-)4 zl8h1<;2-KBhZ!==WMwl*JR9R1;D6k8yS^YrsjN2nUJ#TSFwcU-`zhxdNuOkgayjOI zsF-5|_&PP;(MOLGivsFr{K-BnaTqlB8#5zxK75`>ogV%BCvuH#Zf~n2;#IX=pygXU1q*%}KXXqwoJJE?v> zYK=Hmo6wMP!!d@IU?Gn5xCzEEC2b5mAlSNG{UGYn0xZT1Y;Z$Lah^tAQw+$n*WMNl zZ-1!jHixtakJe%@_IknzWd_BAiuP{h_*!X9`pV%DFJ`LwPv?E-SLCYw>f}6sgy|xS z?by*cDL$AGj;QCnAuq4Kr~-fg302|CVz)BFjaK_orcs#H0J zvZRwr2oj~XddBEA-m)-}G) zWpuqTwc@c20jI*$d z*c9$T;4a^}Ss$mp{Hf{_*vZT5wQh3eC_s{sXmzeG;*5r}gnq@j-%f?gYuC5bk!HmX zEf}qMT~~*pclw~hc-IYzBk#^-Qt#%kCeg%sHdLUF(qn>T~_&Z zNSz+SZdHn0kkhu1Qc^3dTcHx& zS&qpn2SjBlRuY%)XjgVpqLX1^-aKfa=d76HVfpYR3)JEFCAzYnwJUv9k5 zrFvjfSNq;Cc-@GdegVWrsfSd_Wv9gx6IL0Qbz^IL;A?~HtqpEbG1>|o5iFvN8IT$-oth< z^Vkzp#HXoNg(9PWroyBHM~MM{%AtO$K1111oj<#o1Pm%6aJtEF5NZ?;bC-q)ubMeN z;$_XKn+IG5U5&}|#=V|B`~X_wh)M1sR%+BexvEBGzZn<P9d zLR4)nOwetWW|uln54YWix+J6#=LSSEm~L5;+A&6kcMS+sY)P@fkEW=l%c?;Etw;lf zA7#}N^#!lKmxp66Xv%E`R?2CRSP9wcF(;L~8FI~C1wsSVq|z2ncq<*9-pLQLu?n=w zt!K{g{L%VPqqaQKq^NV{kpK!7+r@AIASjJ_j+DI(_2e=avC1l^r{KcV(pVcM zlQ&Le=W#f^FN=8JCMR#+s2 zx#u)au#N><>`$VrNLg|JQfM&F`DzlzVO?*InA)-${eOK7J^AHZLtVuP0)b!Qm=fmemSAwpCVVMN^{`{bsGBnA!kPA~9&TQW<8<#_N26 zs!p-Oqz%h%onfcex@7$^nTR>)O|Y_uE_a(vT0Ndwzi2S1dE910lNn9=S*n{VFYZoJ zS!AfZ9jOrl;^M7X6=^fdfyQzB^mP1Y?|-f9v{+r&{&j|hOHV5$;Sl0hO4$W~`0uK* zWUM$LK6p_pcFv{1RJDG8jj|t2R?Vo0igbOQZ)bmB{P|E2y#M3yn&*c_ZPMjYS>?9L zOE`pHD|A~{&2^O)ciGR|8Li8^eCeD$obXr3Fa{ly@)|GG^}3vC44q7Qw9i)8;D0t4 zSU(%WkyH*ap$K({zDDP(6~sxXr4pSZ1gxNBSvIScz8sN1vB3v`Tb!O6 zok5nstTovEzsP4NHeIc*AtDlMO@DP{%z9m0$V27#uH0D_jYD#@y;tLc zqPhi$O}YhK^Q!0W18vj1swa+e*~8QKS(E1L`WT*0UrrE_QE?s`JgqrtWB{;Tq5@kRpfmPp|Fys}g%YR+9>{kbTpEf9i z6Iq2eDbVk%_W6M$a~~>-fi1N;0@+Mk;Z8zcjI$L3v6A|^Y{i(wO0}+*70Qh)tGvjX z{R|q107Sr(Z)jVUw%9e3(L=t1GP-%37B+O1~qhV`0>1mh8;E!V^ z7))5On!wg)V}EuK3(-Ykl;wtSof^$s z11F~SNUR6w(P4+{CasV3;O@c043+!o`MSpC*kqUJxhVk^J)lJbZ{-AE#y|M=fgC*ojF( zLZ(8P&&tDLj(?_<-b%?0QX)^r|r9lsDHgQL!d!EfX^h<0d zd!L}JrMrw;+?#1r1Fr_y*wrvlO4lCNG)lO+8}ReB$@+IuFbw0)-+k&`k-|Uh-7-CH z`$!Q=c4hP|gUOunNoV5P;mXlDphWmmWwBY$i2W>+`p2D)*ZE%SfFV`%HL zTEX*7t?L{dyD;qD<)bK@&NbuF_$G{TgA8nnwa`<* zfMn9as( zNDgi)S_wU|2Tb4R5Ugp;ms!zN={o=CAh2Bp5MKcb3YUrAr9=PDRCRZz!!l0*JUc)M zW&UiD_fYk#E%dyoo7CJ`ga#9~rR)&#$~074GJox<1Im`2G73QoJAp4H7j<)WtNLBf zDDArbQ+t)`a>ElK)1jc=bL>pTbOa7ua_C1u$V?N3351CXzlE zX4!*8w-LHn*C=h86sE4(vwUM^o@~Otqj@NUHVO%2epq%gM^TVG=%Rkf_R;78=V+A3 z1b>U^4lupw5>~wG6B)jJ%H(@S|Xp7qh0JG$kaj9xVyz0b3OggE2dBKR1$tj?%HPL;uM zYtKhW2y6&87+=gIa}8q-)~D#UDmQ3>j%t&)Y z*OaG8q&-|^+jVMgG&_!I1)4h_Gi!ze%?ljPGk7cyjI%x))Zub8T0MbShW%=@XC?~R zub;W_|0bGIX9RdnVryAw0gLZ*J9e{cf-ei?XZ9Qt+QkBibeU%8SDb!U8` zf56=4V$w@-g6%HdMrycOOqsN?Ab%_vFX$a=uDEpXM!6-^{<6Z}Q(Q$EzC#q|83pfw z0GdY*E z69Ptm+j88-5q;-Z;LX^CJH*@pzsa#(r9_q$i7qEarBvW9$VIdSXaFmc{s!lt(>+%J z3yPvE<(HIPrbGZUeK~#lGV@E45t?N9$Nk*goMg%M$uB3={5EkvHaE#P=O=4?>wI%^ z_EzJA^Q#m45lu8pv=GVp%}LsRTAlwJ7J>JF3c`7j3wYyvdy+Qm<`N&By)FFLIgu)3 z_Bj=b6hbEFcPHulRK8y&Ki*aien4|cn3DFj%)IdF-CaFwcF7NAb13)t(y?re!e`oj z_PfQhve*|Wb#JT%%Lo_Ank)0pzP+wD<^IEM+YR_CBht#^mz0!H8kYRJ4YJUTusoxG z?!oO)w@tZE`k||vYoivEgctDTnlkgs`L0Tu@}^4Kt7L$`yR8%4I=S0bU4_4%$xEds z+AHjZt#7Al3r-X*3ino5_4T&ui4`KF1XNv9MRMaSLM2B>T!1`vpTK`@vwuhqeYJ(Z zCEFS`xLnbK6uA`XVSwLvE&S+ul9*3_ZVvsBTvkbcTW#v!;Bnm~ZMUtuAsES2?)AvESkyyjyqGVDdfe4uKmfqZ>YJ(=x^iFtIx#ll!Ndbt zg$R%2a;V0kPvKDvvb)mjEZoC?QBXhJMiKE9FJg*OR5#A98YE^a*wvz>AIfG^MWFZF!Xi75BeIkwHg_$gyC<`S8P?LM$z%}O{$}?i{>w@tj1t_+w!pU)0Z9i1^ z1B7>PIZrHP7^^As1&cIV@FF47m$4f&QB>8>?NhHfe0l-M!&Egmso$y>PY!@Sn0`cZY+X4QnndnTA ztjO~(mmMYUPaRM-2$Ii#fNCPPtFC}^k^X?phq@`zt4V1M4)l&13QN+U;kR=Q!GV%{ znHXEtZ<3f76a%seQ8`{@qE|Lq#i*9d6zJPS2Z0x5x2cI!0!9tdfFWzvFj;2PHosjT zI;(Z-$-)Fg4zf5)eyT>b0l3K51{Z19VG=ZvzOAlSG)v3FewY(~y3R?S7m*1A5nhIM zv0jLgUF{4V0QJO341#~E!4nV$2*n2|1Ar7eL}%abE6A~zrAxAPV}rqEXhB3M5?;Qs z+$WXcKEz;_`OV4C(eRScK+nKe%1T}jJ4hPV{$mTC&Rk1@uV~JEN@h{<-B@w$?HP9f z-KwUC9AI~XO|aU3z@o?4+A;u_L`xMvl@khh`6hXv)}%7PKC|GkrYOLaS)^^Sf-+xX zGVUP)&bIKsWI(8*Vc)MvVoX9aU`Agi;b+oYz z*dJfNvc5C=g6}k>5$W;x&w9l(MI;sJl}$I9i?LAXMvBCLW$VV5gKG|{Q_^C>5^3Gs zg8fGXe3Wj+bzfTDS2wrAD8nojyIPSyB)jC`XEn|)ybzZ9o=7jq>CkR0Ws@oWc z>|aC?<>NVjhy@hG8exSs&jDc}!BC=vwwCS|srs|IrqF6B*RTvM>Dv#;8A>l`QV{T4 z;43G^k|vS}sTbCo^a`pNucf{q_1MCYL0SyPNXO~O2Fk0?XQ8kD-;$7gIth8y{eem7 z;^{0jCyK?KW4#~+^i*`zRoYR;#pkmQ_O!UcV>xDjN=F62pND#rtK}p^N3l*Ls>gI> zz;5U$c9}CiqJ^695%y<>JF!~KMg+w1&_d{%eht45r}CBX4_W!F^TPljmu~CAT=OSPeh{+5Qxe>zz3lMpnz2K+kHR_ z>FRvY9SjI6(eYCV!P8v3wut7^0C=c@Qs8?4po-R_K zmsg-hmT8`jTEJ27CqaH41|-z-Vh`}&Z?PFK$3h6G?ZcStQ#&$9*cHOX^zBzIwxA3R zplN!CYWL8|mt74BtR%;+6IZ05ahSuG37RT@&E~=)l;5X&$mNGV>C1=YEq(!blbQDH z^3$vDs2$ot`GO!Hr7p_sItBu97M8qu``!01|8e%ii+6vUt}nr$_~(oX4BAV}YB(4$ zDHAF=A8#pn=j_LQpRaQ1AHIGu`I0gWB%f^0yK(SkDwMsHso0>-^yY572I>OD45%G{ zwjdd>e8fgYVFO}W-#^pGG?u9Gh9s|jtXM8*LP2vL8g1rQzdKE8tD`8Wqjv7g8Z1~R z@n%M%-Z=M<#9QiNjmrx2#0R3+$pYQf(0$)->JmP%u7_-_i%{?~Gei!qH?U!lG($~} zFWBUP26Yh|sRL|wx2re14WRB57c@QSF2T+XEIHBr?s@!6NwkRl=HlQai-gO)n+4W}AA~PhilTAS%p$cfq z{U|U6%^smAjnl^eAw4lBgNHS>*$Xqm&0#ozC<(X~L5y9(Psw(H7hlPFII^eu9D7GPJ?39F4s-+5E$s zfGU*64n1+uHkN0NDJPm1ddo=x8t2At>W?}BkB2cW_Dyl9ZfDVu?&28t3x?5Ns>f&1 zY*fR$S@gnj4n(}xdGW>8h*l^#Cd1eYx^d)Sn$2)}G((l9v1ov(cw{nvDMnLOzb=BS zsj6*n&tHJW++-b?N2pl*7;du-6yV>4+WDU@(w`CKH_+?Ux3G{uk3sFQ%5aWA1u5W? zg~8|-9Sh__KXojS$GQtF*_*=D)#tYPDHlMh{KRVJ7Qbsg8^$X;!?2&6mg6wdxeo0q z7j|$S+p*bMOku`ck96*Tv2{mC$Id;0j-)c2W)Bmii6_=&3WNVSFjr5)JU%eCy{WHv zgJGdd(_PibLdjnoBN^c~&~rMB+N5l;L=}TNaa8LFm0Jx*_5QBx6E;B*&h+O9dd9gD z6mROuScX?ZNFbKbfuQXvV5hRx+7v&~Luww9QBw_fj)p`y#qK_T_P)fRSaaAF!sHEG z=}-k@If8~W32SLT4Qw7j1KX{~TCce-%o(?f(Yto68V%eIHKB!6in6JhY|uz@b#(s3 zGdanY5Nxt2(yJk6OFRLk{**Kw9dwU8Iu8PxWyE)I05PeS8^utPN72o}>eb9V0Q)?) z$EI_~Mt*8?;9{tMhQnFv+@r9AERIj!;V}WJ$*~IyhMjB?U3fH)%@J|IE!Djv7o6^T z)q#kNT8-UI+Rd2XO#q4WsZ-3N%x^n75{70k$5tZvp_`L>U+t^SFfG3*c$5_$wU0H^ zD5x97Kw;-gTp(6cVI$4mmYa_&>cSPOq@==mlZ{xZ3H6qLb!o*IZ*~j@%be}2G9<-M zcDw^Hy57x5&%WSTL7IQDqjO!{H`6mRSUT37P(cjfVJQ+hA0_?^8~QX`2=`e!9|vM; z55#z8>@qqK6U-6f&(nrx6iJIoHe+H!k%fTW)U!B}-!n4?amyqX_&r-)3aCG5A`qA91mhQ&a5sx05T}S<}YJd>wSd&*R}ru8JwXV8z7ii#gCXXYEHIAZJ%plRuU!D+5F*{LJ;xcA@&d);O+9rO^} z5yWm5i8l%IXbq@0I zk>}HYasp}@DY$^}KA=?C!HzUm)2vlZCD`O5J*7Ze4aX~rpA`m)(VU=BEVzrvep zP%(V~=zqY{$(`5Cc#Og(5EbB-&uV!w(y-iaKY;Ny zP6mq<-Mf4N3M@(0@4Ac$sb5U*Gim7$FEEae#uk{@!^!;69XxdPOeDM}q>6>|3&%Aw zoSI>#YAR@zF2OYJKBbNCT{#UHJk<-gr=*ke6I9VrSpnT>JSlRTfITg*{s+hT>0OV1 zR>ip^9*>)y%w;ocSEmLA@+g?s^6qM!$T*9YkCE6^U+rilYDeX3&ausjIm=GVaoivm zrsdP4s&JPPt0b$covcBo0N&mA?V^!#Ii9uR1rBee7n4JX(WMQy{6+fqO#&MLksI9Z z7mY@eZypd9R%c{>i`7#c;oekbT|({H~?-fec(O_@NWNbo_f@hB>lw*39>{N(Qk@aMn0 zr}WR4$|3?B12{4nrNW21X25Ex9=x-~lq@*t&HF2Hm2&6|_iM zQpb~z$fx8Vr$|a2I|&eApaTWg_Nv}1J^-T}SooH6*Jlj&*+a(TEiA{bhgVIO2d`$A zy|^xep}Ege5QkDgsT4GQM*QbZ^9hrnUrnW~D}^3Sn-Q10yI^{8U4O6971ae3$<9?l zYo(!i%*aQgKW^af!MYH@D@{eAlN*Z;pKl(!d3S*K#+}SDIQ@)Ga11M#u>TD!VTl!F zrKnVp%OV1y6_XK+Y1`3G6NSqe%yIJ2TjM5}4`v4E;o|xVM*DEG(+u4df4kAPaPLQO zw%Z@>@MrX=*^U_G;eTk&=rG#C)IEXl)>CG^7ZXeUn z2Q2tkbmx@E`IMS!>^`LuRHztq(SSM6hu4%>j4$)Xygd4>T{a=9ALhBT{k`asZx=zL|nfyj*K{-?8e%}1k{C}CS2&}L8+WD8kCaN(1 z!WD|9U`rO#Ix|1#QgB+AeCdT4*ZwyC7M*UVpAr?4%2i8r6`T$bb6HEOab61(LcxsJKuQB7OoM+==p`g#**Z0=AS@EFwe6^Eo~T{A%*Cot%U z+FPV_d6h&o{eJ-iN@%h$SsP>&hxvUy&aI2Oq-<5f^Zi)o;l4RP&WHB-D3qiXQn&c@ z#^p(nC@rPsS&&gQgV_flyG1PlE(~i zu^;@m#QuvrwBedKbG+@^DRz#6OO3DaQDv-Hg-2dK;eSJ-;Y^enz~93(kBBu-2Mneg zr`W8(9g$Bszp=kk=6TV!zlmyz}X6PIHq0yKXvFQP>5ThlDi zE!w8t7=6hW1|u`Ey1K1I$IUA-=w|YHLhDaa`xd3>bUv9mt9dke^C5H(=GT*E5k(HKfl1nd;% zTuC1+=F5qf&9W=^=*@oz)vcCT1cWuusUKkF3pC$MypNvvI7R1$$=m`e1!jS0%t&o; zd$Eaav_ik?Y^@V#bU!vmVOiKNdv;h&ER6xBV1bozMl)XonEPnP17~*Wo&EIV?~C)o z#(7qu`BV{1L=bvEoc{7|`q%tt7ocbY?EJvW8D+JT^FN&jj+uY2oDJnzL5OVxzr}s% z)S1Zk0l}d&hjgSxVp5aY3T4{HT{>!a0mV`(+U6LOcEznhXWLyB4uu+T3V3dPRIQ65 zFD=@vV#s%-t!$k`kS0KvMa%B8ZQHhO+qU(UtuEWPZQHiGY`dpt{)pMk>~o#*GT%M- zP|=vWm})?Xd1anpX=~h-g&DlFQBQ8$P35QST||CXyjLPucfYrMH?pc-%M?}dw%OZd|Jxt_7Siy@p_%lfJErD>QtO`3}0_%V82?TwaVl!|AEPcV8h|PA)0Yf2n0Y2TjcrD z&N zf_YG`(X~r#Z=`>xtL-KuBJ5$-Ax!XmqtZp+-ytq4QUjfZe4QV_Yxnjkw`*vHsBvEJ z(zU?K-@0!4r!R;nn-8acRxGN3_k3X(HkzVJ(a$9*m zWcxQFW?Npc(45dVd9lL9^f?huey?U(1^w;r>bg}Ou2MIx$Dinhd~m&u#+praG>aRj zHqSIh2b_lMyr6damYFG@r+^*8%%k{b@9MHUtZlp*>!wP^m_|q3k z=@$xG$Q`{nYLWC!lvK@YoaosX6O11GBDgb>F{RZ0A3`ycnX{yqZf(=i($0_OGQ_zp zmkhONq#faW9EvBU&g;>F0IMyvxg%|VmN>FA@b`&8MUXL%yF$*WhpLF8&9g&&CsO#f zvDu_(P!cuCH<=)+2hzA3bOQjg&8T4BKtCv7Q+amT`V5=b%j7TAJrW+&)aW7_872VI z5{pk?J*xN{MZ{Nmz2k6|zo}#j#Ypo5&}}4Fc}X?j-V0(X%t1SeE( zA=6ZQ)Wc1pPMVMtCKW#2&<-Vk``J~^&|jGK<=g}Dg5o>AGpBO(;^?|EP0%psLj*<7 z+by96459;j-ko;Nc1b|2HB0;3osky2qu*$DJY*@cOU+uOo@N#KQ9(5E-Y9n zcR{x?(z)e|?(Ko@wg;!Lh8=)Qxl2Kg-H@5FbY7~P1-0Kx;{B+tCKR-nWx3%%u?%vm z6Bt0+;2&WH5c-s#OZ_SQ%@FA9G1B%oRyiK<_f-E-g(DHGE#P;pg5efA?y^J@Nmq_V?~+QU7msFr5s&&RJrmyJ@Hs;^Dq zP~_dSovIQs>n6584)`Qk>O%*79sXJcf3Do6r_tK9g^BVLfXgy*I5vW3$Z^IZi$v2= zi#3J?haZYtDmv7`Q2SSf$G|Oe(Gm<3Ze-AX;;@@ElzUl?zvA>!&_liY57Sk zZTZMOp5wmD2b9l6&6JKWX#Kus7buheDJNP9;c=vga+qr;q&s<#YgPldtXGTTrlxu?1lS)2uYLzh!QobY6%t2eTf~&TV1~iIa{;RdqD|kJX+~6w4SRHC~ zg`qdXTA-UhZhsa#iWv7|YKjm(J( zl}oQu>kYXe1$?fqww&Y$6WZ(aKFktlLHOzAoejv9Tf6J(Ayu?dc>6z$#!Vv^I$Sq*X(Dq!(3LDHSK0W^UMQDPb#=A{m%s*@?SNcmCDq=9i= ztq|42>$}&PqpMS1%j^K+tAkM)x-&FI16isu`hx3_3NR+)wia7S6ifpHb*#144pHN6hx^K(JuYUV$|@W!y@X6g*E( zL^@c{g&~r3*u{s^TIMj$SFj-v>ABPevUCwOP5!Lc2vw*L_djCfG7(K!AKYm8a2cZi z`YbF98|QpO8RZ0n&;3+l5~K=5)IwSv0I6?k7*yS;+OyBrbzGs2znY3aE{`_JqY$h^ zE79jW7G0VTMTD!BG^vj17&R+Z`KwVtDt=Yei!#w8JlFa{d65@M(_b!k2V4U~3!=tH z|2T)3h9##AvX)+8#E{O|R4iS<%yrl|ZfuKTDrs5GW|R=BF#ef$ac-L4MlV<213X~; zSwr>*FSZpIVTbht&eMIAFsdLF0l~SZ35t1Pvn&>*2~oy8{BjvW;v#+hA` zZ@2Bc)96L%^=5`&H<-$t-~3yFX9KqMM-zkF@aifRtqp= z0l#Xst^{r_652=CCnf7#Ag}tD481sE#P4SxPlj(_*npGr?V%u@`;*?-3iypE4gSG5 zV2bF5@O$8DKJ{XxU$t{T2LxHk_HmmsX5Wwv5e07I(_-*9>9Rk{vlDFen`K zDCiw>`WvB6LYH2~&H$_r>J<9iJes9s@@q3~lwi}@*Ai$E%ktlYZyUo!LjYJ(djdrt zc*vYxF=H?5-?hOdMy!HL+%Ud&o8G*=93pAnO0za9>6Pav+E_vFqXBva)xjlY*cNP1 z-7oV#(g9CUh9}^5n}(|J&~=l*`&7KOb4&Rm&zeR* z%=V@*o+3X4+I0uAWq^Wb8=w*E)vwPjd6edeHdNhNb?Vr5nHgMGU4M-VXT|%Q1JfSz z-Aep0*5xHZOT;m&{KI{|0=(_qQ+-hwx1Qf>4k{b-4&=o-&`+fOV;8e!4-qtw-c`>7 zCW%V|eV={;v%LioKyi56+z&*i>~0X+y2GnP`I)nb1e@N^vzE z&yZ5sV9?~n-ckL02bc?J>g{In1?dSeO<2IC;9&Nw!N3juv59z5`DxQuVSw=z&a+1> zr~`xtEwf^!mY|>ePpVV3G$>sWORJj}tfn~*xLxUqvi3ZpcSX37DcA{a-!rjSw@-jr zTF|N#?3%iT$)<35SS#(wcZaM3W|durbrF0Vq+*yQLETGpHiNY_yIS;xkott~p9cUx zj~6$hPJ@Cp&Ye2UeKkb8Fv5dtne(IskafNU!E25K>Ef=*OzsHHG8s-fC}UZhvbxIDn(=B`qr$+H4{kM zIurioO`-+%Zq|0W1Zd5=K|^X~nh7BI$*1KtDcrBK%RKkypS5|P@k#-{?899D*b6c$ z!h9OuaSbu8(E#}XKS_#*xFs$?U!;>ACbsPTqg1g|V%Ena^+mGvCf`m*XYjpohmCWq z3qe8m^O^xJF1IsMdtA=^WYko`2Cb278<54B;^hHZu?FAxVjD66UTOB&S#Koviyx=-sUXX1hNrA&RnjDqX9-cjt`Uhd9r) zA<;$G)iP_pp3c6lXM@%zTCd-$%NQ3*{5v4#dmO*l)>Uiy7*C6pMwiCYGSOHiv+8eX{^80EB-RybPl|Wy3qzEZBb68N2y8$1&UwkP1LaQD?*ZxvLCd-EjWM zvy)BMp6p=n?b^*CO%}1R-7%;_!E>>u+;->`Jn3iKY`L;?iR2Z?yb2nHHkt7F2l^z^ zo)yjtU1wuGABUE=fdj*~N|w(RsUr;VrRpI^2iSV2^q0DJb>=N9y76x(d{pSpxHMuF z))5DZ7d3bS0*qiH)Q%xI7nO-3UMdWKM-yKRqgdiqb)ssyGD!=Obx7M~K(~m3c<$$u zT0#z2C}Mg0Dzb(kE@MdWh!kXI&|g{s8_H*$mT*tv!7F{@Zw>4B+*w`q3CV!V%Z%uZ zU@ZV0+#q(b@n?VvQR6)AUPEiOwn1hkR-!o>PSL6WrXUKj z-2^nVN~R0Ga6>2tx8?g%Hhu0Jn&YUN#M^$QjD1bJq7f>r1K26k*VLRa5xfnXtfzkY0C zQg`2zuc{u*NLCSvpToHokLfED6)cor-0;m%QPwo0w7`IqX}b5NZ|qm z6S5QsV-<(#=YymYz{9_|3fi;6&ADnka6D)~OwKFf5Q=jP)vtn-*2aR7_FW%Jn-vN& zphdhnWZqA$Y4Dk8%-Swx8^X!Jd8@`jKKIb@mthRdnwbQR#@HR|rVLe^3xp=HwPe)m$G?6>-V`3p{ zz&>l~85n?hwT>GnYdAH>AxMqn*sok3|Jq=%)Ocg&hDP1fyv zV-V{&wWZi8_JN#k#5I`<`Y_7J+rCo$TxFy_OhnI!OB zvM5rsgxdamv{&Y5pBdLh5Z@0mI`_G@Xy+5e=%a#ZB0t{ru5YKMJg$JCAz2**Y-?ZW zBSRu|=N5QQ#vlXrxT$Zv54AnJLQt;k<=cSDm$cp(=98VXj3J3yk z-(E zu>kY-IFrb<{XTov25#7bKx@1Q>iFzw%i5 zY|rBF^6_wG-x%6Q3zF3QjNv6f&j&Jt?{M=hDu6`{9$WUF{sDoxvSJ#nKPHD6`K(EeWKh{396u>?n7{vNKj`Ndp4=w+wLxfhTFc!XUUHj9h7% z!XPH#LR}@H0cjv2AhZArcCSpo9H!^wbO9&%-CA>4-Igc|j66Tz2JN{ga&h1Aw^|wX z_i5_a$CbW)L`@9k*`fYWv?^0`wCF=513h2(tsP*r-0QQ~>1WF`m`3jDY6IH)schfP zNf3^DLB%l??~EGstF-XuNRDF>)vH1{47{xq#`TjdI|19&RxtpB;dHfTdz@T{4Epv` zxI zcrY(^dC?uFWIVvVQ#a|vi$+TML`i!&?Z^;fC>9ZMYXoe!h^>XxZoiN-b!${p;l*XF z#OTaNJ^7lH%T`&EZ5=Ie#0&qowtW$`wW)Apv;91f9|u*T?rL&=*$@S3m^NEjPADO_qY>A`V{EVALQB{4x$EY^qE>tx zqprJ)62~W#issxRVg&A)Db-P*@P?i0e{+8G z)S^!wfiLQvO;~C;?nx~tn)B&Uf6WynINe&4*8VRAUs%2D>G(Awo z0{dciWZD*Tg{(tpx4vj5w;w{(#Uz5oR1{Pc8%H&$o!fWRRaxCshudYk@>CqwO_2Z7WREio59eRx3Z!G zJAz+k(qTF$0g)B&nLa}pxJqrLn#T`)DV zxq80N#6S=N?7I46&?MJ$RlktZ#De99L8=Eku*2!J_t6C`Bh@(Q!Pm8UR@mycngMT( zN&zz3u6E0@XP zBEr-{Fi?vOWtI;_QsLQ46Y~7hCP21BkT=Aus$7Ndz-C(F`u+6J0E6R_@69`xjxo{V z=XKr+U+)yjO%zcJU+Kz4tE5nmUJWqgM`g?m?>G&PGV^0w7hWr0jc2sJTv`Q zFj=lNb<3X)R-RJyhGQ4}4tjy#o;1 z@xwXf7@81Le6Nwud^1R~r~tq_fk+}V`4xew&e!76OGBT$2DpQi8JhU^H{U9GZOuZq zpYR(ClIbtS;~B@{BCsm6=!-|O69YM`Ffob*5$f)d=T6~S+pQx+_hf?FG5~Hv3}`d6MidDp#hZMg){kQgy`2> zakT#p=Z*_6mU!NZ<^DQ$+lWt=?Ew=LFWec+dgZ{y$sfREu9iI8)Kv`S@!Yq8uqa;k zrK`H)h=q}Suy*ix2vr;@Am#)(TTmsC^luq+XC~kzhuv&hL ze)Ui{{JPsa-D`_~vjM!+=MFrzEx|M3PsDWZ(x@4VTqA8|cyRmwy3Vd)ac`l)2v4l=cDpW| zYXP6XkI!RGDA&|a%RMz&8fLje4^_-tfAsP$*mC%^5QzTv0N?kAfYT3vsps9$GY)Nh zV{}Y)Bm4@-&;v{t()kn52WnwrRx;_wZx^hR*(Ikc%U?f2sQM$|*4Pdy=)}cCBxYTD zSH6A+nlbjDo&2TjvQw~9Dra)9G0985hZiVJX9DXhw9eXQCw;?8X(o_8Xqd6GoWqz# z=Ty{QbC_V>9p@$H2fsZK+wbDcI6BuSDCieeL z6tMj#QJ^FPLIW88ZxUr%r$3o9y5pdbL#GkN3~fuR;fuIKm5>V=DH!Niz~TkLi^fCz zdG3H2P*ih?GqqHQ?L`0d)AiH&%>c)tin#B;{D`hSIe$lft_(=V-VX*R+*Um$7Q30@G4Xl{4b z{eVfWTg+SQw!nRXoJ}#m&Sqku)X}4CY@Pu=+Nh$@oew_;TnAA9>+|B>6cr@pJYYmO zx6S-s4Wd%!!E(3#x+G_q^W)EgyBjw?X_Qr|>I>$XTVSs&J+-7z@-E)*)+I3Ej<9}A z!8R=H7lp)^rScayj#+5sMx+i0W3>* zZueHW3guptbMp6Z_usUA*u_j}J|jCjL@sqb#?i!yZ~>Z^RFsHgykH2wP~q<^nhr=a zoc|n6=;vgJsXy22fh+*eHK6Rhz6KzP_vBjHE6(~>{Sna?*s&*)Br5M0ybSfPSq02V zjCNH5v#+cNR;x_NRBb`5db1Iq!xKaoj=Ltt(+z>=n57_z%1c4ywy%(3q7gk1*HI#X z)Uiwu-$exc_XqW8mSUijtj9 zyAWphbxJW7`vLgiQ2WSK zd4bLrgVZ%Y4mIOZf7UMCYnp<;?lW22%J|9WshWBGPX@G<@SLBkllo;1ts&+rT}X9dkL6 zCb`8%ZuDLd?uUm}*0b>bJHQd73lcZoeh0*<=}I~H@E`*&_z#I6;aR@t73HHZMZ3cJ zWb=3I+tOqP8m4MgtJvp(`GULeAX95r8+)fdM%85Vnw?IZ&J|+GfmbRTkkb}9Ut#~B zpPS;4TwjgUdc2cr>ozf<%avS-?#fB|GJx|DWBKK!A2TNE*rigr5unsr`d@wTP}*Ga z^8Oh^t6{i$PV1sly02`Dh=Hn3kL=%h8fP~*E>tw({3DV?L&AL_9QJJI1J>pg(w6sc zeme=V;1I@AA%edH)#EwrBm`7KA|-`}$I|c$!9?9*VR^irXQ@VIr`)0UNMkHH#_q&} z$j(0pQO6Sy;rGqghXBr-9H&{!VsCq`E8Lc@)`Um%e`=3SLNrAi&Un-F!VsljVcy-i z;}atkiPh?iHAC5NVZ5?jFB|-?iL`7;mSbK%Me`^9t+a4wVBzxo)^c8w8m$$%(Bo@} zxgNmqBK9C(?W>q+%f*9X{d0OH8Wb-Jf~cLQ2l)p?a)!Xu8Gv_d2odDwHXWWjZD}E) zw1jFKyMVnW8rP)iXko~TI8a}dOZF9}jI4t_<*p$|3=a`PLYX&OP6&zBkv)e&rQhA< zJVo-7+DR$BS)-iWV87F@8aHF^gb4k7_Lz^5%-0RK!|GW#;_<;G+(s^D=Sv^}rD^wzoR6BM0SALaXMo58`DTuAb|HFxKCtURisOb5 zdPrr23y)_zNVAnfAY7!ofj777K=rA*^t|7ugG+2zt55z2PtqN2+)!_qODZpaP#-a3^ST? zST0LjZGfH8l8(n_JuQ`sPMc+NJp>AYSFY>D+7=}5=^{O#9%p-a%XtiPRF_wdm^Dk`-<=3HUF-tt_HaG2OWUffXwo; z=;VN%jd{#!V| z09qX=U);5sRWvMu4E|Vn3JyRBVXLNN{>%Zn3G9gY%PQP8-LGm_@hSFkj*i9%bXUQ z*ok;RYGs8+!K|pmh&Yc&q;}cyOHj^*D)w7u**+D*I*0}{Mr~n`ctRwHBJnI<3r01< z^?xQai2n|Fa~ zS^cORqrI}Z$G@{>X=S2Dobko!(InZ!BN`Mn!wv=Bid^hHKrI7U5@o2=yo!YwJh)!B zUAFQvX7J3H2)J_ta(K~1#{938d z)t}q9zc9iL^#=JEBK@iX>sJ`+9rSHa=ivrP{vOl8^X@AiV+dY{khU)RnglibM~OW= zk%{b_PW?NKic_{7`}ad!HXaf$GTQD|^3k<+E_k-lPp!A?G8@DWcVFo~{5n1bUyhYD zRykui>+a2N+fuq_My(h=?)*`SEo0S2;g$55{_e5sb<1_`Ruip&AU2AIsh?rv-z^eK zO=GlXU6quJ&V92@%Jmn^=4u=Dm8s@W7`1pBn}KqZ{$uBOcV5S&k?#9L;T$S|b+fvh zkT2)#I%mK&;32kK?~SfQcvA^(;jL{5mO^+6u0y;pD=N3N&MbuhO|mOJ;0jZfc-y)S z)n-0Un&iAv+l;M%MS2IERdrf8zbpp8-j_{-JCc>c$GQ#(gXU7snKTTEaM@tu$ra&Z zYZZ7<=A?t`7AmSd?tQVuAQxW3KBsu;ZH>%OtBmLv1bPkql#}d`Je7SlJaVk;k-V0b zsP8qgd!W^A#ZHdBxsyi+Pw5|jY^`|Q)}vDroCn8<>VF1{Z`wakZnD!eYqR|7Gi!6| znvPz!`O_y#$5MuU6PfDC$nybKT2VRT6u>)zk0&qR%P`VGr#vhOe9Pr!Ft1iFZ;&i{ zxu@_B(FVTxY>qI06d0v1oY3+3ZXSttt=Pd|pl&&ArBsOA}Wt6YQi8%?!X!sgeojzz{X z@yOR=6TVW2Hm>_|J1zN<8A_1s85=GrF6rrZc2CY2iZ4J~t=~iKkc* z8SQe9Sd{c;b-VtCX4+6M3zP7&$hAij+xH)~${pu`{*Z@dB4+z)OtcgaQ@xIwPUpD? zTb;6Ja6J&lVLgvqtn56v~}fbE5;D6ajhz zTHU>TDVzrBVyyLG8p!lhG-fkh1jv>>k6Qvi?WjDXzt2Yx+z9qiq@D&9vmu{KS26Cx zi|}HAppUy2n4IhTb@;LQ(B48rymXhG+z7v>M7BI07_gxBPm^=YNfbJC=pRQh2l@TS zdWk4g_QQ*;&n%o%54GVqfe~3KnHcO|97dE!u)f>5%uwQFH=gigQq%?(*Ap!hrHU{g zuhnwT_P{ZvI6qF+->?&E{gsQ$h2)z?EGp1oJLp7}gBJ{;6)um!+) z3y4o6%7s^&MWHQPGVrwk!TdMs@~JT4gJgqc)@E~RMJvgiH)2g^vju9A+z79Gu!ACO zMrj27ttjYHW-3e%P19V?{*{`?q>#~dicszh=<8%Y=})PUNFc9_yJ-Yf#I&eC^eKPL41}q zYp`as1IDX5Lv|xFbWmh~X$Y9CUX&+bzRsXThJ!E;s+v75dbwfp~4^)JF^96u8hzJi&U-Sa_e-PDd#_f%66C znH1wQvYLYUr&=%&RZ^ofHOyMMEXOA0124^uZ*&WGM$y77$_JH2v9qIjhj;@vZ{krSN)(oi2i&!B{0Vla)mA7Ys%FLzIumo2u|(h~#%D z&5FTlG(_6ePy858;x?BEfrsT<_xDf~ThEIyr>N{iG?1}lH{khDKUx956Q4p$ zuUKObG+S|pXpGoQ?<1*&NPY~Hk+PpG{|9r zf3)hS(nAuuNRn#*uo95e4(SHF*tRHeJ4&;F%*N>Yk#a$03kmuzDyayvS|*F531Eee z+UACc%7x9%{Yqw4a4!S!O&ZQ^@KiwmP47qYn|uu_;L(j4H5a~zwvZs8;(`fhp6-|1 zMN8lm^ZxzoeOac!aTB3LD}l6sua{ugd>~3H0wBkWNr(M(7OMc0mgKMGh-+;QfhjpY zT|1!P{MzTKFxbgDTL9e5Z#sR*KWI z#X&_Nzo-X+d6z#7-bkFx6JJbK{xHKMC^3F40~0|S4Hj$OEcop!0`FEO->eD5H``(L zmuWk54=^_`E(+*syK)3C=GLkPtg$ZSFAS<6^5haP6{>P7*_?PRw?dLwEwRj$WsA~w zkHUbl->-nf++_!VnrTh0AILE^ez3Th#f8_pZ58xqPGy=j`Y{rb)`Uf81+^oibm)zN z7yynm%*632guSrQRBdfms7?6z!OIl!lt^a}C%xdwjGu8~f)g?D#rb+l8}ygFc!+09G={tgF3Tx z(+nn}n6EZEM~V5oWGKuUA>0E;LkYSO)~Z9vRMLEEU^TjZ3qg5xWZwq^#>y~&iV(%y zBCZa|D!^9TfgxA%kso_FAUx}Osc^BfQn%PeyM#lvLJ|`6LS9z@Ou@kB+{t`xg>6xy zPNBz6T67VR)S~KCRrP9~_gZ)X#GP(%ls+T0x`Q?8h9BE<*~#l9%T(*L`D=>Fz!#Y< zim{Y9Cek)9`M@xB7@y=N295xXlMgfn;bUhijoC3)DtvU3$etnoL?@4hQV0s(pute1 z_)jPLxqff!wOCUXi&yZn7bOXE-heMF!MCh8-MkY3!qn~CBlW&&-V@(d>=rFl41qM) z=2^(85K%}7rz%Zfl6j_O^;@uJQl__B?BK4^e5FLm_+Byj;;*}|7<(=+@ndX-SN4I@ z=&C}%O!hjmeZ1n4bvY7-IWM{K$P*@<3E{Yt;71UCZLWQQvbRApFqxa~HL2z6+U>*e zk-jMaDgjve3FE%F47k6#921q_5Kx5HbSCq( z5!CH93*Y%M(&hm1`OAMdE-hd9$+Kj05JfAeTh>>?K2m-~C6%0+jUf@Ag+hG#_XVCI zB#h13rPQ*P+e%I832!(IgYQYN5x*LO=>8g_v9K3oMi4L@s+}=I1GOL>#A+46M)(dc zl5wID?a>oaoG+9zjcdtN9Y-|aXznkNrzBWe8lNGEDPYQen;ms$PQy_{&ZvQy?BciH zrTYT0*rs^`{ng;UB(6*>sl4b!?O!5-9U0|i6Z33NU>H>WnCk-1xt>%0*%e4s!yu4v z7XOnOa>3Uu1RUd^=+XFYA%QFQUjCLTj=k^SXAJJ)v3?QxA%&z-^R*kE4@O;|IP`%o zSnxx%v4H*I+I7#Gy_;u^e@8pYRHhFDHgBa+k7$i8U)%5P`ThwX9pVaC5E7D&uvvU) z86oj^`PKdO3k|&fy{`$l$Hbv|Q)A-&*l458n)}n)gvLFW5tg9BksgNDaesci8-<0l zOSQOn8$aK76l`dcjfMN86w0}r=(g04dnjua0TkF9u&UB4L$?={I%-@589hAxtT=W4 zh_G{(+&*D716Z_DnC4WPF;3RoZ6{gYDp_PT`nBN_8ptxXCXZMwL zn?9}yIU$*KL^d*iO%@MU1UILU)FjT+yDk^72^z4HxXX4Az ztuW5kV-XD|u!tRVAclolSG{6Y_kck)0N5&XRq9Q^P*trMKzoU<44rB~#GsDdr%?`W z5ukT1bu&yhbOW`fVBue|v{*_JC~1{AEM2TqQ}f7CU}7y zG_ex?49t0I%J)2S2opuYIB*a>s%6=2Um@%1T@hhi?hRjhvV1#X&iC-*g{DFsQtMHBEov0sev^B|Db7Y$^`D?(E2~^mw(Q zhBPhLw-nNClD8N)q>#iV=8gBFN(>*s*C3-?3S>nHG1thQowEw#`&7*~P1Lxs3l;v3 zrY`NtB2Y=Au_g2R%aIhdDJAB%l@amY)I2pZ=)svFR?yXbno}bb3@9Y{vs=8&G7XX$ zQw4hktBzPvG+q^-VB?#?9eXCDwO+kwMWt;fU2px$NEkh$1b!sH|EZ!rNSM7HcJ^mX zgQ80m?%r*0>Lz)K5qyo}{RA(iat55J6p3pA8!Jxt&c2N%2RA^_ts^al4Rjx8bfKC7 zT@Nmuj<=TUf-mRa*TVD}ZKU zIX`lSeCBU@MAzkBLMgB{IA5xoe&*lJ3e>>LoHAv}bTlk;TB-%U^}8TqMDky@B!PD( zXINd%%LDweECAek&)oRr&J`$f6N5h@Gd$(vLeT35K*Lxh-Ux0*@8BVb>~(X|FBUz# z`THyK+OXN($;haGi)E3mOQebcI<+^7lF1#-*MaBwvF3L5jid>`FPTb&8h5zWaK&}8i)6G6;!Co6K!m^TM zbZhbe=McKK+jlF0U5`!1G2ixD%Z=bLVh2n^(nxRe>r~o>uU|Mh=SqL@lf)qzcmfo2V@vZ z4j(d)Ur$7Vc!WLw+UTD~sDjv9S~H~o0cOr$2;V6`CKe3c5zay6^TC8p?l03B87xEp z10{bB-x_xjp4s1f34Qlb`lIPQS+_{$tW;`tw@>c`uUr%37E)SJVt~}NMi=wbYUK4p zuUk!bsDsd|UjoFGOIBiio(`2?%g|D>j1IWauvUc&SB8k+6UGr_p6o4XJOZdAwaA09 z?jgdf!W(IB7H&&7vtn7eM@A`er;Zv3!qDo$K&1yjY|dkpiCCt=rM*t3Ym*+^G%Q<| z!B8eNA0Ad5FsAy{`((F+jHEN-foV9;58D|LMOAoSaRG|Zknt+CP-_Ptm&XOV&a(#$ zsj4|1=fQ>`um!}UpN(QU9UGdup8ZTi zd@Qj&Er8gXC`8%I1<*Ava@}WMazD?ed1dhd(xFKlz3VoeCEna;wL)G$*F)2CxKJN{ zka-ep%n7DE^n=waML*bN4l}p3FotFpv!&caEN4K@a#wA26?#sAx0IA~x$BQ{xrXnmY8G&+{Svm}a@+sy+gL5cX zP8c_AJXa=oPV!dgZe}C)#V_-4)UlmXOmwYVlsL=v~5-O4cNaI6cIL0txZ+ETnNh@JW zrG%~AbS}mVa~*c1foKNvuC4W^qt-C7FnFlCB#Usm5yE?rNky1>A6*|xkGc7|vy7@= zZ&0RJbX+_rb0?3i*E@cBb+;LD5bK z-bw?6cY)6qucg}%uYJ9cP*wQPOJqKW$qAoTmA0WMcXsMSLe=1<*&dB#Fai1~BD`Q( z&XS`GsSnQTw%9b9AQX0dI^qHAO1T%DDk)Hp?v-%}2uu7S6`XJ=g+bduKLPxvtPk8n zpy2&uPn@%-TSzA;R3y~ZPC~zx7BmGo0v;$8?AJ49Da`jaA=FlDd+<@+p67P>s}Ted zNOR=SEh;l!yDE%ycKT7lDge4`E02PLC%NeI_Z9f2)imVD1^;e+OodFy48~t@V_DvN z;0@(8ce?8JLIcep%L#gAKlbZ*lY{4tHdw@h*IBFWe>!bND(nI}=P&93f-*p9K=bkN z0_HA);>`S`BwCnFMrHq1*j0yBwRC;DLkvKqLqO_uAl=>FUD5~$CTHZ~vhWv*)+gnl-CtpS@?^J&R>I8f2V}`&Jp@ zA!XxxRl!wKz5=ahL-hs2YEfq!p2$wGvunRfSTz#ey<9O#S$(pQoxUOgcKnDS#`4^5 z^}WW%)ljy{;&9!1H@-QVMxFScNr?|z60`R86leX}8@_PKG0H)kFPHq6gs5#zo_2Ly zh;Y$wGTRfV+8iu9(;oD#Q?p9eN>T=^kbX6FZTMhNU0o`iob>z^V3%}L%w}bIX|wae zoY~~F&}(IM>@07YhKl7 zw5&Pp`77<1J8-y$TU9tw^EIeBi%BWE*)}}P)Fe@4zk8FT;%=t??1=G6#MxwZ&|}rj z+fUt~ewZP}79({rDZbe)X7apGnf^;LsISEJt=Z^D4;Q|(-YO4zf=EVnTQM_(jj7*T z%{fA5^L~`On^s09dVHsFkK1gtM!a}uM?yhJ`G7>tWs#h#NXl$f=Z+;Bi&d}B;uj70 z^)%3`)2uV|r0&qZkdcJx>7~dwrR`m=moC?pD$HO?WhYpL17>5zn}!7HZSPlPF2p_- zWFj)ZHBIFap)6w`Ywz*V(foY*)FUDN-3Y0nC)w^a^k2Q1+nyc8bFhm= z|I}&+1?(Sp)85zF3|yd?a`-Sz!FJ8~OKHkCC8r;PDL1KV?+4Y>1yqdxY>n_YR86+q z-PJY-$JmUR9)wj2DaZb7^<3p8id0!Ls8uVoV9nh*|0%T>RuFm*3Q}TeX3_?pwvbMZgDTisK3j=Ux*7SkBqvc##XgB zn2H`3E9`jN47HOB_S$B=lN@Pb7UbUUd@;^0Q;lIfB0-q+<=WiVNf{zH^8Nsp$8-iI zZTVHIoxdrVw(Q$Kwh&RAz)ARwcTej;W+~j3SJ_&8a#)HZM%U#>OUCr~1NMdvD$-(( z`&vbHy4$pNa^^fRQmIMMvP?yB-M}-c1aXi8qITfB+}WupS~17VKeGIVFQiErDv*>4 z-PXe>$htm4W(9C@UnN%4|A2PTJ%j2mFASsBB0pDUo>YpjXZUF)B=dTCBCp~ zNKll*Pc-&I6;XFBo64%#Quc0!Udc5|;`l*|5!~RqN>S9;D{DrEqMOYT&q+@&tl}+c z>PcpfDM$}We;BYn#QQeD%Lc0{v@-jkS!-fowmJA*1o7*@cOCoT)-3cl2N0Yft?Ka6 zq}sT%n{?Cc_iUs%GZe;>ZDi%xm1&v8`dbS1m5o$hv9j|9DIBWNEm&B7rX?T^;i8US zz!Yd)f93)M>Bk!>YA;Dgzl|YuWVYH{XP%C{e5>%eV!S1Dr)>oRzpzio|SO&6BB z6O3ZJ@0WX&_d=A2NO0>u;Wtnb%cH>2;O6@4u-dy3Evl?PYOeYFU*Rs&m(P_|mbYh4 zvyJ~X8kZuOe6lTYtc?nyP%h2#$|9?hoUIJuC5<=9^X78k;D`$;g}U*4bwErs0A zACM7SCcPdi0B_Z*xgtLYG!XNanqBSgnnWLX0GrLX1LV zhUeql>j=rhU)rrRUDNL8+17Lte#DZ9DYoZ|(%TC8d6lyC2k7yW{c`xO%s{=ak>~p! zwu!Gt;+2cz_Q7loU&v!-3x?=#vZnBB+T|L4{Vvl~>9rc~NES}sX^5IkkTfKuWdC-* z!jIzXokh}u3pUM*=Fj5Ghq*iq0|s@^Pc(6-TuDkjr**j~2-M);(B97Hd?>b+Gl%K% z7^C$;8ncC~hRrQ~^}Y%E#6hpHc&^yAWFsRHtRW%q%oe!^%W#AAd9gr$y&l=48jMh7 z4x;JKuejzSL@(dYO#gi(o$zh|Ck6Rc&5>Wcblbbzt#VJ6RF^kq0=v2-G0&xbc39*9 zFI|df_F|5Cz9nJX{%fmWpHq*Yq}}nlH^pb zRAV-axQjLbt!cBlGqC$#ymz1!I~9|cY;!i{xr{gueD%3)8}?f9C4;K2`dn?E z3;3bzxjZo~hEa%p+31psDhtgj{c1sosxCx?KP5McgEa=*K7;-^N4~;vSK?RAyes(o zsM8*(V6|%?^f9TpwiC5ST47z%WS*4Dmh&&ZyK>QT^UA8=zKLatgG=m$Z5iI|%2Fo0 zpDtoVnLem-+-gsZnPFfE??3e0Am`m9Rm*YOXN;RcAJ*zW?v&w?HQ@|~zG9Y`lW_EC zRqT3Eo6>?1PfXBlW}Louf-aXzp9|Bg=Byc2qP8Z9JaXwF_Go>Ijs~+wt&;SS})$$IY=tcbgxU zT$ci(NLr#2xUG-AD#dBK>DqenDg^#`yznbZnOp#<(Rh&S*L=cN{ zqMu6;qN5`#e$?~Cag^6ZR<-?y_*hEc+xS|g2m3w5DkbXab+=YhuWp+xdDiLD>ii_B zSbf=-%Lu#;WhQyO`xiW7Xl*ovJ5?|EfT8i#mpzjv9;^Xbq- zx0l0->?V#c4M)pA&06pu;f~#tAI-fneF@ux84(uuq~^QM8ns{V{bBf0U}I>~!D6|I zLUrPe9B5>vVZla!O=h>W=HOA~XE&Vy+L9cdN8o1M?X-=AIs>^#qoi(D;Tx z*OA{GIlWj$ktnh=Qf0rioordK`#LFlmtA1R=WNJ#(h{b4_HeORW13WL#R^>En~R)O zzs}G_bV~%Ky*v(k)x{!clZzD%A#%hdo)+mqFw-Tni)PX--1G2q(W|G-n#gW48GuYW zmBsN4&TY;Is@%En{-sfIft+wP*>Ck_rhKR}iN3<7*Z%5nWn? zh%3WP99^ny$x>p6n&(xc9nR;~TafI6HBKVrIYoOO@L!3Dye$ez&VlLT3vKG< zzFclytQ()AlDp%`AVIbSR zN3JH4=~7{OvE6s7WnZW~%}{n3w7=9yC1oi+yH(o=|NKTwQ-x0}^=`yrwX$o*8I9)D zp50-uAB&IHs~9Ub#tsX;U*3mcu;5`Qom+(G`z2}`sv`XJbPIkYc=}Idy2U~2J>2sT zFMg0D*{OxfXy+KZ%#U*=5YRI8jJd<6Ge6TgvXh-d(4V7%iW}T~@Uhsfkcv|w@s_^B zHT{gO3k|L4EQ==QS!cw2@~lD0jO!%hWxk@`Nu}!Kp@(BU(eG-`cF2A*#iZy>FhEa9(sm-?NlM!$QGw4hfJ2`&Hy{a8pKOUzY07w*diE0!={BGP{q%D zpIeDP>s$3JE7SD7cB-be)5qL4lC_t+e9?#!I7t0kjZhW?E9JABWAQ)aUOyZO-=n9S z3_95BQoFj&8%ZkNnv?9bRPf@M&X%1*!!y_1AVhUH*Hl4vhreWybSc*-N=ajpS;Aq3 zUa2_7MK?@h&wnCI)-Tt$YF**E(VGCW!?Ua}E>34OUVAC-z>6}m^k9Qwo(smyZklfG zyhq9~F|frP^L_Gvc7cP@IdOaXa;|*&hTNvhTLZyuofwBH0cJp%L5r0?Ea%F{<+jnlX z)pBN3?}gn5)Hh9k6I9>NNDO!Mvr8nB+9ZU6%dC|V@@av z{O5=6R%rL$qmQY5nKdbdO-VE|b$l!Z_foobyMjc9IY~AsOfb4d(qQ#S_Nu=*i*OwO z$Xszz3d5J$;+wviNWV4D?Xanfqcs$w8OVwa$(YxDrK~=@G)i`nzUCOLqh;PqD=O76 z#NRVqX4(mj)x)6sD2tT zx=N*@ZLI36QFs>boIHjzq^*qpnUh>Ruw&ROrtQ5u-TJ1MD~UFR{QSY#Dr6ctQ`SD^ zEG={TwwCH9b4YMiT+rgN1IYNr!Ovdrs)Pp74L53by;l-skJin2Q5*U<#E<2tc?!9X z*`lmRDg5u>*c>-R8xp;W8Z0~Zr?8<~wBk=0;MjTAMq*X5TwR5UIAYI+>bMf-zY6@w zBd|gsSrm?70n2z6_(^vmv%vmdy4qegD>Qi=iH{)hp zX)aWtU`}7yB9mOXYU!k6SHi}a8qX{I^flX!N214J^V0LR9HjU!Zz56u`K*SN3Jigv zv8iE1c9`_nyfi;0C$*LW%or(CV-)r*6JJU8AKaxVifwiduKE<4>#+mR551sS<)2Vl zE8wF$B_4ce)t0d72fM6Wc=5GdZh7L;-VFB0q*3sjf5bob6Y@>_iLhh3A8oi+Z)%q#_N5fi&dwNvbi-*Vp{TR1j}&D@$g+1HG6 zv_RbI#NAWck&tgvV;lo5E zBg?dCzq2?4QMUaP)}wU|`UicFeMjXlaz4%w@ZEmzg4T##b?!W85~=?y=F8c8c3hmi z&1;_{e=4{z4>K`Z6p>yT^0;@~Y}K#V%`ndpv!(AggXUMexIB2f=e;M(P*Zm1VO-as z>Q68C&@D8XMRbqlcub9-vhTu*Hd3~?JJ(ZZk!nQyf_lFoe*{sU6Y!CihMla+uteI+Gg9*D zarp`_XA50#68$#Kov^r5ea|h=R{nA4iU(uI?T`HSy}y8cDk6#42vJy}NFo*Bv$KvL z#^b{ibOE$fQN8&yI;lJ>qcn~+@=S@h35h1$RZN1bs}-$3x?%2~jAb?uta;wgf6_;C zp(j~KT~y4vQ}~yb#Pd5b(tCkMA`-q$`?q>_yUrd7l?@yO*Yp~Ga{v0Km_oW7NnLj* zWq@DzOtODN?(i?)U!-*5{*>pq?_h{cYDSpqttOiG*Ne69%&XPzKr)%FHax6eyR3ac3LB~$N@q6(**&O+T%~~4l!Rv-)8AIZCSKa z!sn{Hzmsal`MMY?-_6=FCr#fo$M}{VcId%Xzl*t&Ve=-AT$Qt#cG+}yEp^MbXabx* z6nAE77jUEKBkL38w9HvRT=LfKckkr8?03QY(SgsBow}Ix zvNH;)v3-?EINW{ab5~B1zyepC<5DG^H~ccmn^CznzVGe4Z^7#-rsLMCV~11v@~!Qian;lIGRmLPyytA!_VOb&8PGg_8*B*X^`+oZZ8@Xk7h-8d4c^ow9wqO ztku|5)`9o;pLI(4>Z|dFzPP=!xrP$hQRTPLN2z>INiHToAQEQd>%-KMkL8QPo|427 z6__Y>5i_D}9t@-IeEPK~A40_FFzZ6Ima886AA@Y(RF!xBGkKMZBj-56^@&mhJ}xV4@y{J_-9Sbh9?b;_FLmqa@45+=%G9)ldTIN;gIlFXl*|Q#3ag<1)P1k!WD7>zfSLap`q?h}mT%qQmG2g%c~n z4V3)n`o3}=M?@C!4H@m5r7IQ_WT4mHg=X&s>rdHSX^W{ezA$y|evjs`&MGH!m)ZAo z?eq$isMVOf@3On<(u5xd>`kN(2w+Qm5SEF;(fm}RL%7KyqM|KrPdzsF&gi3`cRRZG z4KGOQRVuwThr$W0fkS1Li4EzkQj-mI43we@y5Dl8O3Cz-eO-L33^aD=e5B#Yb=yN@A%$}6eGqazT#QH`0^N*K@8*D%MyNY zp?y}?K3HWko?T8bnLg%qca_Ta<$YPp7_h_4P%S``vnmz%*@)Mvlpr3J%k+@Y;!Jqs zqlD@lP+hACfj2@u(Cl@A1#>{-uC@*|=uEVb<4bm878hUkc$x2!>&N6Mo+f%H@rZlM z4O`>g?o6XH{oM9nFkJ5lws>>1kHZ8c!s^VUGHXo<9n98T7jo7^+{ZEr`4hRw`-v0F zP?zqshu>i!Py1EE^m|OAP%UAcqByMxyxM<|32&?vMheWHp?`;TPOS}aIUyN#v?#~v1&^~a|2yo&! zziCdi(0%q2RWz>z(VLaYV8KzkOr7gz_&tcZ9LNHXf6)Nj8%PJz`!{-Iw-WAJ!dtRj zjBd}oE@!nB)wcD;$mG>6F8k0uysiW%Womu56S}wgvzmw{Hjjm$^3e6IAUEMdxsc9_ zhk1tkSH8CQXwx8y-|h80>vJm z@Uq?Wm-XFHmb2Oul|SiZ$CwflYaD7aP@k2R`|oX9NyEgu-Z$S^I?#WUum8UPcK+U| z-%Tmj4w{OaVm5WkLXsp48B6R!VDiI@RqL%pGwrTf%&ZRQT)tL73i4HFVn~14A7EPu zxo-yDpm$wM;xR6gNpZhPEXt0)%~PZBmh0y{$~i@+KN&= zqTZ~<7!=VUk88%7{d@(}Nf@x9B)wj8EEbe-dbT#GNjrgvgcS20cnmUMwP4O?gJlrZ zJx{yO6`;o%l^xfy8)wN}pWZmJR(r30j#=@9v+FfxbGv9_DBuBEsEIs_@5qBpG;mxR zw}wvP$$KxWVeac!k03m&g1*v0QHkkwQH^G+b;iXOT_$rcH@PBEiV~`$wOORYx0-)a zixOT9Up8@|G!e!a*X3G`PaaN`=`U(KXFO(T_@a8>?jETA{Yb=%Fw5w*KC_8Kf zDSySl1{%_EnHy(I+$@KzEFaGBbJIG+E%-+kz;4{S{tfXH<99GKAojkVbDZRk;Gjk> zhg+0c8uBw$g<+iUCx^t;$hGf9TaLO+yCU~X?teOvVj!!eRMF8$c}IF(Oj(2CN43a` z{}b_F(RNzR9X&h+7e^rX&@%_S-h^W+Ed@hAt8}eNO6RW_7R>2}ZOLcZ+^ZoG0Ojb2 z2u*OAR_S1h?_wB*VHYF$QD<|4O+8a71;Y)VQ?iYvoc**`SRp43iZOMG=V(;4S zc-zAI0$Y3-B%w#f1ldt~B$xhy*z5w5OpR5SRk>|c4>-G+(f!xMc;-|#H#fig5HD|M z;=7QSl737*#Ju1_9fErU5m7Z^3lt77qm)2(o?CI1u2(Sz<5?U#TpFClrg9PAe+Y;n zE$M%(y}2_?)X(c*xM&?X6<*6D6&XiRqQ?cgs3<|#sm7^1tlKp^o1*uinrm3|)6gA= z-^Eb|<)>Zmw}Moo#0ov7HZJJjWJs)IBQ7Rk%YQ-8Cc(y@g7#KrKdaI4)m2qw-f2N8B+Xk`A=MkTmHThaQr6Z^tI7y-T(9lCZKELYeX%inx`gn2 z0kvB%-79bLoon72mwSszq32%ty{G}+@HpIeSuG=8!)PW1Ux1IVw;Fbc+R4j3(4~3( z>6gt-Y=Xni|>E`WpYBCY9kK}E3#Rh>e0h)#(g}_nzSXdR1u&})LvcF_luTk z)5jXICO_;=Mq3G-%2qz?f}DEbHG7on z%EpFDdhG~T?Ds$pO&ZuTCx!f=5@S~m%OvE){R7dCLC@{9LnEeJW8-X%OONcj{fP?s z-fJW+%+kg`Wa#L6nb8fi>#fW7M!x%5ctt#$i8R-!wdS#xN1^llUS*hKw}woHio3Sr z?o{hKEk@XJwcMkcKUE-+M5|z>KQ&gqOR7RCj+rDnMY8gFzJqu0zLMBUgl=>IM0aOE zW7TMytS&{FK-p@kaaObp3|pu!-mM7GWAsiF{#q!=2ut)Sq8=+GdHD)q$Tt&1yzDH) zx;eO7eN5BWP-i82TWz`1$VH#Y8Zk8KQRUh+gIPMqE4Cv!H>Pg>ZXhJpZvIR4O5Q4& zDKmA9lStg#hl|=R;+~~c1Ja&DnudYoNo1>92@}R0#%CDEN1dOQW{5R+P? z)18=yO6ujN2P?srjN3EF{gzI%jE8f|C*M{j6K;8Zkt%uqnB%jQZfABpDNSVj=l(V( zZri1)GYwBwuA9?*or;chx+_^40*|P?wEBUrLG%m$|Wq@Q5 zI(bC|vnS3nYN>mj~d@i_A@CP)wr4aFV;QZXSwxDp^i2q+S(CPj>vM*Ii*FC+>Kj0jg0FcON(770S4 z(b!&q2on-dP9z8ogJRE012<9lNZ_DpB-ZY)oA^jD1PaF1p58?N0SQIIu|zVbH~)Zy zgV9($8DbPO1eggeGf8G285{iOiA#wl``UfN&g2YD15%Xb?_)`vn{(%|-3I2W1ASfCM1>TnV zxA}o!5I7zd1%drR0Kl+Lv6z310{|mHcmxq(7)~1)Ac)5V2|>frxWXX7xORVPxWDlL z_yZ0Df#XXE1>;)kDHwv|NFX=_`Ue5=wSWX-!ym91JPF}&G!myHARyuo0z%QaQvzVo zIQ|HNqX2jPT{EZj{;NUEKcNHgLR==NUanuh&!VnOgHZTebg5kCyVQ>VFah+mexLN>$I2acT&_m<8 z6CfcHw<8DuLvaaWze*6F!vHb?N%wb+10;aV{CgXa#G$z96NLJc=R(0~obdpO8U(_b z{ZlO91EHmKY1SCpe$G+deAT$aI#!)pu5SY;4`vC%?P&leS z#X@m~0YQLN|2G!%S21@=5RNkvFcJa!6BvqPm_UvJ<0e*s9s-0bG!g-nVt+IK4_^=l zuvXlTpg$CV06{p8`T+r<5IkWJpi{N}+o-`nAqK(K0uW07N-3xM|DXB+f-t<2769WK z5*UQWOAEk=@v2*Z9s+_lIP`D1?63I;0~ZvxBMOT8EzJXh0tE3q;uH(V9Ub@&F#wJ20^#X_B&K(jc(EjZvr(ObpaZ5um?6ii&nL21CynU`V_K12_rZvh=isz_B9?7!C{tS2X}ZyhMaV!||*iz~T}F z!_j}Jdx3evVGIoTwBY_L|NIkz0We-M3M^mo$}1EM2xmCz2f_>-m&xhU7uOXLK*ja< zfd5zjp@0WWc!mU69j^Kj5EP!jBVb@We+TFxaT%jP;M1*Q>xLN?Pc!35mH+(Mv`T>Udm;V2j1_gq_{#MO@D`TL7#>-*|Boc3$faM8( z4FLkI6=%c%_FwCr|JHv9U^R#9VgNxDuKIzeKzQ{ZfW?aoz#}r;buRE^2w1J)2!p}^ zkpXv}&_MdcQ8nw16KrC*p08@}dBhX3+ zl$;`59{2~Uga(0R6@Ue(0un8Yl#=*=dstFQNm2P-xAnb#!`IOX*m@fR1)kaR@hNI6 GQT-pNbS&2Z delta 130456 zcmZU)Q+J>Zw5%I-Y}>YN+qP}{jni>DwmP|2-1l9*Ed_=zhOOd)M)u9yL=U1wgpR1zTY!?%YsGd2K1KNDhx#%*-pLh_1bgn zXcE2Q{$nCB?v_Vhk0bfS5NFs84w&4+4carY@K%7_)AI7B7`?STyoA z-OjR|&GWAMQ=VnMpCawlmbHnby{j|9qFEx}NApn}MWA)2sQ;wRUdSP>RRT>J7Co#Z z8k(A8ObLAl zr!oK&!o-$?cMsFgtU}CxQv3ABIM~}3w-~=zK7ERHO}TAzQgCkEuhyy#mM7_X>GsN{ zl=Ln)g^e-Wx(@@xN~anhWHH?O0u3g?zn(h7t4?(Y0~Q9e4*40&9`Gu;T!@I*#=|h` z<9rl2N+Z-~eiW(nhxVb4vCXyQy0Ge2_YMF9Zy$vb<)3|VT!iSpWJa$Mwne0#G0bbT zeopGx;#bmE#3<$G_Ii#!aATyMC;Sf;ohbfZx* zoUal>WudlfWX|xtE0EgV_-EkCOpQnOTwk!c_@p_iVMRm7;s3yfq1m!BvKZ9}>wy4J zhEW&844t*P=E&#~>a6~@ua_?`3(aDU=#&Y`3z$ik zjZL%@GspMKVMXvv#-CK7G>6(OYdix$@0CypKUW9V4QY z%Uur8Nsb$xdvw415O3=r$X6re3crHs+fTcQXa)P8iCbKZ(c)XXEC0Cs5M&Ifydr!J zq>{KNE7$njzCLTCSLKy@F|6(NXUTWB+*U83Y=5N}`1gsDMbG{Hbr@;6>01iiDtO_5 z)^sG9wg@FB^UjjtAeHf9neI$>9fk(i`c=HDPyNWT_xz1q;c}BU;6b7|7OgHP!d0*^iV2pI@+0 zb$T`k{4LoeaF|UaaH@bn!7uU{%R_cY*S#nV$o&Y&gLQ>1S@a($r=3 zCi)gWhWH={9TP;cau{~6UU_wfXMg)PuNy|zMH2E^`LCpG7n*zieeMHbTUYZHUOtpQ zIl&~AuiVR=@pCi;iMR=DJUoS0ZSAMbeA_$Zd+?HP=V8|nMlVT+@^QM?f9q}ZWV*ck zE;d+mM%<=MDsizhDQ#V`{`$BB3Ik1XK|&VsIc&)tW_}F$D4R@g#`kEKmrN}QgzHcq zwAiUMF>hjQOpo8a1LS}w6GHTIYM3VHtVX^!)C>GmJEef&o<-ged_F;!()`vY_fkFz zhewCAL$?NB({)9LuB{8CHNi;rZi5D0fxYj-jT5Kw`Q{#@ z88E%5az-6G&0!&qz%F5}1%w z%5_T;bLW!I*Q#FjssPWLzu7Iv{1497#5%ph5e6mpwZ=^&iJc|WC#Q9YT{;^eDMbR-shU$urOTe^Zo!L4uB)?vG^QhPb}=@s zg1G9m>dcK?kZGI=YU2->CiEm*p;62VoKk+?rArUlZPl|j$LnH;L(V|sHvLEb%wp>q z*46A(${4%M1na~yozUm!$r|1lteGQPqq)Ao?$v5!+23BiSdTTtrl!e3+;T!d3&AIC z1#5At=E|Zg&HU{hYuH*quV$8Oxf9LaEVMQ&(Lkt^6F z`GtC|eEDi2hzV>9L3R-$G2uD@WL#T3pl28?O_JZA@85A7FHY&t9{qnp21L_)kXCvf ziHssv4afmJiYsc;`h(tG_@jvC2kt*4Dr>v=oq^p>RXsU8&LmGm>q9!FDPb9_i>Lyv znli9wq1XHGr<*}tDBmGbGE zGDOWa)!>k3gh}B~iyB0AsMyYBL9_32`g*L`4ObYCV(K zcg%Vq)lD`~nnN~MiwQI#d%L0oFEHysq_lZDf2taZ_xyD+ZXVaMDGU{WS=x<%(w+i^ z?+y@3tZmy*{Q@y?+twhf@Rf-WD`C!op;f)%T6pzyJdP;fGJZzfL;Jy?V`JvVJN{ik z$Q$a7S>+nR?mY}ht(mQ>!WpiQ)Kl;(#e?TGfRj>T%V5A7QnE7;#0OtDD}BIjy|rIL zHpyput_BwL!a~L2lsjEGw4_b>vWa=&EN%aCad$DxTUvfZhfVM!V<}}oGu46h`z{5e zRuA=WL8ft4!bNa%76oX$?fdb2e(0VrjGmX$>@TkchpYiDH)TGuW=4+#z>7%#H?E24UYN+LOhmVco^+2a$RaS&)g}q*my@`z|GcaLh@W~5YtOHZ2STA6w zIW$D^`G>oB?TJI)j#r1`AQGLFU~_Bm^RdRs_rcs>nWA$)7#;#}9?8MBf*Vt==ec0B z8ershB`N_@=b`)Nabh)!IkL*VHp8=M2)ib@A02txm#^T}Gwy5+D`j?0>n2YcN6*(v zX{`JCFKe4P)iE5+*afMT93-eEw&?TrVd0bK*o`E;CUe8-zaY>lR%n&?%!M{+#MlgI zmXr#=!s}doG!2E30(bDP*Hpz&&Vt>jQb{ZD262F)q6Sbgeh8^8wd`3CYP5(W*|rds zA;mTG%XHCM(R-xWwp-$1kFIN9V#Ko}^(A#xT2X^i3SLzRh64{YN2psKQF_@K;fPKs z0c~o?JuRw5PqGaSHC(7x>R9Uil*}ikByYhmx24#oHyn^4P|yNpV_R9GEiWmM7T)Kq z@^XMh<1=$lRO*DA7GLLPVM2!ZVniJe{xWx43!3AvuxYun!tF(HUd28=^fI)%D^Jr% z{%!7S^<59juyHk1ml9ORXlE^So>)J%#bU9G>I37eQ~gR&=is`?1y=zpAGBy4CysKR zFqHkVuX=Y9x^iz6fofj;g+}7^n3^L9<2j&w|J8^*&g_G_6X?8ZO|KkM6R^brqVM?g z8|O!eAVEw3S)T~s$|3}$WQR~J)$c-K>h8t?dDgmd!#zfB!imPSuha3V5eQpl@7f3u z&;(&UBxxjRM434??LxL=wya}cwEWdxxQCIZbp&Q;zT8{V?5dL3lU|x$!$=JB_FQ00 z1O-|wl=cU)G)pm?xl+6_e3qo+xedleF1yz?M#y(DSiHXhht$}E2{2=mXXS{^t~MB# ziIT*=82Q^j)~8uqcqTgsq;eefHumH%Xz;rNB35(AJ}AIl!vljy$EHWUvwBB$#Nm}o z(^=r4n#Crhkb&F&ubjXApT_`#;2dB;O;XRO)cH;VKG&s7Q(4d{>KK}!urNM@LspNT z;xG=Y0Cic2Vz)45C4AqWS6J+BfKINhdy&L91Y^GgLQ%bjN@jnN)AKurma#f)sS43IS@Pn=JMq zseJyK!q5XgXjmDb2;j9{z3D@Rc3jdVNC7>;JjkWB;Gc36mp-+LpO$5h;=*nyt^def zEED#+4tb~$x|f2E3H=iWJaqHTx;=Asoxi%Aw7CkeO?qZ{#xirQkMdS~&q5V1 zP?_(+fSPK%2*of@qO)M5tm83`8B2F~@FcmXC5%$0ONXURpXPZU2`EEH(|ZiFPU5Lk z@%h;$g9JpgzW5kRvchZhkgSMtiKu|x(Gy&kl(@Aa!eKKXrIc;lFm4iMZE8v$7ulvj zx?hO7`TMiWaLx}Y7gJi9P^TQ?#D+x)jf}IvD~4}lw2#GXAV?oWZ#HYsI;=>QMamp) z{|)6Ua>(|*eDCOV(8O0*m>jN=Iv;=tztLkipYUHTnLhIEj3&>HYt(mSFEuAm#nUIkHX;8R>}xq#L?cQxRSU@NLKnM!NgT2i=csjBKtO8`_jS)J`t z$|jl~za{l^&|sYe>{)eNcTG+z!W!V3p(wz zInjsnH+Y}%z@eCrWKvfpQjh+?Rjxg5&ILJqKT*S7saw8J%5Lp00Por1@j2 z)9#|9eOR#njN&e|fOi}f?T5hlx)XRSzBMs6EqE;$H!;URnM!>Ts;&Ko5&8#u%}b*B zzmq%n|4HtwJlxF5mZf5Vg4@2*Q03eNQ!jBuf^R5gu)c~+l%VSm)R(S|L%1m9qw+Vtl3G0MFp)En!A55@j ziWvv_=8L8F+5kU*zv*bKz_Ywc?O~Y~p+esgP|7^FtyN8=G(AY3PW7R=6VOxP+gjDP zxJX{y)S!P??>rTH5eK+sZtneieIM%a{*DMVpWEy1Gv#s^i|FdKa$iX7=~)=%Nxy4` z{=J+Ps1>-eo%*GUlRWH#J!U^)_I|~CcKJQ!&=%D7n>rm3@#Cle?s<a>Z;7n%{d8D#7v+%y*RpA zXZLWMx_}fcU+=w&tTZzxu{XJnd%sR#x^`NA@}?bvw`Q{h7sowpBY?L=dU70F^=Kl< zos38$=+p#Agl0t#NV8zko_zHdWCA>3(RpL#KElvXT~NnddoNplz?$+h>zC+)Kue&E z3@}C7vZ=cdx!%=w)TT|^O>zGjFW=TFkKb;&L!+nJ=&WjM^Y&lcUCnkK^Udwd2mkCg zJI49^IXvvR_9wU$w-hF&xKN%n86I@!_>pwEm+>b+)QR}VfXV<9v=2DjnLftjqHbxoh~O&>)M?JF!PgIF zt>=g<)DL$g4-s1M>aKghC=X=`t}2`)UUpwRs+TBhr|oQZGPCgZUFDS7)^|h zyyljtZ)%M!bj<$#(RyzqfAq6K14{o3X62%Hzg5y40gf6XRY-B;40_z&v3R*pFEX~;4biApzhQ<O>-gT|* z%Byp6hR7M|d!cz4Y={S!c98~Q!*3995+uQqguxQhx0d`oC-v62*8LPhRLf3^=M9Nm zd?6zGy>*bqP-}x857t2AhmJ8m;TX?=*g26quj#I`&1(%W;u|!BQ7k~X_RFvet(B|< zYeM>bpsq4{B4-$*llt{9B2t@zS#hO>7E!trlgCK%JT4eqY~vqne_MaBnf48UrJPGZ zuQ7E{S`y+YN13)8Y-cfztIvTwr3HHlV>RI_htgq~4m_^M%(3 zwvYfyGuqW|b6>3=ny678r!)*Ovl-VIjN3NLs>liICc6pA$w5IIo~B7jMsAVGs^}b{ z19xZr?i4O9Rk>qAOO%sWbv zX~y4w0si>oS8IOLkM~6Swnj^d1^&KjBsHoNR(jH#i-+QQoZlnyX9V5n`3RgFZECj^ z#Vnk`0s#h;6_uNm8ul;%E9B?e%AK;tCSPFj`#&oK{NMn4&e=G=l+L#UA53I;%Z(_A zg2B1;$9a@US%R3hsgtm*IX1VjKZApR_@${hhG8hg(%|W+lI9OKQhXlP}s>AUc@p zFLx%|6y9Gzt(;5NNd^0M?l~M+A(ynR4};DU4dIMsWoG4&7K<1nG@aM5>4tL(ljSnD zc0JUNA=Pnuf@2F1N#vKg;4Ixlty59Ujm2{rP(uJn)SWAb{&e~|EQI-l6#=(m`tLt2CIkbS|do(F3un@yaEBndVc_mbr2)8ZY zHB9|z{Im376|rKYSdb|SI-bL`3i4~TGBC|^h2dmARlx{AdZf&<6_dEd$LQJry)VgI zkiSdEc`I)L@y9TMWGV6*n zosGsLCix8DV*R4b`InoV4U$EY7Vk;dnj;<(N5M5yVr(|GE6g+)&5WIVnJA%{AAT{|X23Q9;lW)EbS#z^IJ0NiOLL z#sd4v&u&6rFApOZ1zTp{>02Wk?{FQ#cekn%?4v-Ccdt_ls<2ZPw<~t$co+(q!31kG zk6;U+kGR8`Sh95HYgFI=DK^a9w<*zuHbbRDg3^zZYVc|BRmL*@{eg9?3;0s!}Zz9aNWT->#Q?Fi5(wB3T zI4sfuJ{L35PEOdQbFBzbw~qU_5Dz+p;gbt>lP2lxQ!yxdQ1f4}b~>?H-}zkCcB)(BkDZI)KsiP4=C z+e{IRq&SjYMe=a5NNyU$t4#;$6OKu#Kj9RU*2rn%OEA?}MdAw(r<;D59-d*3J?lrc$bg7($=@&Z%Vy)Rj%uZNjIQ&a#-8=x62~MW=a)xh~u5~7=@BssQgvcTUMv#pRBSrlc!eh)9<5SQ#R%9#~udNgmD z>4|SAYJDtk{gD|h>ozb5_1zi6I%n*q-ggGQ&bOFqS)S=>uL@!=J`k84a?hs!dOPvU z97csmjlJE==e)~~JzQ<}is%VbDHzWN!OQg(82N=QheANYW)O`6-4~7`oI^F3q9EPc zA-zB+J$rh9VaIuQ*SMH^|MUtm(s@ppEa<(Xpq(;)w7T=sfJrt;65|0uMjOj(!c^-QYnMcPF zTETkUkLp#PGCUGF?U5H-EF*oco)}vLUq!W!T7i(7qCkbXT#yA^YC@X<|RlGWzlA8`xfMMW{Mn&E+o%o${0x^)S zbp>lN*K6+c6JiXC70X%+oG~^3yR-9^>iZMPJa~j6nWY&Ylq*@WSq(5@_E)pNPHRIQ zvuk=Vb*dmnMb8ulQ3xtZbsDd`5^{XecP6Wl_R&dKqfi+J5fCVwWMj>jyc%wGj7gVHCpn_=wV1v969EUxrMSXPrd6bf0@cg zZ_@0fPgWI{IJ0EQzFw-FQgXWV;_)nhuD7{QBdi?Cc27_sdzD=V?H{%8(&#w$G5LbSLy&q-+O9i%7Y1f$LjG-Z+q5%J?0)s(d40tIe zZs(};Jt&8h({{lzlrIW~zI8czu_#DPi$V(V%l<1z&z~XflJWa}b5sT&uN}c4$+g!Q z>F{e#QZLDyllMpg+d=KuXp;t~npYEdrj1}1I5sWNFDF_OHuXV7zKbLr42K22Es`bQ zPm%jFQ1E9LTn(!0sgyDj=25unc?5M|`8Ea;#XCR!jnNK-91&X|JL|4lK#(@I-bIVf z6$$HxOQEH1;%N-Y87%SGi^#qcA03iUg!;uxtN?wDoJ`25D*$JN#d?56{lM$76pByg zFzf>ey?1tdq97ON5MQ^7MN+eSfx$;XaFxG4!S4Q~RBg$h< zfx%H$abOX9s-DiOkQ$RQ##X>l5}S5*(mP926_@Q$rBv6Qj*BCvW1;pU3R}q(Gi8Vpdq6r9$4XQ!H^Vt{3h=B5QvJ~j*G8z?Z=!}S z{m;XY6LVDf@6nQ9dQkz3tO{CHkbgU{Arl7*dwacQ0FM6P>CIMqU<~$JcS=I!$)@%T zwo+{&PxiYeKe8Fat>E{vtt-S^e<(ryI_tltX52UlX2xC!aaD>#v!_Y&qYB;7*JbJr znljz7UTt*Zd5K3cg=j_!m=rZ)_}KOH$g(H{j9J!T2EA})<%!_$-%|nk(k3oIzbgW? zU<1oUg*-W46D$O5dUv9_qP@D?q@JgVG`eH9&_`%8r*Qdd8j97couZ_FUGOr+_S8zxm zQC^IBpcOOYs`Xpy-NA@U3UFG*QAVIWR8F3CL3&l9jSHlC`D>ptU(q5R_;0_gN2bx& ztivMRNknA83~Wcg2lyD^-RO3-mF>Q+9P5ptQ~3J6k4IE=7A)vfh8YCD$wTMJjF94g z63_P*bA$i^dQ}Cl;KxKL>A_5T-9lsI`_SI(9^yZ6K;;%GM_4n&UNZWF zvc;$P!4``YnOlmZ+uln*DZq;;pEhxCJvf!=&E_W>>)D^=h}@iYa}`8q>|~k)f*$3x zaSOVj>_gy{RINeN&9fN-rIwPpTGTAt%gIKs5r4v8PPBy>dtd-W9X7;x!49eB3)xlw zc}9AA@V~9WKi7`nyGZ7Zj+`Y91o2;+_1Tv`Ev#L14_mc8jT;>!;O#S*BRI*Bh0Ue! z;a9#g4{_HdQXXW!V>ldL0fLph?G|H4E8cJY^^#T9wKGRe5Mvc)}nu)ic&+#%vkhv!@7MQYfE% zqt_R{aZnC34C%^Eh5T&RL;^`ZcZMv)^(&2MESKjXm)+@Vx2E|+qoczN)>*B?exzN~ z7=Ax@0&q^a)#xcL$?p0eW$FTeA1gmYA+~g8Mq{NEoOS^JT(M_xThPD6BJWiW#do`KV|-$WcLthY~zt@&4?qJlitT=Qo|7z7Pa34WomZkaOu9FOe%8Z^5& zQ03Uwwf?|@F*+9x|40@VzGo(RKh&({-?I>Bzb^5$AV_J}tXN9GqHH%lVrQp<(+iD7K;RN)wl7$m zz1>*Xp+EiI3b$>Haxbt<0WX3xnkJyvMD4!rMIS=lQmd+QLFsy82i4XW{orQgZ&<$E+?k9T^!6BU1~zLF4@$nX-edG;3D z>2I_^{RS>6oh3L@m=3IP-^?n^?e0E?_s@PqtEa@&=CfXhyned|pX>n|&Xwcb2cpAM+mlFS|!CxB{$UZ&Ud88Ti&;jYdCtSiQEh1PXhfcYaC<+cJ>m zm3t5w8r3H#E;S-y^;H3O8pb{Rpa#zAt$Bu9_~uj_&<>vbY4v>#f`r+vx7hdsIr{NG zMe|-qN55~V)1eMdPyzARMILjy&p)K^Ie5nKViq1(x9~^pK7*ElPo%-Xg8Aw3)$>*= zh&RmhV97XQLEWR+s)s~bs}C{k87Dvti`q#Ro)!(3K1S)r=m}IOfAP?@Hr~Y4q4qc2 zP(S{$n~kM$M)_4>3hw1<-I@1|hqXl1n0Mf#nKp@@(NC7_!A-0RwN0An45uX#*9TQy z>bHMY=g6+mXMrHsY+zdf3G1c#=Utblv<8eqv0YdbH{I!oUa!YItwuo6q3K50%Y))W zkH&6wZ_$Hp{FGF_t4b1+KN@)zbdlw(FDJ)?TCzU{sCC8`5C)QXr$=yfm`rN zKaiMdEY$q^GF7?DPu3sKhl#ibFBoHACep_eKVc}MQt*J?0lEbPY>qv@+`A>k0p!KSr9 znyU?oclKIpARt60W@IDA1$4Qm1aEliW!U3zDXS{-ehTBi)ZKPH7Q}^Tv7>A`rA@!4X*z!NoUY8oC@qIFu$&F z+v>k$Ness(%UPF$a`jVinTP)XpHh@&LFd04VxgLZae zfja211W|ICbr5{-Ro+6wD*;ct5_Bid;3MdRPsuN<8dEm=4{yRyZ%xIURPM3%8C;Si zUkf00d2ZBz@zM<@9SGlf!PDZQb2ax`v(hR_1rMKu;CfbhdhgPJ;7AM${{0(Z`1AAQ zT>Vg=@Tal7LpGy2Z~b1@w`Uo|0&zojV;GV|-0w?$RU3(xQ6{ZM`->hDy)J?c=qznI z@AljCL`a+ZZivptYr)!C4;HZ`^8lqBP)pzfaYk8mN4k~ib74c&^NO^;5tBHM7t5r8;Tv!383yRH zkI!DodfFn82U@Of3DsNIN$Lwb@tdT7%n zYK6G_Qs;c-cAAp1)4E0=^spa^@B?DJU61Z-^<~YALwyg~_19ZsN(U3(L3; z#diT=0k2`d+|}6$TIxCD$2UdG`gy9%HR-O|S1cvw(vmfhu~J=R479mnP;N?eeKcM5 z_TkM9T7@wJ%#fva(IEK}WrhI=(yKr68g682c`Z7A{+@!Vh}gi7k6I1-b^x^D7oV;f zGA9qz9I-;PVy0}zcU-hAs)YGbe6#t81;d+JSB%GPGNHa9(90`|cK9aVK)|62=YW@_bgQE$L7S8jIgqSjBUu1(6`PHN>7zmaJVgg(5ze)FXZL~nM+xh{|7L8@S?m--Cd5Kwxr{s=2MjMf{d;LD{} zUNd_91!svM?lm6Yj@5jq(AAQKotuMavQ@js5O7a@$Tpd~QudLHUqdpMjV z!3yOC-BF8fPQ$al_H`~9y3{u3cn-y%*p+ah{t)_d;HS)Xhy4d*BzW^s@=!>bOTF=H z$zk93{nXZfq(_d6z{e2wQ>&#RiO zh68=KpBDo(c(;9XmUTIL*6YuSL|Bhp%fG?mt{!cILKy9;+Vye=b$#fS@P;-rxPB^~ zw4~2Q#_Vluxvp;|Rq68c-3XNI`GN0kp!clTB&^#A!~;&ZXrP_3cT%>T=0YA+t@e>F z&Bei7RY8r?!?Te>9O}!qno<<#3DB#hHP|?1-FEUm;kT0_Dd?NXGryVIoi1_vwBH=3 z$tvw8uC(G^)5c~TB%%YHNtoo74H#(>C_7t0&d3CSiB!a%rGw*iRjGi+zR7|=Sey38Kli@iqqi{Rz28w-U$6VJx& zBF}h{g)h5|#!+i4k$`%7f~K&+$GTKMHH#Sq7f0gaAGaUj=VGXPZ%G=>cZJmNH)l3QTCU@WVzQe`bj^Q7O1M7v4mvdJEfue~T zqo(nL!B8@>ow&StRmNWqZqG=ck3xf8{U`scKJYOApZdVY%+36N|1Q!+IziEri>7G+ z*Z-icfHke@tq>ZNn9KnUr>>11+A{mPCe<7$o{|vhpW^ah`XDLQ{-KXF9|=4HT=2q^ z8&7hy$Fx(F!6HVA`GPz1b@Z@2F=q*H9h*kt_HOr=KeX~$AI(~<_V)DY&nvT6M%wz! z|BlQIh4)4^$=B1zZ_Ip?S`%S${Tn6$+H0Xp=pV4PwyT*!EH}27wD!JL*Sj8>WylKq zPF-*@T?QTV7(@Pk*#>hIsb#u*xGhNqmARj;HsJ~*!nG?mrFU$pf(I}*eM9=s{fAjS>qOFn;e=IJm)6_nCmo#B8!Jb_;%Sgb@2aj7+31Oi<|BoOH3XD?gN?Rsb#v)FCuEMRD5 zoS6&hUzmk=(T_Q8gNsndueEiWW3_~NWn<(&f=>0Th}a3QS}>n~Qt=yWsO{cXw$Ok{ znedBYck@CU_Lw=vcY%(dLwW8rUxRuF1b0CH!KZfdk}{#CkC+3RGD6B4(XgegG4iHx zG!azWj&oYYe-RI5j)2Tw+@RZA2Fna_H?)&xt6D6r!|>U|O140F$3I!(rWP`&})H@=)(h1)zckbdBz`g~j*_r#gRG= zhB`V1`%-IF24m?YL9PhCy}@W#;x{beA!uSv=e!?3sX>CSkp7sdmx}IOPh<PkT%NrCINmjmI7lgJr1t@0mIG076D{xPGre|51`41NQRUE2Ec!aMde`^0W1aP+ zT4$Rn9);oIQI{=5TK)qDg6FOok|t~<=fOQNA;cgQbKB)=3WN}~b7KvSbODQWcd0dB zLxr@#ZXpjQT|vdMfB2E|{3vwuE^0g3gFJzRV{TBfyU&L6bG2;W2X(DwXQfNb<>CJ( zS^VtMO@qeXmXHO)jIzSqme5m6ux}N4b!pWlMD?Jt((fm31hitLX;+yFL7(4kRyApC zrG+<>Cb~7K%zrC26m3_KnL1tnxb&@hZ*Fg2;+EzYj$NV8t6!nKqeR4nJtR)_!=C{> z`S6SN72|(NbYp8bcU<beAo{7EM8lBlru=+1u`&TDNV5*&OJ^ThLxx|dvA)NJ>B-ptxb#Ls{|uKa zAjRuS3nq|I?7|5vuuH(>V?myqZi2Fyul92%GK~=7I+d0#z9z%#d>D8t^oL-asYkz^ zt4ge}@dvId{7g6((z2!q!gCP^S=1dIb2S#SXo>&gW_J9QQmKWLGf_V%cVYpC+N_2# zic95lAOdTs%J_QpyZqXaf6daqM=2l^2eS4#RJxYerl^z)e6FV> zh&p*%2{EB2Be}O-K6Bf1e5QlpYMq?7?*%n$D(<#PEl+mhPkyMbl%Ofw?{PlO+gkY8 zdp=3cxMotbixiMob0QTK@P`3o5;w?*VqLOpRMVUIg}Uw|+|jG|*j{kMD;3#vUoF4w zKxdpFXw*d@L5@Ybwn*62K*KAe^u1v7E_ULt3Sbq6NLi^!5OMXhafPoXpGdlOqQzJ< zAbUmnR`ukZ;YGQap%ughG!GRoiUi{-pVX)MF;wuQ*Po-kk}v2-EkpsX?EoV(h8h3H z(I|-v{sVqCaxbK`n@WwX8ibXD{DLJhIaLuq>V7VlKhct55=CPp$Lp+bpZh469@R<-!`d9pObR%8%d=PiR z?l2`zxQdZP;)Am?O!kWEmg7vJXit)(I8xso>nenKc75nHrIP}=_tZh2`DwqmoP94l zVLf0u{$Y`d{qXp%Sl+sNN`De97fljb+NiBbk>KJ~v1L(x$;*z~SxYAWI3f;Buv>evh$uhLQ;Xia@c)r@4&j+aTenV9v2EM7ZQDu3 zw)MrfZQHhO+eXEeq>}tO_qnHa`n$6`YpprQ81LAjTINK`(B8DFdLJ#bjq>$E@9~RR z`AAGa6qwz$WNdV4salwV)4|xM1pJL~bzJOT%vjDI(~bT&BJ6|Z3@7c?m0KfJk>I%I z(sBC&d>Ack4Vdv44^RybJX~yCkx#KI*KY}vu0!1Msd;I+77-*!k01fLKwl(T(|lC_ z)UwSw)AYrT~drRKXf12jGdb-{NVKJN%x|ep^u$2K?*b z^HJu;X(B4!>Go-kK#Ch~gZ-j>TzKgE8d+ET=#RXK48)^B9O;cC5P{c zA^W@4Ci$~~mqH<)RcSGBDt{50{7yHJ%RZzj+DPA?trrfn@n6n|)EB~hKca_pbWlVs zeBgk)Z2m}ckY&4ERc(o z%FFGbsJrqrpaQ)u1S0GqN#@&@B%u3<^(|GC2KA8h$Qo1Zx@;WQDu9|^Rd|0b&nzpy zsut0)MuOsjz7W+!tF0rRZ51T$J_eo8^At0rB7jIaEB$Q3yTKw`uRz)LM#%x6ZEdMv z7_D?I;Bio#LcS;F0{2QLBZ^UOtRzCH}sQN`6J_8vCb8> z89*csq_<@y+U2V9N!p;#{=uO5vNk^v%loJ_gI$SCu0^>nr2>PCvU0Tc1u>O+a;5U} zBXhX!^1*5Zy=>W@ZElkfkF8GsF7O$(;>G52rV3e^13;Xs-{O7wOPgTWO0Mb&*g^72 zfI8mER(&%5UzS_JroBSpr!X4DV=GH+~()zKtUGA%vBl-kEA)jCDBu) zm>6UHvZSmh3Jy0uLRJlD5Gf0P!72Hs`ElQOJv=i2jl_JHhinCmO9!bCAGm-;Vqyd*CmUEmDPRvi24=**P~IOR9h3$UA*;lf&HG> zO>_M79LUPz!q3KlI)tWppA6qDrcbJdzEy|^BQ~9KwW{aqID`tX`pwyCndsu|V&V9e z-{{Nkk1Kr*P^%}bk$?wT!x1YMm`X9%D*VrTB6oXpR(WB&T$Y4+-C+~gT(G>LzmM77 zJd@Hr{f+4lr0i3|J^Qyu9oMTo52fYuBl>im%`q(9shewlTeQYeTK(yI4T!wO34~FU z3)b=yE&faEn)CLAxUXdlrecxm8Q$evvCBHV!va}_H0YZa zsb;J&Bl|V`n}DsX{ZH+_A+MC@2p1Q|dkHUkM#471&@IDqexWKdCxp0$xR(&7rraw*je z*Hw(Q{9-=45>K>4)*|bLCaDP#t%j#UQCk1PtL^dO#-( zCVSN-ypD!#M*^JmhfA^Ons3A2nzKLo+#n}sn{P}3=UwLRFxT*W)y1t|J^svNv)G{qxOP|C}!+F~Hn&n8cXNEuckDNxjjNJT19#k|b z<{~7UUAqg8iNz@)=DZl}2aiTVxg^#L1Jom}IS^V8C>Pv&`2( zIrgwl2PgQ{Op;R}h~pf!ifB%YWXcrIh12YT%C%>o!JUDsdjRqt@IO%vJbtG;=ugqO%*?cnMg(0G2igg1Q~__k?^VL2d8Pu5j!adtEU3U* z!7v^@*jEGQqJMoLteTymPk9=Gs;r~woz3GC8Q3eAFc-Z+k+@|$kj8GHoM^q3!Ykmf z;s@yzXvSa)`URV~7q>xEB6pe&DvW-%j`EYeV?v3DB;KIDdqPsw$J$5D2E>#B4&@m7 zX(x#&vOQa%r7>B=~_14$>k7Sv=xH4@t<)*oyd=Tc-PV`bvV zR}7l!w)J^g29)yk46wnwtR}FiD3YvYhHUN$?jNE2ORl;1$`Z{uZZ4eHq)ek_1tAUsqwz=Y`{Tvv$1 z!@xtf)M3LNaSbB+PB`zdBNuy~du$B;Lq1bVcL1aPOk_@e8gMge+L5Desb--?HOi2k zZg)pxV|IryZN_&W5<%44`cDN}(<#_YeQWvnE$sF0{uWfr26A?Nkei0B5ACvYh~qs< z_#V)vSFTb$;~E0f(e3+yJipcXf)#=Om9ALiRQA?yWQA?^?0m$$_cfvy`DuA9kbvWubk zCtR;xDD+=nbd@ByEL7NA=75G>juS7cKlM{-$kLK48u)#<0>7W2HC)@ zP1CHC2G7*&7?KKJWdGvCGk2OL++vKnmbb|DiU9etiCK83FGe~G`lv4&g&0OW*tY|IayC)nT*kS`TTGi2 zN7oe6!&Wvl;H-(wCT|qBu)erJq9x9T^Nh18#-=IkFivF-3lj4(#d2$6e*{qJl~l zTneQUzdH7J@ZYXj{m29VFi;1pG?D~PaDH(xu_x)Bi2WqCvn7##659?eoAH>H(3JDJ zti}Z0OkbLDZVaoTVWkPfoj99+)p>ul@G&#qQo( zq2ud+U_I2Tw2xYWd+p<6HFm}5rrPrDD9FmajbY&>pE3S^Y<<#yf{V`JnH9?wC5D<6 zE4|ecXgz7IIGx(x17YOxg0NG7275lyG_!sa-oamX5Wh{ZEK|#=EsN+}4oSRU}N{v3DEh zg$L;N1LT30_%RAT+y&m(!n5z#s-$EYhW+ZE-;#V{CvCM?;e}n|*EB)tGH7|m)D4@N zA?6@mfr z(EFSLuqab6iDsVot%Q9PH}C@-Q@t=p3IHWUvlm!}9q^?tEvOySVz;Gtt<+B3)|RT{ z(T9V^Sf+=9yC$e-mP|bqDtAm(c#!z9x}pt+OBtV->|Gz%OSJ-E|Bf_Ie}CRoMFfx- z=!#Y_W*i}zM|d63Hmh`!4feBSE&Oi4aG*s8FjYrLBc5!+^pk>u6&rcmafH zA{ei&HP_VSdD3f<9{n3rQ7}?VUj{Ts{)u=9wFn7!YVZ062F{@9!bc@ zFjwNII_*M_zS-n1=Xh?l8v}yEnku#3+$v!u;tB*vWUQ0wZ#^(kx_5P6JARF5Q{Bqm zWISn^sGnT$*L|EH_D?f+P<%44)UyB<2_M(rjk1h2s_h}m zbUuqc$xw$@l*}FmAHjo%qDu`|4 zLX)4Euw9*2cKAVh8*y?idxUM${#}0L6wiqH_(FL_`#F2P97_DNJt3?E+`A(-d@Xg*0f0ZZi4uURQE@W$9{eP=!#g@fD(yG~&Y#afLX})pN zz_c$rwe}8Ir%G$Vtnv|q!u8`;T9`c#6*HPfZJ*D&_B^Ia?>>_?nPeZp&|lpwUK!E^!c5-phrth_@jLb=GczC5ZWL z2pwX0{y^6bSR*nHFcP7TQO!e?SB^wsifv{DOmTpxFha)m3KFil9RWW6@W=+UyqBRF zdb(l8K&w7A8UT}pOk+@zK&Q@cO`Oj-O!&*B9n?V}Q6^GAP9H^OJrL{Z4R3@TW6)rE zP?1EXFCCuIs+T$iYVLWS#(UQ~3aoze?l5{Pd+e&3lXO>CdT|^sL-35jtH2VInBxy6h+) z1vm7#sNX!r9)59nl+Ne#r40nBBcz&9Q^$HD|5JJ}ba@1Kz_N6;{tdCS5HANA+GW?L z1wnJZ9T~|=d>M_Czp{!3w!y#Q{*ul8-3;2wsyX?aNO-G&^AuoWh5M8nbClP7T_`4q zVxrPA%_<8yr$=|^X1vrgB+LT2s{-w^O^U`m*9}zIK^F#W)V3F0Ppc11{kvB+3r z#Oz!)G7YD|mmA>i_jb@TIJ=d`xn;Ms90VQ2|5;b;obl3EXP+zA8#<#Wb=heb+F-9f z&Pg-xIw8fva-;S7)a~SJ!VT7TF&6rd99dM7{MnPz706gyRPV{>;m8h}aA(j~87-X- z`XZklKa&jCjT7yycrc=se|O+q_R~+r+rlrBEkT&wh6A8OuLxawwxnL+s*CQ(xSO&3 zPU9F+qG|pZ5m`&G;BdW_H^7DCd#I@u`0t>*av-N5rN1C9FP{h1`4~625#qNF zOT0fVkG}!<_X*@DXltkmuGE8MsIHaCzt%mZ_-g;698U>^`~^weG{+_)FlySkVriP2 z<~2ICYAgV_dcRHMFR>UAOuC_cRImJAgj*!1_I{8Yd4YIUe*}XUI5ovz!5JsIE7S~U zCiM@TSz!)Up~CCmf7aFAeb?9l%U2XT!B5hA&Y!7J?Q3oaK&P4*Nrtn}@)LMU__E7z zt6b2+@*E!g1~6MEps~L#>~wOzPh5gn|NRMuxcLRhs3yqy1Bu-J7BTNGg)kkXLlozc zz!TSL^Zffc>EiM})i`k}8Lc);VAAX<+VK+mfJE--K;`ewQAr#pR}8Rh06G^YZJ7-t zf8E?9gfj5zAW!mECMcd?JatuROXDworL@67kcr2CV;=@C)RwnTnHiJjnIHSM9GUKy znmBNP5upc@LP1jHikgP|8gx}>Bw;dO&ezIR#2}%}2lW-SPt5i`t{*Mo3|r8AAV1$S zJ)unbRjr(4oA^(|1IgUN*~YI3Rf2MxExY3Vmli2;;sWZ4?9ngyneDL^3Na~7usM#s zwO;VEU4Qp%pRG>ZDYb}Ysw1{&1yv!bq90;_lG){wqQ*xr76Bh{ZVCv0!?W9t+1-p}hGNx%_wq8kd?{E99^=)ss~QIjX#QH#;7)GV*4 zl}@Rc?ls??qNsV1$$@UIUYYuf<5$57XTc=tVt9<_GFGcFHc$eUdxu$vVuw0qN$}P3 zJ?Oy!bGJK3RdJbAa!G|NMu@BpGj06Uh$UjP>t{`l%fW;>5Pf-!!`J!6pICALf2^m1 z)Gb`F(%RC5Foh5KM4iORsqQ+f98UTZzI4Z3)y1P^wuJ`VN54vyTokaxWH$$s{o?Iw zE;S9Si`qY{={A&04wbsxggcGfK^M$Q9$y`fHg}q4GKQ>zOEcBL7g4T{+;l(K4~ZPE z6Rt&B=hI0$nFKAF&>P}IkIW7LpU2oUPI%lwkrFUiLi!w){n}DxT&j?nO7=8YT5((% z)8OyLEg-CH+gBW(*P!Kzkdk5|L@HX4j>|5mnlF1P=B4g|&||Mm&*V;4CWAU0TVy4h z8CrcMjE#*&h!B#;)vNjGj9P`c@{yxX1ry=)do(Klmb@*eztv=UzioCi^!QCr zodemWdu%UpWm{5+sLzM@6NnaKbo(7GS_3+q>LGWCwB9oQ_8%5mH1n`0Ym zoCA7Szk5M2Lo4o@0V^Nopm#p1y=-@PJ)1`12wuR~tEj7x#%2rSHQ9nM^{$yZg*<{W&K(#-#EWyfY6Ks=_t!_`myAy zv;HT|+nDNeN_NyJBP?jZs&z)%t%_RNr7BxrVmdSOQQW6@Z|?B1-Gl4klbX?YX5GYH z(*zekTb2Snf2oIYYj%1XrWBV{2w~GRsTF={6JP*9{6|+liF6K>mq|yq@V&ctL*T<{+{f*C4V|mLc1mVW` z2v%R_###Vw%5Z^)l(;B@@GN4H!*1)xo)T3{F=DikswYvI`SdEL&?(1N*P8~jXlsAf zShfj(6k}ob=J^eYLffvLSeX08E>$ipOIx-mWB# zGVB8!k+mCH2!hFg$BH_zj>$Mj8~+IVgj}niX5$VW~Z#)=Qj2R^@1#S)>HT{NkDTbDN8Wz>EqbddHgQ2oqJI1AH<&4xl|O414Ro9+~Z)%s*8<29awa^ZLxLsL)7H^zq^9|9boCh!3^J+`SdRs^d886_U@9m`6 zc&)CHo03xtEBs06yi;iq^9PLLKT2XY(P87HD*OeYx}jfbmm#&0*cf){kU}gvUXD5_ z14N6?I#kcjs|RaHhix07f8ji;Q2c{=o|?QhEq1G0uQF|z6xb*tU8U4dk~iKT;1+$v zI?Fm4dJ}{NiZHtWj;Euv;w}S5FE%@Yfbn1m<{)hPVy|PhSEL{OsBOBx?jam}wnVUP z2T-C48SJ8J|IG|SxVpYAW}JL}ok`77{hK=33bRtFt?a}tlFUcIjNq&8qo(oIwsL39V0U;49EYTFDj zrY{V$3cv#D4uH7afzB0LZ%SgTqPF%2W3&9BjllrvV7P<3zb-$YXeTLhzyvl9vrx~< z{ob=$OfswZ)kquV2NTOkE>xqIZ+kRZ+m!(QrDGor=;w4m=Nva+V(-a@Ce+O)U#M!s zbAY`nA(`*ErE#%7A(;Rqfj%u{K0m0H|Am_AH}pQb;jHhc2Qz8okW-DJl@cq#l>E%H z2Rpo?cZWnZy+3JePi{+V=#+gsv4!SlHHmG@GlOy`YM~BT7NmoGCY52CUNqgRc2y== zG)oB_g~os~Qx~(n4O&1pnav2XHU>2|K;lK;hA|SLKEKnytOW;fE7!gemrpBG_|-+$ zhXI-H+o5PAA-dS3(nJWwrML^4*kD;<;h1swPaX@Yq$giv>6ny88^kc#_h+JeZO>a+ zD0=reb{O1yFYZsp5r!wXQ)1o0_$N#d%Kb^T#A6KoTN+EUYAAW1P@Cin2T@e9Uxp1$ zx1*heWK6B5xL*mVom!Qu<7n5+#;K>BDlp%&^w$enBtKL&jI>Y*TVLwA`V{%=4sq+#SXKMR@}xz>uW$tlt@>5N&NYp7BO%1I6+>N}8XRyDD>EdS0ACl)@EKcIO3m`(<#rIBSC z?zs?W*Ny>YN&`QhAqmiqf)*SXIK|oWXgXR)618rDvT< zKoK>0{-j=|i}wCogE)SIoe{D{og5vwl@1_JkIR7gK(JdgtC6{v=)E(SHVIIs(27I^ z>IE2sNX$Oe{f)yBEKkQq{vJ;Ke2+~2x|!Arfr^=V+v8sJ_IoEwLTuwHPP9wBX+cQ)$sKGo(8%jl-;;(0F+6qGZ zU%r5pucc@nrm#vo_b}8}F`6*=5sv%>YnybFR`k-`lZ7f9RKi(YPo|CqboNPNvKt#N zql0}Q!!-V~^r7FibAu5wcB^~VAs#?(;at-2;l`1whm$}qE|W@+++JQha??nH$*4rn z9S>DvQI7+P_{wClwonZeW`Im_yi=s=oPB_aZnOv*`ujC#n;JyUw6ggf62({pCg+Cf zGZBSB%&OEksuV4JB-s%@@%28184+(qwoRjr!yhoZrsn5ku7x#c z=Ce7Pf0(VP9_OcS6URg`a}5fIz!95w68T4Rw5(0Q5Ejz!u}lH@{U&b=%I;zz($N5H zsGA#K*EH6+&+Oi+OU0qViuAl#faofM6*2pM2ak*?>%^NR+6`fAQ6xy)%pmAAKo(05 z{a^vWOWDNZ#g#i5mwVZP(sNXK!Oxc6gb6()$YSvQyb`u^fMx|@?#b_AcF_CgD-0W!GN!U%RBK7iXCFwJ|>6ucmj>5!P8PZ(S@aiD>1 zz<>2Uoz-byMhk{-s??;NQWN7Z0xK1N_M2Yt>+%lK!$RYrEM%sVnn!?EQ*-&+0P-HHLpwDx*x7OJY_2jbK$wQSl>h zVC#NjTh$A~xh7&~6BLBL@2MPdYiranVRGxF3-h;ascm$K8%`s6a6siTGjs*Ogqb@M z(#$-Nia4DUYg$oMmks-~D+sz-th(FiqO{#QDX}&Xx4~ zDGqSkYDfEV?C;x_)5D1P14+KyCT6S@=Ws8H=3tafMHLc8pg^gLPS$=E{1{HM;r#c- zT6t_!@lB$De!5h85dNkNCnv1?b>2NNMoqZAxQ=eu6@O489M3ql)>oyTTz|w>_||Vv z|05SymRBYk|M}{2?CpUAH_(+!E|C{S6VRYLN8H3n^Kt$W=eeGvRAF?R$5LQHPpZW~ zQ#hCKkC%cVc5@w$HYu6rB5lO(huc$DN#}lSAHs#<-F4n!pZ!~B)Aqxxt((CQ*mx&0 zWS>b6REu=7wj<7MM5Kczv(yT|wTufs{D?K`^3m~Y?!>?>Tl!ABK3+Q0#B)`v9Z=)F zrYY-*-gG$Xs6t2v@^%{_x);ZYe^x#A2XHzW-#GiE z@V&01(xyS-AoZAhvUhtWxAhU}h7!cVvrcpM`DO_DRoMz-KxRlP=GR3nR?2_D_AFoG zs{taRSzvLxx{Ve#X=7hUgBFJ|f?s9)O;G77Vi&P+whBU9Idg+F@5?wM)VDn=3px2U zW=1aO9jHN13I3OS!@rwU0f76ET7+v;)o(XjZbVrPZO-4>>6p0@(|XQ(6>-CF70LBg z#)~1jR;-7mqM?5?8#YMGUM8LO{3UEtZK9G#yBHCZi+q;+fhPwn8h=_o1+9aC&6AVV zk&o<(d#IEtdb|$TIb=$z>!|$X@m?SlLSSj9UW|D_uxL5WV&7@gceP2{aF(opB#O^D4@-EM zJd~5G=Xr`8#I5+y0pPGjup93rADIYUMxN5qDO%I}?W^i39ir^(%lkyZW1mo1Ym*ll%C8C~rKGe`Nof1uXyf7O0F3FW*xRtO`PLg)!=sYa4 zgj4i-T&I_Um%4Cw-;e&zY!*cu>wVL$Zg#GcI$Q+b7iR_G1lU?SKT8H7qFywZ>$H6K zTFCr7jDq7xifDGzzjXkgt`M-e|ER+6YZ$kUn$-N~{`c3I2dm8h2Z@R-qpZL|c9s=9 zV?L;qiM+^JApLTD)1VETI774IpnZP~y|=E(I=VD$%`9(8cg;*++gZ{YU))g2im=CO zuHH+ZtXH(qJHS+N2Xy0p>>OqTcEFr93I%-?R0U=AuSC!r?7oxSK?>+}<(lBBbQ;)` z3wJkMhzV91I#2-w#V=h8)JKA~zN-o!C@D0A!{Lg0ihiargFVbvTyqs*&^5;~Sni~d z8p}3UY0M7RV@?i_Pe5@QI~Lx>p0NjIt`fFr3yWJP zkvs=9m-l~R;h~!1;I~$s`MOYzl@OIrgSPyVAzldtIZ~bW z^-XofyN&hqPF(doLpvg0*8VlBUJ54*;KAVG7S3DwCE0EP@Pkjr*{_pleuu z5Ja!0)(EJI@{6zp*(hu!L{y{Eq@G-HC4+-t)V-IWh%$UDL$`Xf;_w$dgJ^adZBnk zidTgmzQ#^3{m7RR%wLrjIyY-v`fPQuD6*eNDV+4u&VtzKo=0TCtg;nCqjs#djY6P7 zKK6dU5W5S#Ef$BlZOWBkYPFReB7*Zb_W)e+r;nY?A}ahYBFh;c!ZGS(eSsz32J{%Q z>{cu}q}|&BJNts@X}x8K)LwQ(1!TUMGt|Y`_;oFJ4MERuHJIItEXp0-#jxZAom{-H z9PI2@!e7wrq^^%Qjqh4cy=t10Z4><52~jSAq0mzzd_NMGZo#5`HADw>h%6+dCn-lB z!J((>%a| z#eUl1j@S`@s2$Tfrum1Fol28Bc67?ugmdZF z!9y7=EatO+z<7lRSo#jKG++>NF&JR1zF~$a>h`I1+DECUF!F9QxW;qQKgpn{A<#qP z)nFvo*Fo~)d0odEVW z2v}JCB+Ju=_m%fL`%co`jg9}3GAn@~+?QVXyYI;!{5ljfc2MFdM60wGq5)Ru++a{i zEcMIgbXS4Xq|>Z->)2hKQ5;jArII09DNV#6#H z$kEMuynm5j6>#i0e2d$oKgkwCf&v)dIe1g-9>!Q~CB@^Dkyx*4rv+BM7M|j0p~tn@ zb#f#`!9StIrrG5$#`yE65Yc+iT(s0u*X(PjZArIaP~2NGV-pj6-GDAK4z{MmHCiZG zNGzEMD&249pBs05LRisfz0h{~&uBW4aMMq{(51p2=bYdf`tos$_E?y^mH{O18XCjw z-h;JXit-j-OETLD5|d*^0+Osvj86=0M10TLhamS+z42jUC4d@ZYzBZr;Kl@4n_I@o z7zze+v3XpS?6b7nKv>_I;X4B5MRqLK)EDu9Vb{TT5<~oTs}k%#|A7a~c{z)63UDFX zolsJ#?jG&g&_q+9wZ@<23e}aA63&H@MT!ikiHEB);t4Mg$!|HS7bcZT zw%?;&RXDc}%YV%w47_^u@KrUl4EoKh+Kt4Zv*6|r$98F66}FLh!T^u}gF5tN183tZ zqja)U-i(_eZbU9_EK4A6xUGKVZV^XmHxC+N@ILzv3OqNhWVH0Z9Lw zg&KmCDJ9ZZh}egfhe+b?3_mItcc)}4_s;o|xeT?rWHVEtX47JdY0 z?&{6qHwoV!NG{!2PXgGiJ112Y#3}md8O^{2Rl5Z(+_qx)_lQ!(r<#S>)DUr{NL-GP zKAD#Y>;joj1QS6O#kIf8MmjWL-^&K7&zf&&KXUn0^u`H?xf<_UHgL=x1(h7-toJo| z&pyQY;O1FwRu;L>kfz_&QmlihF5APWVFmxc`kj0eKRnZ^YJEdG=1{W)%a z=7buL`^y<1LXyamz1`|kh&!?yvEJNVLi z2n$ju7}G8~2OR!7{6+4KB7?)i2$rr3RGcCQS=X^Ij%sw7t^nnAq2}f+A0m-Kum?|z zww=QhH}9u%Vr{7iIklY{*_hQ_cu7Lev8go5xg=hP#jT zd|E!F{V1IBYEX}kyU4aTdmFzQo3H069iQ+x@DUybM7#w>W6Gk+1p)Fc;ZX3uF;()A zWo0V7ilT6+We`Ht^UTD+DX0|A8-j@9-jzDSr45t?Lyd6gxd3ouQLXL?QtGI1Lv2^3 ziAL;eX|@9G`PnbUiXX532>g?8sm?Fgm%$ih|5ZZbN0WjjF6Auyy+HZ)% z6@^wHBOw<7&F`RZ)}-yQm&I|2m_l{X{m}?UN4t}1o_iVx_BL?MFq&OUSa^k(ISPcJ z1yNTDHu=fwi75F#yHP2wBH6)uBPD=|C(~wV66NI?IH1=vcRW@Qlc=Z6Vtw+?3|z>b z*D6Z_+JU1Ie?ZY7KmX$aGQJ>TE?@VEwt;QGWm>yhEg4FD9~-kYFtHE@HY+BolB<1k zwiueYfR^4(uKP+d2)1_F(_I?;QOPHbU2Y`0wT_yQP3bpd`bFt>iB$GZ53sSd4ikj? zTrY_uJ{ zRdv%TZzo9a@&LYT#BndMmdZA6rW{xK@D|=G37~HKqe12WEu41#GZC`X%$>)f%4)`8 zVD;;QEID(hWXsczyIB~YV07D04=zFQuRn3X=9?qiQ<(_1gAf;#cdjgm7c;MDkF5?N zDPBACJy7HH7(UR8d~Tu&JqvGIR?GkV9pJRftt=NGVA9gGG73B9W~ro!Yll6!~5JMX0&Fg$dE?NIn@t}GyV-`?j9yC$(`!nhbx6#*sznGudj zh5mTO>mJAF3#?XFOXhzyL#F@s;V`kVbNmOh0RI1KEt%5>gn&`f5RiZ=|ATG&|0lA^ zn6SgqjD2L1%eEs5$Ldpol=v^1!e%Qsh=?8fzt5|K;NL}xo;YPKRf_R4va9L z%xwF&CKyFylY1zjaSlo}lXUgV@2bh)L#zny0upmbN!G$WwaYdJ+cT@AT-setyG%@l zBmz34jHbClRrCbg^u(+y8LJX*w5!p|su~HBbM-!$b5++6-)Uxyt(pnkDtQXRC9AL% zJZlSt&AlQ3pkZ8kZ^|T}KEjce_0gQx6LZ?2Poszq~Xg8z`$*vANR!V3G1h&A%A7|Y;NIzhh=kmCJc!d zu^ROpXyWMCpsvL;D>`L0OVVrrEy=xU2Kb8(FFUaW2Gn{NYeRwSlo zu&AR{(*{nSIUGYx8WyXh#lk-Mcv@ptDJ2rmSW<_#45JL zKZOpWz=mMX@chY_x%9ggO^Kfmw=$4-(lnLPipEB&44`R#t=OCnhRBg#orm$oM1w?% zXtQL|!qdJub|xLc&1CuYJtxHkHzYy^@GEd0Ne^a6k+;=V834gF_fiD0;+YXb2r_ea zLJ%pHsz6~OgH}364$pkMF6m{HCyXS)=8aN22X8s+L_ZevNAYjrxph23P8L{gFIS;( za$1V4KmYyRCPx$edsWUX4A0sFA3OsxxFce+%koiI9pTJt{EF=cDW-tE~o{&Vw`hr{IbJ-@X>9`aiPmOjYAm=OF|Z5s4eNCeBH$kIB=utUr67I->pVik>e zu}v0mRHhV6k(wrM34=RwyL1LU`P!)$1}+rjS-trN`0SgEGzF1dTMAG+mSP6>Ll(R} z6t4!X-JBggDSZ-f+$rWrJ_8NH2OAz#I0w-x{**ul2z?(7U zH`@~N#PuJDnAq^)1OKA25bzK{m`) z7#mOk(o%^2@?Q4(ML2}?X_SKwULJ@NjDeu|Q7sc~j}vu&-XKi9(TdVwF@FXTcBV8M z%%8=Fp8Zdyv+rvi=5Yz?Pea=ApQ$Kc$wir*TfnZf zIVWynBCI`!rr`ll1KGpuC+F+7^Tb~I9N6PU**Bo4?_r~?YOglx zL1%IArEG_}HytLpAB{Kays#wN2w%Dt*0}R}_M>-}qe{awL&JKdeoO4s*+BZD#|QBI znKi=D1|Y!m*GVOwU)?(nFRYmG>nC}je{%FneJ%r7g13o{fAVMYDBxkQR90GR=~1a4 z+PLlI^@J1Ol4RlE#jV&`=NV5J18>P7J*sX20NZzur}yGKgy3zJK6Ry1P@>yi%WiT? zzSyRsS*3S3I|w5MJua{O0`*=~(SU@Kw>Z3qLd(2*k2AbXu*t)ZpEb8$PwkYJ^bYWI z0nH^f!v{&NYvAS0GtX`tvIX>bY@Aq}ZUf1PuU$r+g z^R8D=j^8^Fsfa*?<*EQ?ra5>%B9n7~oQ?`ZSWmjsU&3yffk+B=SHA+(7yUYaVL?@N zJ2lT}nvQv@YmRf$_c3^f8rAdL#e_t+dD-gwmmz$V;W_tr$jl-G#)CNZ(CVwU%DYu@ zcy1hXw9$n&tL~KcGeH=ZFY(Cpt&W|~H=9-8q9XI^W2e4?+v5W&Reajr*A1PLda6Ct z)dn^Ds=4XZ{!r$f`s%51nNe+jyWHmcqI~?iuIJl7s-k;bb;VvG`~Q6eBirk4^{->Q zd#26*aXUe2>UOfC?K{=wMcG~wZKqT_ks~+lNC^x06ATXb=?ZuXFG-7zsQhK+7&@Y9 zBJA7@>0;0;j%VAtVaUu(k&bO*BtjV2$;oe>Rly_QCTCZ)jN$=f;Fp?zwFk8>kpI2P zE23B&b2v7Ky2WUwO5o7EVqMJ+y_l96mx;CZP;B~CCMi$SfttK^UD@S9=S)cMJFWAe zMwtrIVQ0|OdkxFV0tC3MkHWQi3|7g^hVD4Gt7 z7km4YZhdsTYS~9GuQm*M7`lZ-9jlJ}dlZNga-u9r)LM^krpmPyD)3N65(fEX zAAVr_97{RUMGl^SLgcJ-)UVVa=+F&ABP&Lw)(v7;`la>5y7yW2O&do&i@Dy!))8qp zy~k_TIW!Y85cEY9 z4>=$D36DhJPBc$8Oq}j+lm380h#erJFgE_3%UA)PBRrFT^we$fuz)7_{Xlwoc~n5i zPY+V#8^6RO5a&p4dpwXe_&~HZYKf)xnjH9^+?6JWDD+?0u3mg|6{MiZaCj`CrnHFy zxmD+(pF$}anNg?L?RvDy*PKR**!>rA_U2ftjeEWoS8pkRLG&I(Dxp`U9c> zkUZ6b=xERRy&f{+v zp~RY(2Hw`}2nK8!PZMd=L6d9ys9UC*l*G)4T$lG+gU5bBpHMLSW2=M3oGCHtHmJSM zdm`XwEJs9V0p0#~q%z+()b2g3RR`L5^Lq~A2NY0$-9HcgWy*)*`r)w5KK64bI#a$j zAMI&8b!AoTg#fRK7&zhbg~s2DyY0r`-rR^^Zqn5EU(CFCF!}{V9}k`B_kBW0Ccv8h zh$W8_IbG&n5H#>3u37(E(4QLgU-b2=VkOzI%E_$cd7#Tsj7s~>3^xCxO>r+#dg;%mog zP@7qr+9?D0d;s`KFX2#t20WqRufz2P`Y0Tj9Lwbh`t9+)vXejp>rpiB64{T?yfS(Q z{dsJA0y&LM__40l<=CW<7h>b@$6`<>p%r3(1?en`4tX7im7t|lE7!=^=rpWr_E;ZT zyQ`1ohDKIJYqM4hQNrUeaiOM=w0dyVN1{gUIWwM9N{!^l;qP=t!;mNL*->ghgb8AA zY-mC3M`NSh2Oo_Z!M}U8&XGx-)pc2r%j?`UxV1h=``T*gz9)z0+FzWSC-LfAiY8fq z-gAN?Rb~VLF#@I%D8Y~qq}3RPvmwOfu4qw zZ^nmc&QL zCLkcUWcA@(jAPE7!%GnBa7Z3ZGZFJRJ(~&P?w%(D5vDE~wm4^uPl`0&UupVTDBkG} zcCDW@Qm>=WAt>1w8Z!B0FT$5b0~?`Z1Y&N~1mH@|Z)4OC7a=iYg6^%`s(`NX?e2#@=I_pszJMpfnarP^Fi9^dpNjqT9aQIAO4*geu>QCHCB#^Q*Xuv11Zl1DY}!cmBWV}^Wu z6gqY3q0P@k`kq47)6zcIbv%ZPT}z&O`^ZHm9jNr$N}JQ?$rclVmnIs2*gw_3OD$S4 zH%45cwJJSZnYSVgyEuhYrT)~tX!6|euO}oOkKR`IRwRt1{&g_^%fKj$=ZFJvtWLQj zzLH7IWtMrhavKX4NZ}Y$BVkm~rKE>JA=*#En^6PO8+vBn#Rv54jA#A=MT{a4r}y0} z_8th^=Pcony!ZlZ5!PZ5FUa)KZ*H&tfuDZ^kAr?rmuw>e9sx9$iz5L?f7~__eb-mu zZ8=*Sga8SURMkGjPEyfU9BXY=UgVUDnt?QoIpmn+NcKNCpW=VqZrlixqqv;iQmPbd zNTAVu`t<3>d>}DpB*q{6d$T`_$-~))Gp7Ga?61w9ytqDF<5Sn0v+v$y_`&u4nR$tk zjFT))$@Ts$Y9CkEf50N}e_TP6q{vfv;(B`)HS6XMKl<)X;oi=vkTEx(vsBU|73BKq zEP5A-cPsMxpc;IE<$`i4%ww^B;PLHKHEed|RoNWN8XsEP#u>bp+1LKIS;iKBRAh`f zYqp2BYKH!tl-n&Co+fL^jAj`t+=<@1a|^vrLRspTQJ;d-@_an)TDu{qaURFcn6f@9 zaww~=Cqrvo0rnVQh=j^Gam!YR+e6z8xBK#NsG5h~S!W#Y{Fmi4ac)0<8V|~8;oXYf z)6T1g9hn^@r`gwzf6>p(%qUC71F@LmPdW{2B4`G2cZY7avo+Q!%OLP%&A5Jo2di)@ zifnqy1pej@Sq5f`#77fe$G4s^tR|jw_ona&i(N!_s;r0It;W+cy9#hl?A%j!qjLe8 zGIN+!_o`FPM!|-pTt+k>@%BqwZf{?dbqP;*w?7*LUOEGUf1F5C$U(Pp*E;iZ+3v8Z$tn@FBE7V6ioK z7QxI%kY0!R$e4$z-fyQ!U+xtF)OT$Ow6iH2a;M0#S6iL-msgLHls$P;bxjvW#|t(67n^@Oanme~Ge0458IYL^f^RHtSv;%1$2@ zSHnH(_MzI8H9^Bkqfr9M-nYjN((m#L_Y*Y1^)~=GVAITT*trU+G2zk~PaiCXGVi5) zq$TYk+-OcE36!|O3BYt z1ay!ff2zTZG||`2uwa0X4r)_Kse^BhhbCd5yg;jpF@f7T)CNDG|`d6o%FlSsLRam&YYf2h?t zsTv&zwPKiuoZAmbdDl*DVMz|eBOM*9$?nq%e17RZ)Fl8`PGrH{p|6Hj0fi>Zv#2%T zicJE*0pw_>p>qU_OL?-d9(FopTlKlYpv_DDnsbmra?bJdVn0^rf6WUZm4W>0pW-hE ze|BM4;nP(z)Mh>}my!Yeo_lxk|J4wNhVZ};KvE{B7?C-3=A2jVnamVnDMap!xgUa> zk>-IU$+OI$0}%1J;wg|oEVKsf$wM{8Lt4<7r+k73zu^=QO;Gg(2m|S=zCv<1RzrCQ zh{J?39Gq~d?OaY089f}Nr|Ric80xh6e?_OoKU`s$<;3NrRK`9yNDzj~58nni207_v z`wfp{c5%UepT!tT5-W;t!5gl`mn&r{B&c6$Ate$NZ%IH9y{gq_sM_ZCv#PhJ3#Np3 za<6;;T1?oI3C!3wYAG(V0?^`@QlKWb{V?-ID4(M9xi1_+;Jbadf&?m{Es8ete*y$V zIQrq4RZuT1_U9;_zV_w~zKYv}a%F-ow%6D!vaf7E`0W=y2P>o;t!RUq=8(ETNgh^> zVYDxk);>stMa3vUQSic(;p^X=Fn2v+F}6IvHlrCS5LfDZp`n^2T0vdg3|&QGTJlFl z>hN_b-Rr2!%`>6qv#Q{Dz(Q4!LSTrTmMttP7TfBq%K#V9-gri>Nn^!K4XrjB%8dLY!L(}3DcFn4yAvv+i!23`IfO#2@Rx|9+7FzVSU@+Q{R~P;fiSz zj}45S7`Ut@d&q-!+h5G{ECEvE?l9ZK?XK*13(k>a8+W2Kp}Grq=BAZ_e}%}qNNcn9 zfHr`3)!gA_nwfTlO&F)lIR&JI>^2ieZ?C%%@L`UUaXwwvP~glDOp`7YW+U)E}s1Fd58 z*st6B%}~Ev=_YO8c1ZI>e_7Q4A|r`Be;OOzR#SCpgG9-X*!zW@!8={CbVaG|u_uMC zK>lKNQCrhD+^u*#bBNPp`po1{ufe3oDHcZVDCUWJD6Q=Wp8TP0;accLFJHaYE$L?0 zLW_-S&%jVfn#98Q;R`Uq%1Kg8lV^k{x%-4?^C2HUH^9-yfn!69e{|e8zGj=G8;chJ zn#!O#pG@SOZT*+WUXS*+Qwu?f8WcfaP$-v6!CD zGmtr{^m!zi8R#s0g#8=1&I?b$O_PmKf&2k~v`t@ab)Z_Dr`%(L>N=s1 z%#qRqp}&MRR0mKA?D=zXnvE2Ql#lznQ(3M-D~|Orx}7g zq5E4m309=SF3Ue}DMmnh8IM)O64Jcm$6>e(heihTFWdbdc7CZdZBaI`VV=AMI_o1q z0vIs@p1-ZOhKrZ;CJxotSH!}~W(9e{Z z$O6l5K&hCbf1~_s4^`8k9jFQrSuR9$*4Ben0LM@}Po`tG7@l$|XCX`6MD|H?L5zOQ zk<|Y{xpC6BAirfX&hpwxdgOkH;A*jP>p4+Sq19X@=99U@&>htb@UY|<$9DcY?3jy|O{e_aZ;_kOe>*3M3*474)>%m!IBOzjc$y_X z>0(2(#@CJ}A;U=nMRhaRtEl-$Ihxv+AFVoxUGq3LrKK5xG8|FFY`!a$c)Wli*DtRK zG@?+kjiYj=N6==8hjlQJ3S5>YPBnl=c&BG(!{z|O0R9JR^ySM}S4J@$8}Qy{XZm6^ z2%9UBe+X0v=Do76NsBNb?CLcA;QwdbImgHrJmI+huE_jv;wJyr1DogK+N?Nqb2 z-r~Xt3Hz?KdCj#O@!XHL3<0Cr>`%RWZlbPSL5qTE7d6#5)Pb@t#?nj$Gv{wM?cNZ? zO#JlV(~X)<8VWEe^BvctH-jxF4cq%rUMJ~Te_$B1^Q3VGz4kNcaKW6Tc=jE@Rk&b0 zs%ldpnsx}vQdm?0&x{w}0C6dpBLa(TjFrKWfaXKy(|O3Y>NPyn{xE#Ht?$U&7g(=` zuB~f8g_@2>p!N3S(#LT)IPo6DWf*TNXH$Ahsmm!n^q@35&4D}Me?)G=C*Ij zf5A3p@tk37AS02I`L$91&AofAh1&RD~=#=qs`cuXNEfC;0m}oV4|ep?tx0 z7ZRt~(w)2>%YvJMf_qJ8ci)$v%qbFRDuf4gWX=)H82C6919v)ytB-ywAeMMMv+*`? zfBi`hr|=>I3&VHd0sC+1CWqMGRl_+MuWO)%DWOp);iN#h9W0}-rA}a7N;4f8e}%#b z_WnK2jR4>$hdy~64)4AN-KYsiX!9a@rs^V}c1Iut-EB3WACBEK)fa7XfQ}|+2R#+2 z3CTUCxQ(Sb?sLsA~f+deS!XB z@>{i>iEu{Kbi8tm^*2*&kWb!aCwNWoCyiF=K|hnt88tI)taI=R-3HZ~5_|JC5MfB98S8)o0f1%bpft+cr zU+pn~P-!s^JA%Rv(DZ+|7VB=lb<+*tmw1XhE{u9ZUNdY4`v`qif#X=;#NR~pas@^M zq2|$0jzUI%@5firx^GW92y|`0TS9oP`Tb~pf!~$zB*}#>Rd2MMgx<|0Rp>9g9ZbE` zD0vZ%Ts*m+qYB=uveBc4e@@w!GL|%z0k*6T(sclKEPI@GwN|Y!z7SHRpqz^F3nAL7 z+cz2`w{Nj`-I#yP#)8oAaWQt+vFWb$?fC*}?qc{??Mg+61&i&Z>cB_jX8e2S);l08X$#LmmEP#`7ja&9%NcJM=w=$qd%(r1>~6 zOHfy`zaHl`Um9q2SQf)Pcy;y_n|;|F$_L!ljGo{>FzJm+dlPR4#>4h&Xi=>S#hV1; zz6uCfiW7j-3i3gSgo@~g7v$|`r}ibuC_2Ze0D>1;Nt~MUgKd!j8r|odzUU7UQbt1jalbeFMMyp^{#Y>cDRI9xdvdj2 ztnjV%X7S{0iVxP?g(7heeGtE2lGg`a;Q}UO%9Gf>7Md6Cu0I#uW=CFT)iEparBmBD zgJr2(_QPgbTkH#rxi?l352=XAN+kHsO;8`YqOMwUNh)1@+TGU8$7ac7pxZ-T<+@q^ zw*J?G)7XDn=nvvCT-lv-S$hLnNVyD|dtkQCO44>sQGGIZWg)!5$%=8~5*o6|xaIkl zw7Mf*J+oH`8YtE!A$H9@Y`8KDMH+l5mxsnELa+e?*SH7Y42*Rej|EK=F*r?dY3}gDabpr3r{p&RhX*NhkcprR zQC-0i7$*~>ZkKf=Ycx4zO@|T7+>L%R;0+n|Ky57o6sIhd{bdAY_y?TP9&an%QF4wQ zX+o1Q?QO2=%2*xK1lNz9&(F~Vcq0dXJ)VCR_C)VQE@BAF)QM;gdw>DWU<3!bV-6a4 zduHKi17}^7#8d!CoQn{PHVog0s)X%A^<8Wn)6J-NL+ zZlDy8sEnj{sNA5Y~xSM|f@dArkM3v%c@ab4)%{2Jnh$=Uxjsp#P>Qj8r z+!0|R?+t{-Gx})H_NMa$kKRa;C;(9hqCUg-TeuuLl?c?5;l#(}^cXTo6poU5!YzSc zo0n00Z}k}gQ#4Y2_=6tDz*){_`5p3jqEzqni()B2H9{#S9E7(L!Ow9JWy^p2z{2p9 zq!=ssWb?amQUXbjDkN=oB=~{(_RKZ!~tIW z45SZo*5zD}%tkL3>wnw?A7FnKSjYrYItAsux%}|v_1k3>T9U5&hb)GNe_rD5zs+vJ zrQI+1ywkv%pC%Osl+j`!*61{rz=pG(BKVvu&s1R8iRDTtUkIV00;(PvM>9ib`^F&l z($@i)#($sI2@3L==ZU@_k!g}tZi2Q3{W2xzG*N^epmUSi#N_XT38;T0a{a3o|JmP2KU8|7(Gv)J{w>nATECc+W-B_tDg-ojkAE4 z?5py^oW5MZNiJ0OEPy2CKX4rX>T!H5XDbfShveOtW3?$|@t+^Q`SnCt*~zUSJFD2M z(qs1GGc{N-fMW!Du(Dd5_gZX4PRt4<5s&5W>go94a4c41hbn=Wm>mppiCCY)gNwQL z37U+ms`GL^-!^}STs-LY#hGhNwtv($=KlMet});C@4N=wVl@;h=^%Y$aG0EW5+gxl z&Xkw#{EQvYPb&GHpt%0(y;BJ%hK?i=4I^7Rp5|Ssh?Ai$v3WOvM046&n#`NT5j2v~ zH1k3kCWrEH9=aIr6#5eLYiR;^lvrtbVwgN^x_h9bZ#aK_LY_!CG_%}vrM-TPbMiQK ziBToza>`K5XL;T%q2N`DsX({wYMbqg^8U=cF66Y&)Q>6cQ|xo$1z*~;(6*9K;dD5Z zY)wfZaSYM-aM-At5TZFY8QtDLJhcL<M)epl`h$^m=Syl6W}z6yzF16`RJ;q@sBy zk{F1-k1l@>chRiB!k$G=aX!XE3P_a0>SSW=WZ)_W+R^o3IHR16rU9At*UI=S0?ZE; zriq$mtDu~-VaCCjt;GsAVKTnNUaIAX*abFy9b(C5%^0dA#V3Dl(@oG#yn`i2mF7y~HzvxMB3tZ^?mu?LUf0L&!L}CwP5lJzG1P!U)%0{jwCsJJ+X?Nnm)GRb z)P62-SL6s(a;RHq*!tw|S_+0UP+#+gRs!!_NgVc_ZRB5J?iDi@d5`U23lakD>H8(( zV}^ePP%6oV$J?n>00rT!-%iG5W^nO(JgbwupVbBLUIF;ZlH^s^L4jXYdgC%r2%QBV z4Yh^U4I3H|JY7uG9a@xr7;@+46EZy=)aBa=!}^}4-W#8{*&f=Avd|Td8tkyBytRM2 zr+sISbGG4I0pW&;Sm;6l{eXEfjb>v_ZbyHRC%GptmRzEmsh}F?9xzv>eu#*m-`e4r zl7Wc`!HBdg3k|`sP>*L^DeI1sm)Vz5HEwnZCLzT^M-s;(?osjGgxPc-|95P656_2i zey<+MlnbIkoAe1H#TZ?u<4aIy?x#J$37~OkJuKg5WjkBH!f!za=TUCIox2IJpLKsT zNfa5RPXR621~d_5bf?i)G9qoY0ta?YU6$~9yQ`07PS8W-*_r^#nnI7p{f$O#%{}y9 zT$v%0#Q+6H7>t?ayXOb0ezEwzpo({uHvZefB<4W3FWv*Vreu? zN2VE^4UNw*cSidjo@K`7%I8tZr{f(k5vSlL}x0i(O?17&Vx zb98cLVQmU!Ze(v_Y6>wkG$1e_Z(?c+GB+|cm%}{)PJbg^z>Fx7qS&{j4HmmdvDij$ zP7yFNZL_r`N0e-Izo8%9Atm`zBS29YunlQAbIzGF!&itYgV=w@-?EBgSVylB3r}JE zDJ!@uqPdSM%IM~^^e>84G#p|e6Of!kQAMQL&x)^@1mhGiG&F{}a05WpBlP$hiOoQsU69Oh}}!xrSB(aYyMz14MT+ULL88Ix4WjFG0_K`~P? zjZ-Pf?cKxu>`U>_Sv|}!XGze2@;DC!?=`Y(8-HInr7Bh)cgiqf&PH5^_DG0v%7q$b z#1tx|FuT?`Q+EzDY@4+$^%mAGqOtWFniW3NOL!RpI|_eyU>zXXu7Pf2;KQd!|95Fh zyENfR+1k#uRznl|GRKbbRI(HLn8{H3u(1gLvH*1d;cN^V7)w>Q}3~1+?(&{eY4}v&d;g{(KIR}YdaHeq{ z#!b^6pCj|mr*xa9-=Z!iSQ{%p44y9DEq}MzCO9zIFY&TxG!HU7_En|Z z@9%xe-M3Gi5%SPTQ?}OPPdimp-kHXKVsw1G_zXib=nc*ry zmXhrK%;QuA-}&7dbP6l_sQ%uZsehB?$CbJuwGD0d3^sj*b#0B_*JT(_FH#_e)dbo5 z{R>NtnrUaQeXbIk_=cQXdgZ&TCT8)uN#1PYZ(5U6#+3RaYmUfp)1;K2+;@9I#8R4_ zj6ZFXi^Uu|hF4&Sn+tzpP}$#)Fx`X+$NL3uirJjSLZI8o$2)k$MO0~!G!>=(MJ~C- z7ikhyzAvKx@beQrqbQV@nLz;@0x~nVw?P4p1b=hm#u2{jS4{b0FeQ%X4PbBku&bO> z;>s?Qi#FwgNQi_30yF?htFy10pW^?R?s))1kdim9xKexIikNA1_jG^#bq{|gjB>*8 zpZ{F%uNc{0{d~pkx5R&}_vFp$YKf~>>#J|xr}$uXf8{oDk_wV4MOOQ(q^bDlnZi!{VQ-Kf6~72{Kh!w5xhD6nAw=y7JJKec22>X`7O~ zUMNNx6DoOoL%Jg@xNkdBkh!K#TbH4rV&~^jacJ1*%hFvkh-xZ1(T2c-04Szh? z?yLe!t-$Xr5B4P0&^v>zGp*wl<#KdYv99}5j|ec*JrtDZ))(uxKJFVzR=aX0OsD8S zJ_;MEwmB6iV{ut5&)PfeO0uiAyRsjab43|Mn@PRwLszw3H9XCvXO!_gynkPS$Es%Q z&rMN-FI-=#oaR|rWzS8S431Kqo_||Pxz0jFPUp5MhqBvOP1%#ehNy(MYNmpZZ<9l@ z{?`KDkqeV0 zlv9zLAntKLg*y0R6nC4TFUtO!1m!ZOQcwRZf$~azpN(z<_s! zDNl-H4e$S$yo2x17@nq9KYz~fbh&Z3G3q4+H9YsPPo5?-L1q>b9j%lnRub^@q3!z$ zT>Z+qSAoOi=w63K#byI}VABNhVmAvFBdFjbm^>3Inr2g|vg@;G^H2EcHn2NbeU?cq zmS}^|!G(7CHD;8dW`erwB7X`16=URPE?Vl#>wCW>T_fwk7-*U{76(TwUiTg-?B^xZz;@sNUsp_C39! zCY!2TaKH?AJ}C5phJYCzpxQMlA@V`T83aQh=%D01ih~r^JZbm8)>t=YQZ=JOXW8MjEIMzhDfKS zP9A>+SEP7cA}Q-)D1SF|M`TdmrmUQcMhzk`Jr&&#Ah0g`ekRjMDpMwZkIebu1DZ}n zV=f6iDWL@MD3IL2vouTE!(0}yn&)K&h&dE}e-XYwuAB(NbsGV@|E>$%FpG$rvlxPj zg{@sVZUuz*U;YHKZ?}s~QK8597^)EIe`v<~>N2IRduRF#mVdMdjN1OyJZrM)B>WQc ziWG-K{j@CZfj%r`nk?(P*}?G9t8Nprz9@0hOL=qC#zY*_RZUf3yNyaqsKg*{uI^G$ zX;>r_IOmL=kDA@JZCw`4Tmmi#yPINPKDT{l*fjz6x^Me|7)jQ${oaN`HO7^0lq-lq0T{=c*#Eigb zs`Z8Z=T<@t0;d=S7?w_n@mK&xDQ9zoL2etC_>}j^w11z8BzEbnUdWTT?S9`jwQGZ(}wuOpwOjSbOLv%35IXhlOIQ(2k6m!-X6hE z8jE-iBp!4lBkH*0om^~?*0YP?11Y_nYQn_|2-)xw{9Me$+ob%2hXmjY>wl~^^Ah-_ zo;!&YnSVws^IbU;NA3mHyVaq8!qi%E#LZg-|_ziW^62K6ocqYUD)sH+W7m=?^Cfq)a7*;+rTF% z`jw6DugIfQ@(u)Asd%_9DC|fflXPst-`;pt?RQ>PPKETUx?Xu#t#{aBuZv@kx)<=O zvhdo1Hs$84$P@~AIWx;932hUDNr|I3{{MraspVX%j4H*%6v4TX&h4vR7(Mb#hS6h~SSe$xnSTM6 z#B|88{t#Cxsbw%Ra>lq7ERcaJ(D(61BgF_hxkJMQUfnz7YmWP}!?`D%ubl^WBsiN4 z5U>6n4gidyCXl@HM7yb>>&kTr;JOAX7pS9kF?dFdL%xUdL~ss|BKjCl>U7GpP}p{D zKTV+k>Vaj6i07OHwmUXOnVTRBfPW}6btv?EI0zKYLd^-2eX9K$f2RFZQfw6&-Fer-*S32{5W)fiOOW$I9vtlfVB=CjVn9r}iKhX3 zB$u-co{c>*Q;*H2{0vy`a>?b*4N`4pbzA-EHhEtT$Ihb5z4Mci$>+5L)qkRy=U}d) zq3nO#;zRG2=4l|(|MqiK!&2WmMTGvb3J;Ba=$82eC{9`~I6^rlM}3MlV$5E&*(32& zAI)2#79rdffJA`wz`C(CLMH@SycuhP_XE6Aq2Q%phB7thmCS3ZrncjTo^dz-d<3z` ziHggYh8fsRhYF^ihrzJSfYiolOQx1Ud^22F^{?0Q$Hnlrj!Q|INba~c0-*D zxruMqzRZnzepf+?vFJjip*UazP;(MNmmA+GDpXiq~pcVHXh2#7z8%x8RW5$ zCDjB3DepMMcU3lLR|FUgM( zRnbW^fS~bEo(nG5f!*|up-hgxFgmu^1t&3gKIlBJpBX~5ubzE$9^6cA>PwSQm7mo5 zKX4X0iGYKKh>q@p-c_CFPcCLW&}qatz*9%aEa$TX&C_E$Dsuf@@(YmkNDFCx%OC-S zK0WoNN}*(omc9CWTz?~BF%N}UW~ob~-obr^+|*vne6HCCfQkGFYJn}09&EP@o)z_xSw&w*1! z!*Hon@2ril%Fp{6skmd^49XD~Gk1Tnt9dl@>8A-B54+j5yU#vPhN@;_ORiWzpGi{{jsXcZI`I?U`OqGR-CYY5jBJXbxGQ?k>p9RjGp5Z2d< z5hs}pvQ&Q5sQrZo_j~_EZOCQyyRe}r~CEm*A4#0LM~W{|CxU` z$D5GtZ+^QG^eHp{Y>w>d>Sl?nR-2nAZ!-L1wY$*|36@1Hi(|Gr-URK#V)YAb0_zGc zWs%3QVzs>qntx@p#;=~dDeTiZPtq{b--|fqMVzqJJ$~FSqJ)QGCVzvA+H&^qgKF5NtA?uCvyvU# zPO(n)LsxBvYVn`dKj~@-8XhHr=c(}n&-L-agJLIlH<58E;@n=kt~SOwDeWL)o*Rz{ zx548rt8kU%VWd|@usjiZ-MawHkYU8*JPCSjkv=NtQ636wj`2otJhk0WHUk@4xW`c) zm)d!7bbpburHIBTu2qMt$S1HS;&gf(a%t?p{Lff#>`J^7gZAP*Bn0eU6y~eG9~~0< z&zu1>WzX*4yk=#yWzSzfq^wcZ{;+O4wypY2Yq4b9mGRIx9Q^DdD9Rmz-UZzwJC&PX z7X>f!L?(e6daffE$(V~AZk_U6uYK7LiVcTyV1JM8nQh93HSNGQohspT`0IWl3k{fO zFW9jJkRvYI2B3kCWq|tw8y-*UuU&f{z=2>m{aLr0vToF%Pk!=72m@!tt1}=d0ab0| zd2YmglyV^)?(cfA%I>nvh({p7ee&t(|eN4pWdInT_8zo^YH<-TQ< zenYUzm6}4E%D-6Uun|X1Hg}ZydU!e}~925>-_CqzWs$tG5xMtI+ZepCsGRNhUxYAMj<6|{YRoJxfxXasRlmi)Oj!Jokp?|+% zVuB60{-`#GvZ?yxEz@C#yM}aX0sNn(HpTX(m*R3{G~6Yv+7X$OS-_KoEL&I5=MfaW7;h;f$#Y@7 ze(}5xJ7&@%`8@1fQ?+Ey^StnUooZjB?W8Gw;m+SfwZ0=ijL1+UL0=je^H8*Q02s&5nfzGlR2!EPF=HH%j z6{#ERY7Dh3woG)Xe8|BPm#xjFJx;C{8Q;TQ%vZavJ%aI|XZrG}yeo0`ym2wT)sIsI z3OFOSxcjI@iHz}@xxE6)4~;r1kA@n&ETXhUI3<=(@sX4sdG?}*(g>Ps{fJ!3>bBf2 z*JWKc8-VTiFEtdQzUgR(=zj`h&HZYUe8Q=SC+B84ds2d$(BFa-iS^O)a7N(vHOW={WtR&@E-GooD(R5HuP1sX3Os(wI0hnJ|^eFd`3QRpj7@JrPrsSV%h z^iATu8*9DfFKW3DlQ-iqEN%^zjLmb8Hi?0V;TwYv4@)N@#C(&-sNGU59*GICe=6CVw=0qwSmfZJ=g)q8{SZH)e^PdCpdAAVwXT&xH!y{q z1?&h2FZYUe(SPFTIc)(O0QVvpLs1{vOVkUSAHR8M<>yVs*P0Jac$3*pe{ zL9BzQ*})$TIX;Oz1%T@c?X?essXZW*P?`^wQ5k4NLE0gMgmMVs&leK(M-^4+_jCn>_FaSVEX=nZt!=G=8egkT?K`mvo(U_^oy+`MwTh>pJ`0Sku>QS=OZ3oR0|nLP@STnKYDn` zcpQ$JxQKMzNY`zx%Ri#@C%~Bl$c`LvFv_Ug!KaN-I?tNMa-K^P;o_`oPspeJ-B#^z zGWT=2sed+fDYEpsV+U@A_R1DU{j_NYVrY$vDSr(ZDSTx^>J37ImrsBGdkqS|o|eQU zq&bqEt03Q?nmZdMw^f7cKyNE{@aJO!&=ou4zYI`;LVFACcUx&uexd-Jnzn>G&11j( zTK8X19{|Urfp?V`hA<6*8}2ZhMdULVjN57vk?fa2(@kcH={R~S8{pLt zU4J08ZP{mZYtu_OO z&#+_;#VPbyQV1g%)@n?&t!c^0L1I!AKW}M*gZ21ZO+|`F`@#e$9vp*c1;qytIDdmo zgs4_EapJN3P#w=lZN`JnCY)mnH~SaZjv|-VXQT|BB^h?L_J-Iun1KLl84LvYh~7#d zYF+rjDWEFslq(%UXYT7q9?&HdOXy#}E*4N7ltfp46BM|$vB|popyth)$TI-rl!TGO z%~%H7#mH;iu8AEq#1*jvaBX(!0)I)nnqdZsy(v*$^-Uc9b@nbI)KtYEq;H@= zN>j(#kgBPfNIo~}$$&o=;O8DM1|fb$+h#dWyf-y6HO=);FK<7GH`~z=xKQ5u+O5a% z$y;_*WrNg(%2yFqVjo$g9>Z`Pt-_NArTF@7HUcqk#qfm~G*RIviQSJ5o_~Ftw~SMs zq?3NbqT=%c1`=krUW=G(!bhGrdtKE^yU=@sW0tZzR-T}#Se82o^g?FAvR;3_^MZOi z#yq(5hxq=>sgoIm_Vk8@Zk2(g962kEja-CG?iEc2hwiLyz2Ul1@Ol)c$ifO!5pATo z5YuxZ3?20Edr+Bgad^~W!hg06w0#ipc`{PErS5gd&J$0^Pc=R~%e19^!j1#<3>2qozV7j@k_NQN&x*R3URyciWd8*jI$^7NVAGPG8>f(KB9|%BHVteXD{eMiR0VrF)_ka%a$Hn{WPoHC|!E1W~)wWi|y!I4Hu>BB%}vD((CrLe54K$%xKqiyn#0lqsT)1p=!@=5b*5B zx19Y$!P)q~6OBjJBPu|ebR{HWM>A<0oSFvIcK{x4o;54$$A76b3KZyrQC^ReCqwz9 z5%jEPymxC9%E8VHundtFF+*SdGYkC-3vi8o69j7>pLj2O%qSqk-y3K!UG7J)rv6BY z>KPo`OnxOH@vXn(>qqV$_R0|sKt$$MmltfEQ*>t0mPTXSwrx8V+qP}vk8Mn_5m>(|y zAJzEB|JzVzXZlgiK>Y_5#mdgcod$076A3){gZzUD-A$}aVgmDg*@*KXq&SkJ;jJ7G z=1eV=lr;ZM#?}?H{LS=w;(8z+@q1*=_O(9=isL_HlGlGR|9ec5^}Fhtfvl{P(L?rA zda}2Yl<>uaSGT3^THqsTFZlCL{%5@UuN20J>CP7T{e}6r1Jlog5JyamU@*!L;D`Cx z`4tc^@S(ig=8{=VyfUMeJx?M(`sIxIfkW17Ke{trID)B}tC&mStyPZU`{`>{dYm|Qn|HoQR1i>XlFFe2^}>GU~t=)7iWrwnsGRuOjX1eS5sh>4$cr^8F!=Co-{{C z57Xr6qpv%cb-FWg&Uqw$_)cG%C_8iXs{_SEfFJfAv^J=@e$yN=25o#HT*BFE{kN>B z3r}QV3Rs~i4|Cj+6w+GNOIg9?NE05#`~;3azAB7X<}6k8)tOpl9*C|H0FNtrk18CY zH6BL$P%5S~2U08WsZ>zuo=So8A5d;jLNHP4C4wBI^{u5h1(Gqw#fm=1_vZI-JSpR@ z)Nvsbdt)yIxB|5a0-EY8u9LW^th%(z(?gb4l%-{$C*6k9rnrpo0Xh1{SP9jjZOAil zhy#+|+N0;JbgRosd~yFD00${Iyt6>^$-J_NU4K$U>9Jd1jd=o5_X#*2@x<1)b63#F zeLnZoR9odGt?)|9u9m#kA$SpE=f=q)GLoZFXx9{s+#{=bq3sxy-ulWeo znIoVKltCz{3wYqU6>uRo1Qj#$_y*zd)}M3Uoa7eWu}Co+m<$FJki#X*cG<(xQr`Bb z{;bM9j1kLp=$?p%dy$kpkHQShl>)9wvYVO4GtCY13^;E>3Iy~``%}BcxfcD_-F?BP z*uxAF@9dXg;+v?$$G3@{gW+Tfz9iw;6x;_6S0 zMRLVaVo#f;0g${B9%-41^cLNUfW=9j9m77T-@kq#0#hMAvIgH@WU zjH&+vkUDoe7*bJ;9t^|oPgkJ8K!}B=_r&V9C_0PBwMU`XpddFbX9C$Xur?5V;`3M(d27w9ELH zhZq=P7y)Ils`UrsF)yQU*SwMxN*%jC(?6_RcHYD3$8rO1mfT&6RlGOF--Loz+6sUO6@2RCIi4B^^CH5p@qvn#X$)r#UL=lQD_y)ql4%5hj_{+WZbl;7Y8W6nk}iDy>kUq> zc)4C0oO$sSNE#?Gy#U8oy8zdMdv-i`!L?!(jUt;PR%^#zyWWzZ!{H5B zjXUszEa{o>h+~d{7jXG;uWktl?KeZwfN)Tb!zcVW1-aW+N`Siw3)qC3Kx8&B^P1_X z1H^vo$lzu!Y@&J&f_+a=)Yl9Pyggw@5 za>BCFxTqK|N(v`ElUf`~}{dw5QkKrm7@dyv?37Rnp(&R#~Oqz=r)~3oHW^ z72Nv%-9ykeM@0%%x-G)V47M)55Fdt0;hofLn_Fa>Y-7xt7zm$ZgTfZ1uCiJ``|B#>Q2V|wV-+p;_ZSb^$ z$=wTm6Kn!m;n1>qSTf%PwXjxYx149<_O(#?hQ=%MNgAg*( zWtOYIbEI95JwyH|KNri77G}IFxM`9K4{M29NQ`f~8|S`_GbBW~6VGKu@w^j|Q}s&0 zs9d%}y+B&pP&2+Pyoum~p#041!7Yo{=H(!hKRgZ=^QL8uy64rT z=0cTX^pGV24HW*E({3VLNv!T3=pl6uiV<$iVkg;tGbI5ZJTEG!A3u> z=#B~MW|)C@MTXDCae#R|v==Q>=m?Eh<31Pyq6n7(&1=3e^RSd}%9bz@zrrXXcJuP~ zWSat~!pNT*W?9TuX)~%%JU6Rn`BszP&-LX&AxvJieAc|Pkxe1M%@qC~vXWthJoR}2RHnHZu2+(K@HU}$_;sK;}89JEhet(IL zs}T8*Tt|@4CboWCpWn4sQsTjUMmkasx)Ii2t{Xak7&4|=%k9Vle}fc$Xk8)jsRc@dvvcg zFiGV*A^3kt3V_mgBneT9+zICjZ{&a}Rmy%f_rCLfd}12O>yW0|TmK*xSkq#yfz<#+ zpB$_i#qJZl$@o>zMmhB8a{VZ*U6zvLaWA;fMQy+dV3N{3Lu2aWh>c?P4qRJ)9iQ;X zvdBt;TNc`MQ0w$P^yOa|ZiH5W+jW?SgmGmu)9n3iaU z7!b!;bCB0{gpC|qMZJ_q%wtOh?RGH(HibS{oLOeJ%#c)}s9Xq(1?Y$(moClsqHdRe zJ1gC_G7qyDml{&pwHZxM2%tgs6^1wJ9KBpk{zv1tC8? zk8{HFe*1Hi`F59sF;RM4tycI->Bw5&6x>fDnKJ_jyb+~7{>_TzR+~Z5I8m5;4Yr}g zWhXznsAB)FMe*7GW>K}aDK55{upGTuTP3%XAu++@bWuwm+!5lnk7iRO6ch;psN7#* zK}U!V-c!G>$HVg@%G)mg+N=YLr{?9li$O-1WBE%8GDdx48&q`aVnIGv!0_pY_^}kQ zaA0JODMP$|o8Kcwk&OCh|5f_4%Z)q&h3YfdC~NQ1&TpaTX4zB;CcCAs#*pkxBbRe2 zmMZn$m7GvKNp_Z@^Y3w5j5j(A@}j}<56Ep&j!SYV*h7DFmvn2^#*d(6Tyjg z)}PmgiF6g`esa&&`|sD@4|Y?WaWTsmc^yJZs_^|u zTj1K#I#58w<%NgT_UVg;KuF*_W!)(<5<*RR%9?$z6D(*xVEz85Iik=(Lq?^A@JEtN|Z#d-15G1G=q|>bHP6CnG}|)FEwB&zz)zq z4j@xJAQ`%WU6AX0?i+~~Dk;u3t#)ukjxl-rb-!@5bW~G7Q{Da5MN}Tw(wKm%m{RJg zXewcJS>{C7M6Q}X8RT$W%z5goP&irD$>Id&wCP=U$oqI!Q?eN6Jy*skQxn-?qf;2i zIa5#a5ae;G5g(6SrrU^D|7k-Z8Q3%TYUlQZeeGMc3HymqI^8g@=DBo(Lq*j+y22nD ztE^piE}kX8oH=MN4%{JTR_7Rh6cmd%BXq9URIi{?Tue>Il#hAOdKTYz3t>(NLT@Ke zp~Rc)+UOuoj`hW_a_pNBDlu(JZC7B>$&&(Z+$e`Ehqjj)WjcfdG2{m1rLpl}usa6) z=lKv)8;UnLlP)pb3f&^OL-!00Ra2!i(Z8$JQF>K?V2W+vwMD{<7E z&)H@u&UOcWGzw$$zYpY!g5e<{Q8DAk6<(-G$r?I@t0EZkkJ{-OPYxBgpd5$O1hE1A zmC&>0hImlk50Pb9lay}snvGu{DO!|r1<1p5F}O^4)MsbqnH|a3V!T5%L7Fi89*E+9 zZJSB~O~+feKHpf!!1*fXufvkn+UvzPKws8teHG5phe?&ONM*UN2(|O~U*DycI)lw1 zQMq9zoJTYHP=ns4wA&BdUe?IFXl0z$!0NIV)`oQ%Lc|&?AMGik?*1&$F%{d`5Pjpu z+grpy(OH<=HHl5WpaL{+KCL40uY4_X0gHhES7NBR$Q@AR_$QG(EM1?}b=;yh8sar;)+N5XWE}FF!GIvpRC)@$s(w!)U$dE2L-%g2^UwqG&~MAmP)Zj zjhuMlVj;qWFllo%P(>%%g~a*U9iL7v9p@29RnLJjmhD#Tb8e!zLCcUv%d(B_DCq}- zcw%{26}mChj#|rorG<~>{ZP%$dR?_|E-bh~IJHZNqOr7a3-BKv0wxf>^4^Mq9xaQ1 zRXoU7L1|Lz<>*MIE%yM25nWKV`rTYQdST6}MQTGKCuPXR(v*r|(0+%Og6KLj7f>q> zSOT@)ise@ncMMsp85KQ>YHeU@3IPVROLM}zN+<#y^|f}F)iZ^?GOcg9{!=&GKO%~S zb`i#bWd@}V-p2^-rIhq5AYm;`n5jjws0TmBeXlEDKgn2h9r-u#xi4*2cLPUOX4DZp z!PNy;6Q!zz)$z{25hKCpdiLz;!~Mv#pR0r>o$d{O*_((DZ#i2~YiJC@ALI>qSyLxz z325dwG)|1{j9|kw1oPBjVhbh|r#dwH&aZ`e)G{Fh%A|O+`FB!g|L?RIc*IG(G_DkUj7@GZ_xYeK%y9zk3@ zTM%LEu$LO^vxz5=zUfx)8y7HO4#BI0go9HJs8_8R_j=#48WBDH$1#tzDXUB~`NPJVd%)yg9RzeZu_ zoW+KM+d4opDN0!5dFU$nl&7%x9gixBa~CK^XG8-JvRl9Xax>@FktQY*1QvD;iAd5P z`0Uv;JMF8>_ysKZ4Jr@YO7;KLfBpv>&cedP{vT}ke^bNLh>bu{)AC(_Spk;PA#;d8 z@K@Pf8TYEjKDK7&MhX=~C@BdEK=1*|Tsyl4V}jG|Tc>|TQ^-qb*pEU@QBHf}U1s>( zbPP1noH6ElzfPQeP#P|h87Vh?$KMDi=-;pRO@$To=oIw*CC{RxpCbJtn^fynsofj+ zq0cuKq753LawkNnS!-^Gh5_ef+>G0^BhhK-dmyLR_4E21nqve3}5E|LX#fGU||jm zkv99A9-UQ4t-01%X)bqXX23DrTF%p2i@UsqRz2PZeqrsdR_~|gzXrf0e#iTel!3_& zwI{8%$QjY``X-{)&@BJZW;1WdwmZLY&T!CFx#=uqmI=|4mB0HH*5LANdy{iyuJ`T~ z4c>{txX_jqeztq0cT)hPGKHa=jtF=?n!1?fnMqb`iq4Z~_YPGbdv?1q1Tc=lZEh=e#mhpp0sNd>YTY^&W79VwZ-ssY<&O)Je zK%mI5xI9PGj37w`f1f`5XV-9(*^|&E8Mn*@x~4>h)x&WyH>|>g`4kw!u)=+=Zrd| zqMl11Apo>I*Ny^2X|;;#RAtWbT?~UonoXW=-sQr#FftI5;WoGfLZxg zTQ`90;Zj!uMd}$hma?3!Xme>dRLQgpn%?ROs*elqb6P6eswe6=h9@P5MPmit^HWKn zQ{AgxJ|y;bFe13r-Wd$O+%p63Nr;74>8ZL&`~hs-SU6)y=$aFHgBg!LJE30z53oAH zyAZ>WXjqp@EqD3bwh7KzmJYUILZ)Yu!M-rdhwY%_we}H3E3K;%?8qhagMX2)NQRG_ zH-U0IC|<5!Wut!W72E6AsGG$nuJ_#94nbTGyR>$VZM53PH%J!x&E~4;z|0mv^4)rq z_yU^5?`89}`$ubuZ*1U+kVmsW@#EuDgA-61?I|#g4?lBtx!6nwTb%ik z)Sap}FMsC+cV?j&CrRQ!+1$&$?ihmuXKK)@77RxVF(k9$uDgRF6tHWvoh`E)a-9|8 zu+X&rmK+vJmgMW~{TN%-noEkve->O=?o)Yc{Hfh6+26Pi{KLo`o$0DK^h{H6<#iiaPq# z38<9vW95r~AD6%v^zr`d-pupX}aGOB297*_P7R$3R?LS`EO z*q%)|zXa$bV+k$h5iQY)-vlB&7t`2c6BsRRG9d-L9rI6URQ=q{_O%D;9s!_JAl~~2 zbTT68z?BMKn=W6}3NsIaNwwDH zo+a%{x2A`Y2qwct1>Vny2b z1#Mu89a01X;=x@hSkty}hX971JFZ9e3p&^rOz4^4!{#LLQ{|P@R80(_eT-?5GDepu zk{^x19KR&;h4awmxq$1O)Aba0$DPUK3{z9%lLU&?;n{bQ0OeaA^U^Zj8<`T6w+<8~r6lE%H%KYa|9t`XI1%aR7VLp`S|5CNnFAAc15%q87X z)r2Nxr{+41!W-CPN(6b^>BaknjazO~)Y>@Pg+l|UMyx9-J(Wv{-;t+M*c9+IYb>!1 zh`EKtashqy7W>fEcq;{hBCfd*OHU^YtOt=*5R)k^Qeh`78VG7i)e#03 zo7fA}6}MN)780!xrl<&^Ib785~i#ezJBqfXqz&}l)JSc72X zl<`DnZf-Q(O5tz_HB#y1Ppc-l6i_EMg0^FI=VM`xoa*}G7JyIKwpno#2lSbLzDf%# zSc+c3MB2xoH@B*MWl8N^e|@k1w376C)YJYZH@x6A2Hb{NOW+b{OT>fkFudn){GMrj z1-7%raeI_WeKpx=HULth@+Vv;CzKd>XuMRcWk0^=ym3HR`Rr3xPc; z%7qU+oN&Bnv4@iyLiKQ!p|m)<>=Hw@oUfPWcbH+R@Ujlv#$V$#;s0+zp{Ikmcy zkvMO79tM=yM36SD_PzvY%0eo+s?tekm;-83cNU|dn+;g#e^or0rjW8Q6Zh5;jo>I* znP`Tgv+gMX7oe0Bq8t`OhYNsLB%K!ox$$9!uIEVzR3uYMjA=qDeFq@jJB%zKx1)HyMQ;I5Eu<2|H@co$ zjoFZV8vFR(rau;4#QftDNUn1QY*xOSF)9TmPHU=-`42v4(0TBH3JXTmr9WluX?sgNiI3zy1y*V51xveOe4b^6R|LP1jgpOmRq#Mwnh=+Ivk8oT3rG7*m1u7jrV=q@We_%@m zDR+3IQ5JTRp7_ea&qmlWa-YPr_f-w;Kb-<`T&UUp)(NQpMKMkqF5_{aLU|UC9X6#4 zx5WfJdvD1mYdI$~(ZcIMo(t}9q!%vI3fUZdDn$H_TThv579lYclbr73KNp0Ei4VwA z04|H=r<~R?`5R@gP4mzOO=pnYov>ZIIR*-_$`l$b`+{T9EXdUEdg>Z8>73lSp5MI2 z$og>foy;d-Vwg~q z0s6ULigT&L@6Kwi$CxB|MMqR1r+~&=g2U}CEj6C&NikmjX+h^Ui$o+DA5}EODMl!R z_*CITg_fvcEN$_|$UQ`)-3$QzFxSzybiM-7r2uERB(T`-msfkzaS0^CB%)dmeOj8D zlKzhFx{ms-Z(RjJIvaY(JL}E!w*eFq)xM=~6ve`vt5UvXP z)(x{qFQsZk1AnwUrsXB`q4@0^?=v!b$CMUMVb^V_yjm1vF^ACC-u_|UzZXGfhKkFy z@IYV!7_R?)@7-Dcy!QqIfms0NmDUg>K>otq+|rfHI+0f`Ek22QG}Cb6gXy9)WD-%% zTR+X~%O4Q1FY;kb_2qGWYA{|R7*3smN3Z><28xQf@yE=U?#+y`v&ZuV_ChcD^N6=X zPp^Q^zRt=;Q#2yCz@P2hjCiau?y=;MpYIBv_deb*HNm!%RiU)VZUKLvj_Is_Pr(rC z`6gUn1eIz{PPzOx{bBRB`}0K$h@F+W++XXn{{yB~9&cLg!nnXB5D-uw^p@~v$P(2$ zkQr%pg2+31Zu(xMGl||7MuSF&){2tdkkKM;W?uOL0OzdZEmu-b8TBgTTeTe;)NtfF zjiY*q{|h_d zHh*I5dhQ^!alWW3!FfLe98&ehr#^c1$$LoACPEpy}pTVdE&Ere z6=|kh3bcS1o%-f)W{kiy|9U+(&sAABam_|condtjg9Ds1&6K@C@<%X>`7Nv-fdbdu z2kk{U=>MwmCb*T23n%({0pb^jn!4DiVA0^<2jIiBNeB7h)H-SsW3R7R7o5)CjAX( z&SWA?MFd4dE}%*W*smslx^crfdHr8g?@0d1(gDwUK09h*zwrwB5H-gp?JXM= zUU0yH*Zko+tNMP29GkqB&?SZ~d+SIGR2l^^vC6xMu@90Y$(%Gzsi<66J=qmicH(<7 zN&)1Km$C2gl67h3%k#LEG5YY%NX#rxx&kxIEzcm;Z;oCqQCFiMqU{H7}k1)fZ3p-d~T zCY&hyYE{?tpD%CU8kixmerfv$JG$<~Pzdmei2(W5`<0KVDtP)7s4ITqIhJ&?Se84% zQ4Q7=u?5=A`MaP1bc7+IQkMV`j)90K^!v~h`6#1Ih4&lJo$l|9Ldpj@By-|z;vXs7 zB83Yo+$lwg@Y))mtGv{p&0um=X8&@cv$Oeb+AKME$Us9cNktATcyO$K8Z2Q%Y%jq3 z;Qf_^vq5byP%%-Gw{a!j^=I-@Qa#21kaS;Th9yUxVXOjj$UH41Cn|NqcZjVt6)rM! z2lQc85Gr4R>s-d!zGH9T>gFuAz6=zvtXM87!96LZLZU$rf*IrC{Hl~5k-8-=X3?S7 zIW$V`T>ZdW2*Mm$hqlOo7WM)rm?J=}sAlYXE5MVgraL}QbpP*99F1!RrD@42#4#a~ zM~WAW&t_NAHw?H;iU=#sLCA`UOuQLiyabq7<)1a|()6gBW8?hSE%bbKt}$_P8GcqQ z;-yt683|dvNcSD8q`fm{A9|YDC{0XS`@Jw0lL%L_+(&kk$_7^kx z4B5@fXe9s|8?w`$ULg0N;u`>D)h-(haxoIwtS zUz5pGwU^dMH_Q2Q+*!4W5uJi1rAixLqo6R~%SpRp^%=`F2iot)x+T~Bv9DE@o2x{= z9)PJjHkC-%ziyxoj|0%*D7MZ=?(+`zK9zUdQ>Qc99_GR3k<2e6& z3D7n#)>rN;6W*}VDXVII_4YVTNhCp9Ir8Ja9CZY0Tt1v=rUcod*4hs$sh24)t4{_+ z-s{YD!qrn-q_edxjdSZX=wp~fC-ufZo}Mg-xyZnaX>a_Y#sD&Afs9s;3N#9=(@$IB zehYHbyMS4L*>x0UT1GwSGLuXTHt|f%YlCVl0d-di0fiu7`x;2hNu2(Zwb4^b&`-L z#uoE^xk8E=nhU_`NT{F0>0HiGND3*n(*N+vTkSDh8JGwgv1#MX=)TGcX(kG zRzA&g)~pRby0LT7u8|fuu$KHHEFd&FwKxO0{|)UUd8Qn57z^M2wVjo+(VkL9>7xj` zYyd@|HPIK}v?c?A!Nln;{Lk+Fn=4MADU(0>V6scuNC1!#orOjiWGdb8)re{|L;Vo? zDn9a#!=ytEBHY8jSiFw%i?L(SeLID5;jOr%gdNsjZ)46KW5~hywC8HQ8^S2utTi|! z+~2E=l=g36Fd_c!P-PIH3q1Qdf%d75wmjfgfTwg9g|N_Y*(~w#sz4{0fu!TYr}+)$ zvB2SSf)aph6Uk=GfGGXEuLl(}`Jv&S+%KE;n`Eq@|4_w?qd};sm9ZC$jDak6q@jf; zq(VIo(c2)VMKJ^A@XtVyYub$Js$Y9g%lJcUmrC29J)TsR|H^Wf1&l3BsGt||xVf-7 z6>UBXl2q!FJi)AH zx_sVPi?=VOwj}LWIS$~)qa79j%Xtqo!a^Z?a~BRvh>?P=j&-~#t$N+}MR)EkOYha0 z9U%ZnxE6j&WrDddzHksUHd+8+dU@O&gFwaA`ecdhw{l(vvqOdx8ihaqtP?BVVQgHf z*>9oo#r}^V?lO7solK%$ zjGUBzS6CzOVV9u~G3{K<6W7aA=8-)^5^Pxd?0>r~~|3k);@*ZGs0Hq?&BD6`<`RadTU?r2Ec zGs=4hp!ykOh&p$Z~4Ii7n{=}dsW z0!YD};AUJ&!ehY=jfoVeEsc2Cb$7;oNt~?!Q79G8!1h}HiDHZt5N~xridOWG2sI9D z-N*Y9i6P18$Ks~zOE_)K#c|A$UN6UC_^!YWRbU!&U%@ZY7DbX1Gv!!+U4={Js3C{m zRJ>+c)fv;wI|*^2QKk?~hH+sZ zZI+>EknMD};mr8Pj2m{%ro+`o-3{Q-(_IoJ=Yu_^qLtYZDc@lnUN{u1PXV^-oA_%O zcI=6mu~LJ_6Jv|I={N>C0;V^|f~>{o<7ck&=xmp~J*Q0&d>xX1|KcIbdw^_eI+-QB zM!=cj(Qg<3D;EKC#O5Z*9v&mWssCKESFh9NI2rc&#Hi@;tlIkjDgo=;PX^JP5p#7 z+E63v9e6jwB_~q|;Kec~Q8zkGNVFoZ^E$x}eI#&qs zR(axjXk?dm*o%1TfS!(S>UGk6UJO?j`^UrvqnMR1-15kvaYd$eJgaVgfF9!5c91Nr zh!o~t3>?DIq|>QcjR~rh9cz8dK$Z`6lCFs?Ga2w~W6vNO?Rfr$8V7=wW+Yd2gYkC?gHth>#92%=28^UzTnN=w6} z>zTaejz3tF9IQFx497FVF4P$%aCjN-dzj7YSC>yuY@iX{K6)M?XdW8F<#&vI6s1o7 z?kSk111~*c3m6^^cjWlJjyJc*X1qtHO(9gc6ds%E(V)(#Xo^+jX7 zJcU8%_uUGpcQ|32GOo>IO`H=cHhs9G@g^*}(Kt+VS=xoAQ=pzvrpKTSe9wx1s^?AU zO_?g;E1cEkoZe-((tkH^X=cz4U{1&vixRO(H2=Z&<(N`EGrZMw6KAO*FK9AheBRzq zT`cWz0ubWB``Hi1Au*}l&Re8%7XJUKe%)ZOF;emoVi%n4!?(6?%m@V9Hlr$KLL?XXIU z_Cx^>w~eL2!AVi>DHd!`swE7+>Uarfsu}=58Qm0G`1i8A5!nrK?Y1DeS;pbCpg6>q zvjE|Rbsee9m_l3m`!6%e6}p4vK4;EFJ60!Q`4ZlpkVK)5rxR-pK<)F2r?qIx!|dLP z^NTRL-CwGcij|)#N06#cqiVkE-|mWb_NS%QMPKj2*w(1OJY(cjru$p8tn{Tx!ajgQ zWP?$-ZPVK8)&w3}3QHwN=>9dta4G)iAm>D#I}7j9zK2HNLrA{maK7pC!;Jo4I2O~$ zlqXOGCfXex4HTJd9_I23te}3Zgf>@9!1_ni26KGCyWFFzB*JAe@u47QUWtM`b_t47 zmoS+&LnAo$>w)F@WI^MbQNQxsM`Qp7@fRTD91R{p4!6W*EK8@;F5%ZVg%|$dashwo zV%P0}@?wtVFUms)^hMwr{fOSrT|m`BfTCJ<(kS7p0vfhNJ()47E6Ws$1=}r!ImZrG z_1&tv5zNp70-S{xGUfX!#=v~%0%xqiBA5AOYb$$~$H1qkp|cH4Y4vw-5XPTK+uO}}XbZSpA zkqDOlu6hbCB%#r%j$pJ;CWsHVQ$E9j#5w{tuu~xrw9?tm!W-7 zC0=BVOZiQ7#KK*S1k~0~4c^S}GH*Z~G^-zuMfw!eZML}Yf&jq&ac<8vY>35&vUAgm z9lRn076OD^#8pJ6zD2c;_py7QLlDd2+uSMbl4*f3J1tO_KM9B)q6lr<>4uV~tYzoK=)$x&iva z?UY`OZ%BfD0FH5mM9{#(R+g`_N1}8dVi`*sUk1a-EkKCBQ-9Yy+^ zDxu77XHBeMru=RWIk;PADxp7I6aVg#!(Z!|>_Z6({4)dfik~g}Gvfn}0RDE4xq zVDmRWk#N)+?n601m)7vDHV2Tbo~T_k8DXcqOQsKYdhutOPLyjhu_u^6hx9z-t3|23a9$wHe}YQRWYR&OQKNsfx5Mf)MFICNHpbh31(98UDnOY9x5|KERZ$224sh`Jo;|A z*A>H~yfPWT&*N6}OX2cf9F>-eaWCuBq?+a)g1X!T=jleHDd<2%2p#rXchRv)#fEvR!t*61caBnNV2OGm>IzSqrpRR;eo01oL?JknhX~|rEUI^l?Q0yseT^ui4$uGQ3D_?b~GG9a;!EaR1P zO8H-6cR_x;jy15rtJ@lJHGer@hIG+&CZMxs;nTB~I?C7k#xu(nGXj=CYjA6~g)aTC z#epdf*g}0OqgTkmwX|u$=K&b_I`{T*{@n?aV2O?2^)#|@rgj-)0CQAjsVVJk-hu;I zqtv5?R%DgvNGgXud3r~1Y(W9Z`Xn+Ta}RU3txdx$8KY#y#}rCHbH|*{z#Rj-8XysY z+l}vJ0m5$?`q=dgFE~#t>>E8<=9JQpe{rFF1Xk(g0B;cI-q)XJy5yfrqJ)dUqzloL z*k~l-8vmp%CiNqe!#gRJE$i(!)UeD%Byy$yu(R=^doR#(j+Xr7gmG7qCxa$q9nmsh z;O4!I5Ja+LX-*7LO9+j>#^msU0pJ%CbnzOzccbGDzg>5mGZopHkUkc+7$yWiz?WCgb?dwcSh0 zC^UT4`RvOvVW$V-fCSs46B1+r@k(3p!+tn7{wHWV(+zwCr#XjKfN{T30eC4{lm{Xl z{^i7hV*oN77zf+Cms&xfoC17Glb#?RKNVnXw_dARaMA{=E5P0$(7NG$niv5JL*gSq ziUgAL_r@f%a=ogqT#aK#fG(EO2FU04k^SiBzO&wB3Q7;v_44zYUF!PJH6>VYA+|#-|eL0QT3b@6=x)@c|Er@g-PWW@9tl6F| zJ$W_O^y0zZNktyvrSwnWFDr-!KuAA$Yyr-}Qs%H#<}91{Q_|)o!cqlUQV{H}Fhghv zWKadEfkUl-FyI?_`=`*JhMfDO+V~07G3EZKHm2-1Igom8RBp?`8{q)t^KB4Lu$a*E z>(Tm`Bnd5#+Edc&lG>F1kiF774Wh~^&Fgv_l7S$hh^=DQTn|&65AaXuKVgUl!L6I> zbmZn-zZ|6(G`HSHkZzr64EGh5tnO~v%Yl3QV}n8}BPwJN`e-dx{>d~zAo6M%^NBVz zV6{Pas?b?!d%dJBji;-oJ_h>XLUl+JHuCq5`J5b?!}00Da>_G!C7F4{<3_~Bt>Y8D zLzB-VGrh;zUwfX%SS3&TGyQj?wk}40(2{yk8!JxwkQio6%YKv2E1tLXm8Wb9&5K`R zYO%jvUqio?c+f2f2 z^$*&qwQYrU>6$cmg|Bo#-rC#AZDp*dWN2}hm-Gcy6(bISJHA6LPeDMZhrgMH-!w0Yb=Q1*VE0@8%FRIN5{Qv zu+?P+U*4Lks@}+D9cLY@D&gmY=ft^)bgIl`DoK0-iyCU2|I^+rzT&FzbRg6!!Gw=qDHBJ)1^L=JrG%BB62V2$q$}+ z2!PIRQ)8saQ9#y*se4_auHr@9>AQi8aoLt6WED^f8tA*rnUFvonEdoL_}~uG^eh-3 zW(T@h*t*$o4(i{5{gxTLU6~-+#%EsgTW9GYs zjOr~ImS7PE>r#Rz`HK(ms{D&7xsK!fR}$sW%ZYD0*af(+0JU^e5X$PRHNu#^f$~^L z5GsQ^h#+d$9=@z2rzhN3I0AgKymW69q4>ye^1f(~zeb3Yg2m+v;Pz*2yzx)cwMSma z50J>g$rq~v;5nSSF3s=z>l}kS4Z6G?+qNgRZQHhO>mN<*WMbQPCQc@{ZQD*Z&%X86*4BQ%KXlby z)!pax?_5_q&2Jz+RUi|FbLHhX`YjXJU399-vC_wyQ0~hmUH3cl3<3n@G%(-T26-0$ z43GV#Apleu{c9x$a zzafYSBg2gAC;6epWE!(RcBXdNE<-JQO4M!I7NVa{HL;U&b^grF{oD;*o3KNKwv^zY z6>PDLd=fu&x%5z5ec#|p>Z#FENxhC9Z(b`0`!2WeHV8e?zg|Zuru6awy(Z7OWQw4t zMJC-gC4Rk~PlMD!A_g6LVkGp-F)k^=aO&XI`HAP_1Jsu@RrEh6CMw4NkKQwJGW|~! zgEO^H2pBcBrx=(LAm_5qj?{IoVdzZ7W~k9_ORUI7?-*h2LA`h=a@{+`K~p5hOswL5ANB4(=AYcty~Z!TR}G3BuW*90u%&%k zXktY1^9QYn&Ix5jQ$qXO_3>%_b$r(vVZzyAxZ&9~ z2IRM%XCVIzP=G?bkx}xrl)0lg(GC~f!NCt_KUFR*%)YaRfq&YlRxVZPQGMmQ=|M*N zCveuGG3P)_PCes-r;9wZ+JEs}U)PNP4HtjmHH-fuwJK=e#U5aXHSeZ9{<{f?VTyRLPWdgLQ_o#Um_N z5A*{EK#;`(#ad?z9chort81Bh-6*;RDJp-BC%`E*8I~=7j%U+CY?V)sgvgN|^ogE*y8M4~MGhqO;+`LI{dP#r3vJsxn!nuSPMyl2KA#?z8*v#iK3%e6W}s z07xoqMrZ;y&v&d@4t6=qI77dGLJX0 zLH4Ehdk!bDVFkA8;BeLWa8>fhut_LH0B$k?u05lfg>zWuu>;TgfEZx%*ZV&QOfh(0 zw_AEC0u$IRp(ue*&jY`Xi{vjG7>%CN%3Zn=lc2wNn*of(Sc9w$_Xe`z;K5(1b4lu6 zQ#cc3=N;q>0cV$$@MI!MqdT%hNCwrAM_a@}KmJ#IaAvwosE5TvH8FI4)yP&|9dF<}QdPLk~G;X1H z+Tm9ZYQn70!VHKnC|eE748r@cdPg+75qyxVW-pvzg5gm=aE+ia=L6K zD^L!(fX$j7dwD(hA2k5Hwv@HtlpW}u6fF|(t7;GJ1NHCu9&Xa87na_07fzln82a3 zP-d-3?5yY!;WF|Lt49d9GhJL548C9294&Udx_Xyy6t?C`YXk^6H!)!|RrNYK>{_es zZjcUKW46+ywHBD4X*$0_#_`OE$p?Z(lv3JmT-V`L5)bX>ffsjV-i`YN3B7oo=?>UA zAUo4mjv~;}#~|qw2O;g(00{Kwj+k#duEr=@6?rClL!UUQWT!Gwc%O?d5ZX$y!5#dG zvB@3Dd}k4fcY{40&4P!eg*>~9a=-Y4!%pR#IOjxntk7@)!E|Kpx_He;_H6dxc20RvDrJ7%+2W?^rK z-Tvm&0_V;v7UVJunbsZAq5kjQw`xG4TxOb{t@Z}z^G?Ghq#xvM4J)By7~lt=o%5K; z<>VuVO4rr;XR~li7dTF=BDFP{z6O17%vYC8VzR;k7&?S6GN4X9RE{fAh9=O*uo%)< zP0XGiQZ@J0HOwHJ=s&~m1tj2zBu2XWbQZb0*Mxj6&U&dvRsRtyvZn@A{ZxCSvFqYL zM-IGNb5ZEr9$rvfzC&6}{0x>08p-wNcMY+&Z&L9{@KQcIkAOj0M95<40(Bk51oH z(+UVej#m+dLVqQy=c{tuMF;rYpFT>kSxSgPBzIm06b}?j zybc-Ug!O3#;H5+jK{G<2h)R(jyfPF00KcH3R}cU* z)ina!gG0b}%aJJ5SYL-npOHp(qbWdt{aoS#d3)m}? zlUbKiaFps7jQLeZJqakkXaHRk!BYEE{3bZ_1U9=KPaL>*;Ihz6k5bnHU_G*ccj|hI zIEngQy=ErkC3>P-S~St|SJ3J<!mUh3v@C>+8<*0pGtWj=W?dFGPy3I~;W=RH3m zIfFEOvny8DCmDilHXUr|d>ly2w!sww5xgz|!sAU>gc3M$UwVq(F*irQhQ*fnk+7!@76+ar!*iGPQ+4*Bfh8u8G z^E0pGP!qssVRaQP1$G@_n+>OVc^kx}ep?PzbR^+KpGQ&VZJ_;&?=JKMLXV0y<6HDG zX}cqy9P@+0Ee^7qv)p+G1<4<(gy*(gS%(a^JOO!t=WHPeU*h!Z=|^|uuBz9-yo8Pr zP&(gsVgSJD%r3>%F3p7*-yk6lu&)MxvLZ`r6kQsR4|p)KuF@6wGd!H%)}8oBM&PLr z40LPTV=-+rnsq5ca7T$dw0T?R&S<#w@=c~hiq67$3Jj%clz~BgIF$KjsPbVWUnw;8 zK@|pCjZXD5$MqC@r51kTkS8%uIYB}faE?o#M+20^KkDNCok*AZK(ISgcjtOqZmS5~J*Trb*>dgW6}G4$c&IdMgS9rS|pZ(|rbXF$UMMf1H$BC<28KoV;R( zxC21u5x+KGkRPrrNm*aOF(kI#^z1iqJst)+O{zEPnZkZjPKaap5YcSx1`EmU?F9QJ zv=>GnZj(Nu!&;>b?{KD!Cy#e?DFRx*~g) zT!r#O%xs(Lgq=B+y5VQ5m2z3<#Q3oY?XauQICA^-#?r4*GU-%(lWTW7}m_t6J7ho2Y`^`JcW>bWD$ z%aY}tmGrHr?7f+O=6+~GO*QKAVwI-^0ppp)C4xvC85X38(p>)0tNVqJ5x4{F-5&)K zAXqPHA%B`e`wC55z01~t29bmZ&UkLdC+E}wh`5+Nd6I1}%cv2*_( zR;A@ItMJ#>t0p|wtq`oH{%Y-7ef-223JMq|DrE`B)c*E1?B{;46l@%Ea0+!VBfhLCds60ZfC# zr1-ZMOnW(oIB_JYh#P#Ir`LFGV3)lXp2n3jB7_oOBMjH;1v`&l+A^emWYYTKBKuSk z+)NGSjn2XRoWC0^e<|vi=V}}6&)=xgBjlNoCGk&r$Wvv6aorMC5f;a;NO2ViE%KRa zsTCGffHMajf=|i!EvGJayJ{s%10Emnf~}WL)u0jd)zs)ctxi^?Kn={LH>4>*p-~}8 z5(}39BD(~Tha_?$`o`HG*IPKk)+a7!Q+OXr@-lAR9eR%!PaHU_OcSf^YG0^c+VAnt zk*-$o)UO~)#J9VAIW_vu-un4XEEjhp9(0AV8v;|>tEDf*={H4eh%&-E0(PFsYI)=t zS~vc$1pZ96XA~)oWBtY8^?DGI%|gxM)I38LsN3@=fNptWXhB;kOV?x< zhyZt%b6n$AT@Uz()tQvD7W8eKKUklNG?Obfuqp>4eL zmlr901MZJCLznZZA@D=gp&D~-M|D##UVV#0QoNCHl;yBpF(o2XQc>rCy_tox7#HGC zmouIST|MZ07#&l2W5gTU&O^L+6bxN^#D80`qMCNkxHhVKIock4QPryBJMqoLM&B`> zG;925u9&M$em{0cAT0PWJq83QDfF}MvzuM{XI1WUJ%~tLO#fo*gOhIb?!sGz$hY)V zudqTX@doGqyn=>8AkoR;_~%*n9tlg7U@U+`0HLwUn}-HT;4-FNndb!keJ9L5*Sm~! z<4kIpXZvt+g#vL&iCqGnt6v|k*BkF260_NWi$2Q`H?DdBB2LEnu?B#7)`+;yC;oO= zLp)iq6Yml97mdRvTj_iDO(I?i7U%&#@{djmC+Oc8CgwaMoA^X>wu5nT{4*?$Lk2pL zulvkdng+)h*H1IDQflbG_Ht<5v%jqwtAMD&AqVQf#v@|~tHh28L1jTvQhU3tQfctt zG!(HvtwY6$e#hYwsd}xzcmS{Mo06^t<|1;SZ3miF%6|%f+j4-|9#>B$zm5n*nKU7-?F3diFL^?G6#2pew)dA%5Hu%NoEp#2c zwXfPT>ije0$$9tgYRzVm$_Vtk%DR0*ORSAD1xQx!DBQ;J}`6;Z0)t=?xSWc5$+ZiOGv1B6f?Y+Feo_)CCm$o!_;ao3cn9D z+hmMz$O?~FPqTNeUI95<+V1lI%+YR84ZwSw!$6xH?wDfH^fYkx2W5dM9_U^O_U7{F z1j2dpiDN&e+$r+{Tw;&|Glay!l3;!XBUzJ!g*T~=s8JOg5BW$)HTJ3n)y`NWnD{4p zE?D8hBSuBoM`44!AJkEgKdPhQReP1IV*J{HN6JHTZ91QiS_DinQK;JwN3ED%oHbhc z8__^!?9JffK>vngvNs5DayVNVG|n~mi1lSDrR^n?&(iT{tY>Dpv8$NP z3r@UElm19(So70P_>l^!8lfu!Dd&5Gt3pz`f;y!telCLoFEkFyFUKWm;FgK;o#VGx zukorC>t+_eQWs&5rz3K~r$F)(AP%3c!{sO`Vp@9)EtO|+<9Z?vem?i{GqpOaZWmo13@qQ1nG8u#^mMU)jSSw}zR!c~ z4JmfBO}F_#3CIR^2hW0=$ya^lSq!t`cJd-&gX#9y-IEGR z{d>ufcw1~161l64Z~~z*Dm5CTnL*Vlfyoi&2$ce=#Z9Jt2twet4&*c4QmM_2++NgR z$FNRck%N(j&iEEr=QajkXHsX$)=n4%KtN-YbA;k3baX^j3)6!KKN{6#KrwJBV;#=( zMq=s_!EbRPpjU7H!Zg3ZBK=NuCe+r@3oB%7h^E1Q^CI>=L+!xY6H^@Xu)CtN29lW? zRto-_awpIM^-L&M7sFIU7+4eEw?J_7F#yxT;kub7bm-t~Mxef=_ROUk%TlNf8x*tj+%OQ{n^;3fx!lbk;6h#VM(VeGi%X=G1xS|tW zc^T8`3V8q5JHf2FjA;Up6<>X(m^l>aKX-=-pKOVbRU5v?AY}NUNK^^9={X|%DYl~A z4jG8JwJpfbp6}j#tmu zNThpLwRihfT(xPYiQ1TqyJhC@@Gi&?AnPp+)3J_nn+-L(pfprwCv+}HiqtVWnFMlP zA&m68e8;?%GO>3FDw`G-G0>3vGEYs@gQYkiAYq>s`jKm^i~;Dg?vfPzu;R#KzZV)- zq(TmxnSqxpPes8sLJvPTz>3sUeT9-@hEIv5LN8+b_^X$z;!MbQB+1aK^zk+&l+je< z?yilkefbtX@h#-dmiNk7m`9|rzy@U#HtS@aC^)4HS4c)B`-)0Motx6YWatioo40s- zg&gInmvLh&RTzF55A98bPY2Sy>>nTlTz3W?!RS-X7oh`Sk-=Ojz&#juUwW!a3x5NWz0-q=>u@ZQ9OmLOMZ z?SXJEX`KxC=(2N`nZmrCc%)%oZ$3Cjx(J0lq#4lU5}-jt+!3?nv2@}d`3}u;y->%= z-uuZz`2H8Pq9V9 zxzE_)U0Vvd%s?{aZnRDWN{6w4XY`AZ8D>CdmyMvX=W~aZOm@}P*AL48gAy(>fRMT( zjBSag7saOBN;B_Mubf%$%(|HeP)Mue1+)%YS%f-{?0^ce zO12VwT@A-DKt71KFmff|Ml{(lOL3>PY8GY|U7<>1gNiUOFx^w1z6d0XSl1|Z6ZqP) z{^TrqB%&xbR)vx>Qansv6gj9H7^|j#bM)SA!$!(~JQL?y4XsZO(`yt=V^+1kj*y1s zaFm3S7Xb$aNSdfn*SPBqoT&dr&9+pnWJRlmvPW@0PisdXtJIy!wJg z688Xniku^)yVbGhji;YW(k!Cu58nh8c@@oYFo7 zxEF`My6DsM@R#USyi!YwUDHOrjKV$X@BV3Jji`RfMyEw9Nv!%jAtMxyV<+w=F^{3Q zLgPy!fD?mMQx2VWqToAdxTheBdpc!ymg!7Ygd5ej)e5e6K5Ywq^{k$vmGi^0UFLob zSzRJ8WII|_ZEuyN>7dtAuPIS@Z_TYCPb3+io$=YZQ{+K;b@{bDIU+EWv84~gu%0PW zsikN(qVna4H{IyXsElwPbn#??72lTk$@(8UfVa=`Xo%y4>Y-0X*~WMfRI$ot$@AsF z9&C^xe?@)!3~^wEs64eoIZB)_l-+~DC<6(XRJhJqIAehxxPI%BSH;=~5ZU#I1G}m| zwLY&#TSvFB4XIi=CN!Ds(Hm`XAw|8M7q94E`%!XBO)-Nb7-paoPf#SSqN=R8P|bbpQ(v+OWM2?#LQ-vPjOyf=RBt=c9Tult#dVp_&t3_2NxiW)-7=41g; zJi`t${joHWdRK+(u{}g&p7tyQiQ7U zR!*XKUS}l{0^!?>gMbK}GE`xRx)XW^L~DhXILnzD0)=_R*OA4InQhZPi`kXYE=tiW z_o>K;DhQm}qhlA9!p1wXPlLY5iab~kZTSS3_M-GN!NP;1H~P}9tmC#Ybo{Ut>7-xw zK0$DQ^LY%y{4;S0Z;pwz+A%pb-D0SnC88;Hw`@3fE|uX-29eg%xv2Qw!(1^0$Z5;I z`-#{~c%YOmDAlmGqsE`WSu`K05-2zu>_87cLZq*4FzzdHrr-rKCVCXZR9SgE#TdhW z2!^}{RUtv2MV{m6t3j#|>!+Z*MqLkf%%QVy>vhZR8yQqRO3MxnA8j3SW+tt`yICFw ziUSqbCOEP(*s_X|2fgRxKINSP=2Z7oNRQ{}*t!Z%kK+}+Lr`NN6kStu7;Tf2cP~1q z#t!jSmAcp|1I~;DqcG1Z1#2{0y5%UH~Z_bS4Xezsox!jY)^pNdFT<3iOs6VnXvRAhf zjT};|&JxNMB=<+j_Z@j%k8r>cM>2Q$1lN5zw#eK&Y)f?EuD-{g6wbN@ru{MwKccK3 zzZQUyO$}F!J`Yy{%tGc)U^U7id_U5W-M71q0CwRSAp{2*p|`1)79@)pVhdBOMN_fa z)aA}I#=hQ|vnn)yVp%W&Wv`!)7Eg;F+hx)eR6{W9QJ0x(OT~(rXJ?7ocd94b%@lcz z{WmOVU74U=Xi*#8w@aC_Hvz^OJMBi%-pDvwQ6b|4oD6qHSw%W%K6Ulg?1~MacQXaw zr4e}%R)dW%jTyI;0;zWcS=g8xUTL+{RhDzgWymbX8jDbiF)alEX20|pR_k1P{u3k; zj<1`yq^ffWW6{y@!F`9je)}y>_z{VH{0vPSggw?a2)lAFMqc$ zc&3irU3&hfmzNoGC{hA3Qv0kdx(@k675KZ=l*W2zP9U^e1l9mzG4>xO*-E*BCP-T;SdDfXFFT*jF*jM1D_7S2|If-^iG_s6Re z719PP4%C+s9iK?Nipw;6bN93C4hPVSG48zv6~W5K^1_&%$7yaaF{toW-rTr!Wo5d4 zIlaYn$7hH>ZQ%wSqpTUN1IH0%gnNqSr)YKI3^h)GGRGMX@TmC$CttLECNdqwz-)xY z;g?HTTZ&gRhMXT=EkyU{sRsTd+2loldAy7Ogvf%D#lCw15z%Qz&&tL7=Divu$yEpvL3xDeqB;Mr8VlGemD|m@W z-zG|Rd&!d&Q@(*BW+h3q7R6mHea2pDXUO972Oj@)nmC&#dEcjk;f^wyaxAgW%p&LvcR~~eVgwuJdCZ! zIAMXHxjGwDc`$uaSqX1KunGOF*wSV#-7ecIGo!URij|1B zmNncs9ka)!6aJQwPs3poH<&WJ!!ytI&yyM#$B!6`0mXQ#5wKd3L0CRY1^Ta-XM4FX z_kigW!{Gk~&P;V314aU2V@VAi0~Q5n%eic@qx__FcFdPW(4N-||nVCk}(!AI3j&9Hw>M z{hnTB%W|3Tb-K+2YNk>imZ$~ZcbQ8dD<9MK$uuwOIiXgpeU4Z;etI``&|3hR_Ulrq z01ow`bQOkk8t;bzv$a}zPptMFfBK;CQlSy`VV2`URDaz%4j!#}kc5zpDB;hHO8qu3 z586)O0e!Pa;>wfa&K56_apT4dho4@+sRESMC-aT&6{PK{#2Nf+X>)TboK7dNE2-I4 z&DdELO=bq0&5|9NPxD*MA3K0g{H4m0bon%90Y`5fR~9?O-%Uy+FhsG8SRR`q`*r4N z>Zh;6#%1ey*yhs-!d;i$^FM@H4eA(wwZNzpRF++~ddye(x0ACcItTO{3Puriv^=t^ z*`05%7kj2s^l96Elo@C_%vPJKYK0;Lq=u_HhhgOnXPQgPRjUcZjyHfdD&z_{9Sb#z z=a4}#g=xuP-`8~-j7|RkB%=kIS zN*p$bKvFp&j zCWC7>69Zuh#3MPPak=1SQW~BLhnFW0vD&gp@bQ#9nh20KRsW8N%MSgu`Nb##S>~-Y zy)VyV5R01R^vYeiw)$2acC-Uw0^AlM9Ua9cjcm!@2=8YwyEs8W6hA=}?!~+I*o4a% zUiu;Ur^ZCkX~L|sObC)mkh331$W*J_VNIPaqoQ4%&Uzb<@}<*UK|M%z!R6z@yKt*h zJ^wc0sQ}<1a9*^z7V&FvCN(Zyj!=D|dr>qYmMkBL8M+sNj;%D>Ekh~~GL+N_yF2|$P~J?M)#cQrI!|jX zlMoD`WL!{llToWKYqUccfgBP8XQz(YBi>+Zh7u4C!)4)+Z{|Y#6Niw{Uj&Q@Uhczi z#|eM^w7nKY7a|G+!Guy8Xq9)cg1Jh&c(Bsp*GEu zoDiTumM~y$j8arm*Re6%nlLLLkMfDsblz1Xu29shea%Ml-gJUL`_Qjj_MW$OKMR3* zV)n}^#tY6o>N_m!RycSsq6m94BswHh!vvM>kXAT%nB?Wj`^ggz0`dJ!XcXLduTr{0 z96F_YqFiaotHlNpT}%Tr{``(o&b+UnVFAz)8FXEmF?a>G{Xj*NHHpNIpN%DKQGqG9 zVIJv3RwEVF^7@=9Sz0AjcK(}r1u>g8bz|g_a!-8%JfzCq&8+^Jy%QXB>@i=Nt*S#p zWq;b!J*cr6g=AEz@IpyWOv>*@S_N+pkcYzz>vjQrCj)6p`{eLQcLk6% z?CE*I25vjij1sMcQRmpSOmW+y^mW>L6xM^-dyz+fwIA#$4tIAqhEEl%Yadnh+ZU0M z@T_9?zSnn2%>9=!dI{p&RnJ8wZ2Yj8T%`Sv&8^Yl@?&l$^<0Gx6+31)LrX5?00@#R zB@y44SA+%x6sZfyI6BdRL3oYc3kyK=ITny&-`-~WON!C1)3nLy{P1v{LY;`D?^7wg zi6=9#3Nq22m|FoV+^bf+qH}+ITalwfW7=KI8%h7RklTfx`p*krIpw?*>^DGqtkO?Q z*G4$g%M#p_8@XLVkA0~aBXIziV@2cb$b4KLheWf1_KOX9P2ZY{ zbt@j+EGmcoq18q6$eKAnCoBBc+KrDrMAgiHo2rCfj8`l;t#zEyR~M(KZ)R$9Mz`86 zH7l0a7g+S&V;BR&UjbF--vOYz2PQe&$B!7U{LJvwQO<&{h;iVQ*yW)ET9xP>qcaG!$e1V5VsT%>}lm3+(DR@t){He zjd*v__p5TE=_b^cn#a8?BBk792|j7x&J;d}nPc(&cOE%yU@ur77M3oVv7cluszn9u zlaF`FBh?C7bdQL80Po%lQ$)((K=wi$stH2be%mZ2BAViBfG$AU8hvxUK_%~F{)FcZ z3i~#kSGg9>&%Kt6mJQ_3HF27*=)7+(MpC(^@dZRjvA3fSmd*CI zJk|P7yV7gx0#>aDzVqXi>z;Ib`D8HoAn+z~o@WOL7snO6f0UnU&VKrO!hSJt-5h?p zF7(otxM!h+iPFQM$1rso;%tlk_mt5`TKC1@Q>swwrYgYwnIfg^l@XqR*x<$kGJ=Ek zyuAw%zBBi!uf-4I8LE$ z=Ti+DhtGCjR~T+amLSd_&vk#2rmOVJ#EB1i;+pc@eyq6oDpke1iZSVE zS+}nV^1_u40&o8ct^1H-b5862$Er4^a`{#tXs$WwH`)44s6vLXBUD`1i?o@0H%j@#*J(ngnuxoU|9k6!PX%@z#(3U;xiL zgjhEz5HqwDOj}Mh7enl!mVH4xr8|CG{`3FeM_7vL54MRFroW^Q|Hi*%g20FW1JENu z`(aNas4a`c(uP`@A{+Yqys|jbpBEG%`||cjy{TVDU{swT} z&ig*pf-94`W*g9dy^eDg;-VWPN^A-QvRH!60Xfz&G*Dkvc|FcYMQ!U(s<)S_mnTOk z6PzaJ%V3>fYfCC(DzE6#{>Byd2%U-|TrwZs=28ID;=Hy5nTLzW{aAItp(mLy_IX1X4k=1ILGRm;Xy)}DFy2Y%*GSDFj}TLQ*` zcA163;2`zkdr55RwnE}rBJ{5YT;x<%a6^as7=+D7}VSG>cgcwKIfXdc6;i({^K`oJn>~M z34uh7<;7t>Gx@jsSW7l^&M@Hjg+9}C(x!Z^mLB7C6cX*^>MG0A)y1#Q<<+&du(;|# z*xgXPZ=LV}iKP@*4^-Xc(V>cw>so5}u`#X<$4y4(NWW@^IbW7%-%`dD?~T^{GhPg) z=YfB_^93v_Z5!vjPVR0$R>*%99kTZ{sEL|)BVqVCZi_CYcZVBXg(85}N?(<_Cgb-p zZ}aH&)C_on9=6T~>EmXnjGW|))i?9lhjyUfh2z}S4=MVR>Xik$`;Kdu7l$tU@c3Ui zVV!}jfvO}JSuu2yj!*8HJ862#=gOv`yojoROQ98#6LG}6V=>SZEzLgN<;z0LSn8NpLj1{E z`PJ##ueYBP1lP%%dQb&D8_4OYt(Sm;kDyiX+itcLkrLI(mN1KFrH_SY5V+!8Pf6|6 ztRzN&!$kqOsoOcx7LhPXIagZ|_BU&YNLh0oMPB_JMh4&`?N6=6c+Z2)_Q%8C zVi-r#;#K|PfZF%BFi%yZU010X< za^zICmSL)YMecxsDKg^UbgsDFdJS)^aS72Y=&?0Mhx9T=yNCFV(WJVgf2@hUlNgYC zI%peYQ`x-(SuZYO2_6>4x8Vyh2JL19ktqF-%7JR)pCv(9J_u-T61ItjHN}Z!llBL8 z`p#uF&{HT{;JO0Fq@u?aiPR{nsMGw)N13HbPE^3OXPOzKKTL;996C$XkY zE||8Wg&?iTbu{T@A(=1mOxT4A+P=I{(sieA#--y;nx&P6H)x3~kH{xz^qjO;333 ztw*za{|>P$`Gu6kgfA0a=;s~qNqmAlQNs-^7X>p$tK-fn#1dN=OAETpM=LZ9N$B4U z(rV>TyC0zX&@x64^-THIF=k_-fQ3k5VZ} zQr5RwOqTyfoC$tom>H1b&TH%gl~Khb@Sf4L+na}HE6wo3Dc53M%%kBLfo@dYu6K3h zkA4hRx8`2-9~neRY*qVvf(%J}CImEolSu~9uDP$^u4yiyC*M}V%RdOxKk-f{WDR*a z+mr(WtCg`{ri^aH?CA!?QT`Dz4kjOo^6M6!C#WO>C6vNZcsQY)!#oG zXf!UeMG4zTx-}{Lg|-8j z^UMRwcs<_;JiX|Wm!_Oprpn^Mp%`e)X>jrm#*y|&6DyHvMZ<$CqA>UMnVWXlw@l}X zXe31O=hCQw$27>UV*~1b1>Wz3*I0S9lPnYZTQyf9PjRpltMA>SUn+-2%cs`$LSG}9 z*|Z?xl^ygKKPbzcPJ58L{45H9K9m6AB!g?I%5RKk{ghduc3-!xXnoAU=fT7?Si> zQ6yX9CMC*kqC`_x%;Z6DdaS7X_w*Cl9b=!VV#$}?FoKwjnE{cP)sEV_OK<_Y*eddL z*QpXvbT1#My9`!a&}TlC7_d5RNsW|dTs6)hTf&Ui1}Rl%#YF6%3ZBaifJWGyWSD=) zWlzq$14Ri<{H5H>r&uS`!iu>k8Zz9XaJksYX>&>Hj%E^USJ9io2x(2}4?REk(GVQUs z=L8VpX)}l*0+wU%8qit8Abag`!E@;%*bfPHR2ZzrQR%1FVNoGh`=fuD9P5_@0;bZV z2fQPGIajB}{ls(NU;7AH+uUtwr)jGH4OT&uZO8e(nkOcB5mLR_>g`KzS)p()_pXS) z0VA!L$ydc&j{>`v%AfDUPych}&6eZVh?mbnlHdH+s`jQe;zlUmM(z|Femlswl{|q( z=BLIsb)!JG6Vu1^oENU|deKv$$3b+HMGNi^O~oA;+j>l0d;0>64{2MxQRjytE;fF+ z^L@MP^5}g`tIezJoSqm{!L`F| zvWvBjI%=Yb*m-CmB+cy~Y}DTZAG1ne^Pz@9N(d#uU6B$xCEwRM>PfOzJARnWi=cb` zg#%@)iV^U_hapVz-i{-n6_6^!)o~gT*k7xRQ`jStKFa_+x&Pe6F-1QwEz32yFB9z$ zi14u#hHr5v#jOwp!LtirEBCEh#TJ(r9?sdY!5Wb9fHn9@PuG2)rM4#-{VZXQhvF_i&$Jy-A&RF@h0v&7RVBp!rRSzJ_Us-D00Y04|DW3^b1GmD7!H^{ zHF^(N25?SO2die54;?@xd3{$krb=+7x!EXLqRR>{lOGzyhxQmrj~DCF>E9^Nl^Y3|O; z{2~rgxnA3r*}8j~rM##w8&+uBdi=}YoJF=UAM;oC3QB({=CxGMYYLfWcJ;7WE;Ja> zapjUD!bNRIE(;g$73Dn6Qfpi)XzmJyM>FS{-EEs^uRST>X-?GDeqU*{g%dg+t8jp& z`m{S*^Q*ws)|JE>he~fdJUK2oFj`GUdk|rj^o+c}b9&7+QTiUH>#PQdK6f=*8fNuf zuOTf>9Ls*Q8pWTLq)2`6r%xSKUo$j>{S#}Po@4VN-a2dKP{ax*DIJi7h3=UAx2(Y1 z_hcTG*HMPJDe&on61H!xka7`?4Gw^j3hlHQ@YG~r;jH~==D=|QiE8@yOH!)Lj!*?} zG3!l%2^Yy=G-m6yTKsmKO#IWx>?fxB_tv5^jUs$dkX+do`61!KAehJ2Aml;88O}*R zI9h$lQlInmWL2-80=eBr;>{-#sKh$(yixNIS!wh^Cfa!GF5u%QyTvB8Z%M$LoKl#5 zjts{>P|b&ho+&HlR&=izcQpZhuO7lz2`lW9@oN=uH{#I#WR1X%jzT24f))4DQG3HH zZ+Rx{ptyl5n{Q}zQpMFH-U)H+pYWv)c-Z88+=%Vtf{c5x_~fXvmhlTKY`IlKaiv-| zDV9NNY6c(|^1r%_(T4%*36ucXNL@o+jV z7-jF)wXJH^w+4sesRpCnlszP4E~B1BJ`IbH9ovc^@9z>?S!K7#<=p!q+7AdH=rvnQ z)$}(|!HNEbqn{tEvc;+mgJ!79+KE(ooYk)m2Hia!3X8YELFGEaN}2yP!Z zu-??4-BdDboVx;T9|nNQN|`$s%SLhM?_X&2TuYfA3&MSnaQYlnEbbuWZUP`i)i#^L z{_4rJ9BLAgmrEcJ3Xr`Ufeachp-_9&)I^ilsXYlAY8vdIf3Qtmew8UuB1vj)kiv>A z5FAt4W88;l!1vFg2ly8It9Ed-#=RGu%d0b@GBqvdp8OYC=h&DDux;tswr$(CZQEvt zZ;Xy@+a24s?T&4ClACj9=6snyQM;=4^Q`4Vr$D6z;9gQ4u!H+J{n@EOo|dZ;}+kA*0TJ zO!t!bcg^Ebny(VaLhO-flle$rogz<0y9<2io_OB2Q|^xqVa|2$lmH zGPTBi>9U%!6yTtiN!lhTIs4H=MbCkPVIMCKU{I`T-)h<;D~~?8Ams+j5^B-wz}Q+M z<2d)h72Ng1nhsN6a|ya13sDR*MO?+oY=M+;xCxJiknahUnBPkH+AnV&rY;?nG}^+= z>s;Bn&QkD9Yxyg5G%;85%@r4Ihg5L`Ur{k+wH~j$0jzkdyt%l>(C_4sPv>`WQ5_8l zD8&1={Kx?&eT1lTMCq$(j2GCA4Hv42ndkA|4FeYqKw>9D?A7(NY_(t!26i-bGfJ_B z(s<3@V7ll4!`l(yNfk2rXMi;ft(=P@0+Gp~xYk5-)#c*KeiFOi-y!XMOw`kY)_4o`I(|90AN=zv*~gxz$0O|}o6u;)?{ z8*1y>MM|YX0hzxo&k+EEV*T|^$zM>e5?dxr`|yeJc*Pg!OggEi_EL0x7+tCjpvcCL zxJ2M_*emtEq&_x2%-ebuatye zfNR$=)uRso_)TDMgA1S8Kr8hFyu5f^f({2bT?K7%u65KsH3ox0K*NOR&#d5zz>5eK z>E=n4e76@?3zjReB>2YdmEvhdIb0X|v2GwdH+kfL-8wHTs)NL#oAYtQhJ^-rh2I?z z*w+h@6m($D99HNlso#c`)MuxCzsEa)6|? zw{SLzY;+=v_u^VG+L!&a^aybseUL>q2?|8Kvqh(FJWUa{vx;k9n8amE3qJgWQ1pg5 z?ndtG0-u9bfb8N#C3?PX;u|YbJyw`PS(t3n>GK`6=lBB{Lphe3q*z=bB>bXGBD1DI zzEkX!s4C#8eqsG{dw(?$>uRbt^df#GG}%mm(&$M7?r4}Fq>%=WERe_+ zeMrm2Q{md+Z*(B(KP=(jwySgXqK<5;$&O0D{WhyNO&}|FG&iEVtb8qvxA#BgT}_C9 z{1gw&ZePtnf?uWjS`H89SuTSqs0Krihqloi0pUIkRix+Rpi?iLjFsL;N9G9Rf;;!z zEHJNA5vfJGe5@IOz}6W!ZuLOCa?8G*(OpT_#DY@6t?0p{kOE*8QkTyyZv03k?pUZk z+{0kTT;J*(FiseWyyZ$9E6iOYa4aL>Uxh~sSpnN8_|aX@N3sppw+`0bRGduoL1JDW zCP1o0`TmvoebMyVd`*30TMca&vad~!&*Ahty-1TeWqXK#PhP<{`9Z`v#6P(ECTA%n zcsG(^MnPJr`|^;#;n}`CW~RXN#E`p4Y=a%riG{G<91tbKA&S^=6n&T)Gm9f{5rY}| z34-^L(uRT`hY=Q$eKhx}I+{HF2ZzJ3>+*Ze2ak*$#MjQUVp-W+_A-JnN1L)~SzoK$ z)_0e)_Sp^qcvFKteMKLv)O|NZK{?eW#|{IOI}Hb`MaN|>*?AD~)7w7p349@o)&x?@ zy`276L4gAf7gk|iO>HB%TBy4}L|nv{PM>r6iBg!3xUK8}4yW4uz)n>sM%ZpX^0z+r zXa(rV$Xn2`%77hyx3_R@!Rj>($a>)`kt#HtfpQ`OE?c+3jDKj}H}E91!Frm^)sHvN z&75X^^}jObRtrkcY+WCHb}|HokkcZ)fl5j;D(|zJOT1wP5rRe7?3RcN*+q8Mm&})G z2QULsg}K3b%4OyPk{F}m%WBjY8H4%IaNafRxF!R4^_L#=C;gc~Vs_U~Eyu6_=<|Ls zcl{o{ER4)3E+{ar>$7tfzGr-Z*0e*Ek#^z54;20c_{$SF?@; zrfUE*m#`@zqJ0RVl45)e=3YJRiJzAgYKA_5MzN-{PO!B>9`yltz1B3X1NdYHv2M2) zp!+i#8p#nD)|hI|yOWGmYZ4oF`X$w?B+%_e$*dpki$^xgpQVLJ8~l1r*uZ4_$Tx55 zvIS!+iQcGf7imOmkr{d%cV3hAeWnPk)CdAcr!W3xKoKT z5(!tQJST8=1d4TR9~wH7+g|1YH6l4+M+ugAQ>2sq%X?m7lE0RK5h{Ifp|`Y-gA7aApo-K3P~#+=~O(jM2K@ zzW?IgI|>Dkv)TQ=e8|_SW2A_eFVVBxoO$~s!tm)6&GQ-qP&K&{eA1FOeYW2v*vz)iUiytLvCw# zePBG|t*H91TYCg(SRSs-76|)exo0> z`i()?k-~VL*hwV~iui`hK3K$V?u_C0Ym4GB6e*^O(%z!M43+jmk3GKQ)ktH|% z=uC_~+`iN9($@{d`iIoYKj#|9MS8(3i5l7vCYl!l>5?N8jY&E$x=%6(OW=5r(>zy{ zqno->)qpL{^+rsQmJ<~)^EWmyM^7U?QsQyMS4g4M{h@(C;?DB%RL<67_{na+=;SV^ zzwKJXsZHkoyrX^A75s)`Re!{1Kv~`6yLg&WtcH9NMSbOrm_E1Rute-uB&unrQlnJc zmBQK`eEb}PgepvQxx=oS$xHa||o_7)}LuPAje2Jr&> zZ5h9`t{r8j4Eb5`hCbE}d!;?IlV_#$`6EPSeXXtEQz%7X=*B5k>Ghn-R-T08DXDLH z`!Bph<10H^tMMLyLM<`@Jjgunz-xtPWyHW2u#io%%mRdHdSXqDoxcrRl_Qth#@fll z1pJeK`J0)cg?9U~zI4yv3%mx>;3?lp-IHfaRrek=qbm;NKAi*zPIQ}rgQP3gAFnlD zaj+3;tKg%JYaYe5(p}Ct1CVO1%S`D-aj>qN^C6$+AD^ypEzq#|9fmM8Qv#h#jiWQAJn~R3xn@Z#py%D888uUM#vI z=Z(!w4neGfX_`#}-2Gu8Yi5J&YFP&}dTz=CVA>okstas6y)}Rb2h|Ot`2t?P%xI@b zE9(Qvwk{7qbgYHgI@M1wnp@UyAt%Nda0Sli4`GM=b_Zft^bGZUZQUvVf_R{%BSj`2 z{8}oCi;@SKBhbS&bGn|-oHx5{E@1^U-#|LCfog;pc2qq2UjYlWAQt3yrcs$f z6USs0OJf$+3|Rw{s9vXCV>_bei&BX^$%Xa>!dIx&p`Td+q=&nu8*6FO8 znCT||Su()`$q3t8t34vrWD^S^qQLXcHk}p#;IF5c8sK>FsamdD3DwEI&|r%pYF=Nh zkDTIN0DBgwm(3)erZ&su_4wev8f}sQQR*6OFn91Tro2cdJrp*ekvw9c_wep5r2bQ) zG+aKo1Y4hJ7Em1$#ulEwfDFEitA&dcXMR>X(~;s}ia)wOYweMB=q1gv{jI952x**v zOfD{lr$4Yv6YOPKAWAeZix{$PYy_a&_hFEF57C?q0&Dgsr|?6R+^Ob^&2@qiyx%DRgb*>#-)(Kbik%Pk{1(R5r_ z*Kv8~R-ElD!lFK?hL&-G){~`abfZl`NQh5x@sKDwlYfr6EV|jvN;+B=j(E_tJmsYR zASmh9m%oUi&<>oZBCGh+UK^kzpLx*byUt1Lv_OOE8FJo+eRVOFKfK4>?kOpNXA0_( z3;zOTu;Y-_g3%ihrlGVNzg^$8pemcR5!K?(MVUJP2u~jC86)i=+A!82OT`OKs1*&K zw7{v88Auv(0pWM+MAfrDR))I7| z@a8QN%L*6V_dn5h!N+`Fewb-dGo`+}lH#k2>257cpG(xcgsQtj3^UWQ5&EEc5 z!Ny1w^R$;|V0>6k?*G?q$dVQa@sp&%@&Zf?*px!)exRjsvvw*}mO%Hw-@J;w4e`N_ zn#c4C0uCZaCPfkg&9}-uIXBDzWNXp_={*1H5QS6`qt9S8Jf0jPB+HKmyPx$<9aR@1 z_%R^U-&4}#?xph$d1TjNE*0nyPmze-!KvSJF>%!bH%j) z_3L$ABaR;T^HneH+d1=G&~5%Rg(1hvavUcqFa1%1)#G(JR)-L&!^xEO1{mewvz{k5 zbcly1h1}@PdXMe)*~YpyEuYqnP4wqsOi@-?$bxc9!GKA^JN+zh*bJ5!<$Kj-MAC}Q z=d-1RziS+EhsX5}p5lI@@6T+%_kX+rls4x+&I{pEeWR(j_<5$W7-~P>hd@eT)-)e3 z8(xe~opje<)wA^k;@K`IbFR$1q2>tCXCRskOO(P8%!!5Ty1bI^&9jTq$4*O@Ti^#f zo0{EJqwgXUE!Ma4m(rvo4?JaFGf7jnA7z2H-|cT7GA1XDAr^V0V^%n2=iUl{amEQ$ zf`Q^>#aYy+e+TF-tW@Jlc*ALZX3RyxssGHGL^Gw}dSXjK>aoV=A{*Yp#45wOe7-k5 zUED)hQQL#Tvmv&wu_&Unq!JLHV`oGWNZURN9B>f(N!_`l3AL+DP!O`sJTG z^}Y;^DnHs{_{b|eR(%RNNUOgCnyGG0#r8oTaOz*~2!q0t)GxWZL4us)`*8rgtOV)i zfvg5PT1#eFAC+EurRQdZut>HJ`nncXC4h&#N<9l2OSa@<_J8oC^6|A-3ho6~KIIVi zW{m33l*I6=shj+f>!b|DD%nNa#ipP{c$5SZmWaNw2XyT{4@7K;&AAhbJ})W_0xc#7tTpi}M1%cLQa6Y@;7;ruE`dy;xIhwZ#{BnJeEq*^jiG zqF1B>E;g8v2;NmiYE)K9vE!f&TE5I~(fYlEzfdD#)!vVX#IVjuXyj1ExhJuZvCJs? zJ>if;*dfk!D_DB)w?a?}>)a|~F>Ss|N4ab~sOC~PFLCWvFdHwR_okb3qeUw9MGZ%4 z=c^n(TRU}zuJh%$@|^|cR?BFmbum88Z==6G^oo-6(Mx!TduDj2Q$WpHEjhJ*->|Z? zbW7`g;6`IqrU3LlxKKeT7R_|!ak)%;wb+XMBm`;GoS(Xka)r1;Wd1pyg$*lOv;%6f z-3B?mV;*+Ybj?bDL@65rXlonO0{=i?U?Mybp@RPEvq};?Lh&hh|C71lRWies`@Sg^ zdWJX%L}7g;BM-9@E4OUf6q38`0>eB;Fd-`Z?2D6GNSs2$;YcR!R7+apj zpb*y2Ea8$O8_#QY@*@?PaAR0u#BB3kp7*2O zmwbN-OxoLKT?PDGiLL~td7&M)VsU%Fk!ZOv+oD|;#R-2Ad2}KlSk|Z@nOueps#8`I z4%F-6{bUy~H5`1){^>=Q;`Lj~CM*yKpM0RKV_rHnGr_2n0bk-*mND8e!L%taOiYV+ z<(qiw-W{BXqa_UJ&Iva~%-rwbKjYE#$w9=pZgEH>QcG)Ldkczxm~hHknC}$WTV%*< zaH_N(hT=O=<#K&)HbyIdl90XE96MWTCnlF8Q2LqxOdcI$B*C3%5*aV7y|^L!T@cv8 zMDXg2vAbhMAUVJfR84Hu605wplqAP8d+l?zqxTF~`)Y(~wU)|es>1C|@rVYFJr!+w zcRvho$3)=8eIVRq&|Iyxy=*j7LtpbyDJ}!zo)$YDag=GM{6>tGuNGj1{6wy<9p$D% zq}dMuzU{3njUw#=Irgpk+YEXVRKVR@c|bp{6o-uz&-j|3(|;LAiq(1?Xi&Qt?01Si zZ&~(hu3FLLW$1_zQ)%FVVrEzJ2DH{$7^7*@lpTB!8Ji487{h!L?%F|?g-DBa<3MK7 z;be?AQ&+!(3v2YSRtjfW`Q%qNIMR>I7`g?pYyISYr2+JJ{Otbds|T4ViAK~`_clLD z;1E!9G%(^_4P%O!*6TZcjp-6(vWHsOzn=@p6j?d8^D?O0k*svf;Y!b%kf$IPeAj5} znbnyj(ZwuyS&HQ}^Y4i!C|T#JME^oXj+C9HpPgy9-l%lB`4H;@o5;YtNyBnRAr%AW z&eoiApysxx+ekjWT_CiD5cG4z zsJC9pp#nW2Gj_X-X^yztPC*-S*jHnD?rU zq~8?^iCUGo|0Jk)yhnN`3K6x<19yhYxby!PxE1&~8kCP;dM}(RVddGKUV#d?Yp3zu zw+jGH_^VWrruY35=)sic^9}3+NB{%DJlXNNZch`8P{h7F>b<_P5qucmz8sCNaFl+r zY^JPBZ4A|G)|>unlQ~43oR$+Dl0u0Oac$U|?K=1G`G?8T|C7mRoa$1oRcmR`PUU!{ z2+%V>K1-IUCp_K7jm{!DpqU{fvOMkxlJTdGoG$|$DPNrx`PW&QdI&)wQeQ`&P!!{b0j zKfxn|W?BtIGw#`2ZWxf8qbfwllW)DRWo~32I<5TLaDG(x;a2WzP0jnmfYSS)#pKW# z-5Fiyox(7m6t}$AUP=vMLuH#0idu1?sS%*dRy^(K8MO3QDM}*QUbGU0(AY|OCn1>4 z$qDWN`w4z;XK;jM6w6$Cfg2>XbYh{Bf_we!qDo&}e#3spH4UO)K zbK@6LdKbSdaLWJy6MOpLlfK6_vPg2*ZhXUeZK(Tw>oVOyv)x3_v)^8^R{xbBIaOi% z90zHMFPWg+FuRTL{dR38WVVI%P?a8_9uPyRBu=%fIQ1D#a z)*>w7oxzODGonZw6)v%5FFD7X_U9?SenbG1Jdc=9OtIRq2#SmTQMMM z=&J{xpsvp`t+gjkRM`pM%f@2nz#=uhpR5+S^0J4BjSvgKFEk8LNU7FSdqL@?HuF!; zy|WkLvhKzJ3qMza_kiJJ0wYRh%LGqK8}}%LYNCQb_%z%bka1{{sfIb)3juC(DP3N7 z^@&N|z}dY{rZ%a+W+q-!PCmAI?hDul@pdLi;Q%_#@xW9}#dpq`QGeP|dtyxd45&@2t z_wCyXB;TenjnE342rkHdAxNy-Pl)_;{ZEFEEhg&`2{Yv!$iEE*4=pBT>xzT z;TAiih9eCX-UwsomklX%~T*}U|-6Oz8s#w0$x_RV1iYT1Gr?(i6GKOM6W?j_Nje1(RTMwD2Y zvVla9O`sDqxQ12jtY>Gr7Eh*uh?T@qmmNQW3_1q2O6aJ>LG6uFqSgtbo#mDbu{;HU z`DlJMLA>jWXjJ@{D|I-o2#5^aVF3eRvrSr34o=CqDz+TW@b`>sg4K;oA^p1&s?9FD zvyp3Z3X!A4@3R@#nRpdyEMApGLENQOEgR+giVTCCDM0XWBM=*83e21}qLZjex}hev z^Lhodm}2QKppq{)*H)$lTmKhx)E|m3rtxW;`yhms#QXxo^i;l)x^s_xKb-j5d(z zoGULFwi9@RAl>d92;@gKHP?AhPZi3In^0Fv>z?4E*PyfuYO>rn?OapAdS?L=0e0fj z3K86Ao!OUFIvjBB>A^fHxkl9kAm>Zmv@4(UUGP&^_?x9x%$;dImC z3HI!AYW$JhjgcjhS^xCIRSbFIc*!&G%@}y=vUPnHRBqx;5U}Y)b+27~Q6wXyA+l_A zrgYnuFrTr8i*}}$9t-9?<>&(vXrHT+9*{Dl=vwq84?Ti1-V0IweWrb+ zCxdkTih9+@oVFRWj;5sI0+o57bc2X_G-^~CMq5Z!U?G-DUOUGwN=rVW8caA+R2?y` zOyaJ7_^#vy2)pvQ!iKG|j(bNEud4*p6;)Sx z4B-nS@9e0A@cV}kr5XU62IX&?SPJXZ(TRew)^m-E>pfJ_S0hfVNiqN49H``$iOWkffj-p|t_rXYYcWNzQufvn>~ewx3$WwYqbk&SEaHii zyQ>9cFH82cI-fjFElcRzVbv-k`CtuAFu)53+6(#kR-9uRt>hyYpUoGf|i zz`g^Gh$7YL4A!dHc{!ZGOF<|NhO^4Fwvfm+3#6|`yvK)8V>&QMLiA0t@Q8Khx`bKZ z@A~>Buh9;;JU)!9nXr{_P!hF5`pAg)s!E&?hGzAXc{!Ke7B{Z8u}{zcqCsa&$#L*h zt!)xQS%`22t-^Zjq?5KcCB^T7fSA}UUfUB@U0N_xZvfIPP8bMpu!;08(%hZ2&WOrn z(Je@E!CBjnvvNO3n%IO}KdA*72DVi>!&l%+i5>arse`w#)^jYp$|%Sc)cGE>yTQwO z?dEECGqa;Av-jY7UV3#T&U&50wlRphqZLU{;cmF8X{oV|HDBumuo4JJM4D#!CY1Db zT$Levifha88l}@1Sid~C}xtiR;jSN(P9tD-ssS?zC(;AT|l?_Nm~nbDE8 zBi6cZH?eb%)gr+V8zW@KQ<7TryxFn3$la?()&ZM}gkd&PI21JVX8mp4cf{bqRd(tc zwy$gI+BxX*@+$XP^RdbnKt=_HPK^l@)F%*ijpP*_QK&dAe=a$(n^$p?qWMoFrTV&= z<);cBK0UHD;>t!Cj?rxhJlB=XXa4r2otI8TZKA4RU{gCvtV%(*anY}cZ$$g%TQ3Rl zV*`5EeJ*I|S2UY_a#XFi7iA*Bg|=j-A`*5fFu zj^!Z4JK85aA9@+TeWAcCzp)H_{k4`j^zl>FuQR(sL=T%qJk6K&)UBPfKD%=JOS`5u zSJnm*0HJVdr|HS7S{V);M|!GbW)wl;c0WXyMR3qlBT{TJOnxMp+4G#ZQ;Pwphjje% z)3VnJmNhH`Hr{=ynP9_J?V0{tH23#sOsjPge{mcm=nb)KFR=KQnYuB-Qz}yX)Z{VSZ;W;-mJ19-42LAN3_tuhGX$w|K`2a47%H->7^6vWzwWNg77_t+zyJb7oF)2FfLaR*XAN~SP1-(t z@y|OcAD8{xc9E-Z5{3PkNx5y$jl zLkU52ld{cwLWvqAbZlu>0sPhaUaUn~xDwROvP4>QmS+T=%=Yt5)@*q&1MSMSs5W87 zqUsw-pj;~QTs6c7sqW5Q><8PcrD9oP5X4vbrid*?h#-F5$6Qt}40RmSw9T#}$*;yO zwuSks{1spIL?AsW3OJ58iDU)&Nfx3{L2Z;Ro2pW*=mDCL3 z;t?a*p)5e}M!D0Qk$`^fUrpjTM^CAX^sX`eR9liv0QeJ~s~2Kj)Nkk4LIvpXD{H@Z zQMzT9V@zS4f5v~fjTw&n?ImIkMBrz}t~;NjvMDnIfS7pM47}zynz&$9fD$-^v8Zgr zJ@3o9-R$wiC(Lc)DN4TSv3S({;+h^JJxc{j^70Z)aQNI&A`?2iBYHv@&tlURtylC6 zg<$NHcGLf-4UDlPSren${I>|F+4WqEyrNH);CS(#X{x`;65yGL0pd+2wXQHeTT2|R z7qt?}DNo}4jxYVm&(tBNU$)g~M@%G3Lb|>VW?TcO3pUA1N5{@KBZT~cV7n4)Rw-$%I#zwZPouK}^%#eje}sy?_@-&t>vj{;ExKM2ejKWC`9 zz@z(!!0&RGR_4gDw_5nMIb3i%%$MmxSB(D5UwxoT572WiSGsAaqg3dUn-mzJ=qt#< zTuC8Lrt7W3MI%~922Rcys1(Q);ED<51??w02wn_-u1Q#3Ci)i-%B32usXecDM)7?D zG&XZo;OYfZz@tU>_>wQ(3W*Ql0q48!9D#UgIoKgtj7ib(Q0SntCGwh`ND(Qw?UZH> zRrf1X9019n>z>98G~U|5;6``e7AyZA=|D-6b&|JvRo$*V)RgjB3ktz=TujSV3(-{3 z!gzn<;}~0)??Gs9lT(I(KqEG8n=Z=yj5qY#J#s9gc?w8BsmWTUyn#!)oo+&p6dF}N z4MzA!!U&~}tyDFS2u9gz{Tsa*HUzw2I-z`}1Yl0djGKISb0`0}um7{_Fk!n`t{tza zeK=fnjkR;rm^s^Fy&mtPh~1;9 zB`0~qOv@&(?#tOK#W8qKb;-l|7ka%Wu`#Zn0Pru6U+Dd>zvGzYT~t$a@14>_ zy8va+M<%`95MOt4DWbctv~n`hG&eBmKi5AhRgsZ@Qynd>NLpLokJyZ(j2ltj-0BhquV2^%pcJ z!qc1P-NXPtdncI)x^b5U7XtH*IDIbGzyrQFqVDIu@4z5Pk0lPLcj|gIET-49(hGix zAo`o^b#ElYK6s_6-c#~YQfC)!7DzYjNp@`8H>m!T*l_=YTjZS}t$f0YXJ$U1rM|nr2VSJV2%QwE@?`52p3^8RS>hN<5M(X|=lYNphsNylB6j~TA?Y8bF zWNS`?E>F7Opn3dH$7sGwJyu~rnBy-uZpyWS=norE`!q2FHqI8$ksGxQV>*F79u91|7fi& ztXyd#Xdn`Rb(gIXbiWhLz3KFjMKMRKK1UZjP3i=5@xn=IWoisAP!}Zlz&jw)#5ahO zJXgn?zJMq_hTh^s7IKi&p2_wThV5Q5>;ma9z~$`nm2~P>_CFVqCr8u|Q}--iSO12g z))`Go%Nuk7u3iCV!g;ZJG3bQs-Q42sli{~sW8`0eI8VMHrp=*bc<`b9?HFQ-+wD*1cSWr9lj9ydDN zqT7syyibezXu4x?nJZk`ewG38hQoG$%gt@JDjT2ni)YZDi3qlaHgan=Jr z(&{llx!)h$%-Wh3X~D~^XNjs|vVC&j_F}nSm!68GmX4aFYaZ;q8;=XHR)uShr=Af* z#lsR6qumhA}}@mg>1A9%@CPVeCHnPcd)OEjVn=? z(+l>0^xB-|0WCBoL30D%SUrE=s|JA>uX$eq^*7Rmt8M&`qAu!`pS1?;y#oiO@*STY zJCv*22Da}SQ9)s1gUn2F1ycjrPUaZ??zxx2_Ob&k3UM5}L6JObvUQ{6UEqq$w!5 z5k=0Td${kzPNF%8Ng_@hXt_gbqeMA@m81=h=2%5;JAl!JDWPu}7&`P20lF-BwCno0aN{4X2X8SMJ2Ic{gaA>Sx zD9Brza#M-?TdJWQ{Uf!MXJfPr#7-hWp?@d@GCZqsGJ8#PRnTsuk*4oH$yIoz{<1KS zaDXk?$ncrDi`s4A?aD?WiwBLUe|;kow^rTo#MUmNyMjoPB>nAbW%AmmqAB>tm*Ko zXhWT+kjUPPK)<%{?n5j1_2tVzZ37+HPu)u=&r59WRtBLe1`G>R1%3J`)dAz z>AJr#0Y(;S-#LAST!1b(0sr0#pago37=kQ^4M2E-n(5hGiFdD~$@0ir5et@I4}vme z@A9|QQasjC4>3w@pB|s>zfGKzdr!_dlDM~66G~-zj-&s@<4g}8R0!^>odG_~S^sxp zeenheuQ}MJ4)UE-x1T`^05HNXj`730uiGUjTnt;n8MTCfU4c~*`YH@mZ(3=CF5M&` z0Y7ps1sW%XR9i6IqFbLbb-Wv++E=w zWKF$GgoZ8xIIguFl2EXw-mW@gE4UfWuv;dcGy(~J+N9h|_7g<`J;`i@$YL8!ynlR$ znk6g9Yk?QvdwRCvl{qqKebp7d;^kBVfbY4IZdLxxWPoM#HDYjitn7bin4d{5Mqgj%=Nq?^2J2Djni>DamQDgKO`%LB(PXU@UZ=Zv=~#=l zNrbAfSixyV@bcMX_{{~EV-DMhMspa5dEmFMCPO+QL^y5+WB1hig~6N=3REp z8RPB%E+?%3(R?Yq-I{mXZJ2Ew2R5lP!RGdGR`LwvHe?N0PKe|EX(xF-BP2SE$XauA z5GOCs`Pn%TKnA+~R8Z$&rwnQ)2Xl>_yOf%tNE1#um9%;~@h@-eOjQh_5fa3c(u~(cS(2QAWc8aM3)u zsijh&0FKeWSpDS8BWdcS?pMGgE37ldA}3ND-!9KR%OYzW#ii+2T{W}U?m56R2?}^F zwggeEDhAmZXdh8Aw-qRZ-SmTA{90{jUi;bz78+^%R^ePaj>UL)H{#MZ{5eEG#RDR* zIi_urwloH9K!yF5`z4Wa5-asbOM@^86SKVM0OIXAaL@-f)yNAkg1}jCiA+=`Vj#%A zu)yL{!KM}d3Vbp@6RRn-iW>%oTOmPP!xu{N@_z(EX~v;1zhpxXNY!}>qP#JFM#$#>qH zjnombCfT_2aQsGNaEbLQfBN`x(@n{Te0hA&)`nxM_1{$M;vi%9h-ZpsZXra@YrTK{ zdqa$Oq1obShM z#gA|}%zr6oug_4Gurx`HsfM-Z2Amjz-Tl)J35VQhYn`69n1gdG*(`^^rh1DqC#Bzl z>5zw2ONxarwwlQ&iXI8z!kfd9K>sW~N5!bH%uJ>Z3i*dZp75MEk75w{_Z3Y@HOs{g z4v#wGuK;TElapn|DD2Xe;8SgRzLt49`oCBB@kvX%ge+DtIxAMBs+ zG}D?iy_60G*Lm;N;SOaSceSn9Frf)w5^}Z}K0zMuzqxGk3n5NP<{1Wv#MXcJDW4X^ zE%y=>%bbN8quUtZg(yyZ_J4()i>+E#uA+hh-$u>BTrl8gJ=fm_Mikt-yW}eP!SasX zzbX+BpvGt7@iu}Ls{5PULX8=7dBqQ0XsWJUBdmX-BM?VJ&M@U=_;G$2 zQQ;qH=cLFQ$rye@X-ugJ`X|4#teDLn>VL`%W%`-?l8fta3Ey1Vt-XD^4FM%XsNG%| zZD-0^V?XcVX~>WP#b#Xv8SF-Z|1blB0`*@oAna@~7j zP4K%AQfaGZ*mHqB2RuRNo$iG=0FOwkKGS~7VE9hqOq(CwJHy)WoQC{kG?()oI=~JMO@Pf66Q+Eb?7D)qTd^y>+4oD3H+h@+q6UBG{@|E@Yj82LQ@O8HGhBjzWRt)?Zl;wj%GC z2e9%o9i}jF2SxMX#~y$U!AnGhAsZ5u9h`eg^aEP2jO4E^I8=3A(MdP((t1of`CpEe z&Zm3r2G`UpGH=*6XZh6uEo|B6TJn9lVH)324Z{a)K|GVE zti3$(PXNp_B2Pu+E9hD$jx=riuZga9J|Yt=56)EQEZnSwgoFy>m~U1VYV3>bQfNY* zn>|_VD#Qovw8$B)3sv(KqHg1Z41k0lKw2L}-vLhRrgl-nVHRXa=sb4huF(_PXnU*s z@`hau=X)}gB}xX%1BUBui8c&Jl{Xv`6z1!Nl06|JaXL1u8LMc-BqEZ+^u#~gEw{a$ z=ulkYQk||H&(=|)MF-vvL>X=Ar7bX!E^7vqTM)?I9;#8F-N?@UnASb6!<1nZIau&) zx!zBTw?7+8t?D4#B>j+~14U(OnJ}-N4@td)KZ??t_=nJc-oSXEoZK8~@uWZ7hDnD_ zCZw(l+Gi?IbW)XKg7zbIBJhRMNC#=;ISl)%KT_g}Nynt`)Ssga(&Mp7K;SU=WLBOY z;k=E$A?ZpHSFAml@<@X;zu?M0U=M8P`>e6WII8r(BsnwSlPCLvsm$P5W(w?r=J=*3 z^0dGnU=qp1XPAqsgOnt_9YiHL0mC6Pky56|2gzl{dms}hL|ur(pKv|RGP*$1;KmiV z*7dT#I{a$GhjD6)cP3)wy=P;TL(EApd#$|~YDE)W6P+Rwmyn6Qvbk6qDtVS)z!)Io zvv!1vim#2eCV`s*ld^12mku7u@pIyLD#oidZ*=-Jw|i0F)aRBQ%`6 z@bz=nR-|LIwFOvsaMxb}$mY2UQ{_dAV=XmL6U&4vYj;(XWg#8F=0Q-ouPV_@*TR(K zW7`2%!d3*B2YsHQWu~bu<<{XFR!rUxAZt#lw31(cFpsch;$yoMWpK^Jm@o&Ao3OIB zLc24Vg{2c3ow%p`lMVUM0by5f3Q=hqUKM}-m7`}`)Tx&oIhB(SCY~*kCwIJ4egP*D zynBW&gpehrjhS&7Q%guEATggI`Ew{RX9oyc$Z>76pJsl>a~pF7SdUf6j}m7o2-hfg zN^}5Ea`S-Z)};A&P9!@I9QejPQ21U8lc05T>0I1zWL18H(d$%d0_JGV?cLkxKcvl~ zi@l!bJLC=)0ZnIN?(SUJx$)UCVImJ_W1FacBc7^vx|d}I@(S4_$6j8E~R)si!2huEPub| zRD??gm>&eC20yZquXY|}yKln(W%F6vhsCo2fFf?qiXLfv{E(h+t zSL{fr@~Lk5n&d1M{CN$(;AMmqOh$@tg-o!gv+WY}*Go7F0cNebM%SH9+LXC*C8P8A z4#&Q3ucO>NjBXa3Nd3%DUZlq>Ag!35_0X%Qnkn{bCZPoH63}+A8}_pvRd*%GL|{J= z0UB2O&V;Op^y!Yn3^|Q?{{Q^k4br)0X_~TSF*~;qvk4UdUYy^yZ;kHpoCqEsMkhgY z8)I*ID$KEna9{0YPWSkf^Y0J z6TS*Hp1JG$gFI&8p1wS7p>7>zNARrtSU0Q$=|=p7TTrY|Gf=4u!=ZtjM* z&2&Zt$M{&C>$Y=jBSKrJL+8})2}2z#o-6rOPbV?8L_(T-mLYxCwD{pP($~Ne&qo%j z=jE|_mc=g#%*t8H$_M6^zd@Jz&js{QB6>PysISCKwuA(p;(hDNAZD* z2n2S;Kq9uYAY9TH#83?Wq!=2mW7iFs8brH^w3C|yu3#{j<<14nLu^`4$vuHtCYb8XY@mK*gdL1Sd2kO}t{JxNvg+O8xT8qLbYsh%DzZr6(g z+Hh~8|HRg@QE}Eb&^R--4&o8)`5nt|8mJzo)T=pbn~&^^@Fbpllw!{foU9ym9|}z~ z5Q7Iz16A3LhR;miG>L#?A$v^T36L9%b9M9}LRH~;= z5je_^?gZS!K7SD-!bDY-ojz90aJy1{T{ipPpD6Yc1yUNySkj&mGA4|ji#6P&_?9Idf3Ru^c z;X)w=_Z+Bk$X2L|uP0d}hBDV1p>W=}b7J3wxV`Xn)8gnJHObBB-owUeIl%P=wKjHt zOhx)yZ4$FGCOI(mddE+_evji-re3yp>g``mIF$1P&B+~Mu*gkVJc9b0nDvhXotn*F zz^;@>0cHZrX_^`4R?9BHjKgF(1q{{V4uD-L2Ee`;5W}4A4SDwY31`QkUXlZ##qpr& z>w=d1K_9x(Jq4qsR;&5 z23i*?iMNIVIPVC1{I<2SxVMHnIv(oOXj?bnPdcm@VA5aEzSpy*ziH$VQ0~6?=HDpw z@b|w*x~Lt0;=nzM)m@>cZxs(+Jrzlm$8xp z6PKec0ylpb(vNYHX*$WojrHbq6q^t0tbwv#qGrT;_xq1^l7Uy zy@2=}Q^Bp7YYc8KZj&lnqmN;>3sY^h?;9nsOxDYu?Uwb$8W2)j%sroBkD<9I?B?4l z$+HrjqN_Zw?o+kQ!i^g5>Nc(z>o7%SRV3NWtdhk%Y~~B>O732u&f&V4?zFOVX{3d@Y_J%{C;*0^=Hq^ zSE#z%DwBX^5}%HoB>sz%$ti|dJ%KsB5IBG4KM%qtyxa?-xA1bGAEgRA$fNZ#P0H$- zFjFE19^MF4A9rfSu6+vP7Kc?{+@S+@k0oG)J*SwECtwfx9Z^-QAv>Bt@3p_ra68V* z1GFKYOOB-txZSOKy5kqd;K{B(&Xt!H>3AJ&Z^W{!!b+vO)?ZSzR^Q|7s0|O2`YeCn zZ1N19<>_wobLiBM3Q|qD1N#E;_Jj-4Vh`VhTV25R=(+uZhL{xPI56r-*k54Z)|aZn zB(*+J(s~#rv0)2^nl~dud!od&tCG{QM>PV<)re4wK!62td!aAZ$})$Y3<-p8lQczF z3ME;T?qU_A1oQ~3)BHM#0M%_?RA_%4mME!8^!^-aIfwLuJ(wlqFg+oloNI5IXdVg! zk8;ImfI07@WIP^mz1_>Td$r~+=G0DUI@+_37pPq4yEI0zy3dpes#KLu*Kl71!F_A$ z+Tc#X5w|H{b=L!%`dwY0n88izYIYkwgy~M%{9Az32p{3&VZ#{JiN`QutO0*0GE6lc z0-#1!c$F$V@O17m*wO7;%e%bw764+T?N0;c>Urd27O<8;gJCpihN$enD9#q%_U z${3adhdns2v#wjI%|ewoq|!i?Y6Sc206f5DENWMbps?jZm_T`%%UcayjkobkP>uT^ zER~mbG+&-isS6qyKrqF)R|0>Y6w9`5>`Y(Ns8B0aAc!i=kODaFni}XOrmx+uZEPK# zM{V;b#2zlZG=yFO^!b!>>=GV0w_0c#0&jL@rEAy_J;rrRJyi8RAI44i)pL9BA$5{| z+tN-46r|mQeW9Ln4|5x<#Tzq0+Y;`n%_=WU0h`GQoHsNj9u%agsjGjN61^1E+hl21 zDvTC7J$3$!$XOZKU1e4Y^e>=~L6r#y5)2CX{@fr)aUh750}uPnISyWQ;StPbD|h-R zD~NMXGAsf7TGKz&SvQARC+LE66t(3L6h1~Fic|LU~*p< zBV8HjS=Ihi%Hr}?_oH+Y8GwSs>?AyPJ@0hBn8jePJtZK}Ymbma2Cm7_V-`d5fS?f8R zq5ehavG(q~R;d9Q#GUy~=w3UD-G*HTI3_UTHo_2Sb6tQ%Jq7Hxda8kFM}xpETqG5` zF>;{$gYM=q9>9Mx$dqxo=GhD>e7#2`&*hl1rhkzDN(K5o!DQfd7b1h%p()jifvB|3 zJ2@mG-_EV71bTKSomfiWx1H9GF;S$p6*PmiO17yQI1FJZ5FQ9GhKUcd1-aW5=^b3y z!$>vp3{`;!K)fWouTfB_pc3;`f}7AT*!ZukWHlL{YX6~8Z9x*GjTFP zLFT++6K=cj=XYm_5|0|*ZSq35Ju^%r;NEz$%VM4Jq%ce^#}O`m>)(=KzJVLP5AvGt zs$nH|!N7dWp4aLaK&W5dwb}FaJG%W=2VE&dW{K~EO}i!BtNKC=;Ps|EOMVYDSTr2! zUKHM~`jCGMAsR`k#WG40=p{$@OwbLVvr*5KFj{#{7r-@bJv?lMM<|Im&e=n14bE-C z^4meFmb?$gQArE1&$^@?;W)9uOIXV#78Y>*;utlrhyg$s+O9i=QIYGu?Yw!7E~2&C zgh*l!>j%EnBH?gp(0#j@{0X1`0d1NbU1e@$b99%_Gy)j`GPmh80!0IV@!UC=l*gXr zwA1d;TBLW5-jrog8HoPL|P&KOB!Xq?Y7#yIK_BHkb zeN#|RP~oOEidIS{z*<;;2NLFV{t9+?As;guMLnP076lYr-l)H89C$OhW08SU%>wGP z^S6v+RT^j+ow2RUTEH^fC}=Y^m(qfU&`UiGBO@^9_^lVo5YvOJNM#NKwkYmX7Q#E$V;cb7cV@ZRJ` zJsN1m{))9!y&M~Vq~EK(pFHf--8J)c-<+}lhhcwmIMp}vBF{TeL^NY|fV+mcl>L$j z_n1uD5vg?q^cvE&QD{8P*EfaIJ#yZ=v$RLDbq8%*+7ix}?XJPu-hFuD+HZehaP-to z)Ix4DGdCtXTC0#P;r`pism!}ONWFHDwPzz7F6jVqKglV7T7YpUjsE9$^|~Le&0bAP|iD7T{fa!!mJs(o25Or0n#A|ev+Intl}*_x6-2@|5{cB1 zkhK1X$v>wXAVuotv7DEwlpmxLap^vNy8AT!mH3nqAOD)qY%%c3uujk*e-LR1D<=8CE5^kPAN}-2 zw7XLp#Xfh>Sr}6hMr5)Xc=uj(KP0~`Re>8=8c`lcZkcZvtZz5kWKZO?ELL)kiw8l}{ae zCx}bERGI#!YCuU5qZi5=R#_G@me8P~GmXG8*mdWDM-NrGATrM@Ro6t;wSFuXsxV|# z7(KTqWpj-`%o-O%;XP`=)Kt&tJ{Vc4LRnt|cx*F*M}qpzb>2pIsM-~+pQg4R1u13+ z+qz^Oe`+kEHd}TF+kohbU-g27B>`6@#fO2K}!RS?A&VIn4`v@kFT%_TXra=oLqkhDjP`?(x zAVRdepAPr|@PHqrR^VD*;}MoBaL;uUwGUrze~5*X00SzmYC3%Ps(_emIsNxGCQ2>k zTsv|!Ei_Fjg9h2Szg8z2=hRZT-+OsP!?xe9Wp7)X#`B}8&S{eRe)_{lJ%Q{DyQs4y zI5+C)3sLV1LcmiR@CGxy$FWOd%1hJBdsnfW)%}#d^Cll}Nc~i<<~i96(N`X)p43<> zf50#W#42(N9BHT!#`{!o$i*>jH55o5C%zO}bTJYjmfAY)mOtt!kA+Dw4T3S}!ZXsckL@Fu5y#J9V-5ph>{$85saayUq-icCEooNq+xwZH<-Pf8E14 z@(xfQM#K6?XK9&y$Y@qyG+)QVj&>iT#vLJkwho6=s`W|s6us^Hu% z%Oc-N+3h-8>|sd(zg1*`{qG77YJ{({qYpsgyGFa$Wy$9cwzT0Z0f$xKe@87=|5$at zg*4@??Sycet5>x;$cvA<&TMU1f^IXidUh!syLpX;I0dxHJ2Kk~5}Kxd8aEHXzN^d2 zO8`$6xvX+04i?gYB&^9s1D_BW*MLB8hAiCE2$lM}(v`9!MQ2|elY6fv$$AK0fp|zf zRoxF?&9SGlHYZC{>i1u-f1E=OsEBFk^Ip0J(YfS+mT>ied5C$I>r9$Pf9>wS_|&*? zVM~?wVGio7kVf|#0-zdvryF>48{8O5dE#Qof==u9g3B09qs09lQXf}?V?EpD-hVVmQ6SX5s1XoM7PmH_cZY6> zbn8a1)pCejC;sw-f7X^V2+OvkBG0CcP}_|O!VqlvZv#+|_D(~wA9TX@xS2h)duB2? zy#=|c07g3Xk2@d@p#NkFdUbZBn{beX>Ct4*%LSCz(^7=_IA6R)i-eSmopkrlm4NJ} zIola-yQeFj-BjfUnPz~3=1n$FsvyuT%DL^rZBo@_t)(j;f9|kf@vz%xXyA*N=J69! zZYt;I#F!Hyht9_^6+0ypnoQs@yx70@;+R}nEtkL~qCwqI@^{3*rqRyk3z(sD_tV%l z(lm0_WcPRpZ5Q?MyMaKV)pg1=a#b7!a!zK?7SE5LZ%6z0Z1jANHPD)e(QaE-LiB?R z=~K3JI-f7;ZB|GbMQz>&0 ziKZ1(r*#yA>DqsbrWFAVdeajWpy2H3>7|zyS2x@DlI=v*$y#q#H6FH$Tq^X3Sk88a z*#7j2x)!$N@ECdzVB;2VkfU|K+bKXbvNhQ_(3BL-O>0zDANA7 z30C_775;F{{0L_H$ou7IatnHEAxT05iVxBxOyEHz>}i*i!QbHTzmLa>6qheU0vrM{ zFqch30%HY%yQKxem$gFzEPp08d76BkF!hv}KXFFhE+#WvwTLHIpM89>*i7^$Mtq0( zu1gl##3~Nc#lPSXSQk>x!@z|Vi}l3HXZZ?WU40Il-2oMz?dbQ+^=Rk{vN%qxUo7#< zlziIB95=8)P{$K`nXMKa=EtOtx8y^V@1qnKo!aIw*yfvUKWvt^MSm|~%&eHXj!n5s zX57<<@9Lz;D{@WhO}%@pWZ5^#cc|xup*im$Uob@Naj4Kjw|~3&>EIG=FNuq_B%7in^){)Rhwz{0QSGqb z`s-2-2YED5N8vG$9)In0u_5*IPLg$zMM+*=4}%%>H$p&conbJhlB9`S6vuK`8{>(} z6vI6x2e{2u+oE(Y$#I)N>cP$kJjk+$RB{)UQ7zXbO{y9V(zcL1%49_edftCRqEaPc zW-c)i($JDQhGk7wQ3bytAfMmgfG=Fo5eT$X_mjn6mOTLIdw&1|Q8@)5*|r~8@%9l7 zoBq1^`)Pui<4{}tKz>6H-~$U@pI^qplLULzVSv$Ljt^dwqH6=_vGMkJ+ouOy=~CNs zl^2|bfM4Uq$Eb5p06MvO!Jy!Dg43!XNw!O6CiA+2bk#{yO6ux>!G-Ov!0bAJ=k3W* zn!-OlS-Vs1cYnL0tTiTXKFmqAE%xb}tmU^{LYyRkNg-(HK8dP+Mb8*#)D@zQ{g-}G zv!E;3=PQk7NIP$m2{ChfaNb2p*??48F}nJgq$ycRlH_r^M`Qww>utNNl+_NFf$>HE z@w}KRiycONouLlnODj#{q`vwrzwTvKU)>b>w=x4m;(ssGkcNTa!h$Gl$|6%oro~ed z1Nbm<71>5p2(b-(Z5^;&am5{88Lih~Oa=9&EmU~#6%6N44-KH>WL=JE*VkCm@5cb; zo}gUxfCkjRj_RU(CTEa3Kqwm^bg2quQ>1Azbp#kBLhFcrH1W>%z#%J>j5Qs5(W`aj z`8O>ngny%N`X0?cChN0I5B~dI!M}zH1gD~(V;Tg0!?NTZWTMO=ohCho5HwKG1r1Q( z{J?JcHV6Vuh9$ykUrEF#Fb9&ZD$$p)xJ#d#T4|2#tYVt`4G}q)&n0uy0(<$$@XcTK)V|=D5#LM zz!ZYc-9nMY`w}W^RYtLF+#0G82S^}jf@%HRxOGYNKjJ^eLA<-~pbzb#%?ZWsg8U5O8Ok}=8^0i>1zBtZJNQ44 zB_F1@R+ur6ja@7JA5-N1mlT;X0)JhA8AOd6sC1OX>+)h+MVB5d8>s9eJwTp}ugb$l zF34@?A?r)#qN?@Gf<%A_q3z`2^hdIHzegyWuSa#{LfhqC-@7QL%(f0WElT|7>0;DX zTu$Ag0PDII1JyUUvX|IxygPW0RSiQ}3Iuju-$3ew_X8OXTpGB2Az>I4(SP|unm$cI z7TC5MS`Q!f5YhBv9ePlrenZ~e@bO@XfC_ymdt{8Q7T@IM1kN83@-x z4j=UztbvCQR}XjZwZgw7D}SZ%ZO66tusMg$qm^BOS`rE;|Ms+pfg7`bsa=8NJ;7N| z?1jdZY7bF}Dn)Kc`ll5{$v?LepVYOUC%U96(D&#D5ECCw*Mcx-bT+S3`c1x|+6?OQUB zw=#=}Pr-Y55%{hTFFacv`ED`!8Gil*qu1>PWo~41baG{3Z59e;Ze(v_Y6>znFd#4> zZ(?c+GBGeUm-0&jNPoH&eb-mutyIUt!Ic-k#h0}1apUw@lNURqp(NO1Ly-ze$;bb2 zex?7|4S*Mrk{sKUPTTP~a!3ICw)Wb4L*Eg>6cPPXe=gP|f*wcTN7Ot;^~Yk3&ZeV@ zUNv2ee)%oXFQyM8yNRNJp+E>UU5~tcH=h0z4uN$M<~#}otbdp;M_x9`=K9qyzeUaN z5KEsh`<@CPM?#|M)5yE`r+U%8Zj8dV zpx*XwwX8070j014M^Z1E2L5gDZ_c4I0%Re(5i zZ0Bv`6XR|_!2FQ2qxxaFoc{|>a)ZS=<{_c=f}J`NqJN?vAAyDQ@_vlXk(>!^d}}NQ zpkSgA31FGNY?wwEr4t1f{IS8{+EHS#Oj23ZP=0+YI01`!mBAXCtQdY`h z=m3IB?0*2*pqJ6kQ{L@%4QO~iwTrs^X+!`{O$ZpahDuDsD6IXjK6ciz1_5`TimPog z<^d+4tEbA-It@A%A}m53#x@(OxEMoz5fX6kQB{Myp{>NSDw6CGpt#q2#i5^ld?f)u$yIXC0It50Qv`?pgdD3f2iq2$^q3z+)cm_=N&jX4!alA zt1p**$v}~!fxt<9Iv*S^u?#zQJ^SDuPJeh8-}7I`oOm}MKMw1gz=12`=+WmlpC(2J z3e{4GsP)~a%k$~gr@stH-^acmMaNFApI=>EUph>6#PYneiMS;Oydj3ZmN?{uG%o#e z;}U`F#M%->;8~xSI~=IRtW2_nYVdmm6LZt${+7Zb9?Gj44p!=<7Xb6=H)S0zw6X&<}?TY zGcjbZjp01sX3NC(&rwfNK086GH9il#+-b+c$YKJFOX4q$6lt@34Q+Uuq-*IVpVrQms*<^XZq zCOv6^i~Zek0X_M)C}2AbUgdV90j!pL9`VXDJstnajYF@lulC8HR~+vKp?`)U%PC=l z5cgjmNU7e@Uv0q-tU67l!%PP4q*ZRzBKbot(e3SZUsM1`9hU>+0P|VX7%}PBqmh|Q zwaF;1%-@gwu`7tM-@%|aLo%n^$OgLLK+4b`c$C3YzmKxM{U=W@$VJd7?5z@*EA^PB z5}l+PXfe9@bc?cht%vlaX@BOJ-aBE8;!t*pHQzdFx7{IQWIJgp310lbF#P@2pO znAl+0*Ovwvy84Xbw8(0yfS6b}8LxA?z7((w?-1S9Lmvp5EC_uOm$Z#P zsl!pCEU#LlPEb;zrFs}gddBfXFW#n=8RdOn5PJ_ZVWCd6-qa0YsYyV45FFLktOvuI z3j7(HcUoHinu~^kzJG|aT0g}dDyegKb>}^oXg+4T@(SPEY8b^Olmn0mMZ&!k!F#mK zz<1Ksw_0q5a=jBk=UoD>G|gY6+jolX!H^SxG$PZs#g(`iS%0u z$&UmTdxYdi@(qMUMN1wuvUjO(W+nz|${#S3u*~!}Vj89%4SzXMTyPvd5zNQUm7>j% ztIs>XIq(EM70~TK?m-*u2@qZdq>gG4GJ;JrQ`?TFzUF+KW)H+>{XFnqhw`ted2)*WuZ2-P?ZV<5F zRVFRw;Tit(kQaS9qQ?pcL(jVR5YtuMzg>o8Xs^nNzUi(nmn-*1!sp$R+B;zVH&a@D z+yV=R6kQbb>@%_DiGzN$^K8g%q0dx`;%$|$p_(t^RDXY8u*&mNUxlMaKUUv?zJmjGgUiJaI1swdw{qZ# zF6Lc2SGtXI(W)l|SO+6ZbH6#!0&6`e5VNp!2KdmhhP8RRv$x2R^Z?%=vBi3tL&!k7 z{US(&SbsDVxjxAfc&!-tpmq%~tk9>pOnW~*K;8ibuA)a1nCZJTPF?o4NeoOyi8DKJ zC|Sm)L)_jFJF@&u$#LqYfrPV~YGRm9)1oDCo7AC*`Z)3_ZZyPKZHzbyK$v}n}jsi;BHr*a$mq^iHr0i?1PZlGs9{Ai>#vE>;gUY^<5+t&AY;OaNf*PSuPB($3T`jsGW}z{XRnsC1+7}HXFvRs(1+!ArZ#yj@mUgvY`LE~ z^}~GmUmSvU84rRi4Y7Y>xtTfDqFT|XAAZTq?vzKd>#Ofx81pQQ*zz=UJ~`2+Is0%B z6>ad+i2HG*mbr4l!^cz6t#|CFygKG3ExNSL_pmL|+rHZ@WsAHa2vZ(}Y!Srr!=b6A zbpiKM*VEQt@gJ^Vo{bmHO2>uh@S|u=XI<#UEHKif$(w z_E6+(UGMjKwON!!C0Kpvin?l9-AFUcg$vJ@c3_jT-}8(EAy2$4(++(6_-^cZY57jux1kWvcERcv{t6@8%UN zI<^tpdB(HMk5hjqKbBp~x|+pt=<@k*%YV%lJ|Z1RAB`pOg0;s3T}fd?=u}wpl5Iua z9UFn5=JFfeHU@>4COk7pIORPOJkQGXopWy4YL4i*z@l?3N*vR&LyjBktwbZ!xKmbI z5nuR-U1ZyP=+=kpN!)$z4{5m@M>Zgb-Sp|m#ysvL>->LqH%U2t9TIc>+}XRjeg15P z1)rxD%3Pi#p#=83qU}T_0S%Z|l~`+Z63{I)FK>PxTR}+(!eruMfEo={;XZB-|7fQx z2>jHPT0$FP5#6{wspT|*RTn}jz!(S_CkNt8Ra0`DW9Iw!NbIADE^i`n5rtgC?-9Yl?LTj3VWlJ?Xx8GY8-5@?rjB z=7$zXx;$_*X$JP-${yoojYL`3!$0lz?avP(Eyd5+eEl@POoJZ-3Bfa^nei}5P4pG< z=`(*9DqwEFQ#TnR7Ke&4RWrFjuRW}2X6 zGvep#yX$N3H&wV^I7UhgORT!R?U9o548J#LO(GCeiS{2KjX>)4-FVVWREFVRS+pu1 zeiU#pl?jK;n&hjxLPgb;%8bs4Xl3J5r2T(Rw!0VK+wH!u(Z%7U(Yc^qMYR7R*Y?;` z98ksUvJh3L5DY~BagUCt5I$}G3DJFIjOy}6<{Iqf+>1`#YKX+@O({?P=o^eewkd&D z9z_e=+K%e`SQTH6g0t7hLkZ^UE-VUM9{HCRW$FKIku*frK?0m)QEp&fj~0LA zoN~a&2wafzBpJ{r;m)~{;bw2=Nyu@V=j26sY^1F|mzJWp1X+(u@p|CJkYLk)=oI&$ za5wCq_zxuA{q-b53)EVajV;*cUq7#8r9zc?QRdX!t$qIxsVL$m9M|<=29c-HrFV`I zOGSnJz(hbYLHNfmCA`nlRX+D4;)s99=}Ngso!T#PM2_@(SFYRR5^@Le2FYP6y5pr0SJGFqRc#G zWhEZZN}Smu{Herfjr?qO7GY>LL@hDC5mo$uu>oy#1-foM3Z`m$notmJs3yoZQEdQB zYA@vQ!s>}|{>2P3$Lp!kqZX}(obJpp2Z03kpws+bP=^~yWwxn>;zgQiKovv~Oty2& z3KEmHdXz~sclMBq1J#8GpS6Fxl4?)zU-|*TA#IYjP) z>4W4i6fxaKeB)buv)S7E#}b#u0a7{WE`>^{ZqZnoTB62H1C{oC4?QEN3(C{gIBdX-$v*S+*Iyqw*1?jL)Bw|d|7`gqoQCh*#j8B z$-%H>pvyKzOM0?px*~iH(*Xpn5fL`CQg^rKINWn=uSa^;>ZtBy{lb?yLehT}>^#IC z>UH4Qg`DkE#I>JtaE`0?Ne2#jL3o)|dWhUck=IL$&pK)fe-^>g;1b#*Y&>0pTeAN1 zQ{yE~m&d~f=-+VmL5hFG-$y7!0}F$w?;B^Ux}3wQg`@Fg!4v5Bhz<^Qg^PU?7PzxdwYv-w^vZ zFUoje0)tU6RKiJ<2-0NN&0ci7dZQi*N^6EK^iW}s36Sxmh{u1HQ5h$JN%Ld#eT>H6 zPkUw-9b}L%$y;v+6MmiUPk1uC%Y2$&$)JUFEcTh!wW_<_G-eQHk-4|}Ya;7U3+-s^+UG?@J!TAhFNt{C$K|iU z9yh1s5?AuL-WPwJZu=2ZmSjWQNA1~yA1Ao#h!3i4YFU>%gyu@V-N|uah>uGF{FBg3 zfycp6H<>`QV)e0`BJT?EE2r^6w6p#h^LuHbCjgliOnfp7M5CcO`s+gD4NeY1jyj_% ztF<_EGD!KV9$5$)jlKRgLOf+4^%(d_L)%He{P=Q$j8cCdC;bduPu$0x+4I3)gh%2> zy3bkwY1?{TC~T4lxh#Js6N{jyK}d;(>Rj%W$Rm@LVhB<&nTg!lqI@60GkJH$V9e;@ zIlcg+1+a0=y?8|Ghv*SKMO?2Q7nM$3mm;4sD?O@8McNzC9L43!@c8+b-fPy!ra|uL zLCV;sL?nN`VN3mXb@2clawDg{S+pTT3`yIiL(#e%borDXFYdw(g+l@<36tz zjmS6h{cR)KbyLU-q|!qLk@XDLqy6Y-(@TAhGoXK`o4>PyUqmJdpe(Y)FcFMa^GM)3 zCMI4IBPM8M%{+)nsQJ#qjM}QQvH7*NU8)X~daX&x=?wJ_fTG*m0PTzM_k(XB~i)UL0jWNgvm1iP_ENJ3Uc& zkXU~bq(>C}MLgC=PB;pY3Rm-ex4UvqcP&5!fIbw0d(J84_NP`J~gHizDPc>n&*&GPpBKPKuT zwGDr2_wDOKR}S z3Tx@>K{Q2u(X7ViJcSCY;f?R>Csg%#1b&U7Ba{cDIT*k|(Pr)(t0L55h z(31><8K)0v5<-(Yu`gYIvz+}KfBpx#5(v1L`CtNMe@%1aHWIz-SKzkPmWdD`!H>CZ zoE)+>TeF){O%8U-1(A@+9g@%xq_zGJ`O(_|2!2TN*fUkBO8Fq$0@1I#Uw6Oe7ZhNE z0{t_7=FKKRkDD(WV*ZQ9kGw%Y?l!(YwaYg@{F>-5c8869h@ga`B#O|k*?974yZbL( z0_QRue}-8a!HHe5@mjy#>#u(JHFHm=n8g9L-;*fDS;WxpwDImecE3d*j-u5Mkd$E> zGkYvB2cABjsy;8#zj!SZP zg@iawvvj;=_sgfB*H$RSgn$*FP;=r|wynr}e^K0^PBgL?sFbRQ-_=pJs&YOudv}0o zHeUTC7M{^`_6%EtGgy)^%u=uz=BR^$&DG23QVMrPi|DGJ_k%+3kP`WWs@hyU2on~W&LiK8k!1eDih2oXlSkwe=fc|d*D2xR<(GyrGv zx)ShBt*=o-o(rW8Lk$7V9o02ubjAwa^F4>;-g}Tk2$yUNb-%^vleQivnXWMle@Z9a zKpOw+Fc~~xR6u&3QFU-y#DG>o$zPNhj6ngpED-2Q;Wsj4b{_a}=w$O2M#L#JS2sAoC^bekH=tQr zdW=U_{CER7VAiDU4b&)>X-Gqte+F;i%_SFfoRe!@sAc|HJ(Qv@t}-A=&B%I%0%r^` zZZV2u&Go5tS(NHf+<705JQuzaN8WKA`npm!R}lS{H_%z(j}KeTgdj`3Pal8!(ZYli zyf?@4c|?@5E)+%|nyS~ARR?##Hw@C&-;YUfj}#JYw6ZtP0!6ofn?jvff6!yMu3vCh zgSisp5N9uk_+$sy)hK5K$MIzLTcR985wJy!ljxgb9GRgRy%u9#I78O~aiQ&;wq(rA zIEtZ_^4xdzdfM#%e&>A|Dm@40-FBwL{8rlSW8pg-f5@U}LfP}q7NLRB zkAiU0_ZenEn7J9nVk?={QRLMhKsLVQP9yqK7M50;m!egs2CH@tGqhM7RWK0+emqZ0 z7#Q+QWsx7>ovj-&M3}nJ%kDg_VG7<)63;s-Rht_^OrtY7lHtgO?|!?I(gAU66KHqq zFMw}kr{_LoPPXUWe~0HiEO5}z;Fq%bYRXYoxxVSvpI8dWx9Ahr>gW^d5C zFN&Q^u!TP~d(r92Hvm@KiqTyxb{P!DJ^}@mFAFM5$khI{YyPA^k~CfG50gNsWZe}` zl@d3$+CH!4DaFn+@qB$ny7Ta(?rBRRD;b2zx@{Q{ zZ4BLE2N&81e-j7^iRVd3soRoZ2KH4x)Vzbz84 zkVUhoYQC@C1{vBn3}ed!nApDRnO`FL`mIzPEYypwf8<-)G?1iQSr1LC&X@#2I(r7w zm`r<-T$MWwAxFWhFGV^C9Xbx(QHRB<7Nwi1v9CE$2$gr$9s~lEv$$Zd*3^M(|7-MX z@KEot%}g|pS^=og*Hz0!oXu4j3$g_8^{G7oD0V_u4eqXdH? z_##arkT6~xnsEKR+x!Q9{tsOc$R1^GWOH;_0LNxEzFWm5!PnQJSxB}bC&>_7BZ`i~uwx>-(wCh&t`i5#9eGjnG6 z2~oljb-(tR?Pe6MXP;)wzeVjM+o6}sS>#qNv)S|8#C=#k&cY^!5{?on(Q-G#<#E3J z2u5I?CPL^`!iwc;e};>wcyOPd-|B96N>ogF_|9ZZv{Yz$n&J0Yy`Q7Edt0~-ELDWZ zDlDUZ!SU{tH`xaLZi<81x6TyX}Wz1uS6!W3Yl~$JcM} z&~mORp^9_-;^l8Q^S_qAjLgEqh;i=&Nrmu!+!%18DxG-&f2f3mCm4}buyFi6KIL=x zKm^mcXuL`91eZigm9!u?d5s$Lu(hae%F4o@jYSSoWwWwc)dVd!cI1S2Qzb+uotwXv z>pU~t4}sWoLgJL9TK0(iLC@w&5lVH6>(yo)%4B{50;qPxRxXR4<~mno^Ikd2J= z*^!ct)PVGi2~HCt#)-HydsIFG>s4N?qwqj`lUMa6o<9EfxZF2+S=4BO$~mL>SVZng zC{r4r3cH%{^GWid*U|_v7Z|Y#48NzKjasre-B2#!wHd$SiQE5$+z_nvdW1H z1=|C1B|zIW!;4+NnF&INg8U{}fWf`lNE50l7af?06BfkfSBsto(=kX(Z#wcK0hyXo z+Gk_Twcls92kQ@V$B$|YLB(vQwZ&ticqcJ#@u!2Wo={&f7xu4!{YfCC~Zs`W-T>$Y(~x0SlAqpi(R_ z1|U*%+o=izZeq+xqBXy%oONhe=2dY0x+F$;afXy6pRtY`p6&cSK32W zTOjEuTkQdEnH);YtX5EA37i7*3>=ZX_&2raZeh= ze-Ye|k@E^1w0$JU8LCsFlelZ-P=T_`(9K{L5?yv?2dpmR%ge|C)q*HF$o!84kB01R zLl}I3Mic_Ik3)PeL&InaQSOMD0%NYd#UmBG`D}LktzDegHB2+CM|h8~jypz5UmdBE zAo!&8P}W!IXLRMV1bz}3`$!iHc{OdRe^F=ddykdgFxbzF$h)sv1mOJM_`_RdDkSO% z*#!v5m~#;SvyojWJq&buNbE&9BnilO+P8qqUKc?D@}c}*Lm#k>OQ5DYSf81NPtUh= zse_+?z5#vSZXv_`2VWGB$a?^tyLssmyq(T3k`X3G+I?%kFbXJlfbQzY^?=-+e+`3J znCBo>WAC1R=}N>@&=eoaLlZQjEWlu1z~lsN3&289o&38Vcg!;<%&t$ZIFfjKgIJi7qS{$nYb!aCNCLTR%xQfTUfLC_kx>nhbHfx^e>jFmme}K|W6S?(N z)#gl!8QegG=KUz$T0BDf4;cU+^wjjH-eU;E$yYB;1U7l&W&{^3gPMG29Yv)}@e=g( zP;?x*$_(QJRYaz}H@L-kA)q223&{!%#>vs^f9s3;OEQ87DHT#0np(GQofkzrarq)!mDyoui-rX1+}+n< z5~&-AybX8xMcp+QE_+lEP3IA#3iL$b>zC**+gKQdT?aT;?fje=pX;&zn+w#JhyOlu|++Nqx|-`7AF8%6&Tc-*bz{aWKqA4;ImL&6MG z8y2RY|4ngbUcwKm^6&tf?+*1Jez~%oQtp%SQ|rW*2l9eem6`07jii3cs#RS+!Njmc z3Sui(cv)*+^%40QJG|WogLxuJ^ITkxiFAKM_}0A1oBXuP94&XR>PJ(ZQAsophJSg) zeD!Y8b)?KEVy1+NWL2-v;xSVLZMwyBTX(Z~21w9DJmutC%qrPvBZN5CnALF}q0bi!4nTKBKdSfzl zF2UV=Eo4MdL_Ms(SHq0OP?O#4J*)GTtG+x*XLk>BXCoB@v~OK>%~hKfPI{R~US-sv zv9}a=q>LO0%QS~5HqdM!*(C?2epN6ia4(_wwC-W9G5PmkeWcEkb*@PS@-yIu<|Dg^ zNl%_arDT?e+mYiL;agvFcNP`D)M*IZGNzCY;!YI^p&_G=&~;cdJt@q~s_DB`LT{6Q z!dG3$|JC!(mi#p%baQ$D1>;w*uoS5e{BOk(4{mgQx#q&%|K)2+D`wr@Kr`1eQC>!H zRDNRJ*vX;Vv{%dMg^8H@Z0j3IoDtt0y1*hQc39m=F~aPw8f#pk|9x%kFMAHzjlYaG zN$9U!f6d)j#5b8!gg6TQ%yCNPP9dsIEb8eG+shb5mHW(Xl^OTLgQRV{cfY=SqOT{= z?C;+5T8r4>69wyiC$w_!cg3z}F~z5LT^$mW9Zt1*f4C?oGI)4ks+yY5&wC12_n>!) ze}a#XJJUJwV;@iPM|bCQ@%qtMxuTw7>NG!F2FVsn*jP+;l-eL{B))xq7Femdvhq!j zitYu(erJ__-Z*?#t$~=dtxHoysZu)ME_iD@k>o_=lh`-4U8<0~r&ox*Kd9v+#y z)h(K2I8zZ9LPAD?;Gv8ei-*z)Uf<#kYB$XlSqkoNlYGs{9L?U)&THnGgIi>_e2+4V zD!rB{&SORvxbi&6wDVP%h*iLc`g!G`td#mo@6v3EPPjbYR^6;mxR3^8uB|>JcE3e> zBfe1Vv*Jcn5r;W*mT_Jr8NIW>oan{Kj@bV9TV|<@HFv2k;-%Bvy!qF(ky;Dd8#KG>yuR^69ZGGC`vAs+J)tm5%C8WSfudhpPyXiVr$ zoTc~{aBd2JVSkjY7?-7f(wgN@9(|ll-Af7t*|n6Cizn~do|{Ey)P~dW;0)N+_-==0 zZ?2IwzkhmH#H8MQp48H$JS9)zDG&C0g8sv~w~kQ_6uU9Y-;CB0h|^x&41%tUvxc!) zqYXvzoKC!C=Qpje8v6*H3dSCUhP@avlnF zxtyqZrxk{~!5)xFI=^rHBB0#o!{O2P0q6euj$i1}%Hgta|5c_%)!cO@T<5vxozr=m zdj_5QsX3!UL6C$=Hbx=#8WCMn?)NCIh3%x)PurT_QjV#ak6S&9yZbIhGSwR^jvd~J zrS%yRxj;&5(-Kt?(WOojPM7HOd2mW@wH##9f(h`sme~i>=}tg=}XOY(061?C!RR`LfZaJ zQv2o$I?}Npm*-zSk&X>+8VWt6u_=|ag{VWP$>|+V8HO;#(JbYTt;hhUb0}%E+{NDt z0^SI~;v0g11JGW03!xc0mL)#;ks zQoHv=0*M~>@BUZ1Df2Yu$%OSwfZ>sq}R7g`!n6l%YQv_U*m^$^1)Ro-O7LgH|oy z6s92hhGtKzH5+AHgCtHAYuB5-dvb8b2FJFz^d>gLPV`$5&bLzkW5k%5w7K~CRd|2p z=6-3F-h0~1G+vd1972o<4spULcAwUJ3_reCpqv8A1*J6v=-c|-+#--(4|M#JlOMVZ zIF4p572Y(A3_2lJ?~pYR!?ttx>x9rH9p9ZsJYPp$m6@4Ze|3A!v&u`K?ofmXd5*A( z7C+=prYbrIv%uwvx&@OQer{e_)r}x-5a2PA=ueGRDvY|5r*0p>a$f7)VDC_6p4czX z7FLI{-1lY8H9w}Q&8E19b-vn~Y7iTCmTx{3%^f*M78&N*{A`nts6@Y=27lFpfk-6i9dDfR1Es+Qd9 zDL3BJ!U4v2amGK&n^e^A?dEkLW8%18@O_evq~YoaI@N+-dO&1PPBn;BA?=S$eBd(2 zUupi3bbdI|qlH&}k9XAUvG58@q)5B)Ptp(hE?-~k-2d^5(e|kz7vE2WRKX!V?_FB&)9)Zq>Z>IaT7qUYA`Sbsvf^l~7yoIVtbs@T-4Xj!lxHr6XsH>nF?*o%*Ga9_^>? zxpc!fsd{f>#g>}*-bI?iV;)gZyD7iKeqO_s@^j1VGH{- z4!s=G=RF+uL~K{ z=^cl_iP5@($E$KP8<>qaDRtv5ujg$~fpNWHTOC_SyY2U z3W+zC=UL{N;T42z_93w|X^iPav9*KBjlzSn(;PPj+j9h`Zg&UBl#ji<`64iR*vn;v zj$b#fH74kci5Qgeg@t`=Tqa%gS-K}C8es{IGC@L1Fq~+hO1md*GW4{gr%S&V$I}dX z0W(8gOZ9l)JNhLIb^;k5=`3C6xViiGzWTWg2T=B2_m<;-Gn)Efdy<9xod;#@;5&VE zS9>*#gto3ltADz1hWM3VoWs`7%Pl^-3ysV@H7S(kIbusjV-L^7ess#*yy+O{@FM*D z;&hhYP_yC6ETUS)ZW7){GK3bfAz)41_ z-PGFHESP1%GlgAe#iYUO;a=m}51y(OarpQ5zO$Fa*<1{(YUn63wiC!c)v~tr#!y-O zj;@)!tF6Z%?>rm3`NkVbauI62tn)jKGrg@}3o_5nEYkFl8}7~BF-TS>5$C<|^O9;0 z)1VNW>CC+>?h}e>Wn;IvGU@5yCbw?B(7u<{?NQODkw253wzqZP&sX|Mo?N~6xMHlq zwVtFRmla%1Ot+{@b#|de`;&o>gD2LN^cF-GtJ>j#S(A8hb{Ocn zI4U~P|6D=)d>)#arAUSs*xyNg6zpKN7MjIt{wWrxHvBxCY&_8NEos)crNa-f#FC*G!a6!&-xb;j?I| zp?&K`jkflS4nvbQ>yO)>^FPVnIw9PkagzNtNj<-XRBW){g)d$DY9mvrr z6)`TQ%vYGOf3l{YzV+z*;W9%POE)dwOTot@t}-mRkmveOJE^@DP_6}UNYwLv^v@dh zk=M~?-}j$+aJO+)&&-lre?ocT;j4Y7_uB78$G1OSf?nPyX*x5J06&%AH>>FTpj_1Y zCY3iitnyk#}MD4xv3 zm-V3N3tz*BzD`X?CXL$yQe^#0qTal0lW0+r%M||J#>9-1BG+u@&95&1JPUU%vk>p@ zi4bQ&soquJ@i?!kI*rM02HoN}8=uCOr=H_i#_q^x;zbKD zl}C(^H_ZHMU;o5OJFr~)s^d}M5zDC}kLaoUL1> zFX9Y2eZC(?X4rrI3Op$H807wO-x^|H1CSt8Og zy0aO%(ps_HQ@C8ZGl^hN51=J_?Zx;o68lq~M(V%we0q)6pjX;7n^ z!@dc-dV)uO^I_lcD60b7X*Vv#pr8*gb7iET9tC~al1qVEL|8zQs2N2X&GL&{edJ6p z_|W!Y&3N%7%)GISd)2nMB7?b)Vv)x|y4v#~>-3A`5|A&b#wT*C@u~ z0)oswl?V7s`EIIj7m8TZ$`9_%ly#w4Lr}X@`)#Fb*UU!RUXBFO)Qw3lhBy`$dijTo zoD`_RzU`@vdPUZSoff1d&LlRzmLy1dGnF@n(fz6mB1!`@hU1W86dR;ejrMwP&}RUg z^c=4CWYx0Z-ZUF_(OL1#eREc;Piop;xC=fCVvh1JM4KlK)M!^-N{<}e{Fr`mUChr- zA;#PLvj4DOnZC)5`FZmPGez1~3{9~2)k=%7`wyMNxvOGq_6LCYo1qy64xm@?!lu|o3CCBpE*{Pkrd3=DxEjRpQjO_Ql(=lrPG z5aSAr#w<<)Z8ECv){R0sBuLlC5R;5u(z1AGp*4K|qN}3w(Qr-!(PA7+f-I((Dn8N5 zFZAc8^Vi^c6V31gN1V%8_nF}25A3?XZcXr6YP=dxW_@Von#`xDxoh8HnXQ+iPMj3W zzw9xG+!^@ciXnS@I`g|Q8?MG7Po_Q0?8AH+pQ4C&u&(nWavJcR^-IYsjpuWnFF{Xm#IPbVn%z!2 zX|?c6@XptHt{vpFJ9X%WFAeaoUzPv$b!M~a$77e??rzo-_4KA9?^2s^dNXAjGmO*i zI#cz=9Ud=A-Om*%&|^~7mNAzcnwQ_TRiEcvxs+QMJJ!s8^fSM$P;dWUg;24*r{u+peM1#@wrD3CUTROZ)CH%C^eCbWrTsMgY9vOkM;c$0qAAaZeeYAWg#BQnL*ak+>XgNGr{K zi4?I<`M_C59ogmm>r*%x`y_E@{4Z$r%n+)Tesah6jiQ($)8OTU*h0qE23Vz;- zt}=>^$)XCygalFEC}RoPB9fP+@^tPDG0Exl9iKhQE9)b|9oh6R;TG=sraE6A^XL-J zE}IE;{OTZ|^IRxI%E3D*vV!#CDZS-Awsb!?o~yxS3pO~D72C&;#g}rAmYMgxymNW> zNM?JC$LK^<7G^5mD$lUECMrcRCqD|{T%0~vE%QT=dAm<)gGgAxJ|UibxYK^sBtBxG z^h{BS*jnkS{xa1gbSTbKdi8F@?F(&UrNhKo0So405AUm95R@{zqnFcih(Lbmy<%TLfk^@Z$( z2N#N%&o*2MQtsD^)8(@~kyX0s~tEc`~RA-{b8x5#3Mba>h|*K7|aYZEpV z?zq-7EuPz^_!FLoN+Vo5{*wF-gBpY7?dBz+O=VtvrC#DIE<@WKIl$-EK zn-PuuxK~1JyxjG0GJQr7qgTC2)7RTcOS&egmVB;!8A&8o(;KTAt01BMenjfl%)Kyk zd9_fCly zp^>q~yr#RrAsf^E-Sz5EXt?_87Fm>$l;l%BBewY_sO;%)waaE2yol8TCy#g-6C9M;r5_;j0eb4@3cv|NE(u!6zhx$pzvyKqW$+&yz7%I8|Avf}#1 zEY+w2w(ez9z;ay3=c3V~n+YCVw1MUBi4Cus$S&CZihCF7WlJN)@rv5eSEP2*EWq5J zMl){Wd^Yd*hdB4fY5EFKDF>Y#G(!ij~i1j|$ZD7~rdA7fSp zGh3m)(BpWDX59W;)>j!QZ+sx1ZsquZ>(lG8FVF$sc)Fj_ULsNR;>vii}edpO#$jW`X>{*x1t~jU=MS3!`8)?!jGPyXE-@cosFh{uQavHogvYW{- zAi0xL^s>0+q8DyYp;b8qo4#j#D&3)uC|p%;t*gxFN~uhJiEB4QFCt!~Q)#Wa^-*mf zS2p)$?@*3UYF1pGZf0>$(`~5yX~RBV8}3HT5=pY(o=Lh(GCItrXY14(_w8HE$u~k9 zT+fKoL(fjKclGKq-<}A4xvG@FncU<$PWF01nE_q+-Psh?A6G_c`gJ^scV( zE?=5L1(MFUd*J*&Va8z(gx)i5Z*rin6wBu7=|5T$R;v_yJM^Y>r_r@H*-Y1RWgi~5 zH{3{jiH_0Nv*5iZhq$-Z{+)Vcx_0@=o|;jE0&K9JFg~O zbSOL*51-H3QDng_DfnUPesWdysybQ--57{Z9q|W4YdheZ*{S3Op4+@IeOj+F=f}La zJ1=fuq4ye=_|7e>Se4UM{Yz)v0KQPmaq9!W9)F$rN(QaR z8+tSf`AYV4j=Mr(i{~*tCH>i|F7|-!(h^s)I}X#!BA=BXZz65Z+kHgS(8a`DBGG$n z=5hn!zVAMF*rI>XJ59vfDc`=2*!mJBF>(&o8NI>m3K725CmZ`~UwQf$oCp`4sC97q zeugM-d$PY@mX}!;Q~DH(lJds{woh?MirX_`8$P?=+4UE0FW?7Kf$wZ15KT*|BxK~c zDa`SM&2=N&iTheff~@@Xdhf_v`?ha{e4m#j(JW&TCmANkLtZ@u18x>eqDUH|Ih&2Bhrp-zB6hr&AGU|(O z$yK5(Pe^0=!~13_Bbkgofv%gn%zbS|zMS&Ps4|wju@zLGdx*MY$_u|)hmhgm$*YP! z%cUBjC1R?4rO;x%XTr_l*Xtanf_!f(@=eA1>V}tYtnI6-kTYEz86es|_;pTLsR=gCMBrW-LgGig z*{`piKBekpfkw>>YlR$^Oo~e`7dRs#`vab&YR!|J*{4%HEhIL|B>v`$SR*d-(0#9H zB$Pa>)!npgVB#4c^|dJb{Ar4}&$p*t8yQ?{KrA3q z71jU5GG+m@LS=C+d=&q&+|l1siD=1#8%3(8(?{&i5~54z%)A$Sqm$=hX+zUTeK|@z z!cVj^WA^AdM`*NVpV~!1ykkEOxplPiXlUdM45fbGa^WGml;dzr+^|sB9Fnd)X?UK# zp@Cg>T+(f3^mMdX1ZAsPt}x4w2PU$D{8^V|0!ER#cVCc{TD4S2Fz73MUYEN2^MWlG zahaHYxd|rXP1?h>lQxu8JL{`p0TBybDWOe@krc!TUSl=Tsyd7Dx^Iw-04U4JO`(wa{p%?rRo$W#MMTFV^OLp7FkJP$NH%+X*=<`_|xe)D}bQKbzZ%f9lTXOVJ-ZU|;Ds%k z%Hw2XC#;n=uJWzVyl`m39lm&3+Bf&OYQsMjiI(fUe)LH%oO}NX?^RPe9i?ep-2sHt zKbt6;r{@ZTp#9fJ0v@Rui>S4ak7%i1vV@xMco5m3mu5{QsLoPdlApXimykeg`Hk+|FRO#3sqIJQ@0?pHpEK}rjF6incD)EuX`*gmTx@qGfZ{VUzmmFVZF*X&t;)4hatp4D;7JHh9Kr z63?c0IV6$=Ct*?$j42E*i$Kdl@JzC#;{Uv&B}>{Zghshwp>T|pi?a(x3JP_>Nzjy;rz$6ApG9^G{^tLpfCs&cmwG8=dWu}3J-} z5Ktr*OazG`xQ0cdAQ*yiPy%KcG!zNq0mVS!*xx)D{*V+6fx{8_97R$rI|2cg01ZI^ zJA+?=n@WiPK>t8uphyG)ED98f2D3#&PzVU#UJ2lUB9IdeL1Pg3+TS<-1&M`W@Wjdh z@?X>m1$2xz`hAlS357vX_`>6x7($*1D#k8ctp0WX8#qmFM98WRnJ0sBhBzi<8v5{|;)1=L7S z<4_ooZ$dEulE5Co-$DWVRe$;`1datv4Z4Pap$T0G2KyHQQ2!Z+`=4__05BR2CWwN= zK-T~P;r}8a2B7p$0TC!T0_67)1Qw1){xJ^V4>>0IFA`$Go_Y)h2O;oO010LS&_fUk z2!~+6!T?wt3KTyOBod1TT{|X7C?FhA!yhv_o;wie1X@61&|t;@J>-7{#QiV-py32s zfFLm#2uK(R3I@ggslxwg@LysWj)Z}H3&6sl|1jsV{!s`l3S>J#LKK1B(Qp(RH0~IC zypekR^H(B;0HYva2L|Y&LF$L1;TS0HAJQBPgNDFB10g6NBtVP-0nsp!W&na%6gVOP zEP_Bl?B7v``%CI$f*3FpGy)2Rf@cSW9Z3BUAaNtWSPTpU2VtRT1PuAl$pQL5&iY^p z(FnxxA!>iB6%Y^uRy9BnK`0CYfhM4b0lbxf9u^MAfi9vENaVkO5#SkPpippl0s>+& zAoT+RqQFH60$`6{zx_Qq+CtzVX$bq3~Boyom$5=F&2Nq~8Q2fX7_rK5qB!m(q3p5gj z0WpDKffnYUjs$@Kg^xg6$7Uyp5+nltx0!JNX^4)&NCGB6z6GfZ5D5#DFvd z!6L9=^+T{2AU}fq4Tk|*84wsyA(|iu0AK>|hXA=BOc0=l1vxN45A%Zg14m&&-VX=}cnwHEC>#o|o=_+n_NP<-wm+ak zAPa!NXcQLQULAwMUJa}yP*5-y11IQ)plG0MfXxYm;7|nK4+HuD@IZhd0T_*j5@-Ry z68HxU1tky~0|zq5@q~f-|E+#B8cv{o01VEAP#6XUUQhuV#3I4|fd-TcjuHTi{L|l# z^$(aBaBGnIF$f5O`q6+}gU12xK@cTyIN_oNp!W~P$9#cy7Y8l~PykHOP{ILc16Kl(p_Ab|%1EeV180mb~YhXZ~`KrjSY3<6l6fV7GR zI;np|384RDFhOqyG%5rwG(eDGZHqn*9S{>>7=Z>62m};74ugP0f%yXp`O^t8NEq1r z0q~zOdpsVBKw`lwA}Bx*1;(N=C=^%=0QRp6_`m)Sfgwy57(i;U2Ls(aK^g_H1ic;- z0%RZ1fiy!{?SQ2sI7y*_#u#iS01IT>-}UEz zDHzCa1mT21U>XL4t-712`}^-m!r5gUkf%8Y2I2;Isd=39vpO zP$A$S;Mrk-y*CgO;EZjcEaKhGNEI$3F=_}^z@v|A6HF7Ssftn2glHVE(cwr8N&}`S k|NoA#p;1(%@ei=~3kdOZcA)`wN`YlH&FRw`2AVYg2mWL4xBvhE diff --git a/src/static/support/dist-docs/ovn-nb.5.txt b/src/static/support/dist-docs/ovn-nb.5.txt index 85fd1e6e..b853a31a 100644 --- a/src/static/support/dist-docs/ovn-nb.5.txt +++ b/src/static/support/dist-docs/ovn-nb.5.txt @@ -914,6 +914,7 @@ Logical_Switch_Port TABLE options : qos_max_rate optional string options : qos_burst optional string options : hostname optional string + options : pkt_clone_type optional string, must be mc_unknown VIF Plugging Options: options : vif-plug-type optional string @@ -1235,22 +1236,26 @@ Logical_Switch_Port TABLE for this Logical Switch Port, hostname dhcp option will be in‐ cluded in DHCP reply. + options : pkt_clone_type: optional string, must be mc_unknown + If set to mc_unknown, packets going to this VIF get cloned to + all unknown ports connected to the same Logical Switch. + VIF Plugging Options: options : vif-plug-type: optional string If set, OVN will attempt to perform plugging of this VIF. In or‐ - der to get this port plugged by the OVN controller, OVN must be + der to get this port plugged by the OVN controller, OVN must be built with support for VIF plugging. The default behavior is for - the CMS to do the VIF plugging. Each VIF plug provider have + the CMS to do the VIF plugging. Each VIF plug provider have their own options namespaced by name, for example "vif-plug:rep‐ - resentor:key". Please refer to the VIF plug provider documenta‐ + resentor:key". Please refer to the VIF plug provider documenta‐ tion located in Documentation/topics/vif-plug-providers/ for more information. options : vif-plug-mtu-request: optional string - Requested MTU for plugged interfaces. When set the OVN con‐ - troller will fill the mtu_request column of the Open vSwitch - database’s Interface table. This in turn will make OVS vswitchd + Requested MTU for plugged interfaces. When set the OVN con‐ + troller will fill the mtu_request column of the Open vSwitch + database’s Interface table. This in turn will make OVS vswitchd update the MTU of the linked interface. Virtual port Options: @@ -1262,9 +1267,9 @@ Logical_Switch_Port TABLE options : virtual-parents: optional string This options represents a set of logical port names (with in the - same logical switch) which can own the virtual ip configured in + same logical switch) which can own the virtual ip configured in the options:virtual-ip. All these virtual parents should add the - virtual ip in the port_security if port security addressed are + virtual ip in the port_security if port security addressed are enabled. IP Multicast Snooping Options: @@ -1273,78 +1278,78 @@ Logical_Switch_Port TABLE other_config :mcast_snoop set to true. options : mcast_flood: optional string, either true or false - If set to true, multicast packets (except reports) are uncondi‐ + If set to true, multicast packets (except reports) are uncondi‐ tionally forwarded to the specific port. Default: false. options : mcast_flood_reports: optional string, either true or false - If set to true, multicast reports are unconditionally forwarded + If set to true, multicast reports are unconditionally forwarded to the specific port. Default: false. Containers: When a large number of containers are nested within a VM, it may be too expensive to dedicate a VIF to each container. OVN can use VLAN tags to - support such cases. Each container is assigned a VLAN ID and each + support such cases. Each container is assigned a VLAN ID and each packet that passes between the hypervisor and the VM is tagged with the appropriate ID for the container. Such VLAN IDs never appear on a phys‐ ical wire, even inside a tunnel, so they need not be unique except rel‐ ative to a single VM on a hypervisor. - These columns are used for VIFs that represent nested containers using - shared VIFs. For VMs and for containers that have dedicated VIFs, they + These columns are used for VIFs that represent nested containers using + shared VIFs. For VMs and for containers that have dedicated VIFs, they are empty. parent_name: optional string - The VM interface through which the nested container sends its - network traffic. This must match the name column for some other + The VM interface through which the nested container sends its + network traffic. This must match the name column for some other Logical_Switch_Port. Note: for performance of the OVN Southbound - database conditional monitoring, unlike for regular VIFs, + database conditional monitoring, unlike for regular VIFs, ovn-controller will register to get updates about all OVN South‐ - bound database Port_Binding table records that correspond to - nested container ports even if external_ids:ovn-monitor-all is + bound database Port_Binding table records that correspond to + nested container ports even if external_ids:ovn-monitor-all is set to false. See ovn-controller(8) for more information. tag_request: optional integer, in range 0 to 4,095 - The VLAN tag in the network traffic associated with a con‐ + The VLAN tag in the network traffic associated with a con‐ tainer’s network interface. The client can request ovn-northd to - allocate a tag that is unique within the scope of a specific - parent (specified in parent_name) by setting a value of 0 in + allocate a tag that is unique within the scope of a specific + parent (specified in parent_name) by setting a value of 0 in this column. The allocated value is written by ovn-northd in the - tag column. (Note that these tags are allocated and managed lo‐ - cally in ovn-northd, so they cannot be reconstructed in the - event that the database is lost.) The client can also request a + tag column. (Note that these tags are allocated and managed lo‐ + cally in ovn-northd, so they cannot be reconstructed in the + event that the database is lost.) The client can also request a specific non-zero tag and ovn-northd will honor it and copy that value to the tag column. - When type is set to localnet or l2gateway, this can be set to - indicate that the port represents a connection to a specific - VLAN on a locally accessible network. The VLAN ID is used to + When type is set to localnet or l2gateway, this can be set to + indicate that the port represents a connection to a specific + VLAN on a locally accessible network. The VLAN ID is used to match incoming traffic and is also added to outgoing traffic. tag: optional integer, in range 1 to 4,095 - The VLAN tag allocated by ovn-northd based on the contents of + The VLAN tag allocated by ovn-northd based on the contents of the tag_request column. Port State: up: optional boolean - This column is populated by ovn-northd, rather than by the CMS + This column is populated by ovn-northd, rather than by the CMS plugin as is most of this database. When a logical port is bound - to a physical location in the OVN Southbound database Binding + to a physical location in the OVN Southbound database Binding table, ovn-northd sets this column to true; otherwise, or if the - port becomes unbound later, it sets it to false. If this column - is empty, the port is not considered up. This allows the CMS to + port becomes unbound later, it sets it to false. If this column + is empty, the port is not considered up. This allows the CMS to wait for a VM’s (or container’s) networking to become active be‐ fore it allows the VM (or container) to start. Logical ports of router type are an exception to this rule. They - are considered to be always up, that is this column is always + are considered to be always up, that is this column is always set to true. enabled: optional boolean - This column is used to administratively set port state. If this - column is empty or is set to true, the port is enabled. If this - column is set to false, the port is disabled. A disabled port + This column is used to administratively set port state. If this + column is empty or is set to true, the port is enabled. If this + column is set to false, the port is disabled. A disabled port has all ingress and egress traffic dropped. Addressing: @@ -1357,164 +1362,164 @@ Logical_Switch_Port TABLE Ethernet address followed by zero or more IPv4 or IPv6 addresses (or both) An Ethernet address defined is owned by the logical port. - Like a physical Ethernet NIC, a logical port ordinarily + Like a physical Ethernet NIC, a logical port ordinarily has a single fixed Ethernet address. - When a OVN logical switch processes a unicast Ethernet - frame whose destination MAC address is in a logical - port’s addresses column, it delivers it only to that - port, as if a MAC learning process had learned that MAC + When a OVN logical switch processes a unicast Ethernet + frame whose destination MAC address is in a logical + port’s addresses column, it delivers it only to that + port, as if a MAC learning process had learned that MAC address on the port. If IPv4 or IPv6 address(es) (or both) are defined, it in‐ - dicates that the logical port owns the given IP ad‐ + dicates that the logical port owns the given IP ad‐ dresses. - If IPv4 address(es) are defined, the OVN logical switch - uses this information to synthesize responses to ARP re‐ - quests without traversing the physical network. The OVN - logical router connected to the logical switch, if any, - uses this information to avoid issuing ARP requests for + If IPv4 address(es) are defined, the OVN logical switch + uses this information to synthesize responses to ARP re‐ + quests without traversing the physical network. The OVN + logical router connected to the logical switch, if any, + uses this information to avoid issuing ARP requests for logical switch ports. - Note that the order here is important. The Ethernet ad‐ - dress must be listed before the IP address(es) if de‐ + Note that the order here is important. The Ethernet ad‐ + dress must be listed before the IP address(es) if de‐ fined. Examples: 80:fa:5b:06:72:b7 - This indicates that the logical port owns the + This indicates that the logical port owns the above mac address. 80:fa:5b:06:72:b7 10.0.0.4 20.0.0.4 - This indicates that the logical port owns the mac + This indicates that the logical port owns the mac address and two IPv4 addresses. 80:fa:5b:06:72:b7 fdaa:15f2:72cf:0:f816:3eff:fe20:3f41 - This indicates that the logical port owns the mac + This indicates that the logical port owns the mac address and 1 IPv6 address. 80:fa:5b:06:72:b7 10.0.0.4 fdaa:15f2:72cf:0:f816:3eff:fe20:3f41 - This indicates that the logical port owns the mac + This indicates that the logical port owns the mac address and 1 IPv4 address and 1 IPv6 address. unknown - This indicates that the logical port has an unknown set - of Ethernet addresses. When an OVN logical switch - processes a unicast Ethernet frame whose destination MAC + This indicates that the logical port has an unknown set + of Ethernet addresses. When an OVN logical switch + processes a unicast Ethernet frame whose destination MAC address is not in any logical port’s addresses column, it - delivers it to the port (or ports) whose addresses + delivers it to the port (or ports) whose addresses columns include unknown. dynamic Use dynamic to make ovn-northd generate a globally unique MAC address, choose an unused IPv4 address with the logi‐ - cal port’s subnet (if other_config:subnet is set in the + cal port’s subnet (if other_config:subnet is set in the port’s Logical_Switch), and generate an IPv6 address from - the MAC address (if other_config:ipv6_prefix is set in - the port’s Logical_Switch) and store them in the port’s + the MAC address (if other_config:ipv6_prefix is set in + the port’s Logical_Switch) and store them in the port’s dynamic_addresses column. - Only one element containing dynamic may appear in ad‐ + Only one element containing dynamic may appear in ad‐ dresses. dynamic ip dynamic ipv6 dynamic ip ipv6 These act like dynamic alone but specify particular IPv4 or - IPv6 addresses to use. OVN IPAM will still automatically + IPv6 addresses to use. OVN IPAM will still automatically allocate the other address if configured appropriately. Ex‐ ample: dynamic 192.168.0.1 2001::1. mac dynamic This acts like dynamic alone but specifies a particular MAC - address to use. OVN IPAM will still automatically allocate - IPv4 or IPv6 addresses, or both, if configured appropri‐ + address to use. OVN IPAM will still automatically allocate + IPv4 or IPv6 addresses, or both, if configured appropri‐ ately. Example: 80:fa:5b:06:72:b7 dynamic router - Accepted only when type is router. This indicates that the - Ethernet, IPv4, and IPv6 addresses for this logical switch - port should be obtained from the connected logical router + Accepted only when type is router. This indicates that the + Ethernet, IPv4, and IPv6 addresses for this logical switch + port should be obtained from the connected logical router port, as specified by router-port in options. - The resulting addresses are used to populate the logical - switch’s destination lookup, and also for the logical + The resulting addresses are used to populate the logical + switch’s destination lookup, and also for the logical switch to generate ARP and ND replies. - If the connected logical router port has a distributed - gateway port specified and the logical router has rules - specified in nat with external_mac, then those addresses + If the connected logical router port has a distributed + gateway port specified and the logical router has rules + specified in nat with external_mac, then those addresses are also used to populate the switch’s destination lookup. - Supported only in OVN 2.7 and later. Earlier versions re‐ + Supported only in OVN 2.7 and later. Earlier versions re‐ quired router addresses to be manually synchronized. dynamic_addresses: optional string Addresses assigned to the logical port by ovn-northd, if dynamic - is specified in addresses. Addresses will be of the same format - as those that populate the addresses column. Note that dynami‐ - cally assigned addresses are constructed and managed locally in - ovn-northd, so they cannot be reconstructed in the event that + is specified in addresses. Addresses will be of the same format + as those that populate the addresses column. Note that dynami‐ + cally assigned addresses are constructed and managed locally in + ovn-northd, so they cannot be reconstructed in the event that the database is lost. port_security: set of strings - This column controls the addresses from which the host attached - to the logical port (``the host’’) is allowed to send packets + This column controls the addresses from which the host attached + to the logical port (``the host’’) is allowed to send packets and to which it is allowed to receive packets. If this column is empty, all addresses are permitted. - Each element in the set must begin with one Ethernet address. + Each element in the set must begin with one Ethernet address. This would restrict the host to sending packets from and receiv‐ - ing packets to the ethernet addresses defined in the logical - port’s port_security column. It also restricts the inner source - MAC addresses that the host may send in ARP and IPv6 Neighbor + ing packets to the ethernet addresses defined in the logical + port’s port_security column. It also restricts the inner source + MAC addresses that the host may send in ARP and IPv6 Neighbor Discovery packets. The host is always allowed to receive packets to multicast and broadcast Ethernet addresses. - Each element in the set may additionally contain one or more + Each element in the set may additionally contain one or more IPv4 or IPv6 addresses (or both), with optional masks. If a mask - is given, it must be a CIDR mask. In addition to the restric‐ - tions described for Ethernet addresses above, such an element - restricts the IPv4 or IPv6 addresses from which the host may - send and to which it may receive packets to the specified ad‐ - dresses. A masked address, if the host part is zero, indicates - that the host is allowed to use any address in the subnet; if - the host part is nonzero, the mask simply indicates the size of + is given, it must be a CIDR mask. In addition to the restric‐ + tions described for Ethernet addresses above, such an element + restricts the IPv4 or IPv6 addresses from which the host may + send and to which it may receive packets to the specified ad‐ + dresses. A masked address, if the host part is zero, indicates + that the host is allowed to use any address in the subnet; if + the host part is nonzero, the mask simply indicates the size of the subnet. In addition: • If any IPv4 address is given, the host is also allowed to - receive packets to the IPv4 local broadcast address + receive packets to the IPv4 local broadcast address 255.255.255.255 and to IPv4 multicast addresses - (224.0.0.0/4). If an IPv4 address with a mask is given, + (224.0.0.0/4). If an IPv4 address with a mask is given, the host is also allowed to receive packets to the broad‐ cast address in that specified subnet. - If any IPv4 address is given, the host is additionally - restricted to sending ARP packets with the specified + If any IPv4 address is given, the host is additionally + restricted to sending ARP packets with the specified source IPv4 address. (RARP is not restricted.) • If any IPv6 address is given, the host is also allowed to receive packets to IPv6 multicast addresses (ff00::/8). - If any IPv6 address is given, the host is additionally - restricted to sending IPv6 Neighbor Discovery Solicita‐ - tion or Advertisement packets with the specified source + If any IPv6 address is given, the host is additionally + restricted to sending IPv6 Neighbor Discovery Solicita‐ + tion or Advertisement packets with the specified source address or, for solicitations, the unspecified address. - If an element includes an IPv4 address, but no IPv6 addresses, + If an element includes an IPv4 address, but no IPv6 addresses, then IPv6 traffic is not allowed. If an element includes an IPv6 - address, but no IPv4 address, then IPv4 and ARP traffic is not + address, but no IPv4 address, then IPv4 and ARP traffic is not allowed. - This column uses the same lexical syntax as the match column in + This column uses the same lexical syntax as the match column in the OVN Southbound database’s Pipeline table. Multiple addresses within an element may be space or comma separated. - This column is provided as a convenience to cloud management - systems, but all of the features that it implements can be im‐ + This column is provided as a convenience to cloud management + systems, but all of the features that it implements can be im‐ plemented as ACLs using the ACL table. Examples: @@ -1523,52 +1528,52 @@ Logical_Switch_Port TABLE The host may send traffic from and receive traffic to the specified MAC address, and to receive traffic to Ethernet multicast and broadcast addresses, but not otherwise. The - host may not send ARP or IPv6 Neighbor Discovery packets - with inner source Ethernet addresses other than the one + host may not send ARP or IPv6 Neighbor Discovery packets + with inner source Ethernet addresses other than the one specified. 80:fa:5b:06:72:b7 192.168.1.10/24 - This adds further restrictions to the first example. The - host may send IPv4 packets from or receive IPv4 packets - to only 192.168.1.10, except that it may also receive + This adds further restrictions to the first example. The + host may send IPv4 packets from or receive IPv4 packets + to only 192.168.1.10, except that it may also receive IPv4 packets to 192.168.1.255 (based on the subnet mask), 255.255.255.255, and any address in 224.0.0.0/4. The host - may not send ARPs with a source Ethernet address other - than 80:fa:5b:06:72:b7 or source IPv4 address other than - 192.168.1.10. The host may not send or receive any IPv6 + may not send ARPs with a source Ethernet address other + than 80:fa:5b:06:72:b7 or source IPv4 address other than + 192.168.1.10. The host may not send or receive any IPv6 (including IPv6 Neighbor Discovery) traffic. "80:fa:5b:12:42:ba", "80:fa:5b:06:72:b7 192.168.1.10/24" The host may send traffic from and receive traffic to the specified MAC addresses, and to receive traffic to Ether‐ net multicast and broadcast addresses, but not otherwise. - With MAC 80:fa:5b:12:42:ba, the host may send traffic - from and receive traffic to any L3 address. With MAC + With MAC 80:fa:5b:12:42:ba, the host may send traffic + from and receive traffic to any L3 address. With MAC 80:fa:5b:06:72:b7, the host may send IPv4 packets from or receive IPv4 packets to only 192.168.1.10, except that it - may also receive IPv4 packets to 192.168.1.255 (based on - the subnet mask), 255.255.255.255, and any address in - 224.0.0.0/4. The host may not send or receive any IPv6 + may also receive IPv4 packets to 192.168.1.255 (based on + the subnet mask), 255.255.255.255, and any address in + 224.0.0.0/4. The host may not send or receive any IPv6 (including IPv6 Neighbor Discovery) traffic. DHCP: dhcpv4_options: optional weak reference to DHCP_Options - This column defines the DHCPv4 Options to be included by the - ovn-controller when it replies to the DHCPv4 requests. Please + This column defines the DHCPv4 Options to be included by the + ovn-controller when it replies to the DHCPv4 requests. Please see the DHCP_Options table. dhcpv6_options: optional weak reference to DHCP_Options - This column defines the DHCPv6 Options to be included by the - ovn-controller when it replies to the DHCPv6 requests. Please + This column defines the DHCPv6 Options to be included by the + ovn-controller when it replies to the DHCPv6 requests. Please see the DHCP_Options table. mirror_rules: set of weak reference to Mirrors - Mirror rules that apply to logical switch port which is the + Mirror rules that apply to logical switch port which is the source. Please see the Mirror table. ha_chassis_group: optional HA_Chassis_Group - References a row in the OVN Northbound database’s HA_Chas‐ + References a row in the OVN Northbound database’s HA_Chas‐ sis_Group table. It indicates the HA chassis group to use if the type is set to external. If type is not external, this column is ignored. @@ -1576,12 +1581,12 @@ Logical_Switch_Port TABLE Naming: external_ids : neutron:port_name: optional string - This column gives an optional human-friendly name for the port. - This name has no special meaning or purpose other than to pro‐ + This column gives an optional human-friendly name for the port. + This name has no special meaning or purpose other than to pro‐ vide convenience for human interaction with the northbound data‐ base. - Neutron copies this from its own port object’s name. (Neutron + Neutron copies this from its own port object’s name. (Neutron ports do are not assigned human-friendly names by default, so it will often be empty.) @@ -1589,13 +1594,13 @@ Logical_Switch_Port TABLE options : requested-tnl-key: optional string, containing an integer, in range 1 to 32,767 - Configures the port binding tunnel key for the port. Usually - this is not needed because ovn-northd will assign an unique key - for each port by itself. However, if it is configured, - ovn-northd honors the configured value. The typical use case is - for interconnection: the tunnel keys for ports on transit - switches need to be unique globally, so they are maintained in - the global OVN_IC_Southbound database, and ovn-ic simply syncs + Configures the port binding tunnel key for the port. Usually + this is not needed because ovn-northd will assign an unique key + for each port by itself. However, if it is configured, + ovn-northd honors the configured value. The typical use case is + for interconnection: the tunnel keys for ports on transit + switches need to be unique globally, so they are maintained in + the global OVN_IC_Southbound database, and ovn-ic simply syncs the value from OVN_IC_Southbound through this config. Common Columns: @@ -1603,7 +1608,7 @@ Logical_Switch_Port TABLE external_ids: map of string-string pairs See External IDs at the beginning of this document. - The ovn-northd program copies all these pairs into the exter‐ + The ovn-northd program copies all these pairs into the exter‐ nal_ids column of the Port_Binding table in OVN_Southbound data‐ base. @@ -1621,8 +1626,8 @@ Forwarding_Group TABLE Details: name: string - A name for the forwarding group. This name has no special mean‐ - ing or purpose other than to provide convenience for human in‐ + A name for the forwarding group. This name has no special mean‐ + ing or purpose other than to provide convenience for human in‐ teraction with the ovn-nb database. vip: string @@ -1645,19 +1650,19 @@ Forwarding_Group TABLE See External IDs at the beginning of this document. Address_Set TABLE - Each row in this table represents a named set of addresses. An address + Each row in this table represents a named set of addresses. An address set may contain Ethernet, IPv4, or IPv6 addresses with optional bitwise - or CIDR masks. Address set may ultimately be used in ACLs to compare - against fields such as ip4.src or ip6.src. A single address set must - contain addresses of the same type. As an example, the following would + or CIDR masks. Address set may ultimately be used in ACLs to compare + against fields such as ip4.src or ip6.src. A single address set must + contain addresses of the same type. As an example, the following would create an address set with three IP addresses: ovn-nbctl create Address_Set name=set1 addresses=’10.0.0.1 10.0.0.2 10.0.0.3’ Address sets may be used in the match column of the ACL table. For syn‐ - tax information, see the details of the expression language used for - the match column in the Logical_Flow table of the OVN_Southbound data‐ + tax information, see the details of the expression language used for + the match column in the Logical_Flow table of the OVN_Southbound data‐ base. Summary: @@ -1668,7 +1673,7 @@ Address_Set TABLE Details: name: string (must be unique within table) - A name for the address set. Names are ASCII and must match + A name for the address set. Names are ASCII and must match [a-zA-Z_.][a-zA-Z_.0-9]*. addresses: set of strings @@ -1680,27 +1685,27 @@ Address_Set TABLE See External IDs at the beginning of this document. Port_Group TABLE - Each row in this table represents a named group of logical switch + Each row in this table represents a named group of logical switch ports. - Port groups may be used in the match column of the ACL table. For syn‐ - tax information, see the details of the expression language used for - the match column in the Logical_Flow table of the OVN_Southbound data‐ + Port groups may be used in the match column of the ACL table. For syn‐ + tax information, see the details of the expression language used for + the match column in the Logical_Flow table of the OVN_Southbound data‐ base. - For each port group, there are two address sets generated to the Ad‐ - dress_Set table of the OVN_Southbound database, containing the IP ad‐ - dresses of the group of ports, one for IPv4, and the other for IPv6, - with name being the name of the Port_Group followed by a suffix _ip4 - for IPv4 and _ip6 for IPv6. The generated address sets can be used in + For each port group, there are two address sets generated to the Ad‐ + dress_Set table of the OVN_Southbound database, containing the IP ad‐ + dresses of the group of ports, one for IPv4, and the other for IPv6, + with name being the name of the Port_Group followed by a suffix _ip4 + for IPv4 and _ip6 for IPv6. The generated address sets can be used in the same way as regular address sets in the match column of the ACL ta‐ ble. For syntax information, see the details of the expression language - used for the match column in the Logical_Flow table of the OVN_South‐ + used for the match column in the Logical_Flow table of the OVN_South‐ bound database. Summary: name string (must be unique within table) - ports set of weak reference to Logi‐ + ports set of weak reference to Logi‐ cal_Switch_Ports acls set of ACLs Common Columns: @@ -1708,16 +1713,16 @@ Port_Group TABLE Details: name: string (must be unique within table) - A name for the port group. Names are ASCII and must match + A name for the port group. Names are ASCII and must match [a-zA-Z_.][a-zA-Z_.0-9]*. ports: set of weak reference to Logical_Switch_Ports The logical switch ports belonging to the group in uuids. acls: set of ACLs - Access control rules that apply to the port group. Applying an - ACL to a port group has the same effect as applying the ACL to - all logical lswitches that the ports of the port group belong + Access control rules that apply to the port group. Applying an + ACL to a port group has the same effect as applying the ACL to + all logical lswitches that the ports of the port group belong to. Common Columns: @@ -1735,7 +1740,7 @@ Load_Balancer TABLE Health Checks: health_check set of Load_Balancer_Health_Checks ip_port_mappings map of string-string pairs - selection_fields set of strings, one of eth_dst, eth_src, + selection_fields set of strings, one of eth_dst, eth_src, ip_dst, ip_src, tp_dst, or tp_src Common Columns: external_ids map of string-string pairs @@ -1753,89 +1758,89 @@ Load_Balancer TABLE Details: name: string - A name for the load balancer. This name has no special meaning - or purpose other than to provide convenience for human interac‐ + A name for the load balancer. This name has no special meaning + or purpose other than to provide convenience for human interac‐ tion with the ovn-nb database. vips: map of string-string pairs - A map of virtual IP addresses (and an optional port number with - : as a separator) associated with this load balancer and their - corresponding endpoint IP addresses (and optional port numbers + A map of virtual IP addresses (and an optional port number with + : as a separator) associated with this load balancer and their + corresponding endpoint IP addresses (and optional port numbers with : as separators) separated by commas. If the destination IP - address (and port number) of a packet leaving a container or a - VM matches the virtual IP address (and port number) provided - here as a key, then OVN will statefully replace the destination - IP address by one of the provided IP address (and port number) - in this map as a value. IPv4 and IPv6 addresses are supported - for load balancing; however a VIP of one address family may not - be mapped to a destination IP address of a different family. If + address (and port number) of a packet leaving a container or a + VM matches the virtual IP address (and port number) provided + here as a key, then OVN will statefully replace the destination + IP address by one of the provided IP address (and port number) + in this map as a value. IPv4 and IPv6 addresses are supported + for load balancing; however a VIP of one address family may not + be mapped to a destination IP address of a different family. If specifying an IPv6 address with a port, the address portion must - be enclosed in square brackets. Examples for keys are + be enclosed in square brackets. Examples for keys are "192.168.1.4" and "[fd0f::1]:8800". Examples for value are "10.0.0.1, 10.0.0.2" and "20.0.0.10:8800, 20.0.0.11:8800". - When the Load_Balancer is added to the logical_switch, the VIP - has to be in a different subnet than the one used for the logi‐ - cal_switch. Since VIP is in a different subnet, you should con‐ - nect your logical switch to either a OVN logical router or a - real router (this is because the client can now send a packet - with VIP as the destination IP address and router’s mac address + When the Load_Balancer is added to the logical_switch, the VIP + has to be in a different subnet than the one used for the logi‐ + cal_switch. Since VIP is in a different subnet, you should con‐ + nect your logical switch to either a OVN logical router or a + real router (this is because the client can now send a packet + with VIP as the destination IP address and router’s mac address as the destination MAC address). protocol: optional string, one of sctp, tcp, or udp - Valid protocols are tcp, udp, or sctp. This column is useful - when a port number is provided as part of the vips column. If - this column is empty and a port number is provided as part of + Valid protocols are tcp, udp, or sctp. This column is useful + when a port number is provided as part of the vips column. If + this column is empty and a port number is provided as part of vips column, OVN assumes the protocol to be tcp. Health Checks: - OVN supports health checks for load balancer endpoints. When health + OVN supports health checks for load balancer endpoints. When health checks are enabled, the load balancer uses only healthy endpoints. - Suppose that vips contains a key-value pair - 10.0.0.10:80=10.0.0.4:8080,20.0.0.4:8080. To enable health checks for - this virtual’s endpoints, add two key-value pairs to ip_port_mappings, + Suppose that vips contains a key-value pair + 10.0.0.10:80=10.0.0.4:8080,20.0.0.4:8080. To enable health checks for + this virtual’s endpoints, add two key-value pairs to ip_port_mappings, with keys 10.0.0.4 and 20.0.0.4, and add to health_check a reference to - a Load_Balancer_Health_Check row whose vip is set to 10.0.0.10. The + a Load_Balancer_Health_Check row whose vip is set to 10.0.0.10. The same approach can be used for IPv6 as well. health_check: set of Load_Balancer_Health_Checks Load balancer health checks associated with this load balancer. ip_port_mappings: map of string-string pairs - Maps from endpoint IP to a colon-separated pair of logical port - name and source IP, e.g. port_name:sourc_ip for IPv4. Health - checks are sent to this port with the specified source IP. For - IPv6 square brackets must be used around IP address, e.g: + Maps from endpoint IP to a colon-separated pair of logical port + name and source IP, e.g. port_name:sourc_ip for IPv4. Health + checks are sent to this port with the specified source IP. For + IPv6 square brackets must be used around IP address, e.g: port_name:[sourc_ip] - For example, in the example above, IP to port mappings might be - defined as 10.0.0.4=sw0-p1:10.0.0.2 and - 20.0.0.4=sw1-p1:20.0.0.2, if the values given were suitable + For example, in the example above, IP to port mappings might be + defined as 10.0.0.4=sw0-p1:10.0.0.2 and + 20.0.0.4=sw1-p1:20.0.0.2, if the values given were suitable ports and IP addresses. - For IPv6 IP to port mappings might be defined as + For IPv6 IP to port mappings might be defined as [2001::1]=sw0-p1:[2002::1]. selection_fields: set of strings, one of eth_dst, eth_src, ip_dst, ip_src, tp_dst, or tp_src - OVN native load balancers are supported using the OpenFlow - groups of type select. OVS supports two selection methods: - dp_hash and hash (with optional fields specified) in selecting - the buckets of a group. Please see the OVS documentation (man - ovs-ofctl) for more details on the selection methods. Each end‐ - point IP (and port if set) is mapped to a bucket in the group + OVN native load balancers are supported using the OpenFlow + groups of type select. OVS supports two selection methods: + dp_hash and hash (with optional fields specified) in selecting + the buckets of a group. Please see the OVS documentation (man + ovs-ofctl) for more details on the selection methods. Each end‐ + point IP (and port if set) is mapped to a bucket in the group flow. - CMS can choose the hash selection method by setting the selec‐ - tion fields in this column. ovs-vswitchd uses the specified + CMS can choose the hash selection method by setting the selec‐ + tion fields in this column. ovs-vswitchd uses the specified fields in generating the hash. dp_hash selection method uses the assistance of datapath to cal‐ culate the hash and it is expected to be faster than hash selec‐ - tion method. So CMS should take this into consideration before - using the hash method. Please consult the OVS documentation and + tion method. So CMS should take this into consideration before + using the hash method. Please consult the OVS documentation and OVS sources for the implementation details. Common Columns: @@ -1846,53 +1851,53 @@ Load_Balancer TABLE Load_Balancer options: options : reject: optional string, either true or false - If the load balancer is created with --reject option and it has - no active backends, a TCP reset segment (for tcp) or an ICMP - port unreachable packet (for all other kind of traffic) will be - sent whenever an incoming packet is received for this load-bal‐ - ancer. Please note using --reject option will disable empty_lb + If the load balancer is created with --reject option and it has + no active backends, a TCP reset segment (for tcp) or an ICMP + port unreachable packet (for all other kind of traffic) will be + sent whenever an incoming packet is received for this load-bal‐ + ancer. Please note using --reject option will disable empty_lb SB controller event for this load balancer. options : hairpin_snat_ip: optional string - IP to be used as source IP for packets that have been hair- - pinned after load balancing. The default behavior when the op‐ - tion is not set is to use the load balancer VIP as source IP. + IP to be used as source IP for packets that have been hair- + pinned after load balancing. The default behavior when the op‐ + tion is not set is to use the load balancer VIP as source IP. This option may have exactly one IPv4 and/or one IPv6 address on it, separated by a space character. options : skip_snat: optional string - If the load balancing rule is configured with skip_snat option, - the option lb_force_snat_ip configured for the logical router - that references this load balancer will not be applied for this + If the load balancing rule is configured with skip_snat option, + the option lb_force_snat_ip configured for the logical router + that references this load balancer will not be applied for this load balancer. options : add_route: optional string - If set to true, then neighbor routers will have logical flows - added that will allow for routing to the VIP IP. It also will + If set to true, then neighbor routers will have logical flows + added that will allow for routing to the VIP IP. It also will have ARP resolution logical flows added. By setting this option, - it means there is no reason to create a Logical_Router_Sta‐ - tic_Route from neighbor routers to this NAT address. It also - means that no ARP request is required for neighbor routers to - learn the IP-MAC mapping for this VIP IP. For more information - about what flows are added for IP routes, please see the + it means there is no reason to create a Logical_Router_Sta‐ + tic_Route from neighbor routers to this NAT address. It also + means that no ARP request is required for neighbor routers to + learn the IP-MAC mapping for this VIP IP. For more information + about what flows are added for IP routes, please see the ovn-northd manpage section on IP Routing. options : neighbor_responder: optional string - If set to all, then routers on which the load balancer is ap‐ - plied reply to ARP/neighbor discovery requests for all VIPs of - the load balancer. If set to reachable, then routers on which + If set to all, then routers on which the load balancer is ap‐ + plied reply to ARP/neighbor discovery requests for all VIPs of + the load balancer. If set to reachable, then routers on which the load balancer is applied reply to ARP/neighbor discovery re‐ - quests only for VIPs that are part of a router’s subnet. If set - to none, then routers on which the load balancer is applied - never reply to ARP/neighbor discovery requests for any of the + quests only for VIPs that are part of a router’s subnet. If set + to none, then routers on which the load balancer is applied + never reply to ARP/neighbor discovery requests for any of the load balancer VIPs. Load balancers with options:template=true do not support reachable as a valid mode. The default value of this - option, if not specified, is reachable for regular load bal‐ + option, if not specified, is reachable for regular load bal‐ ancers and none for template load balancers. options : template: optional string - Option to be set to true, if the load balancer is a template. - The load balancer VIPs and backends must be using Chassis_Tem‐ + Option to be set to true, if the load balancer is a template. + The load balancer VIPs and backends must be using Chassis_Tem‐ plate_Var in their definitions. Load balancer template VIP supported formats are: @@ -1900,7 +1905,7 @@ Load_Balancer TABLE ^VIP_VAR[:^PORT_VAR|:port] - where VIP_VAR and PORT_VAR are keys of the Chassis_Template_Var + where VIP_VAR and PORT_VAR are keys of the Chassis_Template_Var variables records. Note: The VIP and PORT cannot be combined into a single template @@ -1914,34 +1919,34 @@ Load_Balancer TABLE ^BACKENDS_VAR1,^BACKENDS_VAR2 - where BACKEND_VAR1, PORT_VAR1, BACKEND_VAR2, PORT_VAR2, BACK‐ + where BACKEND_VAR1, PORT_VAR1, BACKEND_VAR2, PORT_VAR2, BACK‐ ENDS_VAR1 and BACKENDS_VAR2 are keys of the Chassis_Template_Var variables records. options : address-family: optional string - Address family used by the load balancer. Supported values are - ipv4 and ipv6. The address-family is only used for load bal‐ - ancers with options:template=true. For explicit load balancers, + Address family used by the load balancer. Supported values are + ipv4 and ipv6. The address-family is only used for load bal‐ + ancers with options:template=true. For explicit load balancers, setting the address-family has no effect. options : affinity_timeout: optional string - If the CMS provides a positive value (in seconds) for affin‐ - ity_timeout, OVN will dnat connections received from the same - client to this lb to the same backend if received in the affin‐ + If the CMS provides a positive value (in seconds) for affin‐ + ity_timeout, OVN will dnat connections received from the same + client to this lb to the same backend if received in the affin‐ ity timeslot. Max supported affinity_timeout is 65535 seconds. options : ct_flush: optional string, either true or false - The value indicates whether ovn-controller should flush CT en‐ - tries that are related to this LB. The flush happens if the LB - is removed, any of the backends is updated/removed or the LB is - not considered local anymore by the ovn-controller. This option + The value indicates whether ovn-controller should flush CT en‐ + tries that are related to this LB. The flush happens if the LB + is removed, any of the backends is updated/removed or the LB is + not considered local anymore by the ovn-controller. This option is set to false by default. Load_Balancer_Group TABLE - Each row represents a logical grouping of load balancers. It is up to - the CMS to decide the criteria on which load balancers are grouped to‐ - gether. To simplify configuration and to optimize its processing load - balancers that must be associated to the same set of logical switches + Each row represents a logical grouping of load balancers. It is up to + the CMS to decide the criteria on which load balancers are grouped to‐ + gether. To simplify configuration and to optimize its processing load + balancers that must be associated to the same set of logical switches and/or logical routers should be grouped together. Summary: @@ -1950,8 +1955,8 @@ Load_Balancer_Group TABLE Details: name: string (must be unique within table) - A name for the load balancer group. This name has no special - meaning or purpose other than to provide convenience for human + A name for the load balancer group. This name has no special + meaning or purpose other than to provide convenience for human interaction with the ovn-nb database. load_balancer: set of weak reference to Load_Balancers @@ -1996,11 +2001,11 @@ Load_Balancer_Health_Check TABLE See External IDs at the beginning of this document. ACL TABLE - Each row in this table represents one ACL rule for a logical switch or + Each row in this table represents one ACL rule for a logical switch or a port group that points to it through its acls column. The action col‐ - umn for the highest-priority matching row in this table determines a - packet’s treatment. If no row matches, packets are allowed by default. - (Default-deny treatment is possible: add a rule with priority 0, 1 as + umn for the highest-priority matching row in this table determines a + packet’s treatment. If no row matches, packets are allowed by default. + (Default-deny treatment is possible: add a rule with priority 0, 1 as match, and deny as action.) Summary: @@ -2009,16 +2014,16 @@ ACL TABLE direction string, either from-lport or to-lport match string action string, one of allow-related, al‐ - low-stateless, allow, drop, pass, or re‐ + low-stateless, allow, drop, pass, or re‐ ject tier integer, in range 0 to 3 options: options : apply-after-lb optional string Logging: log boolean - name optional string, at most 63 characters + name optional string, at most 63 characters long - severity optional string, one of alert, debug, + severity optional string, one of alert, debug, info, notice, or warning meter optional string Common Columns: @@ -2029,26 +2034,26 @@ ACL TABLE Details: label: integer, in range 0 to 4,294,967,295 - Associates an identifier with the ACL. The same value will be - written to corresponding connection tracker entry. The value - should be a valid 32-bit unsigned integer. This value can help - in debugging from connection tracker side. For example, through + Associates an identifier with the ACL. The same value will be + written to corresponding connection tracker entry. The value + should be a valid 32-bit unsigned integer. This value can help + in debugging from connection tracker side. For example, through this "label" we can backtrack to the ACL rule which is causing a "leaked" connection. Connection tracker entries are created only for allowed connections so the label is valid only for allow and allow-related actions. priority: integer, in range 0 to 32,767 - The ACL rule’s priority. Rules with numerically higher priority + The ACL rule’s priority. Rules with numerically higher priority take precedence over those with lower. If two ACL rules with the - same priority both match, then the one actually applied to a + same priority both match, then the one actually applied to a packet is undefined. - Return traffic from an allow-related flow is always allowed and + Return traffic from an allow-related flow is always allowed and cannot be changed through an ACL. - allow-stateless flows always take precedence before stateful - ACLs, regardless of their priority. (Both allow and allow-re‐ + allow-stateless flows always take precedence before stateful + ACLs, regardless of their priority. (Both allow and allow-re‐ lated ACLs can be stateful.) direction: string, either from-lport or to-lport @@ -2058,74 +2063,74 @@ ACL TABLE from a logical port. These rules are applied to the logi‐ cal switch’s ingress pipeline. - • to-lport: Used to implement filters on traffic forwarded + • to-lport: Used to implement filters on traffic forwarded to a logical port. These rules are applied to the logical switch’s egress pipeline. match: string - The packets that the ACL should match, in the same expression - language used for the match column in the OVN Southbound data‐ - base’s Logical_Flow table. The outport logical port is only - available in the to-lport direction (the inport is available in + The packets that the ACL should match, in the same expression + language used for the match column in the OVN Southbound data‐ + base’s Logical_Flow table. The outport logical port is only + available in the to-lport direction (the inport is available in both directions). - By default all traffic is allowed. When writing a more restric‐ - tive policy, it is important to remember to allow flows such as + By default all traffic is allowed. When writing a more restric‐ + tive policy, it is important to remember to allow flows such as ARP and IPv6 neighbor discovery packets. - Note that you can not create an ACL matching on a port with + Note that you can not create an ACL matching on a port with type=router or type=localnet. action: string, one of allow-related, allow-stateless, allow, drop, pass, or reject The action to take when the ACL rule matches: - • allow-stateless: Always forward the packet in stateless - manner, omitting connection tracking mechanism, regard‐ - less of other rules defined for the switch. May require - defining additional rules for inbound replies. For exam‐ - ple, if you define a rule to allow outgoing TCP traffic + • allow-stateless: Always forward the packet in stateless + manner, omitting connection tracking mechanism, regard‐ + less of other rules defined for the switch. May require + defining additional rules for inbound replies. For exam‐ + ple, if you define a rule to allow outgoing TCP traffic directed to an IP address, then you probably also want to - define another rule to allow incoming TCP traffic coming - from this same IP address. In addition, traffic that + define another rule to allow incoming TCP traffic coming + from this same IP address. In addition, traffic that matches stateless ACLs will bypass load-balancer DNAT/un- - DNAT processing. Stateful ACLs should be used instead if + DNAT processing. Stateful ACLs should be used instead if the traffic is supposed to be load-balanced. - • allow: Forward the packet. It will also send the packets - through connection tracking when allow-related rules ex‐ - ist on the logical switch. Otherwise, it’s equivalent to + • allow: Forward the packet. It will also send the packets + through connection tracking when allow-related rules ex‐ + ist on the logical switch. Otherwise, it’s equivalent to allow-stateless. - • allow-related: Forward the packet and related traffic + • allow-related: Forward the packet and related traffic (e.g. inbound replies to an outbound connection). • drop: Silently drop the packet. - • reject: Drop the packet, replying with a RST for TCP or - ICMPv4/ICMPv6 unreachable message for other + • reject: Drop the packet, replying with a RST for TCP or + ICMPv4/ICMPv6 unreachable message for other IPv4/IPv6-based protocols. - • pass: Pass to the next ACL tier. If using multiple ACL - tiers, a match on this ACL will stop evaluating ACLs at - the current tier and move to the next one. If not using - ACL tiers or if a pass ACL is matched at the final tier, - then the options:default_acl_drop option from the + • pass: Pass to the next ACL tier. If using multiple ACL + tiers, a match on this ACL will stop evaluating ACLs at + the current tier and move to the next one. If not using + ACL tiers or if a pass ACL is matched at the final tier, + then the options:default_acl_drop option from the NB_Global table is used to determine how to proceed. tier: integer, in range 0 to 3 The hierarchical tier that this ACL belongs to. - ACLs can be assigned to numerical tiers. When evaluating ACLs, - an internal counter is used to determine which tier of ACLs + ACLs can be assigned to numerical tiers. When evaluating ACLs, + an internal counter is used to determine which tier of ACLs should be evaluated. Tier 0 ACLs are evaluated first. If no ver‐ - dict can be determined, then tier 1 ACLs are evaluated next. - This continues until the maximum tier value is reached. If all - tiers of ACLs are evaluated and no verdict is reached, then the - options:default_acl_drop option from table NB_Global is used to + dict can be determined, then tier 1 ACLs are evaluated next. + This continues until the maximum tier value is reached. If all + tiers of ACLs are evaluated and no verdict is reached, then the + options:default_acl_drop option from table NB_Global is used to determine how to proceed. - In this version of OVN, the maximum tier value for ACLs is 3, + In this version of OVN, the maximum tier value for ACLs is 3, meaning there are 4 tiers of ACLs allowed (0-3). options: @@ -2133,70 +2138,70 @@ ACL TABLE ACLs options. options : apply-after-lb: optional string - If set to true, the ACL will be applied after load balancing + If set to true, the ACL will be applied after load balancing stage. Supported only for from-lport direction. - The main use case of this option is to support ACLs matching on - the destination IP address of the packet for the backend IPs of + The main use case of this option is to support ACLs matching on + the destination IP address of the packet for the backend IPs of load balancers. - OVN will apply the from-lport ACLs in two stages. ACLs without - this option apply-after-lb set, will be applied before the load + OVN will apply the from-lport ACLs in two stages. ACLs without + this option apply-after-lb set, will be applied before the load balancer stage and ACLs with this option set will be applied af‐ - ter the load balancer stage. The priorities are indepedent be‐ - tween these stages and may not be obvious to the CMS. Hence CMS - should be extra careful when using this option and should care‐ - fully evaluate the priorities of all the ACLs and the default + ter the load balancer stage. The priorities are indepedent be‐ + tween these stages and may not be obvious to the CMS. Hence CMS + should be extra careful when using this option and should care‐ + fully evaluate the priorities of all the ACLs and the default deny/allow ACLs if any. Logging: - These columns control whether and how OVN logs packets that match an + These columns control whether and how OVN logs packets that match an ACL. log: boolean - If set to true, packets that match the ACL will trigger a log + If set to true, packets that match the ACL will trigger a log message on the transport node or nodes that perform ACL process‐ ing. Logging may be combined with any action. - If set to false, the remaining columns in this group have no + If set to false, the remaining columns in this group have no significance. name: optional string, at most 63 characters long - This name, if it is provided, is included in log records. It + This name, if it is provided, is included in log records. It provides the administrator and the cloud management system a way to associate a log record with a particular ACL. severity: optional string, one of alert, debug, info, notice, or warn‐ ing The severity of the ACL. The severity levels match those of sys‐ - log, in decreasing level of severity: alert, warning, notice, + log, in decreasing level of severity: alert, warning, notice, info, or debug. When the column is empty, the default is info. meter: optional string - The name of a meter to rate-limit log messages for the ACL. The - string must match the name column of a row in the Meter table. - By default, log messages are not rate-limited. In order to en‐ - sure that the same Meter rate limits multiple ACL logs sepa‐ + The name of a meter to rate-limit log messages for the ACL. The + string must match the name column of a row in the Meter table. + By default, log messages are not rate-limited. In order to en‐ + sure that the same Meter rate limits multiple ACL logs sepa‐ rately, set the fair column. Common Columns: options: map of string-string pairs - This column provides general key/value settings. The supported + This column provides general key/value settings. The supported options are described individually below. ACL configuration options: options : log-related: optional string If set to true, then log when reply or related traffic is admit‐ - ted from a stateful ACL. In order for this option to function, - the log option must be set to true and a label must be set, and - it must be unique to the ACL. The label is necessary as it is - the only means to associate the reply traffic with the ACL to + ted from a stateful ACL. In order for this option to function, + the log option must be set to true and a label must be set, and + it must be unique to the ACL. The label is necessary as it is + the only means to associate the reply traffic with the ACL to which it belongs. It must be unique, because otherwise it is am‐ - biguous which ACL will be matched. Note: If this option is en‐ - abled, an extra flow is installed in order to log the related + biguous which ACL will be matched. Note: If this option is en‐ + abled, an extra flow is installed in order to log the related traffic. Therefore, if this is enabled on all ACLs, then the to‐ tal number of flows necessary to log the ACL traffic is doubled, compared to if this option is not enabled. @@ -2231,9 +2236,9 @@ Logical_Router TABLE options : always_learn_from_arp_request optional string, either true or false options : requested-tnl-key - optional string, containing an integer, + optional string, containing an integer, in range 1 to 16,777,215 - options : snat-ct-zone optional string, containing an integer, + options : snat-ct-zone optional string, containing an integer, in range 0 to 65,535 options : mac_binding_age_threshold optional string @@ -2251,18 +2256,18 @@ Logical_Router TABLE Zero or more routing policies for the router. enabled: optional boolean - This column is used to administratively set router state. If - this column is empty or is set to true, the router is enabled. - If this column is set to false, the router is disabled. A dis‐ + This column is used to administratively set router state. If + this column is empty or is set to true, the router is enabled. + If this column is set to false, the router is disabled. A dis‐ abled router has all ingress and egress traffic dropped. nat: set of NATs - One or more NAT rules for the router. NAT rules only work on - Gateway routers, and on distributed routers with one and only + One or more NAT rules for the router. NAT rules only work on + Gateway routers, and on distributed routers with one and only one distributed gateway port. load_balancer: set of weak reference to Load_Balancers - Set of load balancers associated to this logical router. Load + Set of load balancers associated to this logical router. Load balancer Load balancer rules only work on the Gateway routers or routers with one and only one distributed gateway port. @@ -2273,14 +2278,14 @@ Logical_Router TABLE These columns provide names for the logical router. From OVN’s perspec‐ tive, these names have no special meaning or purpose other than to pro‐ - vide convenience for human interaction with the northbound database. - There is no requirement for the name to be unique. (For a unique iden‐ + vide convenience for human interaction with the northbound database. + There is no requirement for the name to be unique. (For a unique iden‐ tifier for a logical router, use its row UUID.) (Originally, name was intended to serve the purpose of a human-friendly - name, but the Neutron integration used it to uniquely identify its own - router object, in the format neutron-uuid. Later on, Neutron started - propagating the friendly name of a router as external_ids:neu‐ + name, but the Neutron integration used it to uniquely identify its own + router object, in the format neutron-uuid. Later on, Neutron started + propagating the friendly name of a router as external_ids:neu‐ tron:router_name. Perhaps this can be cleaned up someday.) name: string @@ -2300,25 +2305,25 @@ Logical_Router TABLE options : chassis: optional string If set, indicates that the logical router in question is a Gate‐ - way router (which is centralized) and resides in the set chas‐ - sis. The same value is also used by ovn-controller to uniquely + way router (which is centralized) and resides in the set chas‐ + sis. The same value is also used by ovn-controller to uniquely identify the chassis in the OVN deployment and comes from exter‐ - nal_ids:system-id in the Open_vSwitch table of Open_vSwitch + nal_ids:system-id in the Open_vSwitch table of Open_vSwitch database. The Gateway router can only be connected to a distributed router - via a switch if SNAT and DNAT are to be configured in the Gate‐ + via a switch if SNAT and DNAT are to be configured in the Gate‐ way router. options : dnat_force_snat_ip: optional string - If set, indicates a set of IP addresses to use to force SNAT a - packet that has already been DNATed in the gateway router. When - multiple gateway routers are configured, a packet can poten‐ - tially enter any of the gateway router, get DNATted and eventu‐ + If set, indicates a set of IP addresses to use to force SNAT a + packet that has already been DNATed in the gateway router. When + multiple gateway routers are configured, a packet can poten‐ + tially enter any of the gateway router, get DNATted and eventu‐ ally reach the logical switch port. For the return traffic to go - back to the same gateway router (for unDNATing), the packet + back to the same gateway router (for unDNATing), the packet needs a SNAT in the first place. This can be achieved by setting - the above option with a gateway specific set of IP addresses. + the above option with a gateway specific set of IP addresses. This option may have exactly one IPv4 and/or one IPv6 address on it, separated by a a space. @@ -2326,113 +2331,113 @@ Logical_Router TABLE If set, this option can take two possible type of values. Either a set of IP addresses or the string value - router_ip. - If a set of IP addresses are configured, it indicates to use to - force SNAT a packet that has already been load-balanced in the - gateway router. When multiple gateway routers are configured, a - packet can potentially enter any of the gateway routers, get - DNATted as part of the load-balancing and eventually reach the - logical switch port. For the return traffic to go back to the - same gateway router (for unDNATing), the packet needs a SNAT in - the first place. This can be achieved by setting the above op‐ - tion with a gateway specific set of IP addresses. This option - may have exactly one IPv4 and/or one IPv6 address on it, sepa‐ + If a set of IP addresses are configured, it indicates to use to + force SNAT a packet that has already been load-balanced in the + gateway router. When multiple gateway routers are configured, a + packet can potentially enter any of the gateway routers, get + DNATted as part of the load-balancing and eventually reach the + logical switch port. For the return traffic to go back to the + same gateway router (for unDNATing), the packet needs a SNAT in + the first place. This can be achieved by setting the above op‐ + tion with a gateway specific set of IP addresses. This option + may have exactly one IPv4 and/or one IPv6 address on it, sepa‐ rated by a space character. If it is configured with the value router_ip, then the load bal‐ - anced packet is SNATed with the IP of router port (attached to + anced packet is SNATed with the IP of router port (attached to the gateway router) selected as the destination after taking the routing decision. options : mcast_relay: optional string, either true or false - Enables/disables IP multicast relay between logical switches + Enables/disables IP multicast relay between logical switches connected to the logical router. Default: False. options : dynamic_neigh_routers: optional string, either true or false - If set to true, the router will resolve neighbor routers’ MAC - addresses only by dynamic ARP/ND, instead of prepopulating sta‐ - tic mappings for all neighbor routers in the ARP/ND Resolution - stage. This reduces number of flows, but requires ARP/ND mes‐ + If set to true, the router will resolve neighbor routers’ MAC + addresses only by dynamic ARP/ND, instead of prepopulating sta‐ + tic mappings for all neighbor routers in the ARP/ND Resolution + stage. This reduces number of flows, but requires ARP/ND mes‐ sages to resolve the IP-MAC bindings when needed. It is false by default. It is recommended to set to true when a large number of - logical routers are connected to the same logical switch but - most of them never need to send traffic between each other. By - default, ovn-northd does not create mappings to NAT and load + logical routers are connected to the same logical switch but + most of them never need to send traffic between each other. By + default, ovn-northd does not create mappings to NAT and load balancer addresess. However, for NAT and load balancer addresses - that have the add_route option added, ovn-northd will create + that have the add_route option added, ovn-northd will create logical flows that map NAT and load balancer IP addresses to the - appropriate MAC address. Setting dynamic_neigh_routers to true + appropriate MAC address. Setting dynamic_neigh_routers to true will prevent the automatic creation of these logical flows. options : always_learn_from_arp_request: optional string, either true or false - This option controls the behavior when handling IPv4 ARP re‐ - quests or IPv6 ND-NS packets - whether a dynamic neighbor (MAC + This option controls the behavior when handling IPv4 ARP re‐ + quests or IPv6 ND-NS packets - whether a dynamic neighbor (MAC binding) entry is added/updated. - true - Always learn the MAC-IP binding, and add/update the MAC + true - Always learn the MAC-IP binding, and add/update the MAC binding entry. - false - If there is a MAC binding for that IP and the MAC is - different, or, if TPA of ARP request belongs to any router port - on this router, then update/add that MAC-IP binding. Otherwise, + false - If there is a MAC binding for that IP and the MAC is + different, or, if TPA of ARP request belongs to any router port + on this router, then update/add that MAC-IP binding. Otherwise, don’t update/add entries. - It is true by default. It is recommended to set to false when a - large number of logical routers are connected to the same logi‐ - cal switch but most of them never need to send traffic between + It is true by default. It is recommended to set to false when a + large number of logical routers are connected to the same logi‐ + cal switch but most of them never need to send traffic between each other, to reduce the size of the MAC binding table. options : requested-tnl-key: optional string, containing an integer, in range 1 to 16,777,215 - Configures the datapath tunnel key for the logical router. This - is not needed because ovn-northd will assign an unique key for - each datapath by itself. However, if it is configured, + Configures the datapath tunnel key for the logical router. This + is not needed because ovn-northd will assign an unique key for + each datapath by itself. However, if it is configured, ovn-northd honors the configured value. options : snat-ct-zone: optional string, containing an integer, in range 0 to 65,535 Use the requested conntrack zone for SNAT with this router. This - can be useful if egress traffic from the host running OVN comes - from both OVN and other sources. This way, OVN and the other + can be useful if egress traffic from the host running OVN comes + from both OVN and other sources. This way, OVN and the other sources can make use of the same conntrack zone. options : mac_binding_age_threshold: optional string - Specifies the MAC binding aging thresholds based on CIDRs, with + Specifies the MAC binding aging thresholds based on CIDRs, with the format: entry[;entry[...]], where each entry has the format: [cidr:]threshold • cidr: Can be either an IPv4 or IPv6 CIDR. - • threshold: Threshold value in seconds. MAC bindings with + • threshold: Threshold value in seconds. MAC bindings with IP addresses matching the specified CIDR that exceed this timeout will be automatically removed. - If an entry is provided without an CIDR (just the threshold + If an entry is provided without an CIDR (just the threshold value), it specifies the default threshold for MAC bindings that - don’t match any of the given CIDRs. If there are multiple de‐ - fault threshold entries in the option, the behavior is unde‐ + don’t match any of the given CIDRs. If there are multiple de‐ + fault threshold entries in the option, the behavior is unde‐ fined. - If there are multiple CIDRs matching a MAC binding IP, the one + If there are multiple CIDRs matching a MAC binding IP, the one with the longest prefix length takes effect. If there are multi‐ - ple entries with the same CIDR in the option, the behavior is + ple entries with the same CIDR in the option, the behavior is undefined. - If no matching CIDR is found for a MAC binding IP, and no de‐ + If no matching CIDR is found for a MAC binding IP, and no de‐ fault threshold is specified, the behavior defaults to the orig‐ inal: the binding will not be removed based on age. - The value can also default to an empty string, which means that - the aging threshold is disabled. Any string not in the above + The value can also default to an empty string, which means that + the aging threshold is disabled. Any string not in the above format is regarded as invalid and the aging is disabled. Example: 192.168.0.0/16:300;192.168.10.0/24:0;fe80::/10:600;1200 - This sets a threshold of 300 seconds for MAC bindings with IP + This sets a threshold of 300 seconds for MAC bindings with IP addresses in the 192.168.0.0/16 range, excluding the - 192.168.1.0/24 range (for which the aging is disabled), a - threshold of 600 seconds for MAC bindings with IP addresses in - the fe80::/10 IPv6 range, and a default threshold of 1200 sec‐ + 192.168.1.0/24 range (for which the aging is disabled), a + threshold of 600 seconds for MAC bindings with IP addresses in + the fe80::/10 IPv6 range, and a default threshold of 1200 sec‐ onds for all other MAC bindings. Common Columns: @@ -2441,53 +2446,53 @@ Logical_Router TABLE See External IDs at the beginning of this document. QoS TABLE - Each row in this table represents one QoS rule for a logical switch - that points to it through its qos_rules column. Two types of QoS are + Each row in this table represents one QoS rule for a logical switch + that points to it through its qos_rules column. Two types of QoS are supported: DSCP marking and metering. A match with the highest-priority - will have QoS applied to it. If the action column is specified, then - matching packets will have DSCP marking applied. If the bandwidth col‐ + will have QoS applied to it. If the action column is specified, then + matching packets will have DSCP marking applied. If the bandwidth col‐ umn is specified, then matching packets will have metering applied. ac‐ - tion and bandwidth are not exclusive, so both marking and metering by - defined for the same QoS entry. If no row matches, packets will not + tion and bandwidth are not exclusive, so both marking and metering by + defined for the same QoS entry. If no row matches, packets will not have any QoS applied. Summary: priority integer, in range 0 to 32,767 direction string, either from-lport or to-lport match string - action map of string-integer pairs, key either - dscp or mark, value in range 0 to + action map of string-integer pairs, key either + dscp or mark, value in range 0 to 4,294,967,295 - bandwidth map of string-integer pairs, key either + bandwidth map of string-integer pairs, key either burst or rate, value in range 1 to 4,294,967,295 external_ids map of string-string pairs Details: priority: integer, in range 0 to 32,767 - The QoS rule’s priority. Rules with numerically higher priority + The QoS rule’s priority. Rules with numerically higher priority take precedence over those with lower. If two QoS rules with the - same priority both match, then the one actually applied to a + same priority both match, then the one actually applied to a packet is undefined. direction: string, either from-lport or to-lport - The value of this field is similar to ACL column in the OVN + The value of this field is similar to ACL column in the OVN Northbound database’s ACL table. match: string The packets that the QoS rules should match, in the same expres‐ - sion language used for the match column in the OVN Southbound - database’s Logical_Flow table. The outport logical port is only - available in the to-lport direction (the inport is available in + sion language used for the match column in the OVN Southbound + database’s Logical_Flow table. The outport logical port is only + available in the to-lport direction (the inport is available in both directions). action: map of string-integer pairs, key either dscp or mark, value in range 0 to 4,294,967,295 - When dscp action is specified, matching flows will have have - DSCP marking applied. When mark action is specified, matching + When dscp action is specified, matching flows will have have + DSCP marking applied. When mark action is specified, matching flows will have packet marking applied. - • dscp: The value of this action should be in the range of + • dscp: The value of this action should be in the range of 0 to 63 (inclusive). • mark: The value of this action should be a positive inte‐ @@ -2495,7 +2500,7 @@ QoS TABLE bandwidth: map of string-integer pairs, key either burst or rate, value in range 1 to 4,294,967,295 - When specified, matching packets will have bandwidth metering + When specified, matching packets will have bandwidth metering applied. Traffic over the limit will be dropped. • rate: The value of rate limit in kbps. @@ -2507,13 +2512,13 @@ QoS TABLE See External IDs at the beginning of this document. Mirror TABLE - Each row in this table represents a mirror that can be used for port - mirroring. These mirrors are referenced by the mirror_rules column in + Each row in this table represents a mirror that can be used for port + mirroring. These mirrors are referenced by the mirror_rules column in the Logical_Switch_Port table. Summary: name string (must be unique within table) - filter string, one of both, from-lport, or + filter string, one of both, from-lport, or to-lport sink string type string, one of erspan, gre, or local @@ -2525,34 +2530,34 @@ Mirror TABLE Represents the name of the mirror. filter: string, one of both, from-lport, or to-lport - The value of this field represents selection criteria of the - mirror. to-lport mirrors the packets coming into logical port. - from-lport mirrors the packets going out of logical port. both + The value of this field represents selection criteria of the + mirror. to-lport mirrors the packets coming into logical port. + from-lport mirrors the packets going out of logical port. both mirrors for both directions. sink: string - The value of this field represents the destination/sink of the - mirror. If the type is gre or erspan, the value indicates the - tunnel remote IP (either IPv4 or IPv6). For a type of local, - this field defines a local interface on the OVS integration - bridge to be used as the mirror destination. The interface must + The value of this field represents the destination/sink of the + mirror. If the type is gre or erspan, the value indicates the + tunnel remote IP (either IPv4 or IPv6). For a type of local, + this field defines a local interface on the OVS integration + bridge to be used as the mirror destination. The interface must possess external-ids:mirror-id that matches this string. type: string, one of erspan, gre, or local - The value of this field specifies the mirror type - gre, erspan + The value of this field specifies the mirror type - gre, erspan or local. index: integer The value of this field represents the tunnel ID. If the config‐ ured tunnel type is gre, this field represents the GRE key value - and if the configured tunnel type is erspan it represents the + and if the configured tunnel type is erspan it represents the erspan_idx value. It is ignored if the type is local. external_ids: map of string-string pairs See External IDs at the beginning of this document. Meter TABLE - Each row in this table represents a meter that can be used for QoS or + Each row in this table represents a meter that can be used for QoS or rate-limiting. Summary: @@ -2566,26 +2571,26 @@ Meter TABLE name: string (must be unique within table) A name for this meter. - Names that begin with "__" (two underscores) are reserved for + Names that begin with "__" (two underscores) are reserved for OVN internal use and should not be added manually. unit: string, either kbps or pktps - The unit for rate and burst_rate parameters in the bands entry. - kbps specifies kilobits per second, and pktps specifies packets + The unit for rate and burst_rate parameters in the bands entry. + kbps specifies kilobits per second, and pktps specifies packets per second. bands: set of 1 or more Meter_Bands The bands associated with this meter. Each band specifies a rate - above which the band is to take the action action. If multiple - bands’ rates are exceeded, then the band with the highest rate + above which the band is to take the action action. If multiple + bands’ rates are exceeded, then the band with the highest rate among the exceeded bands is selected. fair: optional boolean - This column is used to further describe the desired behavior of + This column is used to further describe the desired behavior of the meter when there are multiple references to it. If this col‐ - umn is empty or is set to false, the rate will be shared across - all rows that refer to the same Meter name. Conversely, when - this column is set to true, each user of the same Meter will be + umn is empty or is set to false, the rate will be shared across + all rows that refer to the same Meter name. Conversely, when + this column is set to true, each user of the same Meter will be rate-limited on its own. external_ids: map of string-string pairs @@ -2593,7 +2598,7 @@ Meter TABLE Meter_Band TABLE Each row in this table represents a meter band which specifies the rate - above which the configured action should be applied. These bands are + above which the configured action should be applied. These bands are referenced by the bands column in the Meter table. Summary: @@ -2609,13 +2614,13 @@ Meter_Band TABLE rate: integer, in range 1 to 4,294,967,295 The rate limit for this band, in kilobits per second or bits per - second, depending on whether the parent Meter entry’s unit col‐ + second, depending on whether the parent Meter entry’s unit col‐ umn specified kbps or pktps. burst_size: integer, in range 0 to 4,294,967,295 - The maximum burst allowed for the band in kilobits or packets, - depending on whether kbps or pktps was selected in the parent - Meter entry’s unit column. If the size is zero, the switch is + The maximum burst allowed for the band in kilobits or packets, + depending on whether kbps or pktps was selected in the parent + Meter entry’s unit column. If the size is zero, the switch is free to select some reasonable value depending on its configura‐ tion. @@ -2625,7 +2630,7 @@ Meter_Band TABLE Logical_Router_Port TABLE A port within an L3 logical router. - Exactly one Logical_Router row must reference a given logical router + Exactly one Logical_Router row must reference a given logical router port. Summary: @@ -2639,7 +2644,7 @@ Logical_Router_Port TABLE Options for Physical VLAN MTU Issues: options : reside-on-redirect-chassis optional string, either true or false - options : redirect-type optional string, either bridged or over‐ + options : redirect-type optional string, either bridged or over‐ lay ipv6_prefix set of strings ipv6_ra_configs: @@ -2661,13 +2666,13 @@ Logical_Router_Port TABLE Options: options : mcast_flood optional string, either true or false options : requested-tnl-key - optional string, containing an integer, + optional string, containing an integer, in range 1 to 32,767 options : prefix_delegation optional string, either true or false options : prefix optional string, either true or false options : route_table optional string - options : gateway_mtu optional string, containing an integer, + options : gateway_mtu optional string, containing an integer, in range 68 to 65,535 options : gateway_mtu_bypass optional string @@ -2682,21 +2687,21 @@ Logical_Router_Port TABLE name: string (must be unique within table) A name for the logical router port. - In addition to provide convenience for human interaction with + In addition to provide convenience for human interaction with the northbound database, this column is used as reference by its patch port in Logical_Switch_Port or another logical router port in Logical_Router_Port. - A logical router port may not have the same name as a logical + A logical router port may not have the same name as a logical switch port, but the database schema cannot enforce this. networks: set of 1 or more strings - The IP addresses and netmasks of the router. For example, - 192.168.0.1/24 indicates that the router’s IP address is - 192.168.0.1 and that packets destined to 192.168.0.x should be + The IP addresses and netmasks of the router. For example, + 192.168.0.1/24 indicates that the router’s IP address is + 192.168.0.1 and that packets destined to 192.168.0.x should be routed to this port. - A logical router port always adds a link-local IPv6 address + A logical router port always adds a link-local IPv6 address (fe80::/64) automatically generated from the interface’s MAC ad‐ dress using the modified EUI-64 format. @@ -2704,129 +2709,129 @@ Logical_Router_Port TABLE The Ethernet address that belongs to this router port. enabled: optional boolean - This column is used to administratively set port state. If this - column is empty or is set to true, the port is enabled. If this - column is set to false, the port is disabled. A disabled port + This column is used to administratively set port state. If this + column is empty or is set to true, the port is enabled. If this + column is set to false, the port is disabled. A disabled port has all ingress and egress traffic dropped. Distributed Gateway Ports: - Gateways, as documented under Gateways in the OVN architecture guide, - provide limited connectivity between logical networks and physical - ones. OVN support multiple kinds of gateways. The Logical_Router_Port - table can be used two different ways to configure distributed gateway - ports, which are one kind of gateway. These two forms of configuration + Gateways, as documented under Gateways in the OVN architecture guide, + provide limited connectivity between logical networks and physical + ones. OVN support multiple kinds of gateways. The Logical_Router_Port + table can be used two different ways to configure distributed gateway + ports, which are one kind of gateway. These two forms of configuration exist for historical reasons. Both of them produce the same kind of OVN southbound records and the same behavior in practice. - If either of these are set, this logical router port represents a dis‐ - tributed gateway port that connects this router to a logical switch + If either of these are set, this logical router port represents a dis‐ + tributed gateway port that connects this router to a logical switch with a localnet port or a connection to another OVN deployment. Also mentioned in the OVN architecture guide, distributed gateway ports - can also be used for scalability reasons in deployments where logical + can also be used for scalability reasons in deployments where logical switches are dedicated to chassises rather than distributed. The preferred way to configure a gateway is ha_chassis_group, but gate‐ - way_chassis is also supported for backward compatibility. Only one of - these should be set at a time on a given LRP, since they configure the + way_chassis is also supported for backward compatibility. Only one of + these should be set at a time on a given LRP, since they configure the same features. Even when a gateway is configured, the logical router port still effec‐ tively resides on each chassis. However, due to the implications of the use of L2 learning in the physical network, as well as the need to sup‐ port advanced features such as one-to-many NAT (aka IP masquerading), a - subset of the logical router processing is handled in a centralized + subset of the logical router processing is handled in a centralized manner on the gateway chassis. There can be more than one distributed gateway ports configured on each - logical router, each connecting to different L2 segments. Load-balanc‐ + logical router, each connecting to different L2 segments. Load-balanc‐ ing is not yet supported on logical routers with more than one distrib‐ uted gateway ports. - For each distributed gateway port, it may have more than one gateway - chassises. When more than one gateway chassis is specified, OVN only - uses one at a time. OVN can rely on OVS BFD implementation to monitor - gateway connectivity, preferring the highest-priority gateway that is - online. Priorities are specified in the priority column of Gate‐ + For each distributed gateway port, it may have more than one gateway + chassises. When more than one gateway chassis is specified, OVN only + uses one at a time. OVN can rely on OVS BFD implementation to monitor + gateway connectivity, preferring the highest-priority gateway that is + online. Priorities are specified in the priority column of Gate‐ way_Chassis or HA_Chassis. - ovn-northd programs the external_mac rules specified in the LRP’s LR - into the peer logical switch’s destination lookup on the chassis where + ovn-northd programs the external_mac rules specified in the LRP’s LR + into the peer logical switch’s destination lookup on the chassis where the logical_port resides. In addition, the logical router’s MAC address - is automatically programmed in the peer logical switch’s destination - lookup flow on the gateway chasssis. If it is desired to generate gra‐ + is automatically programmed in the peer logical switch’s destination + lookup flow on the gateway chasssis. If it is desired to generate gra‐ tuitous ARPs for NAT addresses, then set the peer LSP’s options:nat-ad‐ dresses to router. - OVN 20.03 and earlier supported a third way to configure distributed - gateway ports using options:redirect-chassis to specify the gateway + OVN 20.03 and earlier supported a third way to configure distributed + gateway ports using options:redirect-chassis to specify the gateway chassis. This method is no longer supported. Any remaining users should - switch to one of the newer methods instead. A gateway_chassis may be - easily configured from the command line, e.g. ovn-nbctl lrp-set-gate‐ + switch to one of the newer methods instead. A gateway_chassis may be + easily configured from the command line, e.g. ovn-nbctl lrp-set-gate‐ way-chassis lrp chassis. ha_chassis_group: optional HA_Chassis_Group - Designates an HA_Chassis_Group to provide gateway high avail‐ + Designates an HA_Chassis_Group to provide gateway high avail‐ ability. gateway_chassis: set of Gateway_Chassises - Designates one or more Gateway_Chassis for the logical router + Designates one or more Gateway_Chassis for the logical router port. Options for Physical VLAN MTU Issues: - MTU issues arise in mixing tunnels with logical networks that are - bridged to a physical VLAN. For an explanation of the MTU issues, see - Physical VLAN MTU Issues in the OVN architecture document. The follow‐ - ing options, which are alternatives, provide solutions. Both of them - cause packets to be sent over localnet instead of tunnels, but they - differ in whether some or all packets are sent this way. The most + MTU issues arise in mixing tunnels with logical networks that are + bridged to a physical VLAN. For an explanation of the MTU issues, see + Physical VLAN MTU Issues in the OVN architecture document. The follow‐ + ing options, which are alternatives, provide solutions. Both of them + cause packets to be sent over localnet instead of tunnels, but they + differ in whether some or all packets are sent this way. The most prominent tradeoff between these options is that reside-on-redi‐ - rect-chassis is easier to configure and that redirect-type performs + rect-chassis is easier to configure and that redirect-type performs better for east-west traffic. options : reside-on-redirect-chassis: optional string, either true or false - If set to true, this option forces all traffic across the logi‐ - cal router port to pass through the gateway chassis using a hop + If set to true, this option forces all traffic across the logi‐ + cal router port to pass through the gateway chassis using a hop across a localnet port. This changes behavior in two ways: - • Without this option, east-west traffic passes directly - between source and destination chassis (or even within a - single chassis, for co-located VMs). With this option, + • Without this option, east-west traffic passes directly + between source and destination chassis (or even within a + single chassis, for co-located VMs). With this option, all east-west traffic passes through the gateway chassis. - • Without this option, traffic between the gateway chassis - and other chassis is encapsulated in tunnels. With this + • Without this option, traffic between the gateway chassis + and other chassis is encapsulated in tunnels. With this option, traffic passes over a localnet interface. - This option may usefully be set only on logical router ports - that connect a distributed logical router to a logical switch + This option may usefully be set only on logical router ports + that connect a distributed logical router to a logical switch with VIFs. It should not be set on a distributed gateway port. - OVN honors this option only if the logical router has one and - only one distributed gateway port and if the LRP’s peer switch + OVN honors this option only if the logical router has one and + only one distributed gateway port and if the LRP’s peer switch has a localnet port. options : redirect-type: optional string, either bridged or overlay - If set to bridged on a distributed gateway port, this option + If set to bridged on a distributed gateway port, this option causes OVN to redirect packets to the gateway chassis over a lo‐ calnet port instead of a tunnel. The relevant chassis must share a localnet port. - This feature requires the administrator or the CMS to configure - each participating chassis with a unique Ethernet address for - the logical router by setting ovn-chassis-mac-mappings in the + This feature requires the administrator or the CMS to configure + each participating chassis with a unique Ethernet address for + the logical router by setting ovn-chassis-mac-mappings in the Open vSwitch database, for use by ovn-controller. - Setting this option to overlay or leaving it unset has no ef‐ - fect. This option may usefully be set only on a distributed - gateway port when there is one and only one distributed gateway + Setting this option to overlay or leaving it unset has no ef‐ + fect. This option may usefully be set only on a distributed + gateway port when there is one and only one distributed gateway port on the logical router. It is otherwise ignored. ipv6_prefix: set of strings - This column contains IPv6 prefix obtained by prefix delegation + This column contains IPv6 prefix obtained by prefix delegation router according to RFC 3633 ipv6_ra_configs: @@ -2836,23 +2841,23 @@ Logical_Router_Port TABLE tion requests. ipv6_ra_configs : address_mode: optional string - The address mode to be used for IPv6 address configuration. The + The address mode to be used for IPv6 address configuration. The supported values are: - • slaac: Address configuration using Router Advertisement - (RA) packet. The IPv6 prefixes defined in the Logi‐ - cal_Router_Port table’s networks column will be included + • slaac: Address configuration using Router Advertisement + (RA) packet. The IPv6 prefixes defined in the Logi‐ + cal_Router_Port table’s networks column will be included in the RA’s ICMPv6 option - Prefix information. • dhcpv6_stateful: Address configuration using DHCPv6. - • dhcpv6_stateless: Address configuration using Router Ad‐ - vertisement (RA) packet. Other IPv6 options are provided + • dhcpv6_stateless: Address configuration using Router Ad‐ + vertisement (RA) packet. Other IPv6 options are provided by DHCPv6. ipv6_ra_configs : router_preference: optional string Default Router Preference (PRF) indicates whether to prefer this - router over other default routers (RFC 4191). Possible values + router over other default routers (RFC 4191). Possible values are: • HIGH: mapped to 0x01 in RA PRF field @@ -2864,7 +2869,7 @@ Logical_Router_Port TABLE ipv6_ra_configs : route_info: optional string Route Info is used to configure Route Info Option sent in Router Advertisement according to RFC 4191. Route Info is a comma sepa‐ - rated string where each field provides PRF and prefix for a + rated string where each field provides PRF and prefix for a given route (e.g: HIGH-aef1::11/48,LOW-aef2::11/96) Possible PRF values are: @@ -2875,26 +2880,26 @@ Logical_Router_Port TABLE • LOW: mapped to 0x11 in RA PRF field ipv6_ra_configs : mtu: optional string - The recommended MTU for the link. Default is 0, which means no - MTU Option will be included in RA packet replied by ovn-con‐ + The recommended MTU for the link. Default is 0, which means no + MTU Option will be included in RA packet replied by ovn-con‐ troller. Per RFC 2460, the mtu value is recommended no less than - 1280, so any mtu value less than 1280 will be considered as no + 1280, so any mtu value less than 1280 will be considered as no MTU Option. ipv6_ra_configs : send_periodic: optional string - If set to true, then this router interface will send router ad‐ + If set to true, then this router interface will send router ad‐ vertisements periodically. The default is false. ipv6_ra_configs : max_interval: optional string - The maximum number of seconds to wait between sending periodic + The maximum number of seconds to wait between sending periodic router advertisements. This option has no effect if ipv6_ra_con‐ figs:send_periodic is false. The default is 600. ipv6_ra_configs : min_interval: optional string - The minimum number of seconds to wait between sending periodic + The minimum number of seconds to wait between sending periodic router advertisements. This option has no effect if ipv6_ra_con‐ - figs:send_periodic is false. The default is one-third of - ipv6_ra_configs:max_interval, i.e. 200 seconds if that key is + figs:send_periodic is false. The default is one-third of + ipv6_ra_configs:max_interval, i.e. 200 seconds if that key is unset. ipv6_ra_configs : rdnss: optional string @@ -2902,7 +2907,7 @@ Logical_Router_Port TABLE ment OVN supports just one RDNSS server. ipv6_ra_configs : dnssl: optional string - DNS Search List announced in RA packets. Multiple DNS Search + DNS Search List announced in RA packets. Multiple DNS Search List must be ’comma’ separated (e.g. "a.b.c, d.e.f") Options: @@ -2913,46 +2918,46 @@ Logical_Router_Port TABLE If set to true, multicast traffic (including reports) are uncon‐ ditionally forwarded to the specific port. - This option applies when the port is part of a logical router + This option applies when the port is part of a logical router which has options:mcast_relay set to true. Default: false. options : requested-tnl-key: optional string, containing an integer, in range 1 to 32,767 - Configures the port binding tunnel key for the port. Usually - this is not needed because ovn-northd will assign an unique key - for each port by itself. However, if it is configured, + Configures the port binding tunnel key for the port. Usually + this is not needed because ovn-northd will assign an unique key + for each port by itself. However, if it is configured, ovn-northd honors the configured value. options : prefix_delegation: optional string, either true or false - If set to true, enable IPv6 prefix delegation state machine on - this logical router port (RFC3633). IPv6 prefix delegation is + If set to true, enable IPv6 prefix delegation state machine on + this logical router port (RFC3633). IPv6 prefix delegation is available just on a gateway router or on a gateway router port. options : prefix: optional string, either true or false - If set to true, this interface will receive an IPv6 prefix ac‐ + If set to true, this interface will receive an IPv6 prefix ac‐ cording to RFC3663 options : route_table: optional string - Designates lookup Logical_Router_Static_Routes with specified - route_table value. Routes to directly connected networks from - same Logical Router and routes without route_table option set + Designates lookup Logical_Router_Static_Routes with specified + route_table value. Routes to directly connected networks from + same Logical Router and routes without route_table option set have higher priority than routes with route_table option set. options : gateway_mtu: optional string, containing an integer, in range 68 to 65,535 - If set, logical flows will be added to router pipeline to check - packet length. If packet length is greater than the value set, - ICMPv4 type 3 (Destination Unreachable) code 4 (Fragmentation - Needed and Don’t Fragment was Set) or ICMPv6 type 2 (Packet Too + If set, logical flows will be added to router pipeline to check + packet length. If packet length is greater than the value set, + ICMPv4 type 3 (Destination Unreachable) code 4 (Fragmentation + Needed and Don’t Fragment was Set) or ICMPv6 type 2 (Packet Too Big) code 0 (no route to destination) packets will be generated. This allows for Path MTU Discovery. options : gateway_mtu_bypass: optional string - When configured, represents a match expression, in the same ex‐ - pression language used for the match column in the OVN South‐ - bound database’s Logical_Flow table. Packets matching this ex‐ + When configured, represents a match expression, in the same ex‐ + pression language used for the match column in the OVN South‐ + bound database’s Logical_Flow table. Packets matching this ex‐ pression will bypass the length check configured through the op‐ tions:gateway_mtu option. @@ -2961,22 +2966,22 @@ Logical_Router_Port TABLE A given router port serves one of two purposes: • To attach a logical switch to a logical router. A logical - router port of this type is referenced by exactly one - Logical_Switch_Port of type router. The value of name is - set as router-port in column options of Logi‐ + router port of this type is referenced by exactly one + Logical_Switch_Port of type router. The value of name is + set as router-port in column options of Logi‐ cal_Switch_Port. In this case peer column is empty. • To connect one logical router to another. This requires a pair of logical router ports, each connected to a differ‐ - ent router. Each router port in the pair specifies the + ent router. Each router port in the pair specifies the other in its peer column. No Logical_Switch refers to the router port. peer: optional string - For a router port used to connect two logical routers, this + For a router port used to connect two logical routers, this identifies the other router port in the pair by name. - For a router port attached to a logical switch, this column is + For a router port attached to a logical switch, this column is empty. Common Columns: @@ -2984,7 +2989,7 @@ Logical_Router_Port TABLE external_ids: map of string-string pairs See External IDs at the beginning of this document. - The ovn-northd program copies all these pairs into the exter‐ + The ovn-northd program copies all these pairs into the exter‐ nal_ids column of the Port_Binding table in OVN_Southbound data‐ base. @@ -2995,20 +3000,20 @@ Logical_Router_Port TABLE status : hosting-chassis: optional string This option is populated by ovn-northd. - When a distributed gateway port is bound to a location in the - OVN Southbound database Port_Binding ovn-northd will populate - this key with the name of the Chassis that is currently hosting + When a distributed gateway port is bound to a location in the + OVN Southbound database Port_Binding ovn-northd will populate + this key with the name of the Chassis that is currently hosting this port. Logical_Router_Static_Route TABLE Each record represents a static route. - When multiple routes match a packet, the longest-prefix match is cho‐ - sen. For a given prefix length, a dst-ip route is preferred over a + When multiple routes match a packet, the longest-prefix match is cho‐ + sen. For a given prefix length, a dst-ip route is preferred over a src-ip route. - When there are ECMP routes, i.e. multiple routes with same prefix and - policy, one of them will be selected based on the 5-tuple hashing of + When there are ECMP routes, i.e. multiple routes with same prefix and + policy, one of them will be selected based on the 5-tuple hashing of the packet header. Summary: @@ -3033,54 +3038,54 @@ Logical_Router_Static_Route TABLE IP prefix of this route (e.g. 192.168.100.0/24). policy: optional string, either dst-ip or src-ip - If it is specified, this setting describes the policy used to - make routing decisions. This setting must be one of the follow‐ + If it is specified, this setting describes the policy used to + make routing decisions. This setting must be one of the follow‐ ing strings: - • src-ip: This policy sends the packet to the nexthop when + • src-ip: This policy sends the packet to the nexthop when the packet’s source IP address matches ip_prefix. - • dst-ip: This policy sends the packet to the nexthop when + • dst-ip: This policy sends the packet to the nexthop when the packet’s destination IP address matches ip_prefix. If not specified, the default is dst-ip. nexthop: string - Nexthop IP address for this route. Nexthop IP address should be + Nexthop IP address for this route. Nexthop IP address should be the IP address of a connected router port or the IP address of a logical port or can be set to discard for dropping packets which match the given route. output_port: optional string - The name of the Logical_Router_Port via which the packet needs - to be sent out. This is optional and when not specified, OVN - will automatically figure this out based on the nexthop. When - this is specified and there are multiple IP addresses on the - router port and none of them are in the same subnet of nexthop, - OVN chooses the first IP address as the one via which the nex‐ + The name of the Logical_Router_Port via which the packet needs + to be sent out. This is optional and when not specified, OVN + will automatically figure this out based on the nexthop. When + this is specified and there are multiple IP addresses on the + router port and none of them are in the same subnet of nexthop, + OVN chooses the first IP address as the one via which the nex‐ thop is reachable. bfd: optional weak reference to BFD Reference to BFD row if the route has associated a BFD session route_table: string - Any string to place route to separate routing table. If Logical - Router Port has configured value in options:route_table other + Any string to place route to separate routing table. If Logical + Router Port has configured value in options:route_table other than empty string, OVN performs route lookup for all packets en‐ - tering Logical Router ingress pipeline from this port in the + tering Logical Router ingress pipeline from this port in the following manner: - • 1. First lookup among "global" routes: routes without - route_table value set and routes to directly connected + • 1. First lookup among "global" routes: routes without + route_table value set and routes to directly connected networks. - • 2. Next lookup among routes with same route_table value + • 2. Next lookup among routes with same route_table value as specified in LRP’s options:route_table field. external_ids : ic-learned-route: optional string - ovn-ic populates this key if the route is learned from the - global OVN_IC_Southbound database. In this case the value will - be set to the uuid of the row in Route table of the + ovn-ic populates this key if the route is learned from the + global OVN_IC_Southbound database. In this case the value will + be set to the uuid of the row in Route table of the OVN_IC_Southbound database. Common Columns: @@ -3091,35 +3096,35 @@ Logical_Router_Static_Route TABLE Common options: options: map of string-string pairs - This column provides general key/value settings. The supported + This column provides general key/value settings. The supported options are described individually below. options : ecmp_symmetric_reply: optional string If true, then new traffic that arrives over this route will have - its reply traffic bypass ECMP route selection and will be sent - out this route instead. Note that this option overrides any - rules set in the Logical_Router_policy table. This option only - works on gateway routers (routers that have options:chassis + its reply traffic bypass ECMP route selection and will be sent + out this route instead. Note that this option overrides any + rules set in the Logical_Router_policy table. This option only + works on gateway routers (routers that have options:chassis set). options : origin: optional string In case ovn-interconnection has been learned this route, it will have its origin set: either "connected" or "static". This key is - supposed to be written only by ovn-ic daemon. ovn-northd then - checks this value when generating Logical Flows. Logi‐ - cal_Router_Static_Route records with same ip_prefix within same - Logical Router will have next lookup order based on origin key + supposed to be written only by ovn-ic daemon. ovn-northd then + checks this value when generating Logical Flows. Logi‐ + cal_Router_Static_Route records with same ip_prefix within same + Logical Router will have next lookup order based on origin key value: 1. connected 2. static Logical_Router_Policy TABLE - Each row in this table represents one routing policy for a logical + Each row in this table represents one routing policy for a logical router that points to it through its policies column. The action column - for the highest-priority matching row in this table determines a - packet’s treatment. If no row matches, packets are allowed by default. - (Default-deny treatment is possible: add a rule with priority 0, 1 as + for the highest-priority matching row in this table determines a + packet’s treatment. If no row matches, packets are allowed by default. + (Default-deny treatment is possible: add a rule with priority 0, 1 as match, and drop as action.) Summary: @@ -3135,17 +3140,17 @@ Logical_Router_Policy TABLE Details: priority: integer, in range 0 to 32,767 - The routing policy’s priority. Rules with numerically higher - priority take precedence over those with lower. A rule is + The routing policy’s priority. Rules with numerically higher + priority take precedence over those with lower. A rule is uniquely identified by the priority and match string. match: string - The packets that the routing policy should match, in the same - expression language used for the match column in the OVN South‐ + The packets that the routing policy should match, in the same + expression language used for the match column in the OVN South‐ bound database’s Logical_Flow table. - By default all traffic is allowed. When writing a more restric‐ - tive policy, it is important to remember to allow flows such as + By default all traffic is allowed. When writing a more restric‐ + tive policy, it is important to remember to allow flows such as ARP and IPv6 neighbor discovery packets. action: string, one of allow, drop, or reroute @@ -3160,13 +3165,13 @@ Logical_Router_Policy TABLE nexthop: optional string Note: This column is deprecated in favor of nexthops. - Next-hop IP address for this route, which should be the IP ad‐ - dress of a connected router port or the IP address of a logical + Next-hop IP address for this route, which should be the IP ad‐ + dress of a connected router port or the IP address of a logical port. nexthops: set of strings - Next-hop ECMP IP addresses for this route. Each IP in the list - should be the IP address of a connected router port or the IP + Next-hop ECMP IP addresses for this route. Each IP in the list + should be the IP address of a connected router port or the IP address of a logical port. One IP from the list is selected as next hop. @@ -3178,7 +3183,7 @@ Logical_Router_Policy TABLE options : pkt_mark: optional string Marks the packet with the value specified when the router policy is applied. CMS can inspect this packet marker and take some de‐ - cisions if desired. This value is not preserved when the packet + cisions if desired. This value is not preserved when the packet goes out on the wire. Common Columns: @@ -3190,7 +3195,7 @@ NAT TABLE Each record represents a NAT rule. Summary: - type string, one of dnat, dnat_and_snat, or + type string, one of dnat, dnat_and_snat, or snat external_ip string external_mac optional string @@ -3199,7 +3204,7 @@ NAT TABLE logical_port optional string allowed_ext_ips optional Address_Set exempted_ext_ips optional Address_Set - gateway_port optional weak reference to Logi‐ + gateway_port optional weak reference to Logi‐ cal_Router_Port options : stateless optional string options : add_route optional string @@ -3210,19 +3215,19 @@ NAT TABLE type: string, one of dnat, dnat_and_snat, or snat Type of the NAT rule. - • When type is dnat, the externally visible IP address ex‐ - ternal_ip is DNATted to the IP address logical_ip in the + • When type is dnat, the externally visible IP address ex‐ + ternal_ip is DNATted to the IP address logical_ip in the logical space. - • When type is snat, IP packets with their source IP ad‐ + • When type is snat, IP packets with their source IP ad‐ dress that either matches the IP address in logical_ip or - is in the network provided by logical_ip is SNATed into + is in the network provided by logical_ip is SNATed into the IP address in external_ip. • When type is dnat_and_snat, the externally visible IP ad‐ dress external_ip is DNATted to the IP address logical_ip - in the logical space. In addition, IP packets with the - source IP address that matches logical_ip is SNATed into + in the logical space. In addition, IP packets with the + source IP address that matches logical_ip is SNATed into the IP address in external_ip. external_ip: string @@ -3231,14 +3236,14 @@ NAT TABLE external_mac: optional string A MAC address. - This is only used on the gateway port on distributed routers. + This is only used on the gateway port on distributed routers. This must be specified in order for the NAT rule to be processed in a distributed manner on all chassis. If this is not specified - for a NAT rule on a distributed router, then this NAT rule will - be processed in a centralized manner on the gateway port in‐ + for a NAT rule on a distributed router, then this NAT rule will + be processed in a centralized manner on the gateway port in‐ stance on the gateway chassis. - This MAC address must be unique on the logical switch that the + This MAC address must be unique on the logical switch that the gateway port is attached to. If the MAC address used on the log‐ ical_port is globally unique, then that MAC address can be spec‐ ified as this external_mac. @@ -3246,8 +3251,8 @@ NAT TABLE external_port_range: string L4 source port range - Range of ports, from which a port number will be picked that - will replace the source port of to be NATed packet. This is ba‐ + Range of ports, from which a port number will be picked that + will replace the source port of to be NATed packet. This is ba‐ sically PAT (port address translation). Value of the column is in the format, port_lo-port_hi. For exam‐ @@ -3262,88 +3267,88 @@ NAT TABLE The name of the logical port where the logical_ip resides. This is only used on distributed routers. This must be specified - in order for the NAT rule to be processed in a distributed man‐ + in order for the NAT rule to be processed in a distributed man‐ ner on all chassis. If this is not specified for a NAT rule on a - distributed router, then this NAT rule will be processed in a - centralized manner on the gateway port instance on the gateway + distributed router, then this NAT rule will be processed in a + centralized manner on the gateway port instance on the gateway chassis. allowed_ext_ips: optional Address_Set - It represents Address Set of external ips that NAT rule is ap‐ + It represents Address Set of external ips that NAT rule is ap‐ plicable to. For SNAT type NAT rules, this refers to destination - addresses. For DNAT type NAT rules, this refers to source ad‐ + addresses. For DNAT type NAT rules, this refers to source ad‐ dresses. - This configuration overrides the default NAT behavior of apply‐ - ing a rule solely based on internal IP. Without this configura‐ - tion, NAT happens without considering the external IP (i.e - dest/source for snat/dnat type rule). With this configuration - NAT rule is applied ONLY if external ip is in the input Address + This configuration overrides the default NAT behavior of apply‐ + ing a rule solely based on internal IP. Without this configura‐ + tion, NAT happens without considering the external IP (i.e + dest/source for snat/dnat type rule). With this configuration + NAT rule is applied ONLY if external ip is in the input Address Set. exempted_ext_ips: optional Address_Set - It represents Address Set of external ips that NAT rule is NOT - applicable to. For SNAT type NAT rules, this refers to destina‐ - tion addresses. For DNAT type NAT rules, this refers to source + It represents Address Set of external ips that NAT rule is NOT + applicable to. For SNAT type NAT rules, this refers to destina‐ + tion addresses. For DNAT type NAT rules, this refers to source addresses. - This configuration overrides the default NAT behavior of apply‐ - ing a rule solely based on internal IP. Without this configura‐ - tion, NAT happens without considering the external IP (i.e - dest/source for snat/dnat type rule). With this configuration - NAT rule is NOT applied if external ip is in the input Address + This configuration overrides the default NAT behavior of apply‐ + ing a rule solely based on internal IP. Without this configura‐ + tion, NAT happens without considering the external IP (i.e + dest/source for snat/dnat type rule). With this configuration + NAT rule is NOT applied if external ip is in the input Address Set. - If there are NAT rules in a logical router with overlapping IP - prefixes (including /32), then usage of exempted_ext_ips should - be avoided in following scenario. a. SNAT rule (let us say - RULE1) with logical_ip PREFIX/MASK (let us say 50.0.0.0/24). b. - SNAT rule (let us say RULE2) with logical_ip PREFIX/MASK+1 (let - us say 50.0.0.0/25). c. Now, if exempted_ext_ips is associated + If there are NAT rules in a logical router with overlapping IP + prefixes (including /32), then usage of exempted_ext_ips should + be avoided in following scenario. a. SNAT rule (let us say + RULE1) with logical_ip PREFIX/MASK (let us say 50.0.0.0/24). b. + SNAT rule (let us say RULE2) with logical_ip PREFIX/MASK+1 (let + us say 50.0.0.0/25). c. Now, if exempted_ext_ips is associated with RULE2, then a logical ip which matches both 50.0.0.0/24 and 50.0.0.0/25 may get the RULE2 applied to it instead of RULE1. - allowed_ext_ips and exempted_ext_ips are mutually exclusive to - each other. If both Address Sets are set for a rule, then the + allowed_ext_ips and exempted_ext_ips are mutually exclusive to + each other. If both Address Sets are set for a rule, then the NAT rule is not considered. gateway_port: optional weak reference to Logical_Router_Port - A distributed gateway port in the Logical_Router_Port table + A distributed gateway port in the Logical_Router_Port table where the NAT rule needs to be applied. When multiple distributed gateway ports are configured on a Log‐ - ical_Router, applying a NAT rule at each of the distributed - gateway ports might not be desired. Consider the case where a + ical_Router, applying a NAT rule at each of the distributed + gateway ports might not be desired. Consider the case where a logical router has 2 distributed gateway port, one with networks - 50.0.0.10/24 and the other with networks 60.0.0.10/24. If the - logical router has a NAT rule of type snat, logical_ip - 10.1.1.0/24 and external_ip 50.1.1.20/24, the rule needs to be + 50.0.0.10/24 and the other with networks 60.0.0.10/24. If the + logical router has a NAT rule of type snat, logical_ip + 10.1.1.0/24 and external_ip 50.1.1.20/24, the rule needs to be selectively applied on matching packets entering/leaving through the distributed gateway port with networks 50.0.0.10/24. When a logical router has multiple distributed gateway ports and this column is not set for a NAT rule, then the rule will be ap‐ - plied at the distributed gateway port which is in the same net‐ - work as the external_ip of the NAT rule, if such a router port - exists. If logical router has a single distributed gateway port - and this column is not set for a NAT rule, the rule will be ap‐ + plied at the distributed gateway port which is in the same net‐ + work as the external_ip of the NAT rule, if such a router port + exists. If logical router has a single distributed gateway port + and this column is not set for a NAT rule, the rule will be ap‐ plied at the distributed gateway port even if the router port is not in the same network as the external_ip of the NAT rule. options : stateless: optional string - Indicates if a dnat_and_snat rule should lead to connection + Indicates if a dnat_and_snat rule should lead to connection tracking state or not. options : add_route: optional string - If set to true, then neighbor routers will have logical flows - added that will allow for routing to the NAT address. It also - will have ARP resolution logical flows added. By setting this - option, it means there is no reason to create a Logi‐ - cal_Router_Static_Route from neighbor routers to this NAT ad‐ - dress. It also means that no ARP request is required for neigh‐ - bor routers to learn the IP-MAC mapping for this NAT address. + If set to true, then neighbor routers will have logical flows + added that will allow for routing to the NAT address. It also + will have ARP resolution logical flows added. By setting this + option, it means there is no reason to create a Logi‐ + cal_Router_Static_Route from neighbor routers to this NAT ad‐ + dress. It also means that no ARP request is required for neigh‐ + bor routers to learn the IP-MAC mapping for this NAT address. This option only applies to NATs of type dnat and dnat_and_snat. - For more information about what flows are added for IP routes, + For more information about what flows are added for IP routes, please see the ovn-northd manpage section on IP Routing. Common Columns: @@ -3352,13 +3357,13 @@ NAT TABLE See External IDs at the beginning of this document. DHCP_Options TABLE - OVN implements native DHCPv4 support which caters to the common use - case of providing an IPv4 address to a booting instance by providing + OVN implements native DHCPv4 support which caters to the common use + case of providing an IPv4 address to a booting instance by providing stateless replies to DHCPv4 requests based on statically configured ad‐ - dress mappings. To do this it allows a short list of DHCPv4 options to + dress mappings. To do this it allows a short list of DHCPv4 options to be configured and applied at each compute host running ovn-controller. - OVN also implements native DHCPv6 support which provides stateless + OVN also implements native DHCPv6 support which provides stateless replies to DHCPv6 requests. Summary: @@ -3367,7 +3372,7 @@ DHCP_Options TABLE Mandatory DHCPv4 options: options : server_id optional string options : server_mac optional string - options : lease_time optional string, containing an integer, + options : lease_time optional string, containing an integer, in range 0 to 4,294,967,295 IPv4 DHCP Options: options : router optional string @@ -3395,24 +3400,24 @@ DHCP_Options TABLE optional string, either 0 or 1 options : ethernet_encap optional string, either 0 or 1 Integer DHCP Options: - options : default_ttl optional string, containing an integer, + options : default_ttl optional string, containing an integer, in range 0 to 255 - options : tcp_ttl optional string, containing an integer, + options : tcp_ttl optional string, containing an integer, in range 0 to 255 - options : mtu optional string, containing an integer, + options : mtu optional string, containing an integer, in range 68 to 65,535 - options : T1 optional string, containing an integer, + options : T1 optional string, containing an integer, in range 68 to 4,294,967,295 - options : T2 optional string, containing an integer, + options : T2 optional string, containing an integer, in range 68 to 4,294,967,295 options : arp_cache_timeout - optional string, containing an integer, + optional string, containing an integer, in range 0 to 255 options : tcp_keepalive_interval - optional string, containing an integer, + optional string, containing an integer, in range 0 to 255 options : netbios_node_type - optional string, containing an integer, + optional string, containing an integer, in range 0 to 255 String DHCP Options: options : wpad optional string @@ -3446,14 +3451,14 @@ DHCP_Options TABLE Details: cidr: string - The DHCPv4/DHCPv6 options will be included if the logical port + The DHCPv4/DHCPv6 options will be included if the logical port has its IP address in this cidr. DHCPv4 options: - The CMS should define the set of DHCPv4 options as key/value pairs in - the options column of this table. For ovn-controller to include these - DHCPv4 options, the dhcpv4_options of Logical_Switch_Port should refer + The CMS should define the set of DHCPv4 options as key/value pairs in + the options column of this table. For ovn-controller to include these + DHCPv4 options, the dhcpv4_options of Logical_Switch_Port should refer to an entry in this table. Mandatory DHCPv4 options: @@ -3462,7 +3467,7 @@ DHCP_Options TABLE options : server_id: optional string The IP address for the DHCP server to use. This should be in the - subnet of the offered IP. This is also included in the DHCP of‐ + subnet of the offered IP. This is also included in the DHCP of‐ fer as option 54, ``server identifier.’’ options : server_mac: optional string @@ -3476,14 +3481,14 @@ DHCP_Options TABLE IPv4 DHCP Options: - Below are the supported DHCPv4 options whose values are an IPv4 ad‐ - dress, e.g. 192.168.1.1. Some options accept multiple IPv4 addresses - enclosed within curly braces, e.g. {192.168.1.2, 192.168.1.3}. Please + Below are the supported DHCPv4 options whose values are an IPv4 ad‐ + dress, e.g. 192.168.1.1. Some options accept multiple IPv4 addresses + enclosed within curly braces, e.g. {192.168.1.2, 192.168.1.3}. Please refer to RFC 2132 for more details on DHCPv4 options and their codes. options : router: optional string - The IP address of a gateway for the client to use. This should - be in the subnet of the offered IP. The DHCPv4 option code for + The IP address of a gateway for the client to use. This should + be in the subnet of the offered IP. The DHCPv4 option code for this option is 3. options : netmask: optional string @@ -3520,19 +3525,19 @@ DHCP_Options TABLE The DHCPv4 option code for this option is 121. This option can contain one or more static routes, each of which - consists of a destination descriptor and the IP address of the + consists of a destination descriptor and the IP address of the router that should be used to reach that destination. Please see RFC 3442 for more details. Example: {30.0.0.0/24,10.0.0.10, 0.0.0.0/0,10.0.0.1} options : ms_classless_static_route: optional string - The DHCPv4 option code for this option is 249. This option is + The DHCPv4 option code for this option is 249. This option is similar to classless_static_route supported by Microsoft Windows DHCPv4 clients. options : next_server: optional string - The DHCPv4 option code for setting the "Next server IP address" + The DHCPv4 option code for setting the "Next server IP address" field in the DHCP header. Boolean DHCP Options: @@ -3567,14 +3572,14 @@ DHCP_Options TABLE options : T1: optional string, containing an integer, in range 68 to 4,294,967,295 - This specifies the time interval from address assignment until + This specifies the time interval from address assignment until the client begins trying to renew its address. The DHCPv4 option code for this option is 58. options : T2: optional string, containing an integer, in range 68 to 4,294,967,295 - This specifies the time interval from address assignment until - the client begins trying to rebind its address. The DHCPv4 op‐ + This specifies the time interval from address assignment until + the client begins trying to rebind its address. The DHCPv4 op‐ tion code for this option is 59. options : arp_cache_timeout: optional string, containing an integer, in @@ -3597,30 +3602,30 @@ DHCP_Options TABLE These options accept a string value. options : wpad: optional string - The DHCPv4 option code for this option is 252. This option is - used as part of web proxy auto discovery to provide a URL for a + The DHCPv4 option code for this option is 252. This option is + used as part of web proxy auto discovery to provide a URL for a web proxy. options : bootfile_name: optional string - The DHCPv4 option code for this option is 67. This option is + The DHCPv4 option code for this option is 67. This option is used to identify a bootfile. options : path_prefix: optional string The DHCPv4 option code for this option is 210. In PXELINUX’ case - this option is used to set a common path prefix, instead of de‐ + this option is used to set a common path prefix, instead of de‐ riving it from the bootfile name. options : tftp_server_address: optional string - The DHCPv4 option code for this option is 150. The option con‐ - tains one or more IPv4 addresses that the client MAY use. This + The DHCPv4 option code for this option is 150. The option con‐ + tains one or more IPv4 addresses that the client MAY use. This option is Cisco proprietary, the IEEE standard that matches with this requirement is option 66 (tftp_server). options : hostname: optional string - The DHCPv4 option code for this option is 12. If set, indicates - the DHCPv4 option "Hostname". Alternatively, this option can be + The DHCPv4 option code for this option is 12. If set, indicates + the DHCPv4 option "Hostname". Alternatively, this option can be configured in options:hostname column in table Logi‐ - cal_Switch_Port. If Hostname option value is set in both con‐ + cal_Switch_Port. If Hostname option value is set in both con‐ flicting Logical_Switch_Port and DHCP_Options tables, Logi‐ cal_Switch_Port takes precedence. @@ -3630,10 +3635,10 @@ DHCP_Options TABLE names via the Domain Name System. options : bootfile_name_alt: optional string - "bootfile_name_alt" option is used to support iPXE. When both + "bootfile_name_alt" option is used to support iPXE. When both "bootfile_name" and "bootfile_name_alt" are provided by the CMS, - "bootfile_name" will be used for option 67 if the dhcp request - contains etherboot option (175), otherwise "bootfile_name_alt" + "bootfile_name" will be used for option 67 if the dhcp request + contains etherboot option (175), otherwise "bootfile_name_alt" will be used. options : broadcast_address: optional string @@ -3649,7 +3654,7 @@ DHCP_Options TABLE DHCP Options of type domains: - These options accept string value which is a comma separated list of + These options accept string value which is a comma separated list of domain names. The domain names are encoded based on RFC 1035. options : domain_search_list: optional string @@ -3657,10 +3662,10 @@ DHCP_Options TABLE DHCPv6 options: - OVN also implements native DHCPv6 support. The CMS should define the - set of DHCPv6 options as key/value pairs. The define DHCPv6 options - will be included in the DHCPv6 response to the DHCPv6 Solicit/Re‐ - quest/Confirm packet from the logical ports having the IPv6 addresses + OVN also implements native DHCPv6 support. The CMS should define the + set of DHCPv6 options as key/value pairs. The define DHCPv6 options + will be included in the DHCPv6 response to the DHCPv6 Solicit/Re‐ + quest/Confirm packet from the logical ports having the IPv6 addresses in the cidr. Mandatory DHCPv6 options: @@ -3668,17 +3673,17 @@ DHCP_Options TABLE The following options must be defined. options : server_id: optional string - The Ethernet address for the DHCP server to use. This is also - included in the DHCPv6 reply as option 2, ``Server Identifier’’ - to carry a DUID identifying a server between a client and a - server. ovn-controller defines DUID based on Link-layer Address + The Ethernet address for the DHCP server to use. This is also + included in the DHCPv6 reply as option 2, ``Server Identifier’’ + to carry a DUID identifying a server between a client and a + server. ovn-controller defines DUID based on Link-layer Address [DUID-LL]. IPv6 DHCPv6 options: - Below are the supported DHCPv6 options whose values are an IPv6 ad‐ - dress, e.g. aef0::4. Some options accept multiple IPv6 addresses en‐ - closed within curly braces, e.g. {aef0::4, aef0::5}. Please refer to + Below are the supported DHCPv6 options whose values are an IPv6 ad‐ + dress, e.g. aef0::4. Some options accept multiple IPv6 addresses en‐ + closed within curly braces, e.g. {aef0::4, aef0::5}. Please refer to RFC 3315 for more details on DHCPv6 options and their codes. options : dns_server: optional string @@ -3691,21 +3696,21 @@ DHCP_Options TABLE options : domain_search: optional string The DHCPv6 option code for this option is 24. This option speci‐ - fies the domain search list the client should use to resolve + fies the domain search list the client should use to resolve hostnames with DNS. Example: "ovn.org". options : dhcpv6_stateless: optional string - This option specifies the OVN native DHCPv6 will work in state‐ + This option specifies the OVN native DHCPv6 will work in state‐ less mode, which means OVN native DHCPv6 will not offer IPv6 ad‐ - dresses for VM/VIF ports, but only reply other configurations, - such as DNS and domain search list. When setting this option - with string value "true", VM/VIF will configure IPv6 addresses + dresses for VM/VIF ports, but only reply other configurations, + such as DNS and domain search list. When setting this option + with string value "true", VM/VIF will configure IPv6 addresses by stateless way. Default value for this option is false. options : fqdn: optional string - The DHCPv6 option code for this option is 39. If set, indicates + The DHCPv6 option code for this option is 39. If set, indicates the DHCPv6 option "FQDN". Common Columns: @@ -3714,14 +3719,14 @@ DHCP_Options TABLE See External IDs at the beginning of this document. Connection TABLE - Configuration for a database connection to an Open vSwitch database + Configuration for a database connection to an Open vSwitch database (OVSDB) client. - This table primarily configures the Open vSwitch database server + This table primarily configures the Open vSwitch database server (ovsdb-server). - The Open vSwitch database server can initiate and maintain active con‐ - nections to remote clients. It can also listen for database connec‐ + The Open vSwitch database server can initiate and maintain active con‐ + nections to remote clients. It can also listen for database connec‐ tions. Summary: @@ -3733,17 +3738,17 @@ Connection TABLE Status: is_connected boolean status : last_error optional string - status : state optional string, one of ACTIVE, BACKOFF, + status : state optional string, one of ACTIVE, BACKOFF, CONNECTING, IDLE, or VOID - status : sec_since_connect optional string, containing an integer, + status : sec_since_connect optional string, containing an integer, at least 0 status : sec_since_disconnect - optional string, containing an integer, + optional string, containing an integer, at least 0 status : locks_held optional string status : locks_waiting optional string status : locks_lost optional string - status : n_connections optional string, containing an integer, + status : n_connections optional string, containing an integer, at least 2 status : bound_port optional string, containing an integer Common Columns: @@ -3759,20 +3764,20 @@ Connection TABLE The following connection methods are currently supported: ssl:host[:port] - The specified SSL port on the host at the given host, + The specified SSL port on the host at the given host, which can either be a DNS name (if built with unbound li‐ - brary) or an IP address. A valid SSL configuration must - be provided when this form is used, this configuration - can be specified via command-line options or the SSL ta‐ + brary) or an IP address. A valid SSL configuration must + be provided when this form is used, this configuration + can be specified via command-line options or the SSL ta‐ ble. If port is not specified, it defaults to 6640. - SSL support is an optional feature that is not always + SSL support is an optional feature that is not always built as part of Open vSwitch. tcp:host[:port] - The specified TCP port on the host at the given host, + The specified TCP port on the host at the given host, which can either be a DNS name (if built with unbound li‐ brary) or an IP address. If host is an IPv6 address, wrap it in square brackets, e.g. tcp:[::1]:6640. @@ -3780,54 +3785,54 @@ Connection TABLE If port is not specified, it defaults to 6640. pssl:[port][:host] - Listens for SSL connections on the specified TCP port. - Specify 0 for port to have the kernel automatically - choose an available port. If host, which can either be a - DNS name (if built with unbound library) or an IP ad‐ - dress, is specified, then connections are restricted to + Listens for SSL connections on the specified TCP port. + Specify 0 for port to have the kernel automatically + choose an available port. If host, which can either be a + DNS name (if built with unbound library) or an IP ad‐ + dress, is specified, then connections are restricted to the resolved or specified local IPaddress (either IPv4 or IPv6 address). If host is an IPv6 address, wrap in square - brackets, e.g. pssl:6640:[::1]. If host is not specified - then it listens only on IPv4 (but not IPv6) addresses. A - valid SSL configuration must be provided when this form - is used, this can be specified either via command-line + brackets, e.g. pssl:6640:[::1]. If host is not specified + then it listens only on IPv4 (but not IPv6) addresses. A + valid SSL configuration must be provided when this form + is used, this can be specified either via command-line options or the SSL table. If port is not specified, it defaults to 6640. - SSL support is an optional feature that is not always + SSL support is an optional feature that is not always built as part of Open vSwitch. ptcp:[port][:host] - Listens for connections on the specified TCP port. Spec‐ + Listens for connections on the specified TCP port. Spec‐ ify 0 for port to have the kernel automatically choose an - available port. If host, which can either be a DNS name - (if built with unbound library) or an IP address, is - specified, then connections are restricted to the re‐ + available port. If host, which can either be a DNS name + (if built with unbound library) or an IP address, is + specified, then connections are restricted to the re‐ solved or specified local IP address (either IPv4 or IPv6 - address). If host is an IPv6 address, wrap it in square - brackets, e.g. ptcp:6640:[::1]. If host is not specified + address). If host is an IPv6 address, wrap it in square + brackets, e.g. ptcp:6640:[::1]. If host is not specified then it listens only on IPv4 addresses. If port is not specified, it defaults to 6640. - When multiple clients are configured, the target values must be + When multiple clients are configured, the target values must be unique. Duplicate target values yield unspecified results. Client Failure Detection and Handling: max_backoff: optional integer, at least 1,000 - Maximum number of milliseconds to wait between connection at‐ + Maximum number of milliseconds to wait between connection at‐ tempts. Default is implementation-specific. inactivity_probe: optional integer Maximum number of milliseconds of idle time on connection to the - client before sending an inactivity probe message. If Open - vSwitch does not communicate with the client for the specified - number of seconds, it will send a probe. If a response is not - received for the same additional amount of time, Open vSwitch - assumes the connection has been broken and attempts to recon‐ - nect. Default is implementation-specific. A value of 0 disables + client before sending an inactivity probe message. If Open + vSwitch does not communicate with the client for the specified + number of seconds, it will send a probe. If a response is not + received for the same additional amount of time, Open vSwitch + assumes the connection has been broken and attempts to recon‐ + nect. Default is implementation-specific. A value of 0 disables inactivity probes. Status: @@ -3836,12 +3841,12 @@ Connection TABLE in the status columns may be updated depends on the target type. When target specifies a connection method that listens for inbound con‐ - nections (e.g. ptcp: or punix:), both n_connections and is_connected + nections (e.g. ptcp: or punix:), both n_connections and is_connected may also be updated while the remaining key-value pairs are omitted. - On the other hand, when target specifies an outbound connection, all - key-value pairs may be updated, except the above-mentioned two key- - value pairs associated with inbound connection targets. They are omit‐ + On the other hand, when target specifies an outbound connection, all + key-value pairs may be updated, except the above-mentioned two key- + value pairs associated with inbound connection targets. They are omit‐ ted. is_connected: boolean @@ -3849,7 +3854,7 @@ Connection TABLE status : last_error: optional string A human-readable description of the last error on the connection - to the manager; i.e. strerror(errno). This key will exist only + to the manager; i.e. strerror(errno). This key will exist only if an error has occurred. status : state: optional string, one of ACTIVE, BACKOFF, CONNECTING, @@ -3868,7 +3873,7 @@ Connection TABLE IDLE Connection is idle. Waiting for response to keep-alive. - These values may change in the future. They are provided only + These values may change in the future. They are provided only for human consumption. status : sec_since_connect: optional string, containing an integer, at @@ -3879,48 +3884,48 @@ Connection TABLE status : sec_since_disconnect: optional string, containing an integer, at least 0 - The amount of time since this client last disconnected from the - database (in seconds). Value is empty if client has never dis‐ + The amount of time since this client last disconnected from the + database (in seconds). Value is empty if client has never dis‐ connected. status : locks_held: optional string - Space-separated list of the names of OVSDB locks that the con‐ - nection holds. Omitted if the connection does not hold any + Space-separated list of the names of OVSDB locks that the con‐ + nection holds. Omitted if the connection does not hold any locks. status : locks_waiting: optional string - Space-separated list of the names of OVSDB locks that the con‐ - nection is currently waiting to acquire. Omitted if the connec‐ + Space-separated list of the names of OVSDB locks that the con‐ + nection is currently waiting to acquire. Omitted if the connec‐ tion is not waiting for any locks. status : locks_lost: optional string - Space-separated list of the names of OVSDB locks that the con‐ - nection has had stolen by another OVSDB client. Omitted if no + Space-separated list of the names of OVSDB locks that the con‐ + nection has had stolen by another OVSDB client. Omitted if no locks have been stolen from this connection. status : n_connections: optional string, containing an integer, at least 2 - When target specifies a connection method that listens for in‐ - bound connections (e.g. ptcp: or pssl:) and more than one con‐ - nection is actually active, the value is the number of active + When target specifies a connection method that listens for in‐ + bound connections (e.g. ptcp: or pssl:) and more than one con‐ + nection is actually active, the value is the number of active connections. Otherwise, this key-value pair is omitted. status : bound_port: optional string, containing an integer When target is ptcp: or pssl:, this is the TCP port on which the - OVSDB server is listening. (This is particularly useful when - target specifies a port of 0, allowing the kernel to choose any + OVSDB server is listening. (This is particularly useful when + target specifies a port of 0, allowing the kernel to choose any available port.) Common Columns: - The overall purpose of these columns is described under Common Columns + The overall purpose of these columns is described under Common Columns at the beginning of this document. external_ids: map of string-string pairs other_config: map of string-string pairs DNS TABLE - Each row in this table stores the DNS records. The Logical_Switch ta‐ + Each row in this table stores the DNS records. The Logical_Switch ta‐ ble’s dns_records references these records. Summary: @@ -3932,8 +3937,8 @@ DNS TABLE records: map of string-string pairs Key-value pair of DNS records with DNS query name as the key and value as a string of IP address(es) separated by comma or space. - For PTR requests, the key-value pair can be Reverse IPv4 ad‐ - dress.in-addr.arpa and the value DNS domain name. For IPv6 ad‐ + For PTR requests, the key-value pair can be Reverse IPv4 ad‐ + dress.in-addr.arpa and the value DNS domain name. For IPv6 ad‐ dresses, the key has to be Reverse IPv6 address.ip6.arpa. Example: "vm1.ovn.org" = "10.0.0.4 aef0::4" @@ -3941,13 +3946,13 @@ DNS TABLE Example: "4.0.0.10.in-addr.arpa" = "vm1.ovn.org" options : ovn-owned: optional string - If set to true, then the OVN will be the main responsible for + If set to true, then the OVN will be the main responsible for DNS Records within this row. - A DNS row with this option set to true can be created for do‐ - mains that the user needs to configure locally and don’t care - about IPv6 only interested in IPv4 or vice versa. This will let - ovn send IPv4 DNS reply and reject/ignore IPv6 queries to save + A DNS row with this option set to true can be created for do‐ + mains that the user needs to configure locally and don’t care + about IPv6 only interested in IPv4 or vice versa. This will let + ovn send IPv4 DNS reply and reject/ignore IPv6 queries to save the waiting for a timeout on those uninteresting queries. external_ids: map of string-string pairs @@ -3968,28 +3973,28 @@ SSL TABLE Details: private_key: string - Name of a PEM file containing the private key used as the + Name of a PEM file containing the private key used as the switch’s identity for SSL connections to the controller. certificate: string - Name of a PEM file containing a certificate, signed by the cer‐ + Name of a PEM file containing a certificate, signed by the cer‐ tificate authority (CA) used by the controller and manager, that - certifies the switch’s private key, identifying a trustworthy + certifies the switch’s private key, identifying a trustworthy switch. ca_cert: string - Name of a PEM file containing the CA certificate used to verify + Name of a PEM file containing the CA certificate used to verify that the switch is connected to a trustworthy controller. bootstrap_ca_cert: boolean - If set to true, then Open vSwitch will attempt to obtain the CA - certificate from the controller on its first SSL connection and - save it to the named PEM file. If it is successful, it will im‐ - mediately drop the connection and reconnect, and from then on - all SSL connections must be authenticated by a certificate - signed by the CA certificate thus obtained. This option exposes - the SSL connection to a man-in-the-middle attack obtaining the - initial CA certificate. It may still be useful for bootstrap‐ + If set to true, then Open vSwitch will attempt to obtain the CA + certificate from the controller on its first SSL connection and + save it to the named PEM file. If it is successful, it will im‐ + mediately drop the connection and reconnect, and from then on + all SSL connections must be authenticated by a certificate + signed by the CA certificate thus obtained. This option exposes + the SSL connection to a man-in-the-middle attack obtaining the + initial CA certificate. It may still be useful for bootstrap‐ ping. ssl_protocols: string @@ -3997,18 +4002,18 @@ SSL TABLE fault when this option is omitted is TLSv1,TLSv1.1,TLSv1.2. ssl_ciphers: string - List of ciphers (in OpenSSL cipher string format) to be sup‐ - ported for SSL connections. The default when this option is + List of ciphers (in OpenSSL cipher string format) to be sup‐ + ported for SSL connections. The default when this option is omitted is HIGH:!aNULL:!MD5. Common Columns: - The overall purpose of these columns is described under Common Columns + The overall purpose of these columns is described under Common Columns at the beginning of this document. external_ids: map of string-string pairs Gateway_Chassis TABLE - Association of a chassis to a logical router port. The traffic going + Association of a chassis to a logical router port. The traffic going out through an specific router port will be redirected to a chassis, or a set of them in high availability configurations. @@ -4029,11 +4034,11 @@ Gateway_Chassis TABLE chassis_name: string Name of the chassis that we want to redirect traffic through for - the associated logical router port. The value must match the + the associated logical router port. The value must match the name column of the Chassis table in the OVN_Southbound database. priority: integer, in range 0 to 32,767 - This is the priority of a chassis among all Gateway_Chassis be‐ + This is the priority of a chassis among all Gateway_Chassis be‐ longing to the same logical router port. options: map of string-string pairs @@ -4046,11 +4051,11 @@ Gateway_Chassis TABLE HA_Chassis_Group TABLE Table representing a group of chassis which can provide high availabil‐ - ity services. Each chassis in the group is represented by the table - HA_Chassis. The HA chassis with highest priority will be the master of - this group. If the master chassis failover is detected, the HA chassis - with the next higher priority takes over the responsibility of provid‐ - ing the HA. If a distributed gateway router port references a row in + ity services. Each chassis in the group is represented by the table + HA_Chassis. The HA chassis with highest priority will be the master of + this group. If the master chassis failover is detected, the HA chassis + with the next higher priority takes over the responsibility of provid‐ + ing the HA. If a distributed gateway router port references a row in this table, then the master HA chassis in this group provides the gate‐ way functionality. @@ -4081,12 +4086,12 @@ HA_Chassis TABLE Details: chassis_name: string - Name of the chassis which is part of the HA chassis group. The - value must match the name column of the Chassis table in the + Name of the chassis which is part of the HA chassis group. The + value must match the name column of the Chassis table in the OVN_Southbound database. priority: integer, in range 0 to 32,767 - Priority of the chassis. Chassis with highest priority will be + Priority of the chassis. Chassis with highest priority will be the master. Common Columns: @@ -4095,13 +4100,13 @@ HA_Chassis TABLE See External IDs at the beginning of this document. BFD TABLE - Contains BFD parameter for ovn-controller BFD configuration. OVN BFD + Contains BFD parameter for ovn-controller BFD configuration. OVN BFD implementation is used to provide detection of failures in the path be‐ - tween adjacent forwarding engines, including the OVN interfaces. OVN - BFD provides link status info to OVN northd in order to update logical - flows according to the status of BFD endpoints. In the current imple‐ - mentation OVN BFD is used to check next-hop status for ECMP routes. - Please note BFD table refers to OVN BFD implementation and not to OVS + tween adjacent forwarding engines, including the OVN interfaces. OVN + BFD provides link status info to OVN northd in order to update logical + flows according to the status of BFD endpoints. In the current imple‐ + mentation OVN BFD is used to check next-hop status for ECMP routes. + Please note BFD table refers to OVN BFD implementation and not to OVS legacy one. Summary: @@ -4129,21 +4134,21 @@ BFD TABLE BFD peer IP address. min_tx: optional integer, at least 1 - This is the minimum interval, in milliseconds, that the local - system would like to use when transmitting BFD Control packets, - less any jitter applied. The value zero is reserved. Default + This is the minimum interval, in milliseconds, that the local + system would like to use when transmitting BFD Control packets, + less any jitter applied. The value zero is reserved. Default value is 1000 ms. min_rx: optional integer - This is the minimum interval, in milliseconds, between received - BFD Control packets that this system is capable of supporting, - less any jitter applied by the sender. If this value is zero, - the transmitting system does not want the remote system to send + This is the minimum interval, in milliseconds, between received + BFD Control packets that this system is capable of supporting, + less any jitter applied by the sender. If this value is zero, + the transmitting system does not want the remote system to send any periodic BFD Control packets. detect_mult: optional integer, at least 1 - Detection time multiplier. The negotiated transmit interval, - multiplied by this value, provides the Detection Time for the + Detection time multiplier. The negotiated transmit interval, + multiplied by this value, provides the Detection Time for the receiving system in Asynchronous mode. Default value is 5. options: map of string-string pairs @@ -4179,7 +4184,7 @@ Static_MAC_Binding TABLE Details: Configuration: - ovn-northd reads configuration from these columns and propagates the + ovn-northd reads configuration from these columns and propagates the value to SBDB. logical_port: string @@ -4195,19 +4200,19 @@ Static_MAC_Binding TABLE Override dynamically learnt MACs. Chassis_Template_Var TABLE - One record per chassis, each containing a map, variables, between tem‐ - plate variable names and their value for that specific chassis. A tem‐ + One record per chassis, each containing a map, variables, between tem‐ + plate variable names and their value for that specific chassis. A tem‐ plate variable has a name and potentially different values on different - hypervisors in the OVN cluster. For example, two rows, R1 = (.chas‐ - sis=C1, variables={(N: V1)} and R2 = (.chassis=C2, variables={(N: V2)} + hypervisors in the OVN cluster. For example, two rows, R1 = (.chas‐ + sis=C1, variables={(N: V1)} and R2 = (.chassis=C2, variables={(N: V2)} will make ovn-controller running on chassis C1 and C2 interpret the to‐ - ken N either as V1 (on C1) or as V2 (on C2). Users can refer to tem‐ + ken N either as V1 (on C1) or as V2 (on C2). Users can refer to tem‐ plate variables from within other logical components, e.g., within ACL, - QoS or Logical_Router_Policy matches or from Load_Balancer VIP and + QoS or Logical_Router_Policy matches or from Load_Balancer VIP and backend definitions. - If a template variable is referenced on a chassis for which that vari‐ - able is not defined then ovn-controller running on that chassis will + If a template variable is referenced on a chassis for which that vari‐ + able is not defined then ovn-controller running on that chassis will just interpret it as a raw string literal. Summary: diff --git a/src/static/support/dist-docs/ovn-nbctl.8.pdf b/src/static/support/dist-docs/ovn-nbctl.8.pdf index fb8a42eda511280b05bc1d009b899d432e46cf83..41f16e40b27d509f8f795c62fd614caae0f9847f 100644 GIT binary patch delta 192 zcmezNjP2VqwuUW?@0aly>lzw`7@Ala8(Eo5|GkV+3suB$IpZP0R7(R3Lz5(3Lkmkw zT|>jP#O*9A7{4)U85h(%k3;H7{4)U85vj@8Jn0J7)BWwr~{EEm%eX)ic4Zis)mb|k%5tk0Zheql~s(N vIh+hl%#9o^+$<~&4b5B~jomDaT@75#&0H*ignore_lsp_down is configured as true in options column of NB_Global table of the Northbound database), for logi‐ cal ports of type virtual, for logical ports with ’un‐ - known’ address set and for logical ports of a logical - switch configured with other_config:vlan-passthru=true. + known’ address set, for logical ports with the op‐‐ + tions:disable_arp_nd_rsp=true and for logical ports of a + logical switch configured with other_con‐‐ + fig:vlan-passthru=true. The above ARP responder flows are added for the list of IPv4 addresses if defined in options:arp_proxy column of @@ -1644,7 +1646,11 @@ • One priority-50 flow that matches each known Ethernet ad‐ dress against eth.dst. Action of this flow outputs the packet to the single associated output port if it is en‐ - abled. drop; action is applied if LSP is disabled. + abled. drop; action is applied if LSP is disabled. If the + logical switch port of type VIF has the option op‐‐ + tions:pkt_clone_type is set to the value mc_unknown, then + the packet is also forwarded to the MC_UNKNOWN multicast + group. For the Ethernet address on a logical switch port of type router, when that logical switch port’s addresses column diff --git a/src/static/support/dist-docs/ovn-northd.8.pdf b/src/static/support/dist-docs/ovn-northd.8.pdf index 5d45a078f14a316f1333f92259a9580975af3475..25584a02a58522e28b6ad0b546e0ac1794ba848b 100644 GIT binary patch delta 103369 zcmZU)Q*@wRu&o{2wr!(hyJOq7`NnqAv8@g}PRF*>v28o~zw?i?FV5IEHRfH7b+gtp zYpxoMM3{_0sP~u$wE7$lxX}JSYu;FRvrLiFMw5+X3_$R~pqUX`wj{;;wHjqy{T;_Z zo4gi}dO^D~S$;s=Doa7xyz#`7Hv|R`A^3+OZB%NxT65?vlVu!sKLdl^(4mhPC&=C)OwK2cHnJ}SaEDS#U&ks zCjcZpD5~v!FNQ>$U^&p$vH_uVIBJwl&B~3)Y%{IQUTO=~&nDZnmUbT%nTvYlThG69 zC%C3t7sBBNup+ezbrP43v)Ev4_U7Knv7;;^AmK|vepkXg%yB-1QaoZY7ngupV0QKn z%>-cy@0C|tsDf(S3+?ij*aG;;$&YH7u6!4fC@qtbVrDhLNAn0?t`x2zr+u3SV%*mu zH16w4f;BI>8X}r}IN2TM+KBOHM8Gmm%*zWZRpj{rsG0znng9%~PmcO$LokL44}C;G z2p;b!-&ahHs)t^uOo#M(f{W+Kowcr}EuPF_A1GHc)gh*PN$ulR z5{yeH_V@a+)q3kkD2v^n%uysB%gck%A!DVw3AfEZk9-G@I`|em4V^$qHG9i9Wyh-3$$`3gNk1efo}z{CcDdOk1ZRXw#wP9wbF=d09O(n9RS? zr8n#*8p^=U2da})0_haz=TUZ(?kQnTGer-X^^-4bxc95@WNe9iobkm6jq-3YFqg1A zvm?z+`PczfH+*AA6MUBb-d^v7lQfXl+~O7>4^CpuPK2}iG|*csh#8EkP0Vh-)GH+R^Y5G48?20D~rGt*|YvMqb(90x1-#X zM*9fA7USeu<*5|1y{j7Qd>0}Ej+)YR`aI0kx@cNxXeTwKAq3EP|p@7jn(*;t}O?Cgf`~{W+ zmkpL6>?*kyq4YbGRKdm8gd56_v6|!lh150}yyi zwMQ0{VjIn3a%{@3fha5UPOW6louOG|a9){w63$8}6VjcfH ztLOO!F!+!-i)JilQusvLQ=uP_YGW84G=cG)DfD1Z=}rrsFd0Zd79Ss8D_#7oPzzMI zG=8wH(Vq9Aic?m#htpV;?pNmNO1G6n+WR-<9GX)YtYL|^s4X2e@6$%~vQO9Q`ou_X;rD!NHjf305-ffbzQLUjpU`&An;YiWr(!w2=pll4d#g9e6Z z7L#&EH1=Qjw{ww=(oVK=_Njq@xgWT5`sEmQ3e>$6Q zf?T_Bh(a}3LcQAn$W9`vwz-3utDB3tu|3>>%F)CIj+>2yh2;MTRvuQ46z5eDU`boS zbx|7a@4M!rbt0^1A)S9h2spxID0i<{VMvT+v6#k$1EYmK&D>0arAlB#rI&bbz}knOweoO+Kwq35-=wolT;b2Ixe|weLhayO+0SEh{9xw zR$zqo3K9Of00$qZg8)&J<{zC;J8rl{c^qe02=x{ z;)Qj)-LP@gt0*Pjri}xJzg55KL2>UWkVAUy_WE)EK5$tchp>ZfjVi4HoEDvO$E%RG z_qCPP?puusj|~WI=WkI>*IH}+i$1w^tL~ePMBx)f=i2^L(@YLxKB3&5U8X~vy2pUJ zmX_Mcx7HWpF?v6N5|tpfOXSZcmJ#@NC-N4Q6GKPL@y2&M^>qFa1OSwPeQWsJ8x93#Q(pGEvu!a}~vMHFGZZqe4>Y;n`I8Nz>HX zo>m8s+X1ii?BvhjS=pJc(}z>_%xbGtANb`;My(KTzG!)1<$#O3VR&q3P_zR!0maMJ zru;XxR#IV%)Y^3I%(_?(2^xBilR4Q#+j%?KdKkaP_IE`0vnW1*iT$b}(`^;g!T8qs z4Y$%PgQcR9y!#z)ulhqgoYGsjMEaf&6KV{64Ri-q?8qMUDmF6N&;q9W9UU#`iDa&#y%EJU-a*58ST3do^l z4+%PiUi?I|{p|}t0X!JKPdYUfhr9Y#<~_Id)0LKy=57R!`AF@$Pc>JLu?`5cv)L09 zo$OalRf7!wo&v9hEIiG+W^PqkQ;apD`o$;Hbp_H-H$zqEtENu$;$Bwif-^omEnA$F6-D_+*`@lL8*1xaXNp>yO-yym80l&eFt5yV znD4X`6On@cj1Oi)8c+1<2y`qM9~|sglCaOzUuQTfpp}yZJ1XgFg?(~uhjcbsjt0GH zH)^=NmYBBV91~IA#FLSpb_(QLeN}lMU^>jXDSKK#@QyeE-=~4Lx~0V7Yxkjl`PMI6 zk6+|A)|#5pIY}A%=`$yWZGx==C-d6H4TEaYtZ#Ftu{Y+U0)|@st#Q}ICN{`P@Lh!t zq121J&zs9ua4E`*SAo=T8{ANMdf`OS-1ME7K7_VYLbrnUyPhx6_mP-Z3@&5(X<`O zN^)gr|0oaZ>EDrXnCR?umh4nL|AuR$2%E)9ISG6kv?>Q!<&bM*=&Ks$2y8y8eYw#^ z`{^Gd%NySKF`D?5Y`^?lQWZr{x|}zYs}2eQ?#f{>)e~exekvbU!~LQ6(H#z~x+y0V zl`OcK2Y|B|8|V@w2;Z{@P~T-O9wztL^hU;=_Uhdxx9N2l+$Gn$eOE3|{#)es>U zC?;g3S4s+rcAK{=hPO}c*Ygo;?(u$KKRc|xU&>zT`8~~q#AiluOVWrh^I*fM4UJn_ zR9NCB4idNLTso|*bLB$W#&vHZb)KGtnFHxYv375hT}9&ABPaw|+$o@u5}};wb^YKo z4A`UA!J!M7%{0jH)3z-7CniV4eCGBS@X1P}wK1hSW-)uI_^Pbo7qQp*6)vG+WOLNl zKE_5W5FQ%K@awWKnbid!`e*u2Etj)!l^a>*3@t|fS!0HgV)|EhK3Ff7+nP{T1+cq~ z@#64jg>fPwt_y2WVfG~wzbnXIBa$a)6nasnT*Cn4mul!ho*OW&3Va+RliE=kK)bUA zJaJjvW`b-bYdo?{OclOzo+qu3@?bN(PT48}*Z<5-3MI&iZ4-rtjX9p+{svSz5v~UM z8ft%azmSEB6GR0E?3h3QFqgbFWKt;iJ<5T$xro~|Db6b~!;8gxoJe31&-x~_Z4u5x zzgv(v_9nvgvE!&y3JyxN!u%N@0FUck6B+JQs0wNFn!+24)_57?szP zvsF&0NnsPUA@c@4ZnB8u{iS?#oUl3|I=cQc&c?O6t3R9+>HoDoUEweVpdWs$NS|2D zk${{@Djsawx3J*{i8ZY%(NQFnAY${(Aw8eW2j$S1Xf{zPAN_3+!8fsTJ66;LQXhYH zJK+9@!k|qA@_RXqGJCUQH{gwq3YY3bM*K~uluZ>hQs^o{B5W!BHVA)KQ2r~e#5=AY z<}W!S(j1&`3^K6_d1=7Tid~B3b*y9_O0e>T>yI2VQlvIw=z&Xljyd0Ff@&*4SGtaj z+f0GLqPa29KU+;@NCyMl#E8blWV&1I^z-hhr|CtMk@_=Iyac7>Q&z=MFa*OgMJ&ZP zx_?6Eg(5sjHRc%jIo}m9X0FSEpq^o}n<~e1H+p6t)8HH%7{`G>gjw}#~1Z2!cXy+eb zH}7O;bC|W~pJu?jcI>S4m%q2sE=G$7$PSER6x+P@ar`fD^ek`0)^wq4x*0gO7 zRg`o_D`dI~-ln}IwOn8oGLFzA0bi6BT3l=QuzhhzV%2R`;bu9beoxI8j$HW`Cmg=p z(xQ{PRP*%t)P3lvx#ssu0tFYuuHwreU! zx&AK|vT?GdKg(#nT zmf}C$d3ATH4sASqaQ9;lrzZUdr6*+=D7CLFMBKRzzrZ8`BYoL0X>?fnv~z7Grtzv% zE?Yl;pG+NivZ4lA)u!;V3_7Bu!%v1bq~vp6?}+M5St|@l3x$g9fRCgPa{A|0tZm|3 zdPuR!fZK9Cwtx)C*i}q;QgjY+EYaPfYLaU%w@r_O*d0TAc1u`9?ZM!s>erbGVvE?6 z!)?nT|JO|*b^&H{H@Hk@^g^SW{rY%^2GxA0QQt+-LtS}TwCrL+QLmTf244 zi2GTZ&TG+u4L#>@Vr&l!`&`qXfPx3zUl#+dN^KM%cC8U~s|i?ac(Wcc_{JRxw%J|^ zlyWMkxkdgIxsmc%pSM?E%5Pe#yNUk`_Hokuj`V%ex(}$0x){?@zVfe<3RVO&U31$z-gS#ZxZ+vP)u|jQC?-SAlIl?#Rl604 zlx4IR5QemNq?Evt(OHq5RtMFk4lRh6$@UrG@2QQEm1?umo@+Plc(aG4QD&BfRWgAJ z=IPHU5`Bj|E^0t+jec^)A3kwfCIwi0BEebJvm?!!x>`#&AsA_0tS* zXC(B#C$Saqz0Xr?meksuES=JZ)NKI*nQgZtSU5;81|-NaZMzt_wW`+~S`4xqCH6h% zvsR==H`x7cV33b#7t5R;QE2s%QJ`HG)cEYpbvLo9?QBv1R*l!S`VP(sEW)-6o38p4 zHl4=ulBnX!*gGHw+SZXm3Gd@ z(Ha&(iygy%FZi;>m=KV$>3L)%yOSJ8^pAEidGtbyn}~pDiDR=*5>S?8mU2o_hzo zfnZ)JnEF$^_9LP4K=0v5p=}wkm99k8;!}A0EYq_0TQZVny$(MO3r_Uia%ltmMDgVu zuz~>_+k-P^hph+U-Wz=XYq+ArHKcSN3{AhlZym~|Vd_lPzv%B?c0>k-h*>7WCdd?H zlAi1$u$pDv8Qa zD}S_52ZG_OsAa(t7h6{+31H2vAeJU1N1=xH-f#kYpIHCtQ^WqSMvH<`WjnD)%O95s z5mV01(0T}J+CaB*FH}ULZT-0!uDNG9OI@t02fZ|)nb3R_LRzH0-YrC;u zkB!$9_>&MUE`yW2XypygX3~nYF2@8SBMTtCp#J8fl`MZ@Q3aro5()f|dl}JUd|?g) zpTaE_#NzoKWy-4qvy5z(s2$(HW?{+>e2ba9q|wtOt5_egSgZEBw@7fgrhla+^aNWi zgzlLVjL@FNpsN6G2k8Pd^qt;3TLfUn+(O)<4_hxJB8T3$83H&AB#Ig1avwClm^m1( zMD$i4{3jazmi?JO+oUxpY1Tib{{;?ZDDy^AYlaiJ@zo>HfpixVUxIB?AT$$^x1Y!) zr;MeB=UKFmHt8vj#2@y*1Riy*U1&e_l=ChvY`F46)5rh^s{A86lX*f!g}gyjRDTA@ zwxOqscC{e2JaSQyG6-k!FGj^?0?2*%S`reI1v(Y&Fz#IKhDA>d=i4tcc775X|ACA! zC@-S*u+ar-qOTt2<)g|SjTo#vK3T#-QXD)sP5%^2)pBIcBBf?e<6v{7C7m$a7=WW? zv;?SZ3y_cOvkqw+_NADi9@Xv@DY&?*Ka_#1BUU% zHk%Fz*l!7XW;$_piPLyIa%~?{^4J{~bh8Efbyltka&b6ir+cTk3)kioBMgHwZ+Pr? z7Ok}oOcGE*L4ouUDJY1iL^^Y;uoLcBJVuph0BQ?EC)Ab&tvO#wh zih8|W4Q!j>m=6}{Q_DU^v+Qc1X6+GI$G`&sd~pM)df30&qP`OAUbP*U8YqG-uC)I4 zMinV9(10)@LYP86viJ%OwVQuYMXA20sa>=5##%527w=v$CoT;Sh*Y~4;;ef?Ik~8q zDcH=B9%P`_L%Bu>E}OVDKL_W$3KDRgV6%d*S3{44v0g=>v9lgbRR2`iMs;7XU)}@4 zmc1W+`pQ}Bci?!KIlRP8*+{~%cZVW|J2r$?81iysLvh73;C&!gSAZ1T@0Sd_j0?s} zqr!58F1aP2FyrjzIK-ngt+=`p5ASfdpuY#V=fS(pi@RYW-*Oo}JiTl#Q}p<5oEb$$ z0jYNDa}X=vRLzFFzYnGYVYY0 z_BBpJ`EI}5+5Qg;6J*#laR%k+Dejbl?(AtG9OYsHXiL?usyFSaJwPCc|jZW$Jv}fj(^|oR92vFx3 z%9GF(GwZxEu!fGqycd-*ncgR*e~&is^|($d4(j+i+{RnoZG7S zJan6Cxpb?*c98-uyC#|P<8BXq^qmTpnqWawTA5zBaS>xE%|k9sU;Ox{6BoTBab#VY z6|}j{p9671?ew?PV*I88s(odkoEB2)iEk!$x^rX)WqSv?xGh$Lm-Q^k2nXQ-a-e;% zbYn5jxkgi%a-&f~-@k2>Q>%x$6O$bmjaIDQVk8J;)Az0M5L59SmhYp**Wvp`u z?v}4Sg{pB;nrtX#ag!&P{V`0dRdP-wK$?>&k~MgU%qP@19U@;)3sVJZNeYrNmOU87od4J!}L1If_?#aj9L7 z$P5W7Qk&Rr2aqR?{sIlp2dd!QEB1O)8&0TkV%})X=jgtO_ZetXq={y5XET-H5-OFc z5?rws9{4Szypl5=FvNgASN?>qSk?ytu}xNc=ySK#KMTmutdX^!AhO}e4@c!D4Z8iV zU?=UBF%f_8bf~F15`@SI&pjkkO4Vb$u=EO~#u|$kcp?-JZGr^8yUN_x@@L2dp3xzBKpsB^-Ilxx%G1Scd@YNSrNu_{9~PjoPapyX<`TbU?_zd1CRqp1U^?Q z5?T0$z)xCUacC9_`)eA5|MmK`Rx;eq<7$p`h$bW_z^0SyD7w_3LgTyEbl~w|IcW^N zi%&Syr$8mF{<^=UX$L#SIa{5p+7^>43ooGA*67$}VB`xB$*n2peD(1^k&_c(HQZ8| zV{T%Qo&DJDuzmr|_|Rdwhml`d(0}Zn8cgs;bgE`T9NhV3!3O>w2Xhrvxj2vEzA)GC z*|yIuncG2&vQtd{i{Xm)a^G#<$>{1l~x+&xGSb6@0Z%)ZRm+4yPW8+o2;W)L zz1PB&c-UeiYjY?G?sUn241_Q5zBEAVft(fd!W;E3%SVhuDMOK9$n}3UIkKQmIU^Dw zZelCq1y2EVG%h=v6*@kD#veRr;jP^yzDvpOj5=}RRbcq5t6j8=+D8!=*0BfnoY(r- z3Je)9>2j?1-Bs_{_`sR>c$E9|&Ax-?&D~~R_MzOy$#qivBw(uoWy|gq7=@U)5r}Ug zPq}w*=ippY6wKnuL>uV-2ZfO794xF<$yG3cGr|Ro?5k^pGD%vf20p98CBUaM-i<>s z4Y9}%9lCO3jnj29`8{@KU{9c@G}>#LhQU^sHOxSYhUNm>`PbKXsRoR&=x0PU-P^(hd7hKtevg-Xpn9Wn%d(gibJ84#&(( z_dEkbX+k{Vrscsr#pz(0+|-mR=*m-Ovy9;#BF(<3b=9>s9^fb)2tyB^iG}0@2?b^d zK|t*OTIfl$h~~qJV(^_ylRkEK5m-SR54!lkcR=DbdT3PuiP8!(S0ze!WT22-NN3|# zvnlX(&C36Cz6WkkTrv;p76ILQ@p#5+G7)$(2K6wjR67y~a*E1Bc)Ipmo^Wb0Nk&wK zrvRQnK~04fH{$;iOYeVK_7F?=9rl*w4Q_#7)rfSYR9LqBkoU28e<3AZ)H|CAkpAbW zov@Aaq_eVp6AglRR1XSfGBU0)hb$CFIpOTu9T|VGTIj5rdH4mliKL3den>vsGQg8p zWWu*+=DGR!9n&u^iElVbEwpzmH0j&w^1lg&<9`T-m6t6g?MVXIXhHSQuM_^*IV|Bo z0R^M5@>cyXsF0)GY|P`SoG)vkL24ez5Q~?Yj(^P2JXQTjI312l&(-(MjYuV;NHGFG z5%hm^O8}@y%_#TuQ#7^xN9p{4Jv~|+lc$*PQ|TiD3s6&!Av!cT#3Xf${UT41 zImgqo^Rbnludtn-PLDAR#7r}hFSFOWM?>t`l*b7PCEyCOn_t(7?pBz;s8aUVCd2ny zeyTH`)E8vN5VLU%_1myALcA<`qiB;?;DALPveVBS!`4>hi+$sL2nQ6l*4y?6K3AvX zdRH^9&`}t-=uH+Yq)#G0sp&Y|oPEf0+WT%_K6g8LTzG9eL%~cw^%9Oj^max;%N4@k zSr*@d|7FL)F|40qTdyDvJows2(R6N(70zHF+TX8);tqcq`R1`NYipXiPo%XCTP0SK z1aR~k6T^+sL{3J#?OnW(>hcoha?Vna{ z2#%lCML@YN$+v4T%5$uVhrRS-4n6zeSsG%Kdx4A~X4r(Wd&8X_cMViG*K!5$X>#kp zD<-7$j4XuZOPGs7yxu(jUToN3^?B=hMX>CvPqfs;YZeij*`t!9Q-F;zA2E~*yPNd2GjtiZCd(p}v327t%gQ47G9gyoWU?Hh>@M@xccLt9r%;#GY_GA@sX( z^)|=UZeWyD%2<$12Cj)JswZ+V%$?uaL&?;V|FO>g8$YuU)0$w|^*3tloLE}-!w;Yd z6tjfq}4WSu?+ZlLki$lNQWwix*SM z5gNx6V3lAc39cUe&C)rY0!nbe_8xEz?l^IfdJkIs_M?M`PR2WfXL_c}g?&BISmg1> znUbl{8t;}Q-*G%}EM<`uGz8f`%NQ6o6z%P`rM_<7gJU9=5Hs%lc1U7Y+huGlghKR~ z6Yk)MpYrBlZ{s(9VHqiQJtcJRB2xJ|FOBFKZHj&(wrnA64S6TE>?^$)LS?eK^BQPH z?F19_U}itIy+IP(u`2*pp_x>PAFjNMWaO~DnDP5s2<)ILVXY>lbByf;IT_H@Zl~u; z3#|_(eH=AXv7zzSQUAe_h9%Ewzaw*QCpZtg$jjAq$adHOW~F6vKSq$f7W?7ORaWPg zHcY)Lr*oIZmfkg_V=#_j_wrr9EY|XTn@+H}MY|PD;=5%+Cpf07ZEvGigT|4?vI7<| zxw9XjSGpG@#Uf2pMy^HpMh8r#_OVv|m-nY`Pa!mPGEmcl>9sB?ayCtkf!1e>qf3$> zA8TaYS8`yZVv0pE{Wpu35Q-?gp9=hrx(WxI8D5+&LB%x;I5lg%MG%~JX3mQi*^d`U zL14DP!z%e3>o=G`GhI-?i&9uU=3)4|%hJLG6l{x(q3wl{9-!-_#|Mt-{i7&?RR|Oc zRG!oOu*?6#(WnbnAwSUlA+Z5D#I9YxMN3h}L^@A+TjmEUuO^#neIwq60^T6hIYlV#Ugg|0_ylj8#^`bxJIBYBIK+eeH>&F_QHShIZjC zh2WZL_|I7`6w+q?qfTTh^eRa<*EP?YbXxF)C=Qlw>VwR(kQ(No0t2oo#fZ;XT*pVE z>tGSv6qnYzXhNfwCQ;Z2!IN|Q7PF2fv_3>0sq8-n#;hb`s%(HisOLZt8l=CVlR!&z z$V2UWO^rTo)v)Xa&)GkJb8)VLBer(J5w%7>a#~us3~JdR`VsYLM3H8Vk|OI-y>a4% z5LyxsMVe>S%23&(C^va44`=~K7)4aPdI=xu{2?^=(=i0d)2LDzIN`ho z?fq(M)fdXo5gs!nf}aOtw@5-HVqh-&x?=|KcSe71S{=W2Y&qm^n9Q z9$*fk8~Fe=0Sb{7-Cs~f@~<3c`kNfS6m4kK1SiLF_MaBGX1>WU8m+|dc$s+4-^<=y zh*C|E4_F6BbLqh~n}HvOY`Rdj6G+iG7fAl$Laq3sz1U9AitU(Ql%ua@&40m(3;>oq zlQ6YmNjY2g6(zFg1iMaO4?2t}0#RQ!G?YkHa!o+kHJK*iwPkj{<5}DCLkm+|_qho{ zy3i2JeU~hDwEb;MTub6VSXipY`BkpyTp`bRgFYPr7qgKOgoEqTGd(C<@aHZWJqC;$ zb-b#UwXc^A(nJAT3>=$V!_I2XowngeXVX=_YEQvr(2M@f*?P4m_QWXE>(utj40CO_ z?<;UL)#QzM6icUB5=^?6qNE^sP^^KElFz~!>vkQ#V&O|~AS#a3$j?URw|#;9D?aB6 zi)}$N`4mJ+jK{W6!2Yab)OW$LjZ-od7u@xhIp|KDgJ8w!)D8rO^nu`;>BS~utIZ~c z?%gZk$a2r$muC9nMS*?y@;1BR&LIvvApjuR;mB#Jn{E6-#z7UB_cKc1(?>j*>o=-+ z8oXi&i^X-D;(oz52*pD_k{T3I$O6VjbllMs2t!8@H=BM4ohwFIiENm5*XxB`C3R0at|z1!$rP|z%bIBOck!O{-*Yyy*X zImGe`Mer}^w|_~oBnf8r5Eu}3#25Ix!y?4g=UIk9^JJG;D3ix~Rgk$aM`87RaP|D2 z8BzJo6JR*{Fuv$cIQ_)~tg6_UNeMOUvK3e}di3&+s$s1sSnJ21u>0nwtzECH7{;*qfJ*KrM+uP)g6S~;AT*@w3mEY3&sMx z&$Ydz{W4o3-iVIod%oTUM>T)Fz3Q(VQXaKLnj|q2Kx^HoD_5<<96L@xZKd~8ucwxxTR3LvH`OzA4 z7ddr2Mp83fkbCOrLtc}7fSxwqW5hlljizry{dDv_aE`-;QaU5aX{R)n8`3XXJTEz6 zHRIf5_c1)3EvrbyI`Bv&yyLc2IBmRBq{T#8);tx-^mCihNqC0#7mw`GUP7R>$j86~ za-j5%v@BxwHZ+-PD%we*H^5)oMcZ+;BtTu5?s6vam^&)BsN}@(5Sb!Wd&$Z+x?_K3 zad;>#eEDR-LQS?gR~Je;z%3LHr5)Ih3f*;7K4OIMHp|1A6ZtDiRIXSVP8+s#(E)zK znqsO7{~54AA=>LdJ|EiNnE^oeYT;!5mmxsp;rYLgfSrY%J6!`DR2)cIA4dIqU6+yF zn+jtLf&fLnLWHqirNU6h1y@W^vWS%iA|p;B3|f#OaBTCP`k8Q==NNo29G{Xc7r~g+ zE3f!`zEbD=5++VciTbqwq_0;;*3@t=$EV2{A0zM|p~#PbaYehBg1WooCAnw0e{!#}BHMR6>_@3dLJ{Hbu7A zsh%5EtRwAM`hkeEFipNr{HXz&gr#GdjGYi8UqerS0YUyFRN%FpPbb9O_@`+V_K#Qx z($~nZJ=1zxNtLHf2NH>eME`Y7_N;JGap(Hlh=#N3hD z3>B5K^}M2-N?j^8&5}c;cLsHX^KM(^Tc`QT*B_1U$VQfZv!AA~j}wdzuH1k0TRQ`| zp5D(^8x$ck(gE=!GYQ?F+%cjedSwpk-vCd zNQ-1SApUfa-o7;U)q)Rhq76?0KO&vtsBkhrd~x7j)(7}97RF4S@$MGes%)YonuyGm zGhlqKP+WZDFWGK!$@Xd@Xh?#xIFQ@}K`j&ej6AMf z{*^Gz!T{=)T>?|esPh@^$84_~#w69X)asz!VWITnjdkI>LlNAq%nk?P7(~A;p>!cu zrXzzS7vJl!N}K{f6P!aVJ4Z%@8D%@PCxgY{>pKCEf7Wd>>DuD5B{NB%XwwK_z2Ov^ za-c?_RN{rC6fp{%YF@oKMku9VGfj*rG<93s$w2qpe|=D;p=RCh30E;EX4qj2#3A9U zlnM2jTC3AIl_DQ{^==U^KCqCJ#>E)EKt_61)x=;15&3#q4}8clyi;A;4dyi4jzoSZ zl6;pe z0o&ca&zqa;FF5ACR8dnTVHP8uw)OT>NZELLa3Xjy9qKuo9+!ISn_fG_81l4E%%$l@ zvI7j3@Ti0{tZ;W#FCie;4g(KA1`lgp20Yu|JF#F! zynf-<1u8Bh<2T2uaVS*bK&0{& zA1j#VxJu=S-J5jbh1U78E8t@=C_~UHr${o5G)c=HV}^o4R6BzV&46YBvmg>tkHW_T zbW!cjflwIBielSj(F-9-U=S_(t2UK>Lv5xQ`NF3OBuVJuRdT ztQ`BC4030*pVvJeWv3tTvvNY_Cicj${hfb{F}wEn)y+`xo_H~ZeAD8hRhbN)9d6FL z8TEKU?o=kM=-h?kJmlUe`hM;u8Xl2236^pi2|{U%ijoQX0gIJyn8dUzv=c~oB&6ps zrL3@B)v^SxRztFKNNuGUWMLxW@4Qiji=%)60Y#jaATEx+KGi0mUd}@v@vr7x0&)%; zGpi7p+{fclM7C#>8dw4}(3$z<cfc{>?e3h*ZSrl|n?vd75 z*9nB>Kso!=)u+`w&II*atQ%1-pe5Ej9a z`Wlx!j08BX56}I#J@f>b=zcvVP6vxeR>_tH5T=s-QNP&XcdEO3Hh^`h4|*4#gPL@DIS;KjJO8b;Ck|HzLEgUlL|782xzZH+!%I zq5d>FdZsVSq+VG$W4-Fg8hzaz$X+*X%oJ0+y2d|B`tcig_2jFCj~z0G+@iB|sjy4e zm+&FrnO4i;tSnV^#&!yIm?r3PY!G|ov?+8TW_F`aQ3gMnvssMa9TBcjiv81uECQfb z4k*i_Fvg&+&B+*_5-4<75ps;-v5n4sX6n3b3ACxF_u*~OFrCpdsL<(wE0n!~pq`hq z;fQ@$a+8p`iYc>7CvpBkKp-EMcN6X?5Ixq^C8IT#B zxVZS|yK@xBjLOE*tD<5kxEeADnHHJcG_mw+CMGK_;NiTQ^7#!?fL#?_M}BMw;6;N; zbrjO5M7W$|Jkyv-*kuAj<0_uNM}yf?8LwOz7d(T`ZMt-SJ?A43`epfx=>SUi+dHu>k+C?!oMu zJaD@gBRmj_VzpsXs8fyhmE4_dl~0XB!i_ zQQa{SxtLuLAC%b4qYA_4mjS0KM+=GT)f6mJaTp0RsNh{~US|ZB(*@`)P$E1YpE80f zIh@%$E&6;i)&HezOXlX&rN$jlM>1MnyslpIZL^QY{_ZkwtX>PXNgm2!DMRugH?Hy$ z2$DG|*IiT!NTkS@YOaztLY)*PnUT%Q!8Da^4#FWO*!GrjJeHv5VgNdRu(Z;zzicAr zbvizs#21?;g#qCWXHNyTpnqu`8-mEzllYQw^HZ9o^mWJj}|D+75zDTqR3c>pnDAUK5@T3@y~|g z^8S~X;r*YzFm^Up-t+-vP%&U4d3_jjb4Jt6oScO-^c}Kbor&>4sx(!ae8~7>Xp}RI zw2zbwtpL=C#ytD?J?-1b#(LZplrUTJFEh;a1H4R#4#(}0_T!DbeAqbL!k6;z_6>dI zJEzBcO!oZbuMroiZUeok+sdK4vzTl450i%OMrPJz=VTcftj_9+fEcFtWWL%il(w)Ef3B+VBNIrW^`K|!&p zR-ui=bZ__3)|XG*P7a2_H|{U;lo~<{>_Uoeg(EV~?GJFFFhI9y4?+lP!GPO*Gj-E9 zS?O+OjUQe0!@>JkNdu6U^Gr{iu*Hxz#3r|iZQe?{Sw_;?rRz{*ANx4mhZamv$Tc-t z_E@++pgg)z{^WfOQ@O7ux6J(E?_{xt8qLOs8R{&s{Q_j^9YP{t*D5-&H|8 zZr)7^@TUEha4mDop^-R>T`x6$j;cghMh@Wcz2|8Na-k|=HT~~{zhLa1#0|`V;|t3X ze*Nr^KZfBGT6AYfo*SX*<~giAu1L_j9_IQA7wD@b)2(w=nXH(qS(O!A0Oz~)?MP6r z-XQMM_^P#jqKFaujWAxdD=aB`HpI5)SABKOq3dDHA{7|lBSf=d!F|BN?-oQP_Z-$uLg?`DZ>Qm#o=Pxc;fD`A5yJ-auq&H-d8 zcc27TTwicCz_v*FXSjOKm5BMY(CS@j+ypo`i8#rt;7wZ-e_&2(YdjTkDDl|aFb4$0 zFMPd${WALqBAqyH3Q7PRQVIu3OsXj;U4*0*pG9C-u{sM#_`o?l3MKTv#iLsQq`AOX zCkSM6!fvHmtU^y40uZ!zp+5V4FBO%D#FUD$ zbI#!<&MtSQe@shTqOU4gqd({eO4c(*q5E+eL8;xt+V13#sQ3yTkwQLE&tAH4cJqky zE>`&f9j%@4r~(%zJeVP@8AaE_Cn;tO3o~KSgH5C^e<*AM;@7>W`cu*b@^Df=+ahnO zj;xz{H}N?HntL`8Jrv#DdUZcxePhmG2tzz3Q{Yn>e*=9RWXyLD%}k_-<~%~17cFN*Ly=P8YASS8LrCZ3xu*Lk@jQ7psn-}e*d(1IA0XYZ3 zUm%#k-?rS9+q^+nmz8yIhZasL8?>x!xUpkI#fN7zNL)xZ={H6|oX|P&vkWOxyc+-_ zkXFyTe+?D`&72Z4sL~LEv2XNw-*ipBws;O6`DN*9AOXIlN65!*Gc*1$Cx=GX)&}$P zPzFFbJ+!1ewOkTFf~IFGK8tCZeoDb7aiESxw~5zbf3%n#JJ(!nXaV2>*IYm!i_l#priw>q z8wk{D(2P9N(pV^4<-aUll~;Y4L%iN~HWV@WaZ@x!pUqywAxD*$4yXs|R9c{Ei{`Oh zLJaDv?BJ-odkL2 zIxj;h<34yaGZ_7`ZU%jiopiH_3{`_nem*&Htf^o zpa|G%Om-xco#XL_?BKE5x8>gKyR56KSoZu%a6kv`b2p|=;~*ghe=XlayFe>_7sp`+ z_o@{BZJsZXDxxTXehtyPhi+cMS@7k_>0BgDo4yogGlRevteI|87f4w4q&4?te-jGC z#`Gf%nte$|?e)dilb(9IF7)qd-TjIN3%Qz{?XUgLa8fz$sn8XbqxbQ1H%~HhSQ#?v z$;2`gGFY7qhD26a*HxF7)d(GiBPz3`h90cFJRXxg8VVgr9vpeUeLt;6(AO-<#?=^B zAJKp|tgb#@43LV|@h-Z4j{xb79Ab#jd+*N z;zTp$1Uu```v^$w*9YsQlq~qfPLZ6vye7|IKc?iSC?7WWP;=jw?Q(*yf1Ck~C8y{* zj%D*6HLC50z|B>X3_vBZedOhfZ;8WTp}>(Mv>Geq&k+U62N4A2npaMcCAOPUNcPMX z!Tas72!!xpS?4PP%{H%=2ujUiTeQTYJdH9I>Lx*qjWI@E%8Yc9b{Obzgu z1K9&@G8Lav$N?PptO1u9e?qUa6xB{yY_mP(5NQI3^2BF9;U^TT!jF+rE?OPaFM}~v zlMx2?@6^{_h%Pj2r?;V#yY8z=kIRMwW(XbZNDKqnlvVH2GdQRLaY1gK zMMBVhU9moFCrFICISHUfl_j;<+6p-7^Vhydr3^6InFO85`Wq@?e>h5r1(j}r&=y1A zGk^kBtGr|t)JfLHoXgLuvLr@IWnAdEyw_KQF??T=?#c5MF(@MAK>V4h#K^Ky$%pb5!%Fvmfl8fv4ukxSPEb~ zDt?ye2>oY?S5xGxfA`>v-LC99Gr{v^gEYdZt;7p0+Y?{>YJK(OH+l7&y!uUE{h!Dy zB`zhY2=eM0(bCNBJ4{xR!+%vxTrarGm)mQy#0j58>+a5cbw0NRxA$ciR2j71!40b7 z|5latb7&kWsc_N3`tEaCvf;%l_E8pl-e(mXltrram?0!Ue}COn{q~Y%JFm&i)K;rc zP+)!kp;;`Z_4HZV>{C?OM+F$42(Syy|779+;$(BQ<;e|o!iTrmmu{$|0ZOb^?d0mi zEUDC>ETW?bM3qxdQvD4NUXA&YKHgdC=}4dBAQWGBv;FAV>tI|0S+0EzvR(mt)Z&9V zr*K!RiSkG@e-wV^k&*C2zAzl^r#hBt#=~yP&GrqToKP#nJ9L6X>d->erbBWD1;L%m zq13nc&@7s_6Y2?#UsA6$^EOZ)NGHX3pn9phm9$2*wY`hPBRI+fdY|p(*1fkq5w7Nb^fN9{yGT&iqzsHX(u@= z!b9jg%K+Ag%4B9swxxL?VL&mtC$*EE=Ag&pB=wCKHbZ4LxhP?=v(*wDP->^wf^h0= zj3N6WhVU%&eKN_$5JCsDBfChV5mFt3v|%9$f06eJ9kPCWF^F|M7*Qnl*JduGhrjb| z&euTV)4$IPbBUZxl+dU$WIC>lH_@lp2GAqNCN2tS8Y<(Y!GLwt-=~aM1~;ODwMg=?JYh<-myXnO8py3PrRDU`<@A~mwylt+YMVq`Q*Lh!T%8umQExE~y&kGjQIL<^=_8sXPlCN(U zTvDxh7UgwO;-f)NK}3b>B_nw`2mG!^Zh`?R+6f*4TP62`9N;?mfzXz|vbsr^xq z(~Tesf%*1q4(QU~i0MF#Z#zm(fC)%jURU+HY<~w|81pk1_~VgFAQMF#D^Dk7S0V=) zx`=sn*O47uLAJPTwo99+LNc%)xQ=n_B*R%5O~#eLV>YN~(H+DP%<)unRds#Yl8efc z6IfXld2jZpT5@Z)V3Jc6J1>?kJkob`?nSV|Mei&+*@77wb0JmH-PiuhP3dT5=F)`G zB!5%-5to81Nmsh4K(wZq<0+M~Pye_>O1UqxgV@2Y@_!szg6_s_YjFt5m9)HPhpT8I`Ef=k@xK0ZYlb$JO5b ze=Umxse-KIlOnIlCU;n}ti}?^ zOzDxL2Lo?Qppn8`0E{5O1gDznKdyFdxt;+Sh(QYOnXR(?XPhVOL8=-g-@3xu>!jX^@d{{#)Yr); z?|wb*o>Aee-ncu;PfAwS{pe4th*O{@?X%hD-Q3Y#-=Nu5eJB+*>f}dL5i}hYY?h7y z#{20gAvBYGOqj*N#{;6{7_#8T>GL#61RpdyoQ@d=Vh~lGc@*4L3($B}Xnz@Xd4Ofe zpF}xp)@uw_gOYu^7&JNBL+$QO$YDt;9dbV0rsQ2&U2QI!mUPXwDyrUSt>f|Xy6P&Op;43giv{G%?{ zw#8X;XxKCh)%2S&ZH}Gdf#`6X%vQ$?(g;rg(kO3Be8sIPf=U0& znXnRWz#0)Uj$^WIu0S4bJ?6Nufyr=X9%2rZfQ;E3bJ-{XGGUQ!uzv@ll$3d~@f)B7 zC3l+&E^YFTy!zYA54VyuH|UPe<_>64UAi3;rtGflxntIk_%HZoky1`+G*OGEpx z&1TqofyQr}YsAdF;eTR)Kk0${28hKFu?k7ec5Y~1jCCg1+~%9<<(PV5EFflqj6rD< z+AnYeZYVo<#F;2V)*nX}bTuB9QO1=E&d_|J9=E(9fbJ1969O+xiM#lM@~Ov+z(g6t zZW#sJ+>yjC4h%i2e&l4iCv~J`52OxIyY`X=pL{fRhV>wIlz-P)HgzOaRjsF~lTgk$ z8+YIjAUOQ`i8DSTYN_nF)e#3)E*DvC`d}^{Sza@ct&Hz_o3fBGQ5f=@)7;U%rG^f zKg%A1{*rT0{eOA_pEH{R04yNw)Xgklrx?=Q;GD-V>|Vb0@#x0&2ZRMe()e{hw#O6; zu>BMOGicCL`BeN0A*tzxXZTG)DjdeIO1#!$ft$kbhRfMdkGrxS-FIM5UhoaM8O7 zg2$au#rbAr#@{j>DO4sN!Cl$jRt21{sVh*Ofac$JC1lWSVoI*cx@-rK_(o|yandpN zRQpEAzDKLS0uA&Q?9h#YmVj=^=7^s}01SK;k33fh5IbWV3{l za22~UP1~I3GQddc*lDQoFS^^}99I}5twIk84@Ow`9M+wU>ce@!P`#S%?z#qjICr23 z{qpYn^B=a&h5ddIL@PFG*b%E4my^|VsUrjfq-5Niz9Z!1GyI=E!~ci;{!{aj{Ft|&!6!3M!d6N@ z`#Z)V58^)8<34)^-YM$QQL;Wb@E&s7ef?q~IeiHN0^S;rdV|`cZ{{=JIQ$|qb(ucs zvVV35ZQ#8O!fF3=0+{``0$BEC`@avL+htGiq(Vuk|DS^wqa1xk@St7#*aIJ5?zXd{ z%LW<`KR`YC^V1{(D0c?K{a*V60EWh+8y^cmZlZv*1^B;itVisi!Kk=xlS7%ww|QM) zm8pk-WkwkxiwRd>CWAvU#-gd~vKZ!~F@FvT#!8CS_8#}$bD33DkHkQ~AoC|aEHZ6B zMB}*OV_EEs;$4!$Plh%n{Cjxl^JB3C<;xC656iC^YjkcOBYlnR*b`6?6!hU%{cJb` zGwn|@JwpM8f1Xa(1H&0A4E1yX?A3Wo0SuI8Y8>U^p6AW3KgV;P!#QV?8eH#j7k@id zw(IP)#Js)7OEv?ov@woC>{&5)QBKqhPXKmq4tuwq$Z+Sfv5nzLbk_~zHvtjkd&Xs2 zJkT>GjQgHH(_+#zu{a)wWZJY!3C=xJKYR+*E)F*MxRPsgalYh!Owrg63fH@B5BB2} zzs)cGFz}DUjHGfPzN)mY86q|-8GjtKx$9}7)7L)?qZNVcuvu^X{hQVKhxexoiM1Bm zu5OHFfR9;(P2{^_{Gv5g zY90!Rt2i7ANL4>4fRq%|P|SN*zZNL_j4R(ELGQ{l$P1>Xy(`pdon-DQLw|dB^Vr~T zT?}&Fpb)TOCdW?;3n)=Z<(Nrl7#rt*F}U0N-+YpW7u=^PWj>?ek!?ior{SmQ)53=d zX#`j~yZ5~^Hb{-{%`P;Qc1H<^dOpY?{A`y#oeMH5z)Ak&4Y#}*`f3jiK%GIh7_tF) z0PA7dJ=no5-B!*tXOLNUHh-;x&O@g@t5b0CgN+&#t5|phy|p+y|7b=T=N}e)=;Pgw zih?E;x)$!J%Cg!;3DvZOqim~5-A+^dVCjDsQtl_~Gr;@Mi7M5|Uxleff zO0q`_L5DHQw0lJur*rJNHJHWED8eVG;~p!yjK+t5uY=xjqUk{Cy?>{v#QpXTKUvAt z|3u?W$UMO}Jy)Y8{v5^qOpwOI%xA3C_yK5g)UU($SS>sImRQbPF=P_IB?4aEBX=V_lB2$mF*29kDFH)&tyO9&w(_1S1yfvsrynH*LRNtH)nl=XM4zqAbmG zGlnKvlrljU4`;L6nY^8omufUkWh7!@#>D#R&o9W2MSU!G>iHx4$}thOZ~RAFGW*c0 zBrH~MlM9~e&FU4fnVVT(-0e!TZkt0#`fW)L#p;)N9_2Yp<*e*~J5t@7-(xk>m8)Z0 z_3y}PTdsZ~_w&Ck{&>bHj}l=wtY%Kk%tf^;*QBb=>uot_B8uZApS`J?V@JBa*p#G- zO8p#cP$In;#a-S1+&U zNgTyg-{r^|1Dm)~8_84e~BI(zxbPVMYQ<2(}i&`T9|SoWlE2#xeAcE|-yBWadd zVBh!6ZrA9Osf8Y@dP9E2zZ0|0Lr03XB*l7Nt|Pr9?C)oo{lAL)g%sS%yBBW=T);i?rYNA zPv%V!I2o6A)K#;oj6*rkB1ZGz&{eTp{)AJkw#!#@gmN5be11t0YJ8R@5zXAOAIxC{i?YlgCXVtXa}lNkgFI|2_-tQb-m-Ixx}8i+MpK>P&K1XA zZS({K($sIFsMl`FFf@2Jjf9K)SyewW8KRR)XRkbektW74X>mC0sGl zaj3#%vK~vLoIA&uL_?ODAiAAZ>)ZKPL>=nbfAv4ph>9bY*`3;qOgX~j)AK14>BsU( zu#~yOGLia(8pp+>nU#e7sdvREC6}pH0dme^`iSLX))jhv zJud^`XU-+F&(D@5jo2_-EWRWN2I)<88uhS+ z7UkSj)mOW+=v2Mjm-{=ENffAk(f*?Mv}#&^#M_~%*9y%J+d0ZmE-0J5>oj&%H45v! zuI}o$#j4Z+tj!&WNJ!QU_$=MdMoh%}t^Tdtv~##Wmpqvv*ng|;G4G_jBF;t32X?V; z02~Kk)MmzU`t}H3Ff}cgU=}V_Zf50M90inNRwIV1bvIcMm>UNkWZ?qflgcSvP#Q^p zAxC)eJj68$d7Qb*2LdMKFs^?SF08{W2x5s>TnXsIRBDKOa5LK${nM<=k*?MllB#+p zWY|S+z$Fl+v8_ZJB|c3(O;WJ&I7Ld*2}KggzekZ0F``Ju!XPqFnU{iCQ12#Z)qoZH zMMOy=PVGt6C<(*$m;Hr(=v*H>7TQvMt8t9wH$4>P;x?BaaVxVOcBf zbE=?ZsBtE~rzD0)GR$&c>^fW5orJppWkSM^#KI3XaFS;VBFSQ&Qza1cnHFF1m*k3( z=j(mdb*L%i+otZ@c_M5*-kl_Wq6x}Dbr3W)QMA}1DTk6SWP(~-rw4LHV~Yv2ZrdDp z>-w2dCorL=(lk#a?(1&f4WK`j8TFz=P{U}7vWw==&MrP(@qx{< zk1D=A_r}jyP<%F)omT^txtPo|lppTWNJztXvC@0p0i80 zdp40_5Ck!G(~kI}jJQmH!a>;MW!29ql&*5RZBzxc(cA+S+m;!gVztVB8IV`xrivQX zL%#lce8MCFbChFq`PsmO~`8nzOrnS6t;9#}P$Va3w@OnXI9PuCqY(5q1H$Iz+dR6Lw*sljwr8m%VZbIKO z+-ZqPRB*b&`*y(nHt|gyLD2v0>&ve&?c4sV32@~AE*A3blk*eKtYmcd$eCBeGp8c+S%x~*skqca=&l)g5(GH)t5Z`@9#lal zzuIw3SO|!Hn}V7hU|jP+_JK3AC?B*kkk}{!Q(-XJTCmA~QyB zx&QrzM}7yE(2?U&!tcq|^{Z#Y84&XR#NBQ{7m`5*7`4#A-w?5VkLu+t3zQeqlVj}3 zc3`f4dUe`=Jmee<)g%9#zC27=HbaT=ncu%Vl;@9hV3ht5UR74za%B#=G{BZ~2F6yc z%eub>5>EjQ;hm?>I)_5}rPJKhH1+_mJ5$IYBZY~2h!{&v4B_u%^P+-vdHz* zXNm%iCqU&5ZX8rXJ;Wn(TigTeXYW@=-E*EJKk1l%NTb?rs=83Pbl*1nNsm))zbzHH zxVnbWYu{9=WZcfKzUj`%3j;|gS*A?`_d7d0Ukt-%pr3B%Q_L5NqMcyAKy_sw=0U&( z?|Xz`%sdg&iJ)XV|BO5cD?XWlW{6L~NnHn9rpy`O`@f!alQJ*0PHF`JB<6#o@F$B! zXgU9X1|nf8lG+zHJIq0(9uvxXNXTK=e96Fv*sz+ImZj^g>GbBRVV-zNn7O;178R#m z9d{~ro{?&`Km2cUp8g*x+ZH_enQv#r%ek|Do;?athi0))&{%bVE>Z{&t3UBJWBQ)ENv zHMedC>>A0H2|C&5SGO&f#}&AGp`$hhmic;IL1zT@*)PM-0Pl^iuBRGfXW zn)1xBe~E<48JpTFW&>OKbWj~8pPlv?7Iv+_Qq`OoV^wS2WN&8f$Lpsk2BYj_u1(>8 zjVJ=9o_9n0NUi3RiG9SWbq>`~h_O%?je^iOEvAd4|KE`I2~g;c*AqCQ0@AYv)pSu) z*@kceMv(-hq`t*IQ2g*tHv$P7bd>G7Qvh`=9s>z8B99S9^|={ekYa^>!poQ@K^Eh`uG}ZDtOg* z1c?}22-(}E4R-oayj$-36g2ro$E$7 z7qd;-P7vyXNp(#==oQG!L}&#gwCl;W%e33vm3^=Fa-y6$%DV&U>&x$T5B^V!<<;}+ z?=P<>SOC1@{#M9d2XxgxO6B-}4QQDPiGEwumO1A-#r%eoIP=c?aq$;T*@vN1?7HT| z@k8O&gn8C-8a&IpcZZ^zw6-aeQIh%|MiQrP8=yTP##_^e2E^w;-EalxV2VnY!+dbr z^H9wZ5s}Q3@#P?}G?rdwr_$uDqTaTJ;h|87bLBF##du1U+kb`*G<{g&y1MJ+@~ejm+#2*^|1OwOE~YBM$6olkO{?Rk1DJZ z4kb=up}CJ8TTG=h(l}0kGG|d`JEgVaT+Ys|Btc!EoK9+hz22=h+g>ZFJJlF5{aP@u zUz=iWT2xkOArsWuYHYDwN91LVEIF!vsOf5ffV?gChn-HF#ka4BHX5^!-mh#)`K+&U zQvT7eayWDN1xYduHPwM|CSOB+En&%JS6g0=wlaT%7VXf3 zv1gPDE$#jBaaWG}Rm`@$b-A-;P6tkCE7io_LuP4|<>Bk0)O0@7RcwtKdFj#{vJS)C zrYs2uoldiWP%<@gZjp+r3O51wu< ztJ4ON`*b_m&E#l*-vDai;P4@rv}T2lc}fkX@I%Vz)HcZnZSycZS?me#sTeWeNBG;A z$9QTU>bNv@_{K5$31b?D8Hl3^GgBKWhw0t+K8ZhZ%MhLvEoO+{S#H}L{p8aKb00iu zV$fJcjNOm2ka_$0g0#b+%4trgE2yNpHGNnc?W*k@PueYDilzWCtNI=cxm>FT>afv1 z2?`}xe52^U&}TO-7Y-9;kXGO##<}Lg*6AHS%()kA$h|_0Q=uxANnh1yK?xz|D+q~t z=VZw5|*femy5GM$sFgTZjIRQg| z%~?rr8%Gwt^H28V9IoIT;^fqO0VAXz3(mj1rbaUu|NIq&3-}9?c$dOb)TaC*Jh8tT`yMl)_Sve z@m|@3_07Wn6Ge(4m8NLDUnKSYa{WJl5CZoM=G^EMZmjb~Qmv}G>9)B&e(~P)61c!h z8sqQKRAI>kS|1n5Wuh;a=&ij?rN)8?e}}l!AK#!Kvg$6|+4B>684yJK|M*KPc|F`K zJk|EU(TYo_2&RNNW!BrWMSs-x62sDdxLI(5rD4nqxk!%Xl1YLY5lLGwe_H>4+pEJ; zOiW6HI=csSXzJT0+wY4U)fMWt1-f-EAQY!U_ZPFS7~4(Z%@NL(^KYCmE6Qps4K_3cg<GtetAV*^g7qgm5vFy)EY>FG-xLUMj^(cyKml-IU$Kp9ER6!N5NJQIw`w zY7zo_>;`%6N;ueN9olEzW?Qr<+wIUH+x%>=YKa9GYXN#^yRo%gV)uzbu2ei$q zdFZi{vf5*LYV^;(U?; zKFj@KS8mD#0RD019?iw~r*qL6?VLnB$QtJ`MDRZ_GqS}zU7Kn^C!t^qmpC3;ho zx7+KwfhgBM-yNJhn{;C8!$)$H?;ILH@6;zK87F9SK6n}|Ha!>!R`xb{_5C{pfkm(1 z-OE9Rf0pg04p}dJW*fj}$iMqyL~=|=lDkNn2k$J%Ak7T59y^17m_cTD&QNPy3t89I zF3G*qMp-UFF&TvYaK02N2oh=XkE?IXDle&KO{V8A(L1N0JCJHk_Y`@emClU`03$xt!YT;E!yx zMNNIzStv(xRD%np48Tav3B567jn0g;|mQBDaYcd0?sumz*tpW~gXSrZNTNP9M zJXn%Wfh~c22@M9H9mlwpf`<~hEy0%SVpoIHZ8+My>#CT4Sp)^y2oe6{zf+5}bz)5X zW7%z?4i>-v>WK#^(+CyI$*!nwyX{muU?$}%NdMlOlX5-dI$H^8gz{OrFCIdB-60nz4S2vdMl6rq-KOi2AhpT}F zi(l@Fwwq;t5Cy3+`lD>;#BN&;)t`3FT`~10qtIul!2sn9xB(7vN$)`yT%@eY0*aiB zZOB@{qsMN|1^WrT>MP|{uQD_-$>Fk($l2JZqd&IU<GpnbU^R?Jhsj;;cR2YCap76me@3>+8YB!iI15fwG$UaX~GN&h7O?yu^tH@ zr3lCmpoouggo2JaR;f8jK!AkdbB+KqG~y|ufZmnQtKMJZ30M6?SO4r;KXGwCnNG5Q zKWHZmXxE+6&W_syK+YdAlBA<@IpW0A9Hgjqg$egRg?tG6MDhX46x5ATS2pUfzBmm9 z1txrS>OuP+x9?HMRHykX;`=d?&9h}_69cYex{xQ*MSo7deAQ{9^cT;Quz>lDL^+LZ z0d1Zb#@H`fSXV*#R|f8ji0%^)UX}BIH+@s+9{$vN4sDK}6!Nf584pI!$9p|OhE3pn zF4ETNCN{oY_j3{Sycx>Nwrk33*SrG26Of-HKe8M??Yp$xhOg7D*^JZ0lVHG=} zN7*`^@%*ZDJThq>bBqlBbUb253cIy}$hCzVsQYRA*!tbe%9ZqT$C zIcyJ#E~uN(IBCWn<2>8&03VhuuS5x=}7L6~n_K?%eD)COaHpLun4q&PbB%`!y+gJfOpm`JGYpXz?)LxB-V7s>St<^v^3c&sJZXcR|lGt)Fd-DmZ z>7@YGs5Ev*W2({M`na&0bInILxdN1Cp{#vylbhxDOWF^FMbnjSu?O1s9A=#h{hJ&% z6MhTl#y6#>tNRag+UaE%O;cdhPfshTvtJ2)amt{Me=feOd_Z-T$PvBk zSIlV_tP;nV0R|Y@<%66!E@i#8BeV7*ZK)s(ZsN)=XLk%*MqObr;Pac&-`6(&wR2z`+COIx5WHeZpoX)*&J6bmS-=nVtlZ; zKhr;AB<3UzL$cVOdDVZzZ1GPp0_zeQ1c?k`#bR~lmGiQy+sz6ezqm?_g+S0aN)o+> zg)xn|AdAD9cjL*M8Tp8-StP0Ogicov?QZc){4Blf>ppAR*{_Sg_Z(xP51tvn@@BMULK%3?&ExyDXfj;EsnFOsD+vvq zYu zlHNKq-xbBp?3IGjZ9GSdbH6g zw=UXDtzh=Ro3wSL2BtLqsLTu#pq~c$hdgDOA+Udaf=L1zMuFLP3S>NwmLoQ%rXK_l zL7yehmS70U?(<%rL5-~*W?aB8!^lg^WnQk8pO#0Z2n6zITdA+hY{o+THuQdjFVnjs zqo&-f(3vwoqJivE^4hyB*Yzxjy{u`-VwOOWOMnM|O!&*L31FR<;J~vb+uLBUR-@rAsTk0&%KWF z;sO9dhoC!BTcci9w|SGz74YUkzp-3<+pKK6W`voB*#NyIZwa_uX4xu(%vdg~dZjSe z`0BzTb=K^Qw&&*#QURlcg!hnF`-U`ax;B5}h47+vLa)51?wg>M%5*$lBYzaIEkozz|{XNF*BhIFAMmg0rm}z(;D!T4CL>HL$MW1%Z7z2Nbz)l%Gh+zlpk1|fW zlLQ){C#WYr500a5bQUzE7zuk+4muz@`>QXfzz(MZ;<-U6YE3%{k4+wf5&veU!=W~d z`rUz3ltjn60~lh7Ysbhe(@NJ_5fXnmU%F;6P`WIzro6n}7^Z=KaI9g2ss*Cv&k(%j zbs%=~?Hj3a1!z~nBI`0&4riv>z9#-Kkpzftr=YO?Aj5|$ddTpm5h;ifJ_&&hZBqcm zbu$qha$*$3UJo!0!}b7@Dx-C#xUC|?%F;j5+&U8`jyiVpso)8utfRq;dGvpT+-&d? z;bLcu2UZG{!5ty2<0E~cg9j;WRe;eOPk5x0 z*^`PZ;(Em>HbC#t369Gy!Cil!kbW=>O*cRq8-Obp!Snzbhrub4f%@aNZ$Yx_p#T%} z3H?dR{cb3gz9#D<>TEP2010JF7LJV!w#&buTU3#v=6JQC9 z1%q{7B)E2yf;c8RGQ*QhR16ej%#KC{#$HQNke#@2s$iTA5mBGBsi=P>z(Ia;LRcVq z!hjoKjA2tSDHM#_PC!rPW3Tkp$P}f4KmiTdtv@|_a~=WZj{6Ztar&Z0b$WGCleHT? zuBb`n)L;bE7tfUlk6nofakNB?4LG;&A1RSAIjKZIi+9paggbeMmLM)BxAW_UqHj?IEk5Z8nDF~p&nx#KZ$6mk}thLJ?!bh8hI zt!K2Pf%*>kywiKCVLZ7L5$@{uRLDc=`q>!rt`Q}`C2?Snu{6vBhx3P};JIP{M6{8# zkE0#YFcwxw#$pJz597@`U#5k@+?kS)N7Bt!{b^e*u@5GPZCHOQK^D6h-H9 z=rw(svN26MZM!N{P$ob!4SX;g2ct{O2=c4T)ejd#KS1+!Rk*18cV2G#V9&ztGsFJ{BFjuee%SEc&|p`Z*Wjto7)Od7@_q#ZL|LSGB|P%i$iK1jLpMNQ+tnf zzXaX83r~OVXOtF5(#Z7~Mmg8ia6r~xD-jp<=Ytcx32*?J@MhPCtD8|g;AJR_^55%y z4XEJ8qbN#FWniaoPv43+FW2D8A$`2vw)@dF0jL?*0MtyDlHLtok*`Qzw&t47M=4Vi zeSsAxly_Y?E$piV%NX28%hvCo?O{hLgfASs>+XN^jtA#Kh_5oE4sB#7M0@9E>!@qD zc##3WieOHf?6$yr9V*W@S&2t?gPiJwAR&im3qb}%w*KBv9fi5<$igD2g&os5L)U|NqF zG9MAR!c}V&t>8Ehp*+H|vUd8#^0200-S6Pb8dSr-OCk~Mh|jV34+C8LA6j}M}&kx}Br7sQv6MC*~0-;ASQ z!3fBO)OEu^f<&|!e>vGC%ggF|fsYU7p|#*D>U&{mWVrOHClrZxBj>^iF2>{prMVYS z#gvg@_0#vqroq)`h&(WjW@7 zlb7W8@h{Pj2;zi`o&>FK3r(iPJtPND$V#?dHx(pX9I1zM4Z2E*u^GP`!hxAG7TAY}`%nacw99yxsIIQ*VpBnU_-liRP{tK^l0y@RJ$^hA zRNOPzXK{PQ1B#YWCu8g!Aro$@wxP>~(zwVMg|e;9=>ZsM?BPv1tDN6+W4XLG_# zIQh0Jpl|jn2+|07+crn@(;)}|vcKoB4+6OMThE{4<%X{Ey!a3&zX1@u^SiAMG4-yq zoImP^O>=l(X+k5=^q??C&6({ehQ{sDL!+dCLenVTmm9@8O47-su*?)AzDrj2>r-Z1Lkcf*PXy&H~8O{!~6jt#0%o`|^XH613X5cRl! z9+9%W5p0wGGH~u}SDNTCmr#95I-e?CX7P%wA;x?y9v z(Y+->1nrV=?yPRd9+(c9aHugL0!0X#!c6aM`-t5a7Ed>VyFmp=_=$ zu5^Dx0!O_Fc5xG)XrgGnIk)97yj~RMPORTuT3s8@$^}r|;M+YHoo6Fr*Er~;B+vd@ ze{M_2AN}t2M!>1?8tn68Qu}u$(q7vHxNL2nEg`yHe2etHSKG3e1EZlYO@&oCiOJ1a zD9V_SPP|GNB+Vd2tOw;&A$d>9HA+ie4s^EqDOf4WG%wTY_HV8j`JC4lfMZYzkx(>j zYjU^ikO1oCqAd}?92;jHSIIsK3g=ANe-uEPAp;pCT;$gliRpB&ZzT|&e}|S@yHJdQ z*Cwfgu&#nfkH}s6>kbD@Y|6ndi}qG_Dzc$SsQ^L9#EF4UjZZ~yP0QstWP&M)VhIj zACCczJ-hQ7BYR{BH%~Mig2~OF?PuO7ky}UpmrU=hOFa?!KuzKph9GsK)LtJ}1*Rklv zhNOPGYr?>xUTFSak(7ZBBbK0GrIL210&!qdBX!gKLqdd)g0pD!6MX&wyQW}nmrYXv z9Rf8umuyo3MSt6F+(r_8*H`pYOf95#U)a3Zs|937_G;tUT4j(IDG(?QCCz3u9Fvq~ zEwWE}wLc~QxK({8XXF@&AsDiT&F;FKs#8@x?+K%vF#NH<>)Rbhu6N$=aQ!KwGuVR!Z)*nb4pl~l^INMXfnzLTu>S8X@k z%<=Kl)6(uB70t7^_iUY0cP7xbZDZT17!}*LZB%UA{9@a- z?Nn@A72CFTvs*i7znuHFe!`e*j@dgXCj)FY7D~*%%u065@Q87e(=hY<&Fe#$%A5*- zLGr1s7u;;jFgu+Y>Z|tJ)kAJVs6_J9`#E*B$JKr_GkcKFyMd%kC^|Su)x;pS9I=y< z*otzzSkIBC9)eC*|7iC87qabNI{BTPA*orha*P^w~LSW?X)zK{dz0A z6X>+pOlo38P#|Uf5>aoDTFsHp0+|%>z3b;Sx0~Fg&y!-2YZe6pmW}(gm`GrXX@?-M zN05zDvOM+Wno^Y!JK)ivTa|fexP(iiw%nH{yL}y>->%IDdEvdR;Y#4_^8R)Gy22CY z=c70)#Q(Y3r$|kh?WEWI!l{uiU5zF2OMi}4m!3|*$bc2YPrtlRcZvO=S`h`%G7F*5 zG#V6aE(L3Wfj=#=B4eL%?AU-w!S9S%)J2S*PXCs#rF{h>hD{xLU~7J4ysAroW+~Z@ z@pUok;n;&^`=QhnqHmwKW3aE1TfN==?`op_hDZ%w7Pla4q+(lrny&oEaq@kW59!vER{h@ZJMr&m={GrcN%f3FjiQ;qMao|_(!6}GL+ z?@pJfWXdqnT^oXVB!Nt{PApL|-I5|tq?MvlnWn){xb6<5NiZy^OE3jcC{S78lSVs& za|ob~^QL9N?#Kt)hc3J*APpDC=33SyGRjjv*TcU|C0x?&JiT^O3S1cEiJOdKos2`Rr(wMaxd z3T(MaFu2AA4Y&2t_{Ra+Ur4>_{^rXM=dP@w2m2~Gq3%R++*PVX(3r0&NMZeG=Owz{ApYwyKcpAgWmYGsP)k+Pu8MHC)C0-nGC$OzKv0QrL3TlkOnW5*2`cYHKJXKNOrn>rhqr z+*t*)D3RsEL*;Q`;T@tP%Yor0L0Q}lMBzxt0P9f6Y_z6*4V~&$MOk<|tUyH+P&w#WUkYYeJv%AS9%)=z|@NEo2#h5od!lER0vcBnJ~tPmYB z;?*?2)(GcDqkNErP8?>a)XNK0XNBZFyw|!^(Qe!145~3=Oa?4LU9j_}!q2?K_UAOZ zCdqdje4jFfriKQK*EOF9T_zd0;}o+V)_^8Sy(<$8L=Bwy{Y)T?9W;A_1}vM^-2xYC zureSDaRktjkSx%~#9983Ll$0AmmO!D9Iifp)ql)&x?S5Fl8T65Lw9UMoQ)Ms9fo@x zePG+o2LA5P=!Sq4O{J2KX@Mpw$WMful-LDiuM_eYcMwi1#+)ftBGDW?PlL8|lr?vn zk={%8V~I*xN+pl52|HP80t@6FCWb zT9i@9Yu0kU^&8cO-v(SqRljZshlwIoiNNv%B}E%vF^$M7v;iW^zL;}L98+PHd1A5- zlfwukceDgSG84`TLY5urfF8*z$j6!tS5asLE28-R;K`PgW)``~?z+95kpvG21PdVU zJM=1flF~AzI$fs;!kuS5<{xJ5UtBm61TqizO}0;X7~FNSX4x&O5$rP3ijl%kM$>c) z2gt!VXx$E*x-z%H&ymTC8p!LfthXjAvHepE!A9&G@>ItlP}UU+5^2K$u!<|B)ooLu9-EmmBSWKhXZo&TX0 zXT`*Ms2VRhQK@JV)C41&V|<#V28%wvyYYBu^e5QRI8p79%snIfyLa7}xZMpCbE7TS zI_r1k@2m4ru(Zcy6^+l0b9kpLvv#VgGg%yjL+8biz_0no-N%B;>lE~-r+YvLMC9-6 zEl&5S4$f5HzQy$AKb0oyHT1jAAP@C^Y~BB^_4s7Ely)R$A{;#**3`D*64PrMWOV8n z30N16Ad6_wBu)9oTV%w^gZL|Ot+m3O%04oI7_US$S&#^coK&aZ)iIP~cF(bW7SUR>;LFhE|&KB}t{q!QfM>T$b+$%Z!vM zZ4Zwn3Z^Zb2Fvc4sE9|3%Tz1m>?8PzOj;K8L49OO&uxI^$-z*VXvc#f3LD#UvWBM4!sPB%2M*>#}e$H zK+DhYDt<=mm$6dpWj_Wco2%};r;zeCGF4o;^lKBil4edj;K5n^M+6g`8h?eDlS9Vs ztf6V(s9y}q>Zuq_8+ibzQ2CGw*&> zrZs`$*(J`!=MhFc<9Wm^`HM943~o(`9mC3M&}mX)sV$ZP;|c)eC+Y-2`dM;bJ`L}o zHk)Yy=3T~>NZqMxmD*5sLCBY-eC%;XMR&c1t2nGge)@QiJqsdp_F`Ql-RP$=BkLb# z3TUU@reQ`0Y^yFvrPr-I=P_v_CyxH1x|XqXHhh`^lw)FR5JHf((+{R8zm)7xA;xBd z!%pwP(UrcG9DKm1F&8OpmK~-6gsrpI;*SV)>r@|wijZ=(2HGqG7-)Vf_~EWS`~1+l zkokz|S@M==)sMHNUcCc1n|9u~gS(#i>EGH7nbCOY=t}sUyZZq-cg{c_!acEDC8>=n zLk0rGGO$Hxx{ZP4F(YJ53G-Kghi7e)X!c%-rv-*>Jv%_Btahd!c_(tRBL>zPpOJuX zk1!|D!bjSF>opGh1eO;H;i^S>rTp6dtvZz5h6jn^@-ihz&97nT?@TBRopL60HDX{! zg3#w_Esy}3kt+vnO30*^eSgK0O>^J}Fu zrVm1|jRjzMeK^tr4vX;>5q_#&3F~H69)Dpl4W+1m6jcVjLzTln{hWtQ4BLs+!CD;M z&By2Sm~ayS>%MlMN@l~f5}%U;{HUjJRy^L>lxhWWO_PPJFd!lR2#PWbT$*!!Wa{i^&L8ffiJ`JD?ssw%0CK*rhvH=)AD&{_6OzNXo7Db@d8gL!SlE)+Etv9J&8QSb8410(E;hq8y-z zmY4r;Z3j~R`bOdEbkFYbcP+`uU8=nP&#c4FoNB8NEC#S$=fLQGR=%l7j?6%pR3v84 z1aB9GJSn(z)-tk9=o5%X*Xn3E_#?G&rC)R8dZc(4pltk&ruFcAXq~S{8@bx}obFlQnUgLHW`brS8IZEBx#*ig z{|z46%LNF>P9*k6pID-?#E|W{W~Y99TlKP#*T*$0PcnsT!Vo-X-+BWmD&HsAtLPvx$=b`D|bZ!sI9brZ|-8>G?H45nudz z0-*B={z&Wj^_9(zY{j|=QOFSly`Um`M*PQCs_t93Ab)6Q&p!%VcoA}sabLI!d8%d1u(%N8Ewfj484MfL+(<0B;z4)ce0txCPWQG zL_T<)Zu&<`vvsOnIY;5x?G?j!Q=9d-`O2?!myVi<&K5aA?ori?yX;CQOj1dP<8Wr8 zw|v$$$rSTT0ZtU;BzakFFFu=WV z&zP5S1W8HUnJi||;88obdO(8aS&}y&lRi>h0Hl#29v*KOo{Ry<;dGL@vOlzXpjEW^ zNC*&{#B_DdTxdNJh={Tv#0*2CvTBcDhtKPX87MedL>lb%bG!AwPg5EQsZfWb!A>^U zzQlSR+f)0(9&L{PQ6p9RW(avbk(h@b5GhtO?+&HiD_BH@ z*dYNIKLHNpYK{pV2Oan)G77l`3b#6+Cs=TengTY=_O5MeCRPI+dG}jkIe=!Ano|y$ ze)M*{QL@*8Y)>Ny7?BMc7tuckp5+&wB;227?mCRLMc#n^F)W^Iw>HOtzs68ybPaWe z{a|vTv${Y&;46?p6{sFEVoW8aW9EVlXv$oE@1iPCI8&0x5()Z7FDENC65#g$@01@8L6Fk(cHcqDh%OXD2H z4<-g81aBjsS>N&F>g3k)mQ)L+E}1|sg|Q+>R>>6@UOr=ZaT!V>5Kt~{45MPlF|Sb8 z%-&vnP&`{9?b)>f*4Jd_M()(;|b zdx8YUd$WTc_)c*N>+hX9Ml1aIT*cX&k4tfiLpWzVK2G{2t{<1W@>+M4EpVMQM*)xE zMfMo87*T?;xg_cDH^7dqI>r*gZx;Gt)1R~H4|F!>ECt8j6GLm~i*T0f_KJ=y{w0`W z^~(xIkAXhS2AYoiR-)iBLQ<_;m*oNM1kf0H~mCO@9OaMjY`F#n6xReRfw0~W< zP$k$}*@JVM0CivSfEz0L(xDn23ty(UTu}uEz7I%_SlciNI-<|}uDw6z-D^uV;ks#CKc!b}928Xnf*Q{1b>Luu0^RF%T9wIW3lRT_ zntZ4Xd~~t>QUFwjb<*+^47zka9V9zhypKQwDMFd7pK@y^(W{`nDR3&#dByTA8hqH!2kAI)F%J3AI0wDp% z;?vnIOB`gK{B2e(gqB69pt1h5YiU3G-pY;Z7&KYw3IL;Dqk6ofr46>sNp%&_z(N)I zH7z#Z5Zwdqes+;3uDVnD$5CRsz}or>DqJ|qXmaD_-A7mb`v>taX!cid74P{LqUN(- zFmwnfnec=M_p^O%M$nX$J5T+by2H(Ayk>X`bV#h_SDhc9#%W!8U4$8qI|FGL)T zn4b^Cu1JP2Frfb+9GZ2Qfc2LrI2dSW8`W$*MHt zH9DQ3{2+mGdeA%b&opWOrl6hpIbZ5FCR8Bv*E9pG! zYHd>%K8H_%Js*tNAFI=E=U>$oE`IGDh>q%%R48jt#RO%WF|^zYuctxUcqo}*JtF;! zD8P4!5URq4!J7#xV3Yt0q&$mVIImB1fl=Y;dVNNCDmKQiJx_OGXU}F2!F-{q@@_Ov z#BdqRhl6IK@6DKS-~*lwYj7nzuHP219dd|iiCNZ+xtzns6u%d@OqNFgb^Q!CZDfVn z14QQ3vv7^hl))=y{~~+cZw@gfq(LT01SH)-YcQ2lZ$`2QfqQ0FB{_viwY+jVE*N5 zTF9DS(EIB~;0Wn^Bv(kufQY-Nn5fd2&ni5FL}Fmr{xOJ`kx7KQw`8z@kY*%mJ!Rd; zETl{YR*%l?J1F-Xfb#g@drI?3Ti%^l;)GA&m>$w5OzeaMH*>y>& zr7*Sf7(gcW?2oj2?z1^xWrW5h!uX$_4Y{GmEblz}AAaub|5%Ud9VKGdWYCk*Zx6lb z`*JhVGom=5NJ}2AODb&2AAbY{wc3?0)HB?NDD>$QH}1eG`>FjYdL|HXCIJT?XtFGW$RU#(P4 zy;m^)+rB5l!5=M)_!t<;=8rr5J(-?wE2)|gMH5+49f_k|qEw+V*(Fh*a#AyuYOGux zA=*OZ0uK0hV02SAeU9tu2WTwp6fQ&0|fW zl;xJr&1=Zp6->tTNmd1v4);0cBkx%=(WVFe zE~;ug8qmngp_1K%2CIF}x*{ES%N!}tj&C8htGyy|OvkKzlvPc9UMkT*v-yXi3LR1r zEvo?%TDnz`*A?}^r`qO0+R^@JY1I{07ZkFUFRvF%dvsxn+JXYGzmFU&O`KXo80

    Y&8B|+pa?<_18K3?MGe|Pz4|@r+Ax>ZX(Px&$Jx8!&b^{P~NLo zhbw>}jani7!e;kSOJyr_RRtCwfZT_XTo8dS=JhM}!VHQFxP?+%ba)po@`B}j&m@di zg89{FmvIvM{f`ob6R%jNDdyf~OTf{hFcM59cEMKiY|;;4>LUVAx24lZkb8YsVgqFy zHk~?uD7`R&=?JTr*Z(ZKDdgZ+OsX{rx zcrKdBh@rP?))H*hB+Hc%()|K1Y1W{=y?l-Jb={tT2>E;AGrGYxH;L&QxDgd>_I;NR zmxo#i6A$wT2nT7Pbrka#flscIQhZQ0(6cbGH=DTl*(sTJOt!_JCxnAZ_mJ_({&)#V ziiI5*GAFKflwBDDm|z@DA1JP?@vs=0)vi6x0N9y|{0@3wl<^)2-@$b7=gBcw&AoYRr^! zo$9Za*!xN@ooEM;jjfo-NAwc!!SWAp+UUxn|WS5Y#gH!{#?uFvqLbo2y8DQ3E`;m^iePN!e|F)WvN1kFj=9# zcx86DiT|WnjQ#TmF2zlwnMe0 zErZ+MD0vS!HprqGj12P5hENY3Q%Ym%fKYkB`Z=N9vh!-wLDmj=9tD(&Ouhc?pPm>l zA9m=Afnx-*zkX}G$fgcoiPXE{zAyysmij9Z@cd>Ms_uA76mb0A|LmwnRVT@;2Bv4J zmO>z2U##x#g8O{vN!37=IcVF16W#>!={>zCe4pn@ITj`m2>#XdDH`vbm}X;JP3lDf zFxWkB<;4mZ4<73+tg4ol1hyJ# zSvRa5=XhY=(A?JB!vk|2#*1_XmLMhq;_~ui(+*J%?vN2i74-$yyJN&XtsvvHWY!(# zg{V_t*=;JF9Vgip&+WK8sB%~&n@D;h^ zGATif9kFS296Pu+GNF)7d%LgMSv257R7$ z3y`M}(15c42w(p@^19ri^!l8?g-_;Kc@w6HN%JJ)0uML`s%OU2R?|Z{0BeqiTr;*N zpw|KIo$o-J27Nq9;$x^EYh3d>We?2}##&O0ZV`@?m++CW&r~2WIDgR$`_!E(^iOZm zwPO*3LW{UYa)D%NZ{QGOUj10z*5#Z^K9D{M0n-!yNqGdMUr@Lc)*j(Uk`%5XP#|q; z?l?rbb$uk9IuH5xuOa4h0CG@dVVVaU3_KbeZV*I@+xpB4Z<6#( z$F}ht+X5?Cgvy3XU#0gp67Jf@G}61p$||r;MSIOKik(-uU#rLM%i5ucTnyNy2tthS zXz$%j{B*m0ot-oM7s2$TG{cRlQ`RE{7M0g$0Kc2V)y(Bk+*zb6ped>gUvveI19!v? zQs@b*#r3OfR=SMztcM5jp5-jc(XV*`RJxoAQ(;bohcwqo&MB#zT*- z`z%dZlz;bo$w7SLlA(e0QVgwBsY96k&dBmu@+LfKy8hvtwOE>K;S)KD?(H*aIyQfJ zV|qGYVe91t7v`rcT~LJMzEZH2DLll(#|zdDnw$0OzmbM?1Fko2($$A z*W!>Tls(~FZ+)3%9tU@n7=^fSO;!MCVvKvG1joXX&%|pEV9m}KZvz-u$Jj)(`GAc4 zyh__v1_CZqv=i!I%trqobM2{1A!6CeED4G{1ik6EM#bUa9=1^7;^?t?XE0`Dkoed_ zTM#nk1;h)U<~`ezJT2Hx*r2}&d>8l;yaO&CZJ zYvX#yJN7o8*S`T8a7kl`s_*4m9T(TJisd07uGiVYR8NH}d)HZ|O_>?)3ioh#$Ga+6 z{HV%r_gIDYr&v_?MWqQFGZ3U^|L@GDO}!EXjK|(LfWOzJ4vY#Dv`0= z**;;n^NiZkr0O6Q;;FvpK&-2H4hN)&e@~=SCTTHIHi6TnIo8m;54F|Ft|naxlGZiB z0*V%rN1`9$=7y>l*Ta0?;;I-~Go!Cl`PYlDzjK5 zMS&K)|0614Wcpv}A`=G-$A8my;;sN{YP<_D1weB>W`FoUUiOpL;sC`C`U|r4K0fPz z2zCBlIV%x*rl5f&iYTbzNs^XLiOZd9xd{Ln)opj|XjCIm5)B$xqJ*ilg;Kd}sxJww z!=PP)@9Q`Bfzhj@5gc2<@2}j)_zwe@#=#D?^URs?NW2r9-mUxB~)=1Dwvx z^DL^84coB&}PiXAlN9gPQG0w!3~z6Je7p4*803behgZrvv`nC`d$Fo!X1Y% zw^WLgU3#>6tV5#Ve7@PQFFS8&wwD;cvCv>fT|6*YZuRljL@+Cq;aK(29KfiU9;PAG zD6!w}*ZpX#Uk~wfgk(&d)fd+e7M21)cK;2;BhJ9Tv=BhE8|$9~aRdHaLx1KXN%!7BdwUo& zX)hHsWq**4;V&3!s$LyAfJpA{I{sD+WPHB?mZY8IQtGJld4K@L&i31%ZP6Z8l5kKJ zL53LR{Ct3COz;gUqAEe_df+eqBzWlLs66A&b4rM?fjN-$nmrvjx zcnD?~%2Xku{JaIlb1cGyev$apqrmcllOU5>Zf>y|izdzM{Jlef8cvmSn0xb>j==Xy zsOQRW<)%bW;r9XmPNdKz6}W~s{$8v_%Av^!tUyBJ;lmS{!=wBSOjuh6#>RtskhsXP zQ(-y^ysh_@s4NM5ma;WxV|Af&>Ko&m#h7DZy=(!HEpIPzZTPG480+;T4)a_^!S{a( z2dP)pgnLTIsH*J%`Cgz6l(MEG4%}bv9Bs}A-T{VM7~&vo5V=u~z+z%w1<@XJLmEAG zuDek@q4}OkGtc^5DLh32{xFabyRi?x zxYx)EEp|l+JWW|Xk#CKdUJQ>WpJz!})((wtAA_4{CE#NKkw! zKMUl`x}nv;F(Ct25;feAM^f%T4dGsD=OXT0Ia$a@+!#1H0)?j-1B>&51m>eAc#is% zpQ4&a*;xX>TY~D(yw)Dz*>lf5lKcQb&lU@Nb?&tKq^gb|UyAWSm<;q5D(a^*Llg?r z{}34msv3mRrvXz^8YhkDp)Dd=k<6q{C@)C=;53N$T(fJfOuuiW&^P`76a(2zy)K@r zNSVZyjiAWo6g~XptUTIsKIa7RR+`niCFc8urVRGWe5~{a3K6l! z;1YC2C#BIM6}b&BJ%Y5U#nmzuxx|W)NFBJylG{yxWu5`AYh-M#T@yBBi?T&Om%!nW zVC_zUr>jLwG`(K&XJS^w>A{uiamr3M}P3!_Z3Nf zfWxiMflOq>Bac)|jWo0tVu}rkc$j7zhy)uC@rYBX4i*ja&v3@xJObW>0%2CfKvozz zbIr|PHdRkG09zu^hu}_@!E!zc@?@r(8BB(>n`(lklqz~JBM+iu5utnH&gqex1w9Wy zn4+x9@2|Ys%}K!agAh9j_gdi`-ooHUQ!PtT?FqGdrD(sFpOX~lXNr)wwq|aAunTY!N;a>8JEzTeY!)8V5XSW zy=$cyLEww|@Oa4n*m5Moyl}Wn3uKu1L(!*8d#hf#f~_*hMecCq%R#a5JIMmvG@xl} z14$%=3^~{nq4^``J)bNIep{|B1V5wZ(gCz*p% z=U7&Yo#V!}VP)tv_jfFFy*zjEpk;Y(wgb{b>LiGJ<3Mp^A3qcysrnbG@rmrFBQ{nB z4b3wP%fiMMGHe}5BQH`9Vb1tyF=oow&~U05(eI+CUbG0j9+SwKluLI&;M_CG*AOt6 z$vqn6Dx!RxmV+sF%V3oTI^w-6t9<=_rbI+u$gNpJ!iMf}=2F1Oq+I$0q4= z*92Opr+x2iNXI@nP?ff?gqVe1&GSmvhdV@C9%JL57p78%S-8Eh0iSFyJn;&bq>nia zeftcK#D?f2F#Bg~q&8{*iO5Yk4GO6TY6G;zN~jIXrT4sWP7lU1)Us&+=Mmc_4OYX!m2 z{n)qw)H8eU=&%ym*Y^zA@{d>S-Rs2L?xM<(K`AFj#K!tS`wy80y!Z)MKy80%o;hB- zq=F}OcXSV41%3>^Mtc|#sXq7_rXpw-Rt6u9s80psl&OA)x@1f(B3NXBf) zQ-yZ-^m==f7KoA}kSpI{gY(OF5GxjeElH;2RrL~l5quP2ZXBhqs6Xk;BObmVJ9nmb z=0JgI?5k^ekrKOPyS>joecr{LH=7(v`y1=LB^;GcVG_3gxiM0`zd@*s2*OREt`HGA zqCuKB(LX*z-Urc_j;P@vz}VSRHM#7nM!U^^+(@y_!#2y#f9l1;2lnGq@Uu_OKTz}@ z1VHcVJHiA=N2B${_~OYs8-o*7!8zlL1KfW;6waSiK6o+W_rZTct1C!Fog?M5^)pBP zEmzJ7yzs=eFQG~9IA`=8Bv1Ik?bg_S!2!PDInXnw{%`ze{;#Nzfr0VA@t>LXe@yH= zsZasHi~!AvgpC&T&1ZE&obXE}VK9L>Kb1eD@s~>DDd@$8(MgUD8EF<|yvCUaWvumG z<7!_?A4XS0k%*5n+GFFtRm+!1{oXmAH=O496Oxz`_I{>-E6?PF%B5Ip)1IFxV3YOL zv14sVYkl+VHWP%vnqJ)&nFO3%G$sD>k;;O<3eXA&mEGZ$4W6Y6WN%rbvS5>4hku75 z;P);3L=c)MUS8`OXb3pcPPnv4?v!7AXMM%rHf<|lO1{coeUM`uy&S37XJVto@E02N#d&q>}Mu$jJ=XZf}`8cLzezh#xHZzg@W zw{WTEo9edWCR!RHpwfktI;Ar$*4V$|TWL6xjaIOdJ;pyPYM9WQse#R&-r*<8e^J}{vqWjxz4d7#UwS<4Xnkf-DJrk&7krZKBXG9=fHIz%V4e&fm zzoTW*E<$y&Dq~S6H;t6CA?)Yy03c&wyMnp{t>DNxQ#t?~DmOw3(3H?MZ5wI%f7jDBZl~{lQB}#CLuZgpFE=3VJ|^+^yw^iI(8q2iqU^qEgZ=5gmFXJH7)AZN}S z-8++Sp`(lTDl4&L@%FxNB*Mi+4DS_3cT!C**1F!WUYy3;hFsmq1MS!7wM(*COM zDrp7Mu>#AABl*SKdW2Gd1|Whh8sI6W>4ibx>wOz7SW>z&@#5gP(+5$1Q-jG3THg=S ze+mxciGCq7Y3y|?DxbzhY>jti_g%1H{Y|e27==n<_Z~G61hCZk>=;|%&<5#S7Z6Mq zfjY6e?hITeiW0N+5=mLImREVY`Am+=tHBiYCAeK#ac$tkdx&9q0i^H&f-NbMX~yA? z)EH}+u{uHer>&Kjm&%#k0ram!y!`?PNE@NKLu`ok=smxih{|5SaTj?YSosMSKb}z*Z;{rC z|8gx8D`aq#NA8xN`Kr4vX=8x-qyf7er^s^NEOL67gE!!_PhT&Gg6#EQ$3rGk05``} zdALcZQZ5Oaf40Wx&K8924YN6pyn_&&K*JuT^d(>%7Lh2x0U%hIXo)8dKXM>qb+jf% z(+9e7OYRz&xs|yyU^|DDkzOqmh{?bCu#^%~8MoB3O<-|Q4wM&MX2LRr>A!tWbSZ(g*7n+Oke!rO537BNZ<6HyD;PjbfbUMm{{icP*2D+2=fqdnN z%kSh!!)~Cd1N>cPDc$l9N(voVDVeXTV{B%m=3d}&X2NYaL#K+8W*b->W~iH zAKTIn#V&T3Qn@#Tn-;S2NB8q$gnynms?dTBgAOaY1pEo4oV`TVmT4eAsIC3FqXLpd zYnc)353HYQMRkl=%)?S8HrXeN!kDDYrkxhO!4waf7oUDGx7@t$%hp+E8D82I23oJW zU&Cga=5ce`a+8ECMj7GNIbiTq4Dj<23806gKv55XN)qJS^E-?3?*9E=PmDDsf;=SN zhYKo*4S;y3kFtMjhf>UR)#1>VOLiB6a5dlv>so5`zJl_-)Z&g?5bUok+HRGC3fj9p8 zL^_OEB^qL*U0#apGg@b-A9RsT&KMpHix>Vj7@(FK{^A^fapT`uRsg|(o;Ir-F>1gx zo{HphqeAI==5zxm4gqoK(7Tynp^+YfJDiwlCzjZ73W_wapqMq4s3^yt6}{Kmh^;e1 zb~%BO@KJCTTGOq;d@1z^(FHInE!^q|D9rD)0twW~R_kgyb)oi8=+R88itE87Gh>ln z1(=ETNZYQvKs35kh|G7Tk*WvcA&+j^KH&Z(tby>dm#>53_2?PC3t{?lc0o0jcQl`f z&`t_%SoKd_smU{>o9sIT_h5y^BwUcRm{URUUnBY!xD?pr*hoJc>zr#V^XZW4wyiFq zGTvSFO6Z%GvCz3AuH#CL0kt=FS@6pw0ALP~6qZYXs$smriYOvTz%ccC_gj%tv}>Y` zYNg5UmpNUmRBI_nnrFpivo9Y?;m20kx0u-4wjq{e(|VgL$DtRtJ?O$-)CsTn%jg~*KQ z;PkbxgqAiaMb^|RNaDU+)2PbDIsg%$CO)JU-3{2L0cC)ptx=#O+gcYl)k%O3HYInN zMfZrq&FNQdiUy+*(1>R@F8XL-Fj5$jy(-u-J%EC|)H)}R zai!7!nua6q>aJdvep08(EqQ1`5_HWlhkh*`7j@(70BMh^pX0U?5IJFAivy_Pm|8Ev zzgB!ppHx$1{<}iBV5C5^sdZ_7ZFXccw4Nx7O{jPJ)5y46F`NHVb_wi)%#Z0?`HkTk8Ua8=owSA*4n3 zzzgT8Nwc`YJ-?AKR!u!Bd&1vH7jsXv_=N?8IMm*CYM|l6*h&U!gFf%wLyTv)1%B)r z5Z*<&RO7M2*^r(3i$SZMg4O=d#I|?6HqglMV?A~KEjw#Zy2^`_0HE&0nRiq0%o>bD zcY%&v&Ruk@zHwt&14i)o(zPYF4HuTU9pN;Hg!($g=z$I^9 zxdI4{lCveoNfz4pkzzD)^G0|(X`-9-?(|w=5p;3bYe3*hkbP@3pq)Uf2f$5h!npZ~ z&OZY$1Jc0j2}Hp$C%_eAAT`HwKi9vV8RTr|1I2%YV(|Q7+408w@ro!4*532~3D#`? z6QP+negt|$(ZI5Rx(Krh7KXQAv5Df~19eK1iHJ!KSgIiqGXa!2I0guT==8g3twZIz z*tXVfAV%TgnsKsX@Jqo$f@g;-&emI}gksXMo7~Tit!$IAsnr=Xk?)KZ{&StXvk&Xw z!s%tR+@2rB`N!L2rwEE9>X?UPH@8+3LF)0hpQL`46t*$|JQVpjvr)9sa?SSd=Fa}i zHYGPGYWZX`lMz&^g`B9PFNapA9@=&47$Qf;fhZM|!Lae$sk~jn^~6!l#@>Cp4`o`| z3j5b=$|TzK>>?=NqV*71lW z7`LEURb%5n?j(ijP08)=#_L;))JD<}iGIJ;f-(dFS=g<$6E^ed%GZ7DM|soLoKdL# zmuHtNHdIp_>bBg63`yr&49m0AT&1H**d>nBiYIHz(?pb0PHqe_g^1IVCzxGHn|v$I zO&-am;Aum0ZvzTpcK0nHo|Xbe5}23`!N z7%a&EC2(eCixxO!Ra-W;jE5Sx!@8XCN@8Q7%{=i0O#0#DJvhgdvU=qYG*e}|-LD67 z23UFa&jAZZygHJ5u*xVii;gkk9gKu<{%-j_9qD3d@vhyEmk=K?SvI&7vlCl858g~R z*HzL(&$4yX2GD#ZlmJ`a6XQ=q5Lu7$h{ z=J;*)LcX4{C75)pNv^gk5Ik@e;W`lcKh?W^oGxOH;oj^xpkM#|;gq(mZw@__VhDr# z0SqRHP-AK*22(yLhrk7Ot%9ZUWXizGO2@n=y6+mTZl4$ir5jZ><2I{R)X|UBRF8y! z^Q@t6ZNO}Bi9|8GT?&S4j^)X&zR@*k_farpkNR+k%ow>DGtH2@hUBj(XU*)ks;5L4 zu!D`#XIo>$Ljrva^-t0!3OLFlX3Z{nxr2O~`44k^ss$wBzf|%cTFDRb_Pv- zVNAw1+5M)-)>+BQRHfGxn!f*LqrQ+`!n$Uy!!*%)Jin9b{S3QP9YJyx&}%REuhqm! zc~{#sRsW8MYEIRpIwC!pw`!_NmCm8sE z>5TaP5N#eksK^W}@gX4GiD>^M&w?m7M@QfrE%%?)VZ!*#4@MP~ZJM%NJWGlaD_;7o zDCv*l4QieEkDA?nq-hL_H$#=iFle%Idf`=70?L&ySJ#vG*HK~YF(!k(zPTk?522lX zzzV&LAge?2lVN5z?5NvupdMIk{SYWJZ} z@Tvu!$uw+!*Vir}lS;&u4wp=}3FUlhk^Z+4g?h=BkOg3}JJ}vU^iB*MOi2wxPcp7x2SWVp= z%ZN}H1|xrEf`ZbWD%{M8j*@9=Jl?fqW0o11FHztVA(TNHp=e19%*Zr`^KKG>aKBnO z-xUG!PT!ibnR8};pZD@($3VgZ8Ns*SeRIRSiAxV7Oi74#oH`8di|6$mNB@VZN?<*n z!jhpxU{=p6054i%)tv!owJ-&0{7>@w)6ZRj!vl`#Gj+>l(mn&a1`EVJ)Zlx~hz9BeXAg=7%_c>~@UERbTX{HC z&n0M{fk%t#5p>IJ5)hK`MRm6_N5wcOqd~kq0WKUBDC?tg6BsOOQM7;zub-_P<&A{XHUQi!nDPRXhqgV;Vy7AURoVoUuk*%YLPEZ31;SZFKjHR zKVFoUhmbZ6r2>#3tfJn>5-N0Dp(meiumR=q-EL;rXwT8@)t}K;@+usT3oix0KN;b5QPp_v7G1kU+*xeXwb$zl@VI8C3xJ)D8X7E(f! zCnQ(Ue$n6_`i(hQu5x!9?Sxb$gSX02A~lN{x?WL927=(E$9L)yJ9r)e7g~r0q+GR*0OY#Omf7CsfL9Z~ z6QUYyr3w&CK;Z)=C(L*mKu40@qJQ&guHiSRaM|%chf&+;)Z>$un-{4jj@Ur0CXtE) zRXdQwx?uqw4uBmHyvmT=2NKD2Uc#1e9^PQI#7!v$*8bR4TR<-Fp(4uru=$- z=hvW8g7|6~9ildVVbPAp=xTuH2w!r_>NbyaLKDSkIMt}~Ze|t_IG7U~qBZ2vq|jpf zX-0lWE*9@UdV$DbNZ2M;1iuxE(KK2l>}J0`rm`Et8u0LmHI8}Li>4k%YPQT@v@p(| zF&F^UnE%JtIki{PfZKM(wr$()*tTukSTQ=u7u&XNr{kn!+qSWLUz~Gu&M&CvsjI4Y z&N&8xS;X}h1#?w^`5WD?_%Q|Pn1k0Q14u+YU1#~bk1EH|$4DrzaOXddO7uwQf;pl0 z7A(MiUj)!iUoYueh62))Jfr$ZZASX!*~-(HjRYA;)TeXoGjn>|Qc*2!Ia~bkx!VfU zG}MYI5I#f9D~@le@U5gHl=}5Eo>#sC>}S2ymkXOq91lYgCH@ttrOiT~OJ(T)HQkja zYjL*Rw%|)lJYv-xIWixEr^M3-!L+PH@`wRgDJC;37KM{rFq)d%bIr~*dP#v?&dH$E zTsq^U6hOSd4c;s5yq?G+2#vyI1}tiQ?f#sXN;;!#T5Ux<{rMB#0lo(~XvDq%CWm2i z`}b^s)or$ry@g2;T-si@*lEQ$v;v~Y-1?pF&im-@ARX?kuYS9#GDI<_zL`rwvIm^M zRYvJU^Ki1ZqyW*aX7r#MV~+CTuYJ(ZlUYtYs_=HAto@3F`O0N`QatoA+^;T1arU^>6XSI!xPX8m(uSRTOu=P&~pB;vhXG%Iq$MGQPVk z-huYu@8{yO7TxSUUfC3{?3Km2b8Uh!Lx>9mNfGBRKFs79^ttPrBqd@3i;lRQ7Z0aY zDYd?zHsbucL9OODou%~h^8hIEM6)%wiQKHw#^$79p^s_RWH_Os3UDOSpPM=g*gIzY zC5_PhG8WGg50Ntas~yFrWCQ5h-|S=qC_Ry^oD)=>s8*valXR)Vc zf#u2~Q`XX9bKdX!P)^doqg*;^IE1+7|AMwcb0jFysN_5dv*-`NrbRnQ6jvQQKkXQR}srDa% z8}wmKBa6YHcY`9V7h_GWN*QE99O3v+4z9HJljv45-G&O-l0?}S5c!MnQWZ;*PVXG# z$+CH<3YJjwT@L!`>DKCq#r&8L8g8b-^w1Fa_NDs(BI=lI0PNdPC-zzCU#ZtnfQ#rA ze7CFhFrq2F_gq0l-W{|i+$7DYBH+>imst!;`2Md7W-+YXYVEji|E5SgWLk4Nu6 zF1Y2C1XJ9jFwZ$U(BcP){ycfP$Eanc)FTYS z^8{kslh3*ARBZy+!r|r?L@)t107xA;fiK~zAHyV{sV^4H=Tz`32o)m8AWauK+2OMW zIf2xv7mWx`**9w8iStdgK7&J-3{Nz_bUg082n<>xessDM=wq=<$(9p@L6Z-g5Quj4 zngwZ?7kNgpdgE=EH*{1s!=i_X)aUr`+0D=(paAOYU~6(L5xafZQEiTRwoM0hhnN7V z^NaF6Lc`W;`1-6eXj0pQLeTz*BHRyEv9L>m!f)sq8oZPVa-;>lO3$dEj6huVWuCJu#r z_znrt>Qx3o(L{(e^LueoyFfeFoT+97mfa*^-cK6Lg`W{q=Ma4g3l4kjOE)klTnThC4}_bMRY>734q($9h^wRwZwEJ)AZCDr#$EDn?Tg7Ir9Eig4Pv0Um;_( z*++q2a%dC`l>3_@PDlmF9`AO0lat9$TuuTBgHUhZk2&A&{b+bRUhlFIs>|{U@7Zd8uMIZ z)-oK$@uzQ-XA6z)4)UG71$sKG%;Mt=G2q9L?0sCLH#OJm7fKg8{qQAIK$7$*Vox+R z`9CG^o&l@yF&&4qXeiT($(8o}C*ralDG&3Z54 zd4jv1IXly*1u2G4lcd+?uRl+&^kv<<&mC*$A#JVs+L!GGA?>_n|(st*7V~=NCEl?gPE^fL3!>guN>SA+7P5 zMT56iFq_PMO{l16$XkUX=s-DY$Jbfaje%iY+A+jY;>KA1k)G~$?O3gC1m-ht9TnU} zv6(~9ok_eFjVj~8goX81(mXrdHVW&CZ@1SIHB2b-_morzP|rhsCytBGg*JLK=OY5k zhfe`c&j{se(g>{WLcIfS4FZB#uf4PLirA#Do}7ee=ql?!}gRf+lzQ@6p>Q5)C`yph2{e^mV#y(+v z-eA&L0O*%O&D!N^^1SJkg^r;O%~roSbfS{N;uL7xu$)0J>Ye948a%Y!vg)6!Xr}&v zRdO{%dMUP(>gfMXdNpAzY@A5d&Kl-3s~_d2u6F$l6y21>RxB9cjGTqR2Oo@gf`C%y zqAyabC))G9H80!^W&6R-Z9{%1|aB1;j^L2g8W?$;s zds~HpSVfzA6g<1}N$YrwnS(+ehIpBqU9XZ8b`35CFj9-??z(NF_eRmG&S$?po5&`G z4lW7;!G}TxPp0h*4e!}Ao=RE`nTDRUGki@tzyr5-R-!-36{KOd%rqId4Me2SXMbyR z0Q5LzRjxgW-Eh9@L?YCiod&?L z`pb&0kuVIg^F_+k5ImIJ{?u-(XLVM{VF&|p&Px~FANNy+Y!(7DD|H49bzL;~K-@T$ zN-Lme*(Q2CW4;hIyd%E>!n*EPm^!PbTL}G@5?RAIELbouxYsOAmxG0Ky#l5U?HaMb z+7&NgLoDp`w&GH5;*sOZEqjgF&Q!)%LgI7N zmBg3vo6Qe{)7w6SE_GcejT%bpj#5!BaD#cp;CVB1KqHJQ^gnaX}8w7i6j7dsG}Sa&X$=(^j+pVMqcfNkfEMmx1n4Wgb= z?~!ke8qeu~*#AbY6k@VYGYbQxz5@q&GMrbuj|p%Ayj2~d{m8wky{-$=0VlWc|b#w(_ zA;f5qfpSSudquXkcnP`=%b#EkN7)tiM4d}{ytq5=>ift2Y>ni#STnAd4{{G0DbJBTev zGMN8m_6u3EQR!A{93Mj{fxtBvtFw%E(-6L#zt#L@*&3GV+lw8cQ+S!e1^Jgy{_X0@QL+?sbiO2^0@2Sw%ac~|R1*j2)-U6V_#rUEZXQJ~A zgs^QR@o}m4Qii-Bh(?6BcL0_gQV~EvKpI$=UmXhjlx{XZT<5*IEldP*1_RD~&2YQZ zsp+lI)w!sw(J$V{!8x0vuKxEMxz_m-LSF4?BY>D>hghndbvg{mcMR>bMa zhKDGhoWbR6qL2`lF&QKm2gO=?#{$y9Y43}uh;tYmH64w?SyN!kl~vjGG%Vbfq86le zhrf$X_NPV8&;}Az45Zv^DX>x4#cn;|4QERk55TH_xS15ZmWuct zTc+2RD07^fXVUuImv(qvShbg-^1ZBo<4BIw#^P zId&-qx@&ZL{)Bq~3yS_5Q|!l-4Jktbv6;$AvTe!wZVkRQJ4h3HPaguk7AFl+X3eb` z*Nr-bAfZV#JC9y^s{}knqs3?s`y1i6w{k3w$v=O~s=r6sugnD(@`kAk0=BY1&J5r8 z;Eys7g#tRDDiu87MTv=!(_E4se9vMuBua?XnB-KPA8~I6tt#P4xmI+)J>r=7b*eY6 zK>^EoglmXt>G;~nijq}Zu4YF=YvBbk9Hl(T4Ri>%-ed0Bi`Tb$BZ6?(^RN19VXc$^ zfD{n8MUwh*Rk)l3#|96oYVSGZd%BmqAPOsb>i!#eBOh)(2P}Lx()Ka%4NS(UkgTVd z71Z^^7ow4Z&wEkW;N_bcv#ltW&0}lC&81tkJe@xrYo&CuCf7urr1m_yLz~mJ=z|ax zupDN1AbWk2MgZeP57Q))jCjoz$X#ZR7r0zRKz17>o%1zQDp!q}tq-9_*#cXGS=B}< zI{R1r=mu38NvaEUNl<{C?qeq00?8;5YCx|wDAN?8g(sZZ0hot5BJJ&;c;0Hdssc8h zHS9ml<13^P@7WIyqK07PNjYpk_tQiaJCQQ6h)vBwRC_4WRUT`9u7k^2lL)+5S@7)ybaBu&StO#IPJ4& zRRcV~bQ}{|#4Y&hhfP zc0aZ83i0$yq<1%#l|k?Fq8D=Kkb+XNoTwJZttp}6cC(>8h>%qpj`QiBUW@{%8NdxJ zS$^qmNmjzB`5sH=sdoe+g2;Q^VHS+pywC~GCQUUlWoxseQHQtoo86I9A4~ORgg}@} zcm9{&yHuYK@BJ5a95kif))ractnR0)uJaErv(pCW6M%XX>F74!QMv1-ENWM;bPk|~ z-IcQ+yaR?!bQG-ZR$%@*c&`BDgM}?TryPfHlMmB{=2qWQgRah89i>p#Y$pkpWC?3Pdt#wYk6(TU5;w18foV=r-buqWNTLobz_123sKbuN$YHv!zLpgM+j2%k*6<$W_nq ztJ{!Tufz?SFNNHpO_(-5;j>L&1h1YXNEZO_9OCBPwk#5xee5YPiV`P&ULK_lfQj8B zu(-86ebuPre&k~Z=(odViQrde?CkOV=cl8NmEtZ)m ziA8nc{!wQrB}>nGl@sgAGT{10BSIb;OepjWxvKUGC64c}br&~X=CYiNInkbav^zeq zT_n*rynlV%BT!2X?rr=e8o=Ebp0ZUE7e=$@LFZR+ey+k09{7qw6FYsI%By4ghWYu# zqb^DbNvo*&C-C8B<4hZ?0Z{}(;-xb-<&xW5k!VL15T{~v?9mqs?bh?K#rTYIj%)ZX zuTA6?0;hVOOcEB@2+1Tc8}h?KEgA^_Wy~FA<#|#vIMR1@uRMJaGsadH;M=D3e8hPH{H1v zVAq+Ne3i;h*1-rh?@?SmI+`Vg17=pA2vqOV6kI$cO^4R77!Wak+V&EfqgPyW8SmUe zJSis6ax~C}V@YQ_GMjEEC})iY+adQCSR}(a$53ULXG_rATD$^EZBwS{D~{SA)rJF; z8NBbNJ?q8@yG0Ngu&X;6nLIew4t~u+2s@F{syzCD zZ0_{xLct9-d0Gs#pJItA*efGF`KHEkEw!n-F14<^%z)EDr@`_Pf-dN-wc#5$RFpSQ z5H!IXe|B+UDUz`{UI62FLTEA_uJs?Dp`3t_|58AEr_GJ994PJT#J7R&Z15OR3Iry% z*|}ivszvvoBsRv|#KHPesuF?)Mf)7o*t4ZuRX9E$Ty+7rAl~+HDmpzbyS5NXO|FGf zg()L5_U6%g!A=ZEAz^8HROVkP3zkXvHIreuYf9h1k&Job(8djUKXX(WE;&_bGXz!U z8>H6JJSUIb#7{2=vtV2cSN!1_1K#qh-t=eBEa;Zm9Z<0JL(`1iMQjIF*wrAvk|Rf9;EchBYhKO< z?Qn>B>G;9nZ?e9+K;$@I5~gUFx|8zj+ar%B)?H;x5v`}bKp6Rm-Z~Ht*%ei9@_T=i zZGHi@^0ah?e7vE^`;s-4tnx!+B4Yw?q8Egor2|QENdFwe_DYb5Gpl+-3SrHaG|Ki4 zeHPFp;S!RX@RQgD@xaq9gQrYR6D}Z7E}D(=^_UwB=i2(5Y+!^tuWZcXQ+dE-ofX)~ zbBheeD#Uol5|1fSvP!D&;i`z0%C0+>0b=YklTGt&{xg>l z@}NI}*)v09>hLE}Oz0zhS{TA`7W$NZQ9(k^}_of5}ycjt3y zkdm3p>|w1r@+?KKj|zLb>uIa825wNNdaV@1EVpN_S#C$S0YWAqUrN5}SslPuK(xGW z?NtMDCoG3B(WE|?u?Fz&ck)Kf9l4uWi9LhSMJZay@_yrugWg;yqE6rv7@J>bpj;*f zFS{USVxi`M);ivOhG|!affI9NR`Q$jiMgD#xK;Hnack9c$qAaQz{P-e>`HT__T?Sr zu_AM5L_M#vJvTfI^yXzlIXlo-x=qO?mp>zqPE?<`=MT9p$P*Kk$WhRN1EeVw_259` z6iKVDYMucaZ>~|vNFoHr3uf)eI&L-&E_Vn)SM7$O5H|6@L-&(29QQq^wpSt<|HEp^ zT`?P0uYQL}B)i?74RvV1W>#o#paXXi>vU?2?(wgrddz^XKoDpt5`SQV3v+xf00i!U zRsqrh4^2~FIl7_4dYt$1pSUc*%NlKb59gpjIxsMKeMpGKMzy1g06)Fx~;HeKkmy@!ATT{&>HM!Ht z1f6h#F^8R@INLhQ(jw5=(1@*bCnbeKJ-qUM{BeBbiWP=CR_d?m1SO;tr8O>BW=Nk-Kd?EH6;(5_^|;-{vLs_5H1BI9;k>9upr58|2vN$R$1KTK$iK2Ay~Q;!`Cc|8 zQE_a(1a*)Se5|h1O&Fm98Lg;z^fxUSYPy7tf{hV(qUXsqm=8`dKXd3@Sx;Gr)}^KB z$(DPNc~wxul?RXjHmC!YmS=gxbIz^X_IW7y*gS9vZ4^8-YicKpdjPdzi}N(n#Zv{> zh=;W1cG8pwpO`JkyGf2J<={7{avO9;FTGx%gt#A|=>~(2elG@bH+@qs=gwa6%UGhB zGTzZ4Q-AHofs7XVLz)WK`&U$s_od;Vl`cZ=zj5!IxjR7cL;nV7>u|eeH1OEgbd4jY zDgMRX^Km_GI3&!`aT;K#js zc=Duf*EbHu3N@=GOe#iT&~`~kmE?=WArl;iXt~txFNH6{R(P~14^j!#^G$ zKTUqomR2gI^d(+?TMtghe2kspbw*dSqvN1H-my)Ix`1bIC~&r0N$^P0mq}W+65`m)HWQ z;5NN^5XX8%x4{!-$(Nl~rLfA^7Q%^w994fz<@$fah{f;b4ccaOg4m%*vQx_*?b`Lk z5CVDloFj96&FC#r|7)u{2bQ7n1N&Q*^1>S&8A1IBZ!Hd6E?%$ZZ&P!H&G)WVdL8d( zsJs8eU+i|kgP7F2&Iah(AN!G(cQJ&5#jwOr5ZAr8#0YnKc*0q&I|L~+blncfc+}Py zK3_>dSY7zongKLRm%W^;!Q^FfnWQM@j)4{20i2N9)2NXTV( zh`g^ob(VrUhy2aaVLW!x4gC>|!x5$ILCdTd=QD)wwZYyjLj=*6STD76N8kfT+rC}J zM1hx_{sbY%I%fDjggx!#_1CNWJ`_0T{%c?d6h(Jw8=`LZ_Hqr5&rh}1wpCeCe8AIN zZN>L$sxJ)z>$PTj2nq|S?PvUfX+n7&?C|*a8eV7He;fYQ$`f$xqUI9_^#Q{;CBHl3`_N6cu93MU zq0r}wPQqZfofchJ`_;Fsq5R3}2B77v*=~eFW`Y{5w@B96LCd{d=tro?m{95tJ zW*mT~-!}8PFvM1eE|Rvsx7x;T-2iLb@U#)83yHXKm_ z6dJ6!pwTt-eEmenZqJi;=dX6{^SsbW8P8fOQvOR9Hj8)C|E<4+KA&gG7kGCbLWv=S zLqVlW5IQ6$YnWd^n{DMztTS}=(kv3MGIp?p`Ux)orGS3Ko3a~4v!TqMT@R+Nf^LqL&ep9-5(D-K6mf@EUTH;fcadw_KwuYDMz_9NFrc)?3b-s9+0DP7I)1u_7bTo zp@ZM>LsFINQ!;Uc@>C}p{nV)yeN2N?wpvPKH*IG=%Ir<^&~c&7;I!?Ybu%Quj^)S0 zeXVV>&L=w_lflIk_mkTzb07-$Rr(*}iF1mPuR8mCqnNB0i)UzOiZG&%Kd!!3Vj662 zDSYxpa8yiWc*c8NQ2`2|`r3zNNB3V^SF=&f)m z&fY8#Fjm><_y5UV{|^v^jgy5d4Wj#>^+nflbM${Xd)S8q1pw>8jysb9B!_c=1L_}l zOz#A+pnVsL(XPYrLmAB9zn+%fXujeEEU$|-Y8Logp^@<>_ogyj-+FKG-!&6eBvd|U zzqM}^R9sx|FJKn>P(LJl$bdRI*$0*C{`X5=_(av5RL2w&E($I*<2Ig&kDg^!Ktm%m zElm}Y36a6yOYh`oGhG4c4lA#(Rh}hV!ql0T=GM#184EFVjh%wh+f*YTs`p^E7TUt< zl~b8&f?sC{Z@uS;OPF~?4OOAB>HY^u8D^JrWsxHL8;5#k@8g1-Yp|Z-MAL9PkFQ<% zGBBSxC2Eby8xf*M^2RZ+jF%(Uz{=v@RS((HjqpYPm$PGLcH73QDvplYR&~v`Ed(6I z4GZ$D0AdXOPU{OB+3;^>4zP|s`*6sB?H5zN7PbSgjKAH~o5q8L9#E54ytOM0*)BIZ z(^QVO!cD98SC2;g{{mN)1lQ50kcur1qiE-{=rCmV>25F$S3|7V7;|SU;6_5sN2!D0 zz|qDGz2#J`CeM@dmZJSm?8Dd0USUkxU(CmCb`4;JUy!klQ?7Gv-9v zHEFPNAx{$+m6Mj%Jaya~4Ikv0;ntGK@7sFo2UDUlBYJKKfds3AZti3ZGgi*PX>rs{ zkFBL{&={jK5D;Le4|7DrdgpeIp>|B4zc2_6;#gME^nLJ07_7XQKRMrhqFd_khszln zkh19a2it~%X!6Vqu=Ae{^X$W;lR{mx64y5IF{?xoWHsZ(d+Ww-Fe+GLM#j7J!G1+S zbK|1QrpY^RQ&j^6ReV6V!$7 zi!4}6SAB{lvbp1hyZRr$Fk_TnxnEN%z0ekewO0YolDR4!#p{Q3T@PqL1}&Lt3W(QvafX;Q*Ca9!E*e-T0_RQLXZ?ud!} zEpFz&&~rju+szncQO(EgA9R}fScvwPH)D?`RJ{VgR2z>`6^YM5J4I!Pc;SFF6e~@c zPXR@%?o!39fYEd%!E!Dfei@r>WqKv!TGp>~zRo#YQ#D$3K|(i<8}FPVhAKh*tET6m zkg5E1i58%kp;nq7U#(#rTI;1T49sEaaKmhAMALuH_EBWaK+I1Ew@{rhU8v?w=6iri?ou)Bpa0+OSh&5>zNwhHJ&*TsE!Mrizn5+_v}pAPJ5L zdsy8cpCi!DTztg^;oa=0#qVl>keL`KW>s?~u*(g>=Bwj$#M4>Sum+7T=7nV@VyFez z;xBIL*j|8j`#y3W$TUR1ptN{-xN^ut}pvqf$s(= zkTX0W%XD=g7iX}^@R1nzT=Dsu8|R&C^QGHYbup)dl)`Hx?ViTT#Dx>;U_Q<=y|yjfCO_UllBR?K9y${5bgY5~ATekZ z8thWC2)T$rF_6y_wi~0{dJt9WAidwM;=u}9S6*j8B@^-H!|_{DK{ClG-F>upmn(^| z1VTBvq}O&nEh*^_3>=)LDMR0@HEAUuQA$=lZP7@!1|H*$|HacrkpiHE zs3rLbd)w{_IV>ffM0Q00b99e6lSDZ zrDzWu(odQ+5@OmcS@&kFbH&vGe-Lugk=s*INR?{aA_r zN}8SHXO7*GBd=R=84O}3J)7DeKDKHKqzX{)XDJXk$q=+sGs>phZ@S#s=*K_{`Kh8O z%}OpLZ{X%KoLZ{@7#n;(KkS&da&f$(cK(oI&P9O?~8tm0yzp?OBxXeI6FovV-Q1ejKPB zuDi=QA!5)oh(A3shI-(glP@!2o$<>a6rcG{@YxHg`DYj@go}&w<{$&s^9g5hr!-?1 z8_AivH~AN-KRF{9^w+^`ati35T9SElJ4$Q;KXa;kSb&lIig}o$_b8?u3ZKkfq-sMi zS<=`*j?)|9oej@-bVNLsEMJgVdqYx|jNMBH2l9^vUzUiJWB!-7L%!e_8@ykS)bLvQ zM?(<4ia@gi_cqTu4{2j^^bJAYMF=Wx=WfVh+qp&YM(@r=W(et$<7pC-5Oza1y9q3L z`FCjrkvQ5DD?4R$dEjFdy-lpm+qbz~6NP(R-+#Tp5m>(jU!g^`=!w|VZZGm0irWNsb*BNriDmv zGBio%RWz^F@dW|^nx6ErB#P-EVgf=}p` zFT(@iCt>W6^1*31qUakZZom(fdkE1>2cCnbLEg~EL@cXQl#{$L2YfV;7H}su;^#n< zuZ$9Bk(M^z$%_$INDAT3FMc2Vr|Fcql~c5jY-g=~-Qnr#!0`q(7{B)~Lm8dr{C3%opCF|0KLQu}G@hYxlET_z|m zFP{z_BE_fR4S&~4X?X2DoQMgsR7f`2f}b8l#ySI4AHEvk;yO)3AK{g$?s-krj9efo zP^Uo!4Ey7=0W&@=G+}7ZogPP`r^B112zU4TsG?+6=5{tYB_q4gG41ELgLg+55Bjep|Su$rfG z)GYb`+pN@VVlZI@#}(}hU=g5vW&cm~gPJh>GeFGu*?y^6{Rbp9oW5>_p6R`^LR<6M zUwx-RRR7D5I?dBuzt!8YcCFXW*|P$CW&X{-W9Gvz@8#G`HpM!(7)BS?+5|WqCU+O> z2uhL0r9QjOU^YCYL?PTOkbFs7p5^m)(`XNXQb$mFwSH=YBQarK(uwsoYyJ}_Sl_A# zy-6$^(p7menM#pe!>Jz8x7(x*P52a0#(_j_#&WHy=e5uU!Ybl|W62rgIL5i!w3&GZ0`pvsa)>-PGt1dj=q3o=3Qei7#xv5alS?1mwSk}Pz&)$r3jS@q7; zq~w7scl>Q*gjso85rDJICB%H(EsFvIOP3!ybFZ>9irSMP@$Nb-DqK2=?$wR0{328M-i$D_*(wLp_l zSkhm3=cE!l!*1?TLV!_jM$B&a@p);N?G*sZUDu`>aLb5HqJJLakupQx^A_aU$3`7BdndM3CY6F_OPMV7UWN+qNjU2Z@B< z5OBqy7VdJ$E(B;YEDxOCv-hnv*|u_W`ON?{U#ApwMqB9kSwKCPa2k^tWC5!6+{>t0 zBiTWPT=q*iIxxKNkb}_0(O#AvN+kXSCGw3HWzku#**^uxb&*^tF|LVmx`gL zHuPOtO{SZn5-D`WqSvN&__AZ+@`ZwM{Tv=5^kn+yBjEYhhX;rcnQRK8%qlz>_dN!A z#qX3Nt`gG1$c@r4*Y4n63&UPFgWf!qc0GuqWuo~0)2!JLjoKg-!)td14N zcr-a|HwXobI-7Wd@s8@ZMgFWcqt^!kWzm_C^(_L^^><& ze-bn?;K3dbIf!d6Gp~%LThu98kjyX7a?3Op_AZ1Y0cdtzkiyyIaoe&$Wecrk$<5@bE_EmBcjL{ zO9RV;`Har}Hy-8x+V#kSbceRP9+$&|@1EFR(F8-fR-+uQGau~Mk9u7IPLAQS3Dm~%FR%T`5!TfzX&$sLqQvqKy3%$bSp=n^6w*Z zEz13Nb8wr1h{PPR8f_8sw35mfs4ljeOC=2tG`vrU_-#;IXTqVW{F2*bprylRJiv{V zF1*DO+XK`1vUUgo|0GW%{Kuldje)%H`jyNo5kaUDg z#J;D*vVxZ$<~t^ZgR+&4V0PU3xZje=)%JbAcSi%3PUSaB=d-$}Nu-Ma20*otfe~G| z{emJa%&gKg=!2r*IBS&|n*w->m3fMQzlM$vSuT^4CT)F$DdJ9(?l8%M>b9hzwN#IP zkZRzsCa+qv`m%exMD);U*kUFEQ~dRRe8j{v{|v?3^fdcu-g&WCz?3i`i~Ts6oU{3s zrLxxZNwX$Dg%sWdHjY6x@d9aC!(4L{uspm!JT61!q+LK$k2VjAnf(!=Ae zy_B~vNO#GIxo2xc&dm8UWuxLg>rK4qy6N^76U279V8UZ;B(-^}7twNU+!R@sksF=G zE!`u8V9MkG2_Hb;W?L?tmAKkaS=Aey>k5Z=^0mDD0;R zA!6WpSfJ)%5!B*ZplawP?>ic3B~sSMq#9f?!WdDAj-v)>7g%|8RkryTdVMz>tCAOW3niPnO$DEw&VdnB@o`R%?r=I&>{Ax4 zV8st$zXvM0)IM)v9=#PrQ|t}hEmVZ$Of7_zw4aQ!v*O*@NqJK3&&KHpZB(S{tMJI? z3e+#Hpb=E&eb4ll@T=MQ_yT)&ScqkU(5Fhva&bmFJtZw>dqXaVyZ!Dyv;H~*)CYx; zxt6|#ic_WgRe?dEq=hp~VcQssXBn^%w+X!!lnsJ7nT*O~)>qa7R{xoTBqOZI^2=GX za@v4b$gJu}_lN`sPaW-P$q#g}GF8bF2(?_Q^>2@kD;xhNYw;2Z+k-(Ulz+wrCvLFM z6adZgiSdIwhc?JB9j@|bp((3ixf!8o-4_rAnwrO^WQpza}#6q zvJnbr*mfJ&LRU?l+2W8@Zo4S{LxX9NuuH&cx)TESA+P5B_hq!g=v@NQnCOgnk+4Ow zR>7%~WE=6^W|l+sSXV%~v)37b<3Dy}@!>~6PL^#JAM81vOQJVxSgq1K9{NNh^b4+! zLVp=MBo~l8;-Pmo8o_P>Bz=#m6z`cWMVhSo6>y4@6W6Z(pcdA94MP%%e+A!sky*&P zVmstqQA1+Ve>Q;b0*X&8tl%XMKrm=?H{5yFjB>-o_8vS>ka%72Xw{M7yMnC)g|FI zcVKDNLXj;_l8^t5WB=TyUFiPg6faSviqhEN+)&uZ4*N^$o)#~vN(p`+tY4|(du1SxLp?-#Qr%LnWvwes zmv;vleI)%egiwipEiG9d^%%{N$`oZj)dnDP@|}@LgJr8!&}y49F!>#vcFzS>tE|M7 zh^A6NsNI7MlM(We;CD3w!h!NPt%enwwu2T zm#PGAKCa3X4HX<9P8q=+K?pZ}v5b3FGx%GE)rXjGE+L4sAdr~|F5`COP2`beWKePAjm!>wso4p3J5+Z4_BJs%D*w@hQsCA0zqT!w&TAodl79kxNM?aVjO7@M^wxc*=1tivk?Z>eC5Mi#7BNh47@^t!0GB{$ zzYUw!)zzm?ovQIC5>iG&`D1=Bw+A6vAACAs>QiEVEw|*ai-WmbwOAfJeV57yi;DyO z5+f-mX&jTq_8@4kXMc--zzEjmG>Y;p#)`%2AgJec)ApAu`S|I(+*pVNO_My=YgnAp zgbT8`IS9^z>}*Ef%GE5%s0f8#6RM}bydkfP`l{H-=X?ChVThSGewRzy54%gIw_(gI zokwvdEs}YZsMT%hw#sN~OspAsuD7uM@z6bdG2T3(jD;*Q4}YKOhu(gI3KnuQXIw2P z`%BujauugS?#d&YXCX81FP}Siyx<7R5CpU2=u!K}g7OIF?f%VGze5P8=ZiVbnG4~` zs6)9&-1h>nwTw$ZKZJTx`1Px(6pum>gbv5@vr1B#Lw=UXdi)byIdafK{Ij1Ri$kI&md41L5TDrdItEGPT za17=&M}JDWe7P5k6hL>5n_$$X!`E$3E}I=WJ|Ts5_-NC?zaB2$M_f#K?hqH#Ro9RA z1H6+Vv#2^3&+#E2uoL`CejJ(G3uz`4l1_u;lj}qsv8vZPB`En3-~<+P5i~6+i{+(> zU*8b5ye|72&66y&j=dRs&3^!A&Ma1Ms{T^i-4@-%h)8M1xLx;J z9fL-KYj9d?l5)c^voSwxW)XOi11xpxfd$}-;voiHUAH`2OC)Da7z_I(G272rpxuaO zxdjdbe=1|@Aj8d$EhbsLaLhlaQyO}BsyeGQ%@!nZ-N_V3ZP0{dIe7>Rg|Wg!+}PNse%t+B{=lX#wmCEo(7i(tj13tACO-7bbyS5}@!s&Y{b}q0stL=-n@x&8ATs z%1Ut~bGBH@aChHNd1KCz0CD6|z^Gg~>0+uTRLYZkA|*QwDP`h4N^Gd#k`K)to(8wK z?Tn?s5_~DwAu9g(=n+cBeu_+0pzR&rulI>&vTTt93iW~5P0FFkSDE+JqDPp5t@1kf zu|d8^ROFhvLmyRMp9w@oi90|jSAWC46mtGmJ8$-Mu^GqKdn|j!Aw}IL)rx%g-GuQF z+noET*tO;7TMY`q0t5wd+zhfq;=r8=x;1xi2RB<^c!=CPQ?Ab>wTBECYM>OZSe?jJ zPX|$|ju;6>6IZ%$;6#H&1)?KTwLKJy7%Uej7AtMz4GwrRP&@2=P)uv=@PA2>hYT3* z>bmf(u*?ZR=@{3-T#AWKsy}j7SD)}lja2?;*)}rf2BXEV(S6B%tz2}$V`{}{~CAQ>!()teE-gwq>y1Kz|3uR4qbysC(G z^B`~&Xn42DJ6 z#~f)ih%Xg$MZyI*cGRI%JhttxM54MR7K=StJn|a?ky#o9t;Bi``NQiI zlW>QYL!GSzfg8?pSM0Zi+aPP0*ntes?{N2Y6BdQCq&i zt;(d;qydy7C5z6AfqxiY4q^bUur3i@wXSv1Qf~Li&uTSg z6$At&!N{EBmlNUPZKQg08;I5Y20zJNt$2O>l1&Wx#1u@lmVa#5ph||9xz3S1%EqN+ zVuiYZphFrg$cX4$r4)ClnFLA8c;wYV1E4W|aSbfwI98;Qr4WA%kU}F_hWO?wfTY93 zX=gpl+SmO@p{w7&zxy{wd9dAXd^{l@uF_9-7BojFBIo^svy1ieF-hJUHy-!#}z;rcHOHW>PVIDKfaVdfcoTV_`!zc%ie+-Zu)Is&@K4#)-X z%b|NMeu`}MTKvu+A&>?!H5ye4?t#KL}vG<3QC_{*c1Nl9cQSNbx_+}=t?^3ks zdiKN8jB>^CyjQnsBSyQ@K(qF@HT%`w~uMle3jUt!J(Y=m&dp zg~$hcLL>RI=rseCoe~E-T>4D5t|AhF6b*7LVdo#0VDL>T3zd51o>~Um3wsu3-I@f> zM(1ocs?DLR+4ag0F1*Mmjozwlb_(`e_@H4v0Zp3H*h#ljyfBk6l4*66KhGtP3$Yygf%bA?3<$<0O#owcNet0*F!{F`T7sqdY`XDRl zWJ{^bm_M;WzsVDQ6${xA=oX>c?l$GNtb3i~T?x4kp;ELx*hEeRtcJTl2Xi#2s(oxA z4M5_kE+Y#?a9uT5o&CZBt-hX=1nT0SNPV4p4SztC7@U+ACUQLGNdwc^s|`lBO@pJ) zV-coCK1N57ksLsO-L&XN%vei1;l3gWQxhXKobgYTC((FUbXPJmu7jFtdlqqOzsYz& z+J_UCLW}KEF*q}gv2Rk2B88iNyOFEnr*MJ*Y|p*K4%5_}3^yrtm+Xofe;kwnySM#( zJZlaD{5Pe(IhM%1EQwyrvya{5z?hh5hsih+9d@2r6Q=PGHRa7?kwbdmGGfhLZ-4O! z5wXdKcI*xJ`6hL0o(Tx$8tETS6$oxO+cbdE<9Qs{0%?< z1_j7Il9xW?0UQH1H8Gc6;{il}T1#`>xDmeVSKzefq%>FnBuLOMADqP5IAwbk*VJAl zmy6<18m?!^G09m;=Ulx%W&dNk@ghjg_>sM(d{9XQ8~yzH>!v>uMmb^l&;BfTXN=sQ zeLCa%uf+Z+cjT|Dvn8Hdm1jS`%kaVK=FGgrNhU~^BxJQai`w57t6xEX2%O7l9Oo*5 z6RY)E)GV8}8#Zfv{NuaaN{A)R(mXe3c#_dnNV2*+i>@MdwIDy^X`U)7nKWmZe)`K> z@}_7G#TK6*(JKc*+`jRrR5E&)1Dx9v%S12~M3!-?57qmWuKNLx31dMS2owsG@dD2W zuT4gCCYiE^QEpA&RAgU&lppa}%&1Bd_i8mfnOvcxgAe-8UM3fmWzO=Z*phYC4|P)v zb=#biLsM>w=C)dcZ;NJ4inaC)PZApEqaF$BaTyg&S@mRS$p9)f)q+dPxDe6(K!)Oa zTalZ#BQM@vkgn?6?E$Z#ptjuUsvL zg~%mUERNbizhT^*!=I#gS%NaqW#Fh+7vR=4xTGiTLL_jVOrpD{T9fMs?a98{R^eGRKR|{$|i-K~mQDQ3enboH5Q4o|=51}UTTmP}%?;#JcjJj&Sh4ko( zo5d4&8!kzNS1OH7c6~0%b%ihYRWlIC9@5@m#9sdG&4tM(j29|yez{xZXk9GPp0aH| z-yS-+Z?M&W>8_dBa_GVAhuy9ky1LYA)m5);TK(nHSYe7E0}KFj|>!6Or>7yA*@B+Y&Db1H1|cXiv|A|V@@%f`DAad{kM>82RSt{BQqbrO@H>Lkm5zK~C-jWQLaE*Yg-bl$doinY$~oid$?F8==yk`3s$oO>&X77?Vl z9L;1pDJd2l8*VbjdC65wb+hp0_6k_&BF-YDTB}9QkuB$uZune2CGQ+% z-PR@Wg4uP@2{dAPd63mYm@ov)0jN^%Xn_(r&;m_?kVm+fchh?U^3pa(4r)Dr5aDB! zZ7_8x7bbcUwtuFCbqDIEc~!Kn3M4&Mg_12A%NZCi<1D3lI+pIwzl53RLi_f^TO28` z+e0%OD}f*j-__Oycmgh+g%;>*>WR)}^xD|?!8rZH#R9Sq0u7T0c;(@d?>SX`O#j4m zTjTL{TOM}68TA-Q>Sj7N`}^~MoF<;`OvYwUO8#iBXMmr=IO=qcFpm9UkDvmvDoRV5 zVI1MPC(V%tf1QipPB&ocP577ThJG-Pv3T6_jWC@i!csw1E}XE3a#FC$Q^>Dm-$Xru zad2es+^i@Zjb%)X>Y2G<0&*xtXyY>&$emu7&@>kUNF-NLUyMU2RCkJhR@$6`A}ZMO_;V?l4=9ya=K<8wVkq zGw#&T-V_9Kde?S(1pz)bT4;uvTb@jQySs9F+W{Mk74C930Q!!5GAwb1r zZ|^O8#Ev^7^u-wMVEmE>9v)MyW3EE)Joy5loKXTu$Rm96IB|Y!_dx*xImK!{ z{j}SXtB9Xd+FUJW6VVdi8d=BPrs}Gx;v%DInw?Y}s+Bp&V=#VynRQ5QrrKbtsMo~p zNN|yJ0zi2J`lMe0&?7s?1ZZEPMlH-pX__Lg4aRa2vGyqt$z&XorsV=H#3it6LY_OK zfXwSMRYKu2kL1P$CIbPDR5s3(P>`l^HU~Y%;V`LB$|M|MO-aysj|0tR>=ZQ7ecVx) zKVkCNrU4ADO@;S=*^MM_T42h|a_N1i#8{7R&a9y#`vFS0C-ngB&s!#-WTXn{e`mIw zSVgyW@0i6=q!D4MekG4*(FP>tTmQZslcDzmV+#xcY11=HpVLW5L;1QmRKFkn5I_#i=Ux^_qI zHg&l<;u2itiR_Cm0j}an9A3hmgF9Rnni+K78UYl4xStK@S*VlCPn6c)N3*Kc+?Wb+ zQBux!ekV*yIB*mXgvV`y=~IsPdqWKW=K4d|Y0OVm?l8Z2loc@;t{1turp|pTJ#0c+ z3P*fLHs-hcBg+X1gFxnjv;R1J*cIK!dA%!|jHt7lfj-2`v;7{E2^ypQs8NJ1CmdU$ zpCT`RvhHhVd;;1G^OOjEq5P(0>=p*s8IBKATz3QnKWai5;<`ymiH=K$-}Nog(a~|L|lL&uuJXp zeYJl|{^RYQZ-At%R8o0LsmiiQaHglb&*{@W_-XbkjbDHLzH%#YNwlge`wSJDC?>P(!$p3Zm$!@T2Yi~UlE^~ZXA1M}U*2Wk*WFXS z#qUqpRl!2k{o-FT$=YFd5v;&pXG^Z|o16T4(+=5K-))<0Q+Mla1OM7I+1uZKf0f<$ zd-H#feg8Bz`)t>5+f@q>torV!ho^nB&JOLk$sV7!W4nU|x@JKoDT=DhKaHDyH;~1T z*MGc#t(H`g(wOppXa*;Rl6VyO%3Anl7mf!@uu?MTDI%5i<-YCr?fCK!DvRvrezJ*BzygOYK(**E8&0q`|o~dzYdEt3{EiUSHH^k_yC|s1~btg-1wt`eIROt z)8mblAZ2vR_tRs8hbe({a30PNo5r3a@tP*$*iOFy5ScEED$oSjj|R2F5oLcluAqir zHS8+6U-ji7CILQD1l$3dGl1+v(>42ggqYvGOldm!tJI_jIXUHNzgqW?QyeWg(GlrD zzSHAVIKDjXJW5Roh-Xia{@6U;HG7-I1>z;iV%W_*xz74~PiqJf$Q!EJ=Mz|$)!7WL zXysk{1s(%zG4;g`;{*$tSs{OT4q_jviCj;pDZ~(tci(TfwpLK0!vQFcvw+uXRlLMsy5}^9h{P2z8@Z?;UVE<$p|N4J!@|#bee%vo; z2{lodfR!S9?SA7OD-9GU?qQs*%=2*3m=%( z>)@s&$t0m6lk&II{gDC-s?O~%piuK7I41|l?I3E|j0T{fRWZ%4j#hDB`&GXBxqcYP zw(oa$P=vGB8GV&~WfT-c-{xO+&8P9zSBqb#Tu@raI~Mu%ltd^i>1hW;!qGr#kf)VS zfHbE?0kR~Bt|kFVQh$GyQ2wCn=BEylsqIek5un0q7g|7&LQ#6TJQ1UcNTJFzF@lp9 zy5O~BBhiQ zIhLP0l7R9MHPq=dDF|5HKODq~Ef5om&cznwj#Os_FOsWbo}08(6Tw@A<9R*f)+)i) z(wll1Q#r$=tm1moD$q?mT3G=SzTR%F$OQH~Dwn!+ybaj_|o&R1`_S%1y>n{Z01f{ngj+ zewV#(hJO2GjGJxhfP1kPKIfy^h-!@cH1-P!Jh7ZCRoJwYNoi`KM11YmE_6SXFJ8iG_5Ue=J%>Zu5j$qjn=@ zSrvgzc7lJbhj9jXl&L}b^!vGGAjQfce%hTnw?YV>1hzNPgEo4s+s;zhPaOb!-3(*f z)tFA?c9A8$`5yD^*|gWR0<_v6L3o2B&&P~uNkmcpQ$a&->HwGHW7|Q3h{EVpNSq8g z8IapWo7kbE&amk3uru#6loU^+CG?}DD533&5ORO&W9E7>li0ZE+j(_7k#0aFzNVtA zaxp!1pd`63pCXD2pQ{6k%rR(D=7tDHdwMk~MSd8poLn*mgdvU#2-lx0ATqRr6xvBW zDIhXwg}F8zIKYjE$~`R|_=Gb(Ef|n$rWaq;1CY+XzBfY?9QFLPvLti>ma*AcoBHC; zDnWlKPjwKS+zm|O!T*!lVLCDdU_U_>8eSfk#vCi_ zffh?Edmfu{->%H6Z8Kcj5uh+@%V}xm6W`h6;LN16CG9x1(Z>YLK<^-bU0+*c04y-ji3I)M~;0C9!Gi;B{(9@+o zGh`q^&~i_b&wbL5hh5t>gnTe^5!io==df12S|NGDYTk>N_>af>qa*){Tcsl)7*+6N zLN+*oq#gmTU^fI~>{$O1&r&waf{ zGQQup4QSq%g>uti2N#X=vWb$LUBnzjAkI^ z`zbr{N7Bw22I-pBXc@$JL<4`Y1D2;tbeqe%O516_0uZVbeuMr@g;^K)ZRvUtPRiJV zfT**;Id-aoDw1e%uB#JHHGT7OdkGa!hLPwEPLmxYafXdXGtA(OMumCS3ObF)E{RY| z5+FpvO#UYSll9MsKO6sixLSZ(Gt~nt-gJu!(GjK#W9{8h5g}>x2h@Lcb4)BF(2%|B z$L5=)szH`kMxSU<>f!dr+{G|efjr5FZgLgF%D|6E4!CrW8V`K9-MSI`cUNX|F%7m$ z2Q2w7yQ3iuv?rkgKezkQ-L3`mrZb~Rx|emrdWy>`OnTPY`o;MKc)ikzViC$RdsjaO z+(QB??r={jt4=3ilnH+pxS1ztTQ;#x!^5LHKt)_y1p#H(9SNGcebbHEz1fj#=<&T+ zsaren4A(obUFm`O+;|h2Jt-^WMdE&)Dj8O>SiqDW4)u+h5jbZQhTy|&Svnl7n_YvF ztUELO6&j><;H_Vr{t8m)&rN@C^2>1{3cyg_rDU^6f#<_vW}csP|Dp)|(Ci@}9#QdOJNRvA|4wk@(&<4{ z1=Ad5mh&Tb_SpW+MrM{kZEi4oM<*CzN}fz#Xf}e0Ckl^IfrUKBh(|+nZH7N~qsMwR ztr$RDDr^@oNn(FV;-H?er4F4abavQ^fRjER(J6$wD#N{r85kUXfmk)vUp?p5_r`0U zS3wt_=XlOPmsfS;6z+op0@hNo_?Ki{k_*n}4{@+B9`p=#0Ta z`$)>IPQr@h3J#WclgH_3p>dKQ1YVD=ET~5ivF!uY_j!LBxklX%n^#YJLsIUmO?_&r zj<+QJ&WQVO)-Q%gKbXZoB-1>Tq4W6~uwICyv3f9<_49(jQ<=BwJ>4SPnh9iu&@(L4?iv^XbjhWj&dNR8d+K?!w{tt$?s7C?^rFDDuPPWrRuv z@nv2{@OScQIfG3E3*$|H1$K1lE})nM|I9DJP`rP|OO0^l&g1sN$#nDAON6i)P z`DTe@)(+D@M4@k{X9rPXHWzx~*)|p7avI_IM#Aw`p?QZw>DbDh=zQ7ax`j;9=fC`S z!%zJee*YZ&ln`GGKRqc<)XhFl;ZF(f@Fy#N0)BY&9%b@*_~GHc0DdaIigFA;(9e|n z(hGn1GeZ_AKa^>Yxaqw;I9$cC{}JSp^*#@|N`%*V&Y*6|fd>i^CrxiBljw5@>{2n$ zV+lOQAfSt$1|al1>Ii)xYfAo0=!>t|U?cgt$7Yo6O0%viVg z;nl+X#)zR44wz*Y1=i$Rrl|_?ujCgaup~5008ao97Zd)i$v~1bt<}j3a>l||Xxbh`F`Ya5SBJ`Q!7qk68fI&uA z11mroC{P>`Clfb659R5|^Bqf@w0Q4DCH7FZ1VRT2zbP`43KXzV_;<|UaVYQhsb~LE zaVE^g;M?nq|AjyQ5B8%^NSD0)0UZH2m)iURMt@Cn<3^Ib>sMfW@K6yVj4BigfE_;c zczSkwW87}Hxibg#LUWsPW685< zak!Yhn-%XaqwnZ#CW|;rGW|}Xp8n-^^ljDds|`IrVONQPnEB#2nWXKovt%^JJQW2E z6U|epUini;&v{%FDLrRNELg(L_kHaq$A1HvrOd1&PU&^5rCP3|O?THUt4-8*`(52f zTbLCcn%z38+UV7r2N_kXRbLN-w$v@NNMfGZ)w~!lqln9rm$`XZwX3L#?yIF8De7*= zgB3;0b7{?fc|4e4!kaFX>AQ8ci<%+oYb;`}yp$$+oE6cWas6sms{Op4RX3YDdVgpt zn6YYZFL@RxOvu@7-Pi5zlmjmRw)n4bv6+n1-0tZcnkzm!nINu(H(oAS<;GXqWD*-Eyrx#+b20 zu$UFO9R|x%oBH+FUyt3MWr*#(2!EFq3^Gr%G%iZ#PVLIiKaW0q=r6IN1fS08y9DD- z+$9Au?wYP0rfZO~lrEI(-8xA)XR!(}&WjjWGslBM{qsN7?n%2ZyinWn!>-yj%YW$G7up_p z7?WX7xKHhGZoCyD7B;k+cGa|ZLv-7B_t9%LC$>@{jD)ewevd^WoM^5WizvwQ66P^) zjee!w^-Vp*fjw$Kk;a@Q=L}-Tsn^b?CGeoy3|(|nM?bcm%A%w!W`{Pq?fPi9uA^E{ zrNUv(N)a=W`gAnrG%dYrV1JEI_KIWI-706VUwETnt>3G~c%#a=ERw`N+)=v6(I4uK zNv_ncx9}qzez6v)aKVly{$Y0rKSY?6e&>cNj31fWkFEi?(YEjI`s)6^UMZifngI^E zx#Wp<74T&>ftw*};@aS?@mre4BA@1+9g5LfGognH5G&RnTcXer`hRCd5WlBz$+C~} zL&`19#YvVqdgu+qWSOKFxrj3++?o#!;vgf!LzpQO)NmY(R5I(%v%5{6EhYQp-R4}f z+#4%3At;nro&;@))3j9r$a#7mngYo2aT>;FhIHi2E+3dt0}QeFYV*F?8XUCaWl5Z; znGKv}x7pvfhWk!91Ap-;1n0lS8SsH&LQxW^gdsG8cdn4Tn=U}f6e$|y#4eOHjNY+O zqDDA$(Ku@m*U$lMlr?7L^GO3Ba9pS@8zs({I`z1oVP2Hjl(Gyk_eH>~8C+)R63#aI z?G(Y9@j$T55&4*3rLnA5XX#ZH5lRqzg`7f0fzFbWL@`1If$q$ zC#uE!0yqnCYa&8GzbN>GP^1kVp=f>*kQJI*?MyH6pT4bkPV+Xm z(SZMLTCF6Id4FjlotKZ1hLK3M^gKZtXz2;mNUSxnoQ?D>HP=1^b4mwipMW_+l3)$! zR?%H|8|@yq(}lG?>@s=v5aY2d&F3(Ubvoe`to< zJDuLoQwVNnzQIH!k<7guNlFtN;V#h87d}o4UeES7wA@Z{TckxCD>H~VXuQb^ zm2qw|mKNA4w=Fw26L2ethIQTQ%9$gyLM^JNNAY}UHX9hQd5o5*-Qc|!Z{MJb8xX35 zT7=lPKz}<>+89+-fKZa+se}=6?xf@OtlKIK{1Q9+9v;uJktrvhYtUo4fKOW@?wg)sgorU_rD~xXY z)qf-fI0Dv<$yBF7Wh-K*zGSA(`>@>XS5Ruz^2bXUpAFq`P(W$8k+8V7K+s;&hhHzSy@vjK4x&ai@duF1LmB z5Sk|02ovCp>aLE$0xY_{R6nQLtZFtO2!FV1*|lRw6e(?kh0On6RyNk-8LRK4S9($4ixmCO!|?Nj*G%q;kcO#XP~4e z%o+6rk31@|8tc)Ll_z@>MOIG6x;D*;t7xe1YXy2jD>Hyz)f>P=*`i8l#yPotKYu7( zgS&c-<*dL*u6=k1?$#<`T(^k;c~uJw;DWd$!97Wb6jbAC3S9`dtLW!?vzqcj5q2w@ ztsJK+Vi}TS8q2m>qHs*_R4UK+lrn9>D=kcn_E=TBYFhyi`+W;X`KGPi_^DW@4yLPn zg1W!32}B(Rf{0nY-2JLl+(eqdCx1RjPO>BMmG5%i^v&w7UYYi0K4wS|Y3f7y>Nc>) zRaSjOon0rz@CFFaHP%UynZ>5IHLhB1Rv>6Giy$w!0fo|+s*65E3(1)e%tFJ#-uDtF zG(xQFiu$8cjF)b(GaUpOr_#w`qqs;4js_A`9&m3|8p?T!Ml01+w|ZnCs()V4soklg z`iKXe`SS+KiG6+=7Z3tNS;~cBw(%gs#)Gc;$emABAtb9DHaxouAtKE3QPb~=Qo#z1 z((4SNE6*Ozj|BlL-B1t2LvJls8Iz*yOmqAF z^6StulG{(GvqA|Mh5PEoWPeuE*JobV6sChlCJgVF&=dpy)`b*gp6}4rL$j*e-MiU% zK9$Wbx2CdZ+$YcnT8M7lP7EM{#&A8{upb}*9}eA5^#h<-T)=)m2@(zmy3m?*0SHn! zF$Z%x#h~rEdQYXE)>~7ra@biW`J`=oSEJhPole-kv!QY|Zuz{s{C_HHRjXtSyNtw& z6$!)~y0zI(nF#9;g>OaEwCyUG%o1Mt^lV^0A;+`H*vT?hPHD=aujQ){SxePYx5ig0 z`|~&hVLD(-WUBr2^U|VisDbDR(pBdAz<~?Ys@R;H$B++)b+_NFs6txx-FAx_Df(d# z^4Rs2t{+p1Q9CbYGk+Zc>dSMV2r18f$=%;q8x*N#zzA3g*`Z8PSaZ~_L72KI#WG&C z+r8_jP6|YUh|N+PmGy_yqLA#-=(()7yGZYc(c4NJ(P7N6#*Zt{{XC&C^o^y7_C-Dj zm#Wad2EU-x0!E}hVIJ&JZW(ciqyN;93SJe`om1AMb)qy3^nc`oeJG9=n8bw{yT6JW zQ%cL+Xwp2l_;wpM8zf5WY+~EBf`#ay>k_EMiZ(D(%3s&YX8F19HXW}%=rU1DC1-vH zjg8y7*CA=j9mE8M;jmvW5fZn13YC4kYxJ!ER?1j#>3NW4wq1qT+ICG#oj?`A+h$vD znzmNZGN}P59e+$mN|jxztwMm{3sf}T>3P0)qi;OKXLqziP*{Mpu?39YOs1x zZ8Sm{>t>*s-aTCm25mIgQ2|dtN#{O6yTJVL%tRLpdf)tM7A8Hc8z7qlfN6q5sN2m8 zYui_0dXF!(yg^zoC@y~qkA?)Pd4Dvt4*A&k*=DZ)FfEP39@xj)52%q7H&r~^>v@`_ zs#SaL0DmZRIOI3{c@gAV59cE2*?}XU7dS_8gI6V1=Z5k*a5|F0*4&)u*dd;OS|G{) zZ-GQtQRFiM33%;9CPS$#M}d^MKvM9p*XM?&imUX|bRTjF&$7~wYVRZIFo3>@jv$nJ z{ne(gtJNcDrd?5E>79<8>DdCYjPETmYtuw**nj8mE`vi@j?l3Ww3sA_A2%upzLj9U zhXE(|CeKHz^Aq;w-KCb5sBU6@uKB^K$*4^E<6~RhyDK$x1wnPL=q$Ey4dU<$i==aH z*ZeeBSSUK{VcKR=P4@?7ts9t8)69$FF6DFC*k9yhN8$N~t^XEQv9S8qP36;5E(=CHT8?ChSl$y1T zR61>do^0#pZhfO~sw~F`1U%t%*C`Zn#}akcKbojZwRDidJ)BtAiHXs3!O01>;Yl%_ zOFH{>4RF}{wl@6*p3q!&;XmyGl4Hc>GJocI>ML|}RZg9tG{dkbp>?!;L_o7_c3O1x zwHj6l?q#KslH?`HFteQ)Nvmx$*;p1)3O_=T>046Rf*4h=mR{LZ0gW*57;Z*LnnRfT zbES~Aq|$63W39w1ok^9P#fAU=nRoL39mOr=xCqhOEEM6L#j2J*1=asIE|dQ@mw){$ zg*h)`dzxbIBBlUeeySj6yheVy_07?sY z>k!oDioxSr@KB9yp~j7S`1t1#NplA=NY$r0+lZ9Zw*mjf)^_GED4cF>6T-O*wLxp! zt>tWQJ3JZ9spRyvn}KK>!tP*{27gs}no*Z8JrTS)-9mHvbF(o7&ZxAr*myFYGku#% zb3|cD!nZG@&)(7}Wr1qX4FBDKFJ8WV|K>aOK#p#)E+hyrL#A#Cj+=&tww%Ve zp1qrWw(Ng>d&!mj$%Bam^=0xD;~U@%yS}A5O|(8V2a8W8V9?t=e~;J^v46esB-3;f zYERvG%G^Hr3r}u@k6w66-QE14!Rdda011|c#)VfFbK&~=6--y1nx#GSSF$M#sAB=!_Kn#805+ zDm2*%@Uxi7IXl-?9!Q2L7$q(5bj$N#H0SIDjP_&W+`S4jpK7zJ88bwvzx?$ZX55CM zj91)+P(aGEYk$7mhb_ub=czK>zHKh-+`*DV_4xjNw;#v)JOwVKf`136OG)Z3Dpb*f zR`ndAw`r(hixn}W^Y0MNTH}K@OP8!PgsyC>&Az^hRC`WeXhX^j;c-$nRTxnFi4G2= zM3LCg9K&?sZ}fiTSV{Pf))S{m!gnqH&1{ zYkpc?v5ZdY^_>@iDnlOL(w$OPAh+yqE#P$kn7Kh@f3GPLsvdp0xcDA_{ui*CTI*$Q zWOHhFAa7!73N$k{IG05Z0!4pYbK5o+e%G(SzBE)Of^j9l zc>K_89oJhY@j7bzVDETniITXHNtL9ndUpEM*Y>CMKkflQfTVm$Je_^n-SJGMkO0o@ zJKs46`Uw$C5ix)5=j?h!&~o(Ch}x&9{g_>&H`CF?teVb7duPhLm@Y%Ft2J%LNC;v{ivs8Bd&5>2NM}u67EWbKy*s(ains1O zk7lcE_UUr-skvOI)i}Y4mRv^5tQ!Ag`nR5`O5-?|tTWX{_B^sO=eJ`faFP%P|DQSO zc0Yf(7wiW&Qx@WV9&OUuCnG9hv5v9^HKkRz$i@^-(Sk-l!^8Ayo#9rCPWu>ZG(8zj zU!F&2hevOYrN&%M3zuY z)d56ITzV7bF&7OnVqPmySPd0U2xuI50#CbSi?LM7J(mzGOoa*Omf$+m%u68^zQPyxfzN` z65wA=JJq!%r&+naxh{;lLtc;qvp9bwMY+tqClkz=cP8*fy1qQKoO5|P1`;Ji@d(Ig zmo7NaUgG0Yl`ZSV()d&x#}NN=i-WT#8VJ#ZVdC=KFb%ODkB%2EISkK%yV7+H`A`w=%d5LhTGu;afmEWr-30Oq;M5X6EA)Hm$XQz8!~%cV&~x*7 zw9Us{D&vc&PCI-v>8x?b&F9(tmDLn&s=Ty(9>>_L*t#27B~}BzjPmC04=G<625>rC zdL3G;B~GXp^$b=wJQZrp@53+wH}GC{>V=6ycw^Q@={%aQEQW!yp&HCNRNtcGVp)y3iZbx`bevFAn3Bj^NR!v-TaX4{jeBiX2o>F1vCJGd z%KNQKwdo9`{X9u${q6t~uea$_7B)cv@8wTZ`%QAlX%mwIl6OW$Z%cot6O=C(-(L4o z&HGA)U;y)0`IX%Ua0r+uKnm2N6R2R0*1#9Q45+fq0O7A(_hU$3@nGKPyC0()eY*QG z%2EHKm1nccN|dG^F#6{uZu%gEC4owSfSx2C1=X1GFJ)1YNtlYs(=l>K?-jM+4)#}Ni zN(0zr2y<_ig4%zW$me8s>zAi885DCYW4iSfNmdp;e@luWUGHIjOgW_)zX~d#w>Trtel%u z#Qu0935npSw^h1C@3Rcr8f)n{Z_zfb(Z{R_hqQYau+lIeIvBs`K>>);)8xC|35oL# zzWclOYlUNz<35kFW`*Z9r0@`GJn8o@heHwIdKxB_`yvE*7^eT8FToBg1DS8N^PGk* zW47O#>K=c;@FkydcpnmVb`Zkb%LNI97M2|E+*~~E1HrJ6NnlVAkDF!<>M<$pVm}@a z2i_H%O)ZSqaF&Wr3I zH$9ejBs5yDT$wr`Fm}6K>EImw;>nr1Ks0wX}&)i z?HZYOGXKpu-2cizv6jAN{G#4CexNg+^#e>o{@HUt@l{&adF=*DH^ylV`@1d~GvQ}f z8<5KQ9$a3dSynY^UUZk+_MWo|FqpSqqXv&eIv*`vCz`-CBlvS{Q$~%?O!Pu`!)kv6 zgLU0FT$V*QaF|;)E}!w^4V?SX#4+$I)tz74-^ZL|vl^o=U;Qv>d5xRCx%-g~4*8ix6ggx_cI{G{O z{Tsqm9lB+1WOH!YMyv|T^ktnu-)x22syD4J(wX~r;_(~K*!ygy3bCB?gA@&-q< zte`4YW=yJ|{_>jqRJC{22A|K^Rl-EfzVW+EGIr=yBv0{evJe?QxkzrR9T{$Fa@B1% z0Bk^$zuhrcG-awx?wj_S{2P9j6jox%{qFhkUzdM8g0~hdqkn~-^8drktTt7%QLYj3=BMc@7qGxBf3@=gvBA-0eKZ6jjdICspL^ zyx^$_R&s4+yMHDX*)+R>bXVF90^B0=9NfdrNS0fuT~@2VAD7@vUb3Xdw~ej! zPWv^OTNaed(wX}z9Um)Wlm%y=jCZPF&D@!qyke7A1ha@hAN%t*4ESZ=J-i7_Sp!)VL zJ{437VIn-(j8mp=+>18$gWxXZ>W{;VNz#?zNq_E4yuYdYNs4iBaOMEi8W6pnQ69l- zDGa0C){>>DFIxI89jAc^i%vOwf?I>8_hqwIMwmOx=?;;B4Pq9y0{c zynjgGmuqsZjbLf1k-!4TP{&*f^GDQkUzroia25SfW&Yu(2ztyA8yT>fuGL$(#t{88c?}?Ryk8IE^nd4A zK81ivP0%#A&8F(La8sb!NY&RUG%QC$$Yj*S3j;m_b@*g0SDF);Xt_EzCiesjgKPj* z;P%(fsmwBQ&RrM)50qx$>5}weGN5!nCQJsp4~|bCs8-Zc!(X(faH{$>3gXM|4$@>@ z4b^3}tBqh>0Ucb{Tt>@ zv5>*IX90#YBOIKfVW4On+8Jfz=PXfZc{I5XGXf}kDUx79>iC{Ox@4NX>>$t1!D0be z>Mf4h86Yc6KZ#e!ugvczc{N!RoB&0K3VSs&5d;$8xS`O=e4x#r+I9C7^gt}_R zV5t;yh+w#OOkYaI^p%7B70T`KNqkbK@-g}q0YtKbu6A42NnDd+reRXAOSY9TdS0+)MB&jYt1BMRum;wRG{H#hDK>1L|*aUSz zF2cgXL(_c&mFp#vONp0E)HmTo?gT|J;ka_3%5sDDR+L}EVPBE&7I z!>Q|Op$Eln>VhyCx(VaJ#tI*C-;Q5}@b$vnpKB1ZIh3Z-tHgS^p;jXT((Dl*9;4^2 zhpqU7Ey>df?ZJAmcVF#B5C{zE=bjP9sFS?7e_)Rgf8*E#J`{e7W)T~E5!aPe_}Rm8 zegvi3Lhv=){gi+rRe$=NG~12N3#^UkPNZIZ&Dq9+ZSs(99)QrMW1c2fB?=$~!99_s zrjr3S-&QMX!1W9IJ0*Wq6J!Agsy&9nb%ImYZ8f|H$GzXRwlD`*OyU7F8xI=t_379S z_*alp%RUYkkww~s%P41usa1epg)H0}P_zv72DJ3cp}(sq#D4+K3^6>LF2a|X7fFTv zHO&A5v{}7=4;A10X1klD4KiZLUa!1QtP*D2ATkJcfFZ|$)d>E%GYSl3d?Ys@@}0`C zQz@9pt0>(-5d}nCQ6{@>)IiBV82Pj8yX(HXy><1#oct(DEbUmZgSmbQUGMgF0QO9! z@0GloW^Bos7k>#AHqYitdI>iAIP`*JvW}uEtm8`NL#4V&36)XMJl@ysex(i!!$tXU zrJjZynQX5B3FO8=(%b{1ZNf+1$ zmL_%uc9)5(940(_KtpS%}2Y(hA0ijE-)6R64!w z5q~1}l4jKZvL&GcZgsvY}!in(z_rrd7KP)q>^gutXgrZJ*VaO~WI?^ci+hKOf z0%$7S;l=$hNF7gfnA_{V+uFP%&DD&Ig2T>z1qZ=mdhU}BLxBsI!A>(K>M#&&kCP8g zKe#J=o&k47jgoM6)OO(PP1PX&Tz&%XihrWHC}|OJDrWFFwJe2`PxW9*HSnBi%8Wu5 zLQ{?+_B3)mFhS@TQz=KDS5wcssfq}z$8AXA5h2wrIfK^+`jIJMcj1ojP(Kjc|9;1N z-8HD9i_qM!cJ`2`ceRiR${*dqN&v4be2d_%-LNR1e0c{7loxK1ncKU})9#5SIDat9 z=gd5gbMCK&XIhKGcjp-8rTx0V)(HnRE_OmvK599FzNNm$^Aw?(m)Tq8gRA$uQ@P2t|0fht5jtm_TS`=l-(#LKs4|!Qbr3B66bE_x} zTv)&30Q|hfUu-?e@uGONv=Bvp@PDSVi188@T*NB^h~uX|LH3(P9oru)DrO+bz>z9- zbWgxY9mFCT^)=HG5bfiTo&{UwL3hPKl*Kk3#veOi(k;z>GCTk%AP#~%<{AJj9x(Z| z1}ZFI<~%s(A~|cX`(u$OAjQe@xI{TG%cQylM(6A~IemLh-qyd~)w^i`gMY5TmS~s@ zfY&ww&RYB3)a@;V!3sHEgN**|cksWytp~D(IUA@&kQ;Hsmv!Aj-0!-L{=SUos6jlY zr?#(->V3Gugw!@7q}~k%c((pxT0+JRl)S;E4AMZoR~F7ICj2CzT$b|@MWTq?)hDDG z(E4q+t9QD(gG^lGzqCJ`et&yiH`kzLdh&C(X;#f(w$dAKQF1nrn{KlnebZ)j=;)g^ z{CVb^whIVcDB?g+{<-~oYwia!;DzvYAMlfQ_kBx#IyHG(miF2r^k$N8qwm~80cO7W zqU6+6Lhb_4DIGHrOCi#IoL|K$qkNoSB*r1q9016CD8B_9z%H(DOn>l1U(bN}@+I7G z6V*5P{hG&uG<`n)Gf5e|WgiLtnU4q|8nnZ0Mm?X}vM{p*#Hjix*~gzaZvWw(kYb`S z6>Rm}AXit<$A5H^;;JPeYfW7et?|+Em_Ehe}bmjv>KUF4x zn0>=N&NuutFw59)4c<@namQDb6r%*fLPF zp6Y*?b^!9=po_$x+u>Z*g$-8C`$@|bHXfs_ZP)MN1)ZN!6#K1CWFX#7`4jza(tsL$ z)AM55Sp&Hu@qas9f9=1`4ldzQ_-wB~XCK>HF2H^|xFiNQT-P|`*trs~GD1-@l@D?F zy|5C?G*qw=3GXcgC^7x`%`dUW60vM~&F7^NQ+SJJ@&xKIyxS)_epvwlA#H5Ia2;s+ zy4rmZPNcwr-z|^+1poaP|AvBTWo~41baG{3Z3<;>WS0vk0uKT>F_#=C0!DvJbKJ%e zzVlbi$;MV`N04^)Z;?t;6BmcR-CMbW98e3gGn{$sl5g#mU+ z$#E)`5=)d8gPxv#eEoILejqVrB*s7X_wxEEChMaQM@)Z8?62iD`EGGE$5o5v(c?E6 zK3H5GnU@&JILV|Wi|eDP`8a=D{2heAx||A;D+wzWtD~r%*G=1RR`~ewo7_qe3C+?x zH*1*8Xv!0^xIK#AMe5y*yvEfmRWykcvnJM0e>x>U6!lH9#peg~%0UpbZ~P&Zj2>nI zV|K+{2!(>kT%=})n|^oGKh?^>k~!o0<9|LKOXi9yvUqhA{k$pLa`u01pfS&BDwW;y z#rU={F_0zS;KGvgmqpT`b9}Y%6DzM4vdP3FG$V=wpcwIn7Z9 znuDvs9IGpDC&sAYZp)}`uJu+gi@ppEo`9evahAF*MzTRflE&OVygM<*p^WXzKYQdi z9xRg6Tq@`F=wxh?RKI^N>_cmbuGv=0sxMdI)|EBPTyM)0M&mejj?po69%-W$t5sWe z9a%Ol{N6S7s;bwdZ?wd|XlG2ptC@<{rC&Vz+v3loXya5lU0#kA%_wJi?yNwKHgQbh zU~`sYIKan0*6-^^8!x5#kPYBz?daQ@{BVqq1=tpiBpA(^kI;Ybi@|LPbv8AcQgTdo zZPm0@fA=pI$K9V)=dse#v7lqO$MEZPjle z?E2-#n#89FV;Eaja@lX_3T*xCnLfW@-V;$AKNKh>Z0z*KQy-ZY(0mMsdjj5WTL~Lkx!rClMK!*cvP6^@oGr>Z@((*As_P8V%tf*)=}3NmsC?N}kec8ZyRVm-QI)s= zwvprYuge*;ar3F4Z<<|jBEWi-G#{YWdHm+= zvCfy%x1@h9KirfM`T$X@w%P5<6}20rq3mC0bHS51`b%wM8fBZb$Hkm#C|82Y1353C z)OnmekoGR=t(08QYygkj+d&Y3k5Bq&$n3EH4if%36RNI9vbe&x}8A)0mMRjLO?ENIe>qol6i!gMdByq`%SqVSy57zdnMjK zw+X{D3w&(Q@boya8{?D>=2>h9yTyS1{z0=eq+~eKoI$nAS6)_ z!1@yA$xm^mrRtPd}s>gcBY#^%vI~!9kLloRG4fPUM=7f3eLa6XGnkL4P0LPH7V2iP-C8yGRj?*kV zU}?xjzr@R{;oxO=&}v;{z;fbMCV~6JHq;dh*twP$HdjWnYAV4(+2DtS~*E^NS=n5Eo-IHJ75oB#Wx2O)~F5zRM8FhVG ztVnZ33W$^I>!#LkX>1Ft02Be8o+_7`zD{E8Sx$@2tA)5PrYQ$Wd2dj$ppTX{j#0>gAR{*D5}o{%3; zAq=(m!6UkgKtB*CvD`mJP!tr@gf#2|0GTp5R0a4!fGM^u1kW7-4gvdB-3EUk2Ee8+ zjgh}4t%n7Z`=FhYZtIU_0471JhkFSV+HD7IPFq|V+L5d1^OBN^mh=&E$MS_mK{Mmh zMgW@?F18xD0w9T)>Twc{3j%?4yQ1w) zLbv5^Ye+BdD2xdp#GFoa6v8|cuH5R%Kejvi{HETsdKQ4ye^&G&95>vHH_5$dBLk)w ze*tL{8zC(Hf8dq}5}&hh!5*`Wp~sW|)x?jf&1Y~`Xe5UHpjGqb1IB+ok8s?=TsKhM z=}xe0bqCH<6?K!Q2m4&EMw5kKN8sR{{3okV#)M_CL$QzAlaPUAVxSD1nRM2@O9SW!qO>d5u+fNE~p- z=j9_v#Bj=C6Nur^C-;9zFp5+-vKWqhU!KqwUsrr!GLsz8je)(XC+63*nT;LDIwNTGWS4kg#y&Z^gQ!NUAlXen!|+vg|eE zpIC?CNJZR}i!#QU<^MbvpFfz3meF(D_#=^b`RE2le>@)(`6Yjki-2+4Mg|;@^=fEA zwoQRO&9KO2uVMB8MhdaK7kr;x@%Rux5ePWkFEp1IK>J5+|CVw#`<)=Y;Nkw*F73WsCZ@Jc_!$R<+j}- z6T$|RKKH%IePF3E^3vsY!XOQR42|@k%%o%B57NcgcVjy#;JA709BE0+O;3Ws+xmd`?EhAG3dF`z0cB+s*PEDUPV zED_8Pc$j|_Zht$iwPX81UJ8AHYsaIPKRX4*Br_5m3D~^29a$~q?rnV!HWCgMNr65i z>48wZub5o>I3{YbO?z7<;jPzKdD|Y~A!NfP1F#{88Xs~+WvT`rCS2JO)8V2i@{k~f z6;jZctFax$V8`=_p3FoHZ9R{!f*GB@pGY!qQ-gmLrrY7tV^G2k2JJz|$N?F2FL8Dl zIC7k?c;Kk8tLvKS@avT%!;s&*6>OAo7ocaa-z+9WQX!Hc31TyEf);DnHhr^fwqtR? z_EjbvYC3R^v$5$?oIWzA?xUeS%m7g`=I1EPj$=2_n(8Z6%wKahS1#O~X;Q-&G@9P< zXEcAUja9R)! z#bjpLwpuNZHx_V)T%hQrMiVr6fyNaF_B8ra=sX$K^rIcHUOR#OQXEz64z@aN*n-=;S0#rASS->0Dq(K&y* zrI~X98NN4OxS#7{>XAHj_qFJM6 zh-6IvitfF>Hd$_pdR^)lA-nskF6;!CBX43MmK$u)TZK2DIQ{Y0G|0AwNjT5kHO&=% zb)uNOxSu!DUwJ=1)I|1qBwwg5ndiJF`33ah~MyA>(+mA`KUW!vyM z8deE1m$5}_(|^0MhzO@Tr~L3_1P`C)=GqS$GI%F8!xg6Rg3bC7mQ!Ib2S2)R+z}~p z;fux5U*XTc0kyJ{{SiOD#;;LDIFvcz)Vm7eEoIz{7kZx zk_`XYzvr8aj4UsHzM%S7V*i?N$Tv3^SNPV={Nl@30w3JmUzm?55sZjDCpVjmqTwEAS!}rBdb{nv1k#1-Us~B)5sYosl2# zZCc8-$O`jLrl0zd4~?Y14r+nTJZ?P6Uo zNV6psSv397HE(C|rBVe=_5(cGz`J!f`|Hi0U?YjE;LRbYWm>LP zz14@gsmI?v7fR*sq>TT;RQRwaSlu3Ujt;tez z_J^7@_!djuJ4MiQ-v+gSSm9%%lkNHg$kr~qYO{eOw?^9KtVpV%)<<_Ad-OmpEZ?bq{O^w}=NQiV&v!h)rl zERS7CrY!S2I?w6AxIKaWs>Px~g;nd*n!92g970I%JN2+idwm`bziUe|o+=r%`^;}0 zg*a%?J4y2G^T{rBr2MZ(t4Ah6BW7-q%R^8qPcxM(f5fgf>$}}qmKJ}qV3Xb5vb2DB zcVA}^k_OU1KWO3_wY9AW)KpjZptQbk=S_un@J{#QrF%Ttm_c0U4%sIA0-VT#I*T>h zE;cN=KKT{rrAAn%`|Ia%e6U#SH{I#@$h>={JzCctrLKRvZL?jHp(VSv*$(&*RK&dPx_Um4xe3d3tPXG{l}Z%?>P_

    n#@GO~a}J#kHGFGhk?r7Zs@}9JC}K_Oa{3E6%mI zLs!k;X(!2}fJ51091C+;{E9<`RRLGjG-L-%F;cmY@2HO&(E4*w%YxchF$ak0?B94G*IphG79^k;GI*}ko0gx*h z&W^9c1|Uq`^)?K=(ac&UB(c&V%V874HN4@JQ4RA|-IF7b%;9S$LwZTK^?`ix1!;DZ zV}om}(pgcXM>W4P+GXIH;16EC$50HiWd6K{SV1N;4nu$bM*dE|CfoY`@bv^`G@8U& zjpli(cNztQ4gQm%fWGR{*+sxK0PF%nYs{Z90_ieN+j#a3>T{~f%)UU!#}KJI1R#q| zRsHl^K+E6|Cv*X59KA3FC!UE^<(~mg{44T$0!E^MCHxKsjXcd7BT`vp(PqiZDk6O@ zI1&@gBOZU8L8>$vsvdd+8dZnLyZv>!?+`~?WD&2&+=McbW)>wuAmyn^ZEPnj69oB# zh8D|UJ$xmX$08thG#%;NeK(I2A*O)s62y61^??FfDJwJ|5F8_-05niO%h`;DZ~rhW zvNWTG!V2OV$^Y9H;DjtHKp$8(H7xoF*ufRm8E1c%9;0A&HG*}>eZige8U<7{-faQS z2LMk6LX}B7hVwFn$l}3RO?ZsUq%y~+^f*4Kn`e6H6==h7C-fO6$wKjnPs7PG*VfpQKe zD+2@FF790D`@lwMbm}+IXdnWL(nC!a?e@13M3wM&U{1p!cJkaAy4nsVEgEBh0R*=e zSt8fz+Wm5c{%mq?YHa}kkQEaQG0-9H8dHDhaE214j&fH$FmI7 zqnHrsB#oY~vR=gtMmTPAr*SOgf$WG&m99n=bW|cuQ+kdF=_+k23zVN!o=@o@u0tOq z3^9b+^c)}}72`69AY9+!1Zoh>Aa83ZghrSNo;Np=QU=RKCC|Bt0)ir_vs6U_&cJ^f zwDdH}vNB+6!h0S~SwVy6Yb5ug?Mw|Lfw?;1$M=m>Xi^3x_8-QAD`hx%w!>w+UiBdVRaE~_JfC;BnP%w{FbSQ*q0n3M;vqU1MR(G@ob<;aGZaGlxEWwcj}x{}DpD$Qe~f>r+X1$hq5bO1 zc`MmVal}Yu_3w0JT;1%C)e_Ap^ zXNQs}3mO??3LMp0=n88Mu1c@jXV1ol1J72ct#*a#bKe1VV1{I$g(M)x(g*s}a@woU z%W2?CT>5^>;Y6zz^yz;!{%YDVm0V@MVcNUaYXB5mWk!CUk{9>WPy~*i`y~JBNI=)* z1f_A;2{!FGh}TRtLvQa$orlZakwK9OTff*Q8qaEkNaby)47QK2%PuRxrI*0?P$t2wa@a3R!$`2QNiMR zOSqRBO-#n+z@tzElri<4xR+B0$e5&_PPoDmG!R@sJNRb59-7@+SJ_|}&{h14S5)0! zTB(tg%CUx89Acr!zjpl)7IOddix9JY-z>nH7dA~F_nQAt>mw|OPu54Ar5uWqGl?3& zh(A^zDIB?R6+VApXEXJ*=)vh@>BoMkxKKwuYTrrqjlDnm*^98{M%3sqF5>HuQh4MjRcYIC z^VPH`X`?1rM$M;VI;!xW&-J{uJApq6fdGTt4#fsK0KG>l$Fks&RxEYcnfS}?%-oAtH&k_p=b zgO^OIv8KW$2UL~2c$2`kx5;njLppTt$S=S6?g1}6D}1A$ciQo=$-Z0P&L%*C1GrrJ z#DN!T9%qpdjzav`5rZT9n_6}R9ixU<5Ic!3%AkLHqu;v{kW~}A&1UbW(EomSh%h$lS!0JmcSb}8q}8cFyO;gvs@uhGx}@l9tpL*`!Z@@ zV+ns5-F+!fUww(k3`Spg@udk9W*XoUN3w>epwT|;YJ$DHJ0M}&r8FA@J}_m|9BZRS=9AXlFWx?97cOtcC); z;$bK;GAk{PT6}2MW8=VjBDx!)@1o%4j)E7-p*!X%X|N&jE!wQti|@zkL9H+JaLHl2_L193jC-5N;}j5nVvQ;qRk&U z@c44an9WJe+dk=nMSji&X_!kuRF$VLW=efw)33(Qc_0)Fp`}y5uQ$6Pa=cMI3E;k- zUG(*E-qBo2$#Qe0697E-fqaP4Mh<_qrqA%c!m6wTV%sJYAxVhbU|@XRll%^NJ%FOV zZPoAE?E;~CQibJt7^pC0zb6$Z{C$+LmAxz$vLwreoi71DJ$*}tg}#wZGtE6&)IB5- zORRUq_fcX$q)2M0w}X)2>hzaL#8;F)i;_Vyyjhh1el zO2jfLcO*L~cXJblwk*r1%}w6udRrGbr9|d_ST%qbAi1&Fpf^8;4C$vQj|5Jc(h&k= ze!7$6;QuNIpVE(i_%S*Jf@?I$eb;OhG9HJpb}f}@yI~g<6lq4}SP*4y>I1I>)irND zxSQi7FYv{0Z!Z1}fBpqF1mTRA+e88!12{G|m-<8kMSn|ksL(qV1tPW&kP2S zS=S!c@uN0n%gUOz4^m16fe?u-3D5v!u99P}>z|VUnC^K4qO_axG3A485t!-e{`%{$ zd+;lvF(VZJG5@aiXOwKtem!IAuf+VT+LJF=XG?r)Rh@nQCdVIEcW3$~MsiMaA;@Zf z7InWZR)7D1Mc_FZCy6WsJh57zMeVZf`f~*izS$BerU!m z*_UIr)h07$Y!=i!z@}%(W9x)%Igqj%o30(^?`Cn9QEq)wzZ<`pF2Y&(K&+g>(ZeZO zf_Vl0`6~K))7Qg5R*Qnhl;%lP-tKCWydXbbEdIXw>)DdUOob`WR1oxXJmy?Q^wo-l z{(oRHbYA<_X|F0UTt&?=_RZ}A-jPKrqWiI4lQ$jws~_~%IlPq1+?%U|hrpSJ?;B-9 z5(9wLW;7PeoxHET6*QJvZhoL~CNphGS#3$xweL6geTlv%O-sgY4LBBHoa8wo_X0t8 z+ugTovM$H+wjAnnc&Z#pIlLXn*pX^mwtt&iy*YIEeO2pYKp>JlPv96_?`yYxeM!po zTKT`bBPBVM)!PL#ai~Xf*LQnTwq)|0S~JL*qKFg0ERLrTka3zbYP}BoG8MG0KWQzQ z*`s`oIVr(#V|=7+#OyBOyr9f3o$x{}4OT0c+}69U-6*fL^{DbfGDuKvE$#ZZ+J9De zkPM=l7pD(WKsM!t#nsr&UWHIn_v)7#j|Ey(1#7_ij4}(E^D*QgNMl&QohCJ>Idsp_WX|EacFC1z%6cH%asmFPEN9VgO}inxvR?q~DCIKR)V;E6 zAe(v|@z-s$+19<`EGRt%D?DhmZ<~6Eb!9?2`409Krfj`dz9Scl&phEJz<-~X?J|*C zy6gQJidf{fzPY9Dcj(Es?Jx=84DEUct^`6U$=Wa;ngHdBG5@a6@1pPb@N(U2WJ&y? zIzwM4VuD<%VasVEZH%|Iju+7a_kr|}To6kX-r|vBPPuK1qG{nGf zDVNsw@SHx|q3p#<=SX$iXoM1Cwa%5rO3>dV_h@_B~aGW^fbSK>?%^1y@2G?A|{PR;`VP2MFr21w z>V;6HAp#{o&75;yzMNA_Ot~ZbSF`P)?j({r4>EundJr}R>2QD=P3G%mDAH`zkG}my zBRs_Js@Zhf%RovR7iq&E_Q z$s^%5*sUj2_4lOkR%q_ROzQS~;H`glZ5(1or*l_?suRTY9mUW2}_njaV(r{ge4E+^9(sb zRq(uss+WMDsg?yM;hrl#1fW^_2i*y!_FdiWNYI4{NY_7LrIpiyA4U)>z7tzm^ou8o zei2meLc7eA{U>Wab~!R-lM;`o$5N}+V~)X?%2QY5eSh^fk?0j-U_Vfh4aNlM#Aoi3 zCm=HenMX~#b{*Y;_`mH;dC=7cP*7xcl}~0tQYR}xHZ%cJs&QsQd0WFuU0q+HXaVd@%P4GoOz zi$FwlRez%jsw=XuFExq^)I`z~sea`VM`m8KKWf)<>1ZB6S!m^AvT=r00lC60+d#gb zWE;SNoGquIiY*7?X9r3V^n;X?L*&W*0l-?9d-DA&1x_%w(A>tcJlXjDWj7I9lRb17 zSoSR{EMV_L*R&)4hms>*-`CY>APV)CId4^3pMR;ug<@sSb5fTB=i5>QwV9tfIaJ-0 zxjx^nhB^9}E@8dgu6GqFm#B$El19gReN(?1Z<@nksLD-fpj;I!@jK}JGDC!V?K$&Q zrk;{f3O>TR7zNaN7@eZ_$^2L@LH32#E2G_1C9vMiXaf4r&u_BbA4v09E?6yG#JGW(m5bQ2RssUP$T^2A2@Ju zQqahg(vU!V%+jzjq#}8?G8BnbXV52P$w|nT87FY)TzH@GLtSDJuQ& z!7glgvGyZgZ8bm+INJ?*_kNumAF*U^rWVZ|S=YnZv}Tfc&@q~4J45_s4ggDo%6}Xv z+hzI$6*J|Qq6~49Jx;Z(K|vVkv}TSwP?Z^VxN}2eKs23oL)gG(uC0kz6N$|H%mEH( z-DTE*H?zV%pn6sgY$+*=hWkm^novIz<5X7;96Mnv{cwPCplilxw5~o9=$C+smK^7h zxv#mi*#?i@d`9E8I})!Oa6;~84}VlE{RT)1&ZI*)Dr;sw1c3R;=ZA7Pi`j&Ca4-dBL|RhIw~ zGK5pho3B>3pPtpgB{bfkV1iN*UHUN>^!BL*vYE}ZRDuQ`2etWqGh)R<0*FP=xo7rI1eld7cA0c4)bC-DJ2lPp{wrMV`8 zr-0(t0@o$n&jf=O7#}HIfyH6I9mqnl)pr!w%j9XM{D6bbatGd6Ke*24I@0i(6?m=& z;YkQG*laeYw@|xY1k*<9;(q`~)J)N$gAHvaLXnSUffEA^r2IbsPsX7+3mZu-Za#p~ z^aYte@m<#)Zp%syw(*wdtp)8ImpBhWZt__8W^&Osz2aI=T;--d(>pd{y3gtOX&^_X zB)YaH`U+t_pTeQqK!!tIHSZAxWU~-PAmg0M9zbhz)PS=&Rr>t6mVbrR6m$X0BttE+%FZrn60EDL`yTb#?StkW)n1(&4(dy##aRj! zSY&<)wZi*~v~|56%zvaB>S$H3jp|5L2juT3sp%BQEkIziC7`Y`;&|_(y5OBg@moE~ z$8u?KX76hh&Nd1f(DnoT-4OX>2K=gh+~cOneOg{^||)cJ4{(*>h5GC!y!R4;pDLyhfQq8 zaS8X@(%R-weNKi>-}1ux20^H({SCK9k1G{CEAV32jK|;%M|aCz_G_*9(9}RT#|k^E zKV3yDUtUpt;D2*>ot;}Cryb2*jxVjcmL}Q9emEdvbKCXgcLT`&elU~ku`PZzFhc~I zV7V+Y_xz8BGP!$%>ANR8KXhLmq{{2X6JH%**3AZsls3OS)^v% z_M{?({B!+^8H${m2>{02fNwqy$8>gAFwfl+L8JZnCMT2-DNUGPrx|X{)apjXH^WHS z;#Uui?dejWF+b>9*X^U56F!-LUVg;j8!F?hVS8>mT6k1Ho{l0HOajx>CIZ0OBAb_?W~5Y0Da*Lk0v*0+SwaMsrK+3s}TyUVYG=J?~jq>7p5tDC}lt_5&uTFLA4Y~}p za_%Xip!tcrsi~P6ws)Dk9i!$Gn0b(kG=DnCg?eq0BOa-Oxe<-GXm;PKvi`$hbluNK z*ok{NZ{o$^EO+tZ)Qy@VW5^8}GCjZ&m2(j&0wL@~d3V2W&F42b*qF`H1n@j_sd4ct z6n{zFe^{}a`zvGIT|?;V3eLLt!H~Ef9tz9`JCR-uA)`ot-(n|{(`Y65Syb}Ghf6@o zDYG)nL}~6g{Pxeje`T)+`US(A=tM;Iy3utm#qqs0r5ed&-$MT-yeW@9WMVP*H!>%< zLwLn5%(o=&>IamFWe#v@Ud$9w*x)O@rhi8#FXoMLRPC_+`q$z!{DRkAiHtYZt}c7k zsp8+h!@D3|x@-~q0$zz+K_j1hf`3@j`J{iz@N1|94x?87;peb3OTq^1!cSr+qbHW) z_mX;uCIA*tm-UyQ_yHnLh4oWXs?SMOTVub|B_hKIzh0gF4gUEr0L&R$Wo~41beE4* z0vG}_HkYYX0!V*G7Jb*Rn72@XHJuNBHZag+>jvqjw$~B55B9>KNm^nfkqSv!@xwmt zYx`67Kkk_i4oTTYjV=ttj(Bx}D9iT#yr$@}GO zp`w=A?7OQ-Jy_n)%uAd^f<(SgmfM+EKg^fEAqnCVDrJ8X`-oWPGp|}ybfzL}E?70tt#1}rc!Oh5hgocxkj`*fq8KT}tNMBKjd zf0bnFFaey~h=r7~N<xtFsU9KQ3?2K3tuB z{(SrC;^OkXO%?C=Mha}>3c=no{%oR+Z2DN>}LLU{;%cFNWfgp|JEr*Oyj2w zz|Mybhd$*Iw;g6Q7E+Pw+ACYq79DBJDl14?-R{5+f)Dpqwoa>6k(0E_Nw+S@PNn3` zL-aO%Bu&xnn~La8cQqo?&Q#a0WJ?s(=aD9`PMzL&MMKUF5R_{Y2lzu;g8DR+Cj8x! z>;``v1wx`8$EMBz41l6XEcF94-i7^zhO%ecIh6_*G)zJZq}p7ltF<@+iL%PeEbR&d ziDjc+Zy}&+j=%fv6|0d-MeJ0{spO_T4faW#qSk3k>MYwgO_85qAyPLv(8QwcmvX1O z)Ykh3o&0!7(mdC1XX^s5rmJ~C8TZ4$OUr+%?NqSoSHH3?%9u@4?^T~{4kIcEAKX<; zL+Sq+(H{>ihC{=+PeFp-QJS)D%I@*M40~AtoelY;9wmqX%V0l;!;mGUiFBPPyEUlS zW$WXvGaJCCt%_)GhYGkf>&m)nkKYYx7&6hjBc%9tnndt%fF)eyT#-Sj{(#H1cLsm; zN|c=lq0~#3^Mpgoe&Q(=lkj`;BXs^yG>-=Uo*W~FG2M|7*q7;uC$ZhswWsxnrUnT_ z*=oK)mT9)epWvgm4U#s6`Y?Ya_jN;ZtUX;9T7?_f?L8FF6VgMqqju3SW-RW@pdaVL zPq1U@b(v0XdKXjXj-#qmtoz=`K4yQA&@q>K5-}>1(2)PKrw!*5;t0iLz~?p_03FhUmI#bBMv4M{Wi0+tzt`|ER@vhJTt$*`-lg zFR}W5aL70Cs)#bT8=q+@n-0~}G}HGrIQHd<7+om{!Zs$J5+pPj==trX{$+pIrB%RF z0rY+eD0cf}{!7Jwr%h@*2on@9br5d;q=D?Hfk(a5$bmv}AcI%5izq}+$N`3+JLlP* zy%}#zOuXaOdrNQvv5ETh=6ouGm(4DueiZb(j{-B!y<~bWRm_!;dh`$7*gO%!oq1W9 z3YgetW57aa98$m~hGj!Xw5opwVKzqgIL31Y;f?p4cjDlsOpg6itsPDssh9E1d@v%M zgG_|ZICFDE1WIyZO5ePxcdFaP7BxJ}!6?F%lsH4lG5^F$y0KU9%*-?LV@V_C+Ilk| zj{r0Yv?~h+_K!{Z$E&$SWxg-Hi%atP-7lA)KAwL#$}FAixSC)Lh2MX*@XR)A$~!=a z6IbgTQ>F4CCVcOqtoQ2Z*V{T#j~nB;Z87y(!2qjAO?I0U^9?!ZT$(abKw~Ll zr!O-hJ@mso*_NwyheES5N13o0g*i!$qr_N2@JUauyGis znU&q_g7Jl4(*1+sQ2{s3of<_eB;7RmfsmN2Iy5Nt8s-X9?0`#j&f z@ejxIe!t#7U+?$xe2=^DPn^)F&~K9J@~XzYyWD9%m3qAVyK83iZDFOEyBk&=c|7Y| zhc}I$HYs%b`i$hJW0^gdTi2|g@yoX_J2Uz}+;FHNJ?62Tt%5}zEx*sKdE~CNr<)giFec^ftgY$J zQwwAE=Fb0PQP|v^b+wolfjEk|(>)KRso==~b;P|~y0d}mh8VY3Qy-p<}|@ZGG=qy?S*XBx_;_AVZ^aq8UW7sfkp zq`z=sZpi0)<>6(ci|@lvcRY71e{yTc{VO|Dd#hK&tH0V4?TYOx{K9Oxd|H!XO`_K3#C)~ zTK?Q~BR%4c%JO}gys!27-}Ov-ETOM#?V}go|I@zkg8mAB+@h9Szpnak$k+44DEI0U zzK9UMf83Kk{M&If7LyFjW>GSWx%0YwGXhVXF5j`Je4?>jniGqa*0C7pXU8J=iOr{Z z2<36fWv;k?rd#|kU-bT$zw{jr8A~z2j1uOi_xPp^|5eiC%XBM3Lnp*gAyuSj1Vt7{ z`n}&+5KOUg#yQc%9edrU9Y(kzRPgO_@I`Xo&#)0L5jD;v*T^(1n6?9uh-d>Vh#0gN zKEes-j54buQ5wV?*DO#Ed5w|gnWDrZ zDP=(dkaR%L8RiJ$iZX*tNI=n0pc5=83lgAG2C+RXH%N>GrFi5}fPWYx%IydhB1UCA zFtyGEV4Oa_8wXoR|p`|&Z2>7QA$B^(hL+A|e z0j?M~dIw-^?g1nPQ%2BWFv#F4D`>!S6yU?Fzd}sg5lU`k2N_Fl=mC~vv+s)NL2`|# zmY|?%RFx~G9i!9;z`}9@``QG9L2gz7mL@ZTMv6;m`H%z;`EZ8UFxALV#9U)-GFVAM z&5SkT(wH1*i8k8__NY-AsJ}+AH3Lh7G?2zJ$Urwx4-7J8R0gmZTlRno=GGSs96Odl zVP_{`*97Vzt+BlqnB^D(lxAf-?Cnd?`Q|D`1X=wQ3|4HQV=$=Ay?_C0jva>Fkckxx z?(0B%4hB7G9C~145D7!r)I0-&!a75Q7zFmPR&tmMCL_K18#yK{a6N(y0)&@GVAL4E z!sG%LN?E}$P&Ba6&Edu6483Hq02&&K1ZiuH!nVa`Faj2-K{yOpX>bM;SW;$X955&X zHqt=GDsW4|8Gwn|Pa7nVAU~G%pS;FmTSO7GQVJ=~ys$HQvTLLk~$z%&Qkuj;&Htco>?F!Jzl$#DP4*RGaOjQVjQfsO`+bOk3q= zu;MI(@PIVV7>u#mPpH22=mnljiJZvI~BZSK^P0i=4Tzz&#oo8nrlSHcLu|Rgs92lX)_kqm)dP tv*#e9Xkwz)568#-UyUdI@$vqZrP(E=&y?il`!PHLDECK2C8Z_%{|B{Gpv(XO delta 103064 zcmZU)Q*fYNw5=W6wrxAiT)8svDppOLZ|K;#EsoKjQN&TjP>-$LSz#l`KUedBe24=MB(Xm{QWL33BzZ^T zi`8jIPrdY)oFQP6D!-`3yh13^t=u_b6~Nuv;|%bu=`gW=^5B|WcL|Ah54}=NO?(pi zTPywiMBhG0yzhrqI-@Kl)s#TZ44s3?fsk$(8gCbgOL*1Ld{;9Tg+#;(dj}@`bCp6Z zy5+zC7l%IJFU!?mlwacI+)bVvue>~wJs5gVWYaDBDd{SrCEZ>;?n&?yqDntFk7BY| zc_gAu`DmP!gE}ry2nB={4G4?2j*BO1{w#0F%J5u8??C4yVG$gy1x|vMXxO&YSr7&{ zJ)xyJRu~L3@iah_@2-rJ!@Q`0&L;fzIxZoNF#&5b1fhLfpM4SlcjRiHoAtypdt z$wO#zW^;)Qim!2uqUB&?jzy}shqIeSFP(7EWV)%4N@>T^u|RBZ<`mvpUQhKD!pzs? z)`K+yIJ1{5j*+|(0wFOjV@rP*VL6f9FTm$fKxkaCkz+F&hgqbhX3%0uSV;AtHFUm;UWc1cSFJU!k!HQ<85>H*s=y@Ss7}}*C~)lw*{UAGaiKVTdHN4tH7q3_ zFrwmXCKY~0Qtu4Yv~G~_$@-8tNS90=po8Pbkg=(Q~{Z>tns5@$3|- z(-kzhZ_dJ~U`q_sp-4~DI`So#%%G9FGRHD|;U5%Bobu{W5j&&&Q zRw1~RvZ1_|t7|chbVSrvbw(q&R4IoG#HR z-8;EayIn5yRCN=>8%=Gw0|YEmj(sKs@)}EewbApIaTVEWt}hgTutSD!da&IHG^p zV9~X2b+t4RBk?EPG*9+%EfVarRe-97mdre6^>%21m@DXwTdleLcy@7*PjwFaRCp!4 z01ioL2_*RaC(>GRqZ{dgk-?Zc%n|X8d7=r}u^Cw(15>8)nf*&JgaT))b(Jo*LKcaT z=#V_(m`|0*5>PKb;UUAYb^8bMd&Y~F=O2_m;F1V54aEQiRVMcvVg|S3L##;HV?(kY zeLb!{rg@LQES33O6Sm|B@^@elPo#f07SWRhQRYdHX2S=XGh|xj={tuWr{4!ShZZ-J9Ssf2GyWii_bV#jfW|L#I_Y3erMm`)@o|>8rnA^jp+2 ztv@%!!*I!=pN+zYIZLKq%a2+;C;xl|ziL`cv#87CM(hT5 zg8XiY{`m@8$^Wf9?YbtY+eJX1y^@5YA+Fdg?guSVavCX(6^*019D~{8!T1uFe&+`* zoP!a{llKqq20(asf906lo4L3;n;YA~{Wm$7*uZhKk+3A?u0nxxbFn0qt%?Af+OjU| z5@=obniI64dV4tR!Io-#D-k&=W2sF@ve@Rbkf7wK^e6$K@r^dW6x*nNP<}gg90#VI zJX^P1M4CCXY<@m2ZyJ(cN66wj-NwCU*kduZ>Hafhd8B3iF^A|?r^9f&K&LO@gT04c zwf@^bJRv@5=6=Mc!Lf34_RJ7)gw2ksKyfawMj3uX zxEIB9%&UHaKlY%0`wag#IL{DXe*N|qUDeeoK<$v|oQ3i73EFMa8lFMjHBNaM)`Vuw z9-UDnyDRQVt{o|yV_%s-OVrB1vTV!0DmVGp(KeJ0Jutt<5m&oDK;jIz|8e7DZ0}To z4}Hyy7JUB@HWd~BY%}h^{xN4_1yOM!O z?!+x|ir$nSMT#h1f{69Kj1L-|EW(DmK5CBT&qU-ma46-8g*}#K^57jDQ`}bU*-261_ObqJvCbkv|Mdwy5l$6wHGXLw#a6t+4D zJA{fcgsuwY^i(wHk{!#-D_u8e+Ykkq9Ohgp1StK?lVFhe+s?u+{oSA zTwz-4$YByFRNYN?*pWAwy0$G)Y!Msdh8kD*R%X$yi}nS~wLND2^1cn12qcv3FgxJE z=QRMa1ig0Gb!BwqX5Ou@Cp)ja4^4T( zJ=MpkE%0{cL2NEW+}13XH1;iqL{T4A<*iPrQsPz)%%M4{*!9~gIoAI*U?SMM1>d@| zz&N0%SkxPiOVGv1!Zr@j?s~IQfm}0H#hxJJ9v4+d-+^-Ga;odE>ohQmtLk}XJKGnD zrE>tx6T|z7ZuVJr>zpeJt_dc3IattS>E}VY$r>a)wHU7PWZUs6-qpltlRX+xoL2Nh z(sNBrej*r@ zaO9!l^UV*Oeu`nOH8+HD;fT zyH)d4XBKbLCUK@F9X4kx8=FyeJm@9EKu6tq1i16$9fvQ~vJJH{EG(Wu; zfPuQVI@3oNUf`fyjlB zc8|T>jj~eU2 zjPIblJopVaNSd+S3L&vUGWv!JwEA~sAHbzZxO`wu#3xnC)8NTx@5c}p#nz5&8LT9k z4Vc^mhxoS-#OEG@wKq}WlA&%r8Q!m4Df(fJsfQO`X~aInS#=~+m_9}fkXdgWF=R6I z(_mj)=Dx3H*uJTc@PYCMkV#}7y7$jRL!)nce4e$qBG6K{qD`yhjnS*y)^O_+ph$4V zsnEzXuXv(&$e&MrR20O+2h5+akgOEUu*z>+N(X7d>C1)9P52MIw~C*=J_-xcOW87{ zL}%-^5z#d~3Gw?d(=li4I)s$OeWd0e0iCF<$5Hp6oLJF$-hd?`DOT9RWy7mYBT0LF zF7@U^h zFrQ|w9&C23VI2M#y>LRVe`-^nJO1THg*z-f$U@CUA~Sr6sw;lh zCOmv^n{1VQB?F1F<;axRf>z9DJL}`O3+P3kQ@qFho%;lPzYa*23PIgvJclSF%Mn`l zy(J|2ojwae6fQ5m;Yk?=f|)g=fS$Z>FiXWOtp5#KTqG@?Lj8Ame&F?g2use56;+MeZ?jrz%04@45a z4Ldh0RizGIyt-8qF)Xv+qlwUp(;i#3Wrkb-c zxA*50I!3Sx;;9*&A!S-K5R7pRCtQgwE)Noas6_WD6ecpYethogKIHuqI?#Rmh&IH< zA$yAHK1jUnXCN7<(PCjrA#F4gWo(bQb5}4SNTP^(YTZ6K0c)#m4XACG|1$a7zcXYP zoxR&`INS!PYF*DTJ4pzFRI^*j^^}4$+~S)25;OQfm>!9GRc&~hsfsh^r>j%DjgHN# zXM7|-roiMeW#uLQ;Yi-_6pQEENj>6olSm}rpYhHy^Xr|@M3+6pEE`^xu40g6Tw~J4rYOK`5CJWNIgLrmP(M&gNtugQhJy_OIOdS%y-yJ1`f9#SaH@k2-9Db z>?^%XHgUCvNw>|Um393E)EEhHo~+01 zw-??_4T{p19UfJA_$rsEw_VHW&ke%*j_iS5cjqRbNB3+DQI@0(SKL2O`^hMgw7Ar+ z31(UYH<8n(wsQ~XzP(mxk`8BRm+O_*RbRW^tUA-|+2(2^G~4!W4#F@{DbhT_FzbY| zel&8A8>w$p*RxF5@Zlt2^j63gzLRP3;RK?|wO4-41z<+B5b`BZDspHev}gCo>u7+Y zqp^r-5Ia$<3%dTI$7Obj@~WE^@AOXHfp)QhMDiD5=htynOZn>g*m{dgF3u0UmHOcJ zh9^H5Q}jL*rfe8Z)XK1?P2VQA%j)QDmtO|Nq#oO+s$!lrlPuD{c@$)eOEM$A>lckF zb}pKjuS*))jVV$7kAd)j# z6s0vXV}@__>J>GC#>3J^1Uu7dZ55`ZEHf^`MTUzl1k`$IlrCB~&cre*ApZcTU%&U# zvzpzS6!uo2i4=GnQ$>g)c24VpDg(ou@Z8$m)z`~tkGj^A{Zy%{FwLf*DzlEBS}P)B z9FQ<&QVjfr`yh@4Zac5f!lbfgh9M!EoeqmCO@m$#Hg0}76!yc7V47r$%Ch5OLh;wp zWtcEXq$|p~k|rx_L9X?)#c~6TM0f#!S=Agt7umYHPPT z=jezU4UahfjkV6+rY!?RsI|=9s^`T$6S`ktcbh8UP3!4*BJYyZV51_$$|8DH9D2=O zn<5R@P^)2!xcv+%6rOvm-Iaop0cd~onRt(qe@|@-rAriKH0DSI;rVh|iIC8zTG(f) zF)r(|7*Y3_1n*=-=l=w8po)ewMSwT*A*0Qo{g74@Luj*iJ%9jYMWk;iIlGcO4|BUf zLxXq~B=b2x;|CWoI3%{U_&_x~yR3BP{b751GIQ_CS){hC++NwO_$GO#k`@p=71H2# z2|%%`y&vX52htv?h`h+HkN&lBj6GUqqv4(DArQ&c6^pJ+CHt>+MC7WwWWr^eahyd3 z=!5LB-iORB(LW})@hl?JyJ|RWK<0IK4K#iP6D@eavIQCNVBr48TAV9XD z=8!7zrsjAbwpN0``v8L<0-3vT;gISJBsLeJQnZezv8m@sM+mD)XTyEs!a!ghQ?x>E zF0HFgLA}gbk9Sh&`fCialK>!&Cg3Pd2G$pa`8b6hf;a&X(X6VXE|q$mRPx_>#TK1i zF_j;JBQsASi^4<$aUx6KiHlYU6{JAqqDqEu#3GJt`7mQfdLvHCSIw%1_~MUluKE3Y zO%{sA4i=pXRvB`=Zyd%`Py{I>Infz6s9!h=UVVLTQ?lg{CYB}jmsK?(otW&a#!9((B)rnQ(2u&t;Iw0A6KyP(YXWxj%&V0&Pbu7j4+dn~?w>N$0?9Nq z0^?#4?cb!PL_w-NW@?r!G<-Yc{meV!V}}sLp^U)vXyc(G@8}jzwmAh&mZLJNJu$-f z3bx3^tNljGXGPJ;kg@bQaZwb<#M21@V?6g}jApbIIRX*HPkq06v~ z_T7vg=7>nT#^tpMB)9fE&4&0;t@P*hlRi7k$jGI01&-z7d+(LJuKg3)RG}3>$xdxBa3D;+soIyJS*?!5=;mr6g3C0GDr zAv=wjG~)~o3C?&lJwT71|Cjx)m*Q8C`c6kNINE^h?rnRAIk<_ovGXL(UR8NnH;KiBlJ$j*8@=Jx$rdS1?-(5blbJGqxT1o$j z%_Yp;Pc-4lP(vkzv0QYhq|UbXKaMK}4$4hrq;TqtzP%p_ceji;H4~VeGy|R=nMQ!8 zn47meia+?>GGu{np{Y<06HZnli>Ujil^OgpZJ6k$XbrNiFPl&qLEKK^1$U`%{9Exu zwOY7Xp~*{;q8YJ}TP#SerE&LOA3qz0>P&<`$VYHD7$r*}5`=QoakFOVyU)I1-FL_B z*QleVQ~(zo%^wMqMk5gZx7#e@&|aM|!QftpQ?E5r>1c6_P)roJvo2Upi-maaNY*Mg z8aJO^;M#v&>}TcgwDDDsn`@6{Np-FN1)MxA{{x(yyj=eSoN2Q(VCYG)S5&~EwzA7Q z7n=WaZI7zhq!x_`2n1`51J!b=OPBPfUg2p}&gcw=U0s4yO7X$ltHFHU+_z^3h*VH= za!2E{v&%m8FvQ;#ec$&>=mTst6$#M~r|yPJ28y@_LyHMt$}7!gNRmF~mb)ZP`<7GyD9Dj^o0P zrAJ{E&fsZFb*ag}w!lMQi1r+T5gj(MI#RQ@6%3ONiMhR8(sYPjr}LQ+@iDJVQ6+Bxh{Ut{>B+EVus_VWJeAlON`%MQMu`t z=@;^up>52y)skkhKINP|GvN8yICbuOfQn#EC~iNmX&R>`WjdJMfr_{f6ZgPHgEv>> zGI#K3JVk++VIpFXL<|^AZ8Luhp{wl;*p`wEI$=+@Sm$YJv85wwRPj0BC8l0EzUx_! zgqS2p(tWEP(W@l$Eb_D)Nz0YUv?uHI_&>KeIB7Ti zimJ4wX{%TxNG-lR5XRY$M?E&ELx%~56~O&DllN5S3*NzPh6p6s_awX@M~Ik%%n(8n z?1e4zt^0vUX2L4*9O@4$1&`6}a$uoIMnfYeq|^_tp`1b9gMw%wB^N*y_aS`TD6a=9rlioYXx!HkxAGt|3^ z`BzCSC5A+Xd-QnH9TCh8_KZ_;=C01As@bGIz=Z63mfN7KSYlPRkZP;@dv7eWe5p15 zGWm-N&V@yF$uP$eu}}2lZ(J2hFyUPzQ$6Qusa;_-W8D}C@&)N_10 z3x)T1M`rIgjeIyLj*+QW5G%B46y6d%@`>gIsvS!m^|_Y~I3{83=-zC}}w)UreS zn2BrJ6V>^r6!(m_Sb5H)%`f!#*Wc|K>m=idd~cw9K{w!J?UDNfyCql)>kV>1|HVu`{gbk$ygO)hHKcSN@pLrr!{&>SgyIV!!BZx)!9>IVCv*aNf`IRS$)0iN_Nel%=Aba&D#+tA$d{by@bu!vF z_MK3J$5(tAAUO(lmLI{VpO#5S+i$iaoDLxBRm#~YMDdab=7Vu~a_<>-XLR43!7xGI z_O!{L-J7vtq;E1v;{IKAkgaMeE*0(3iKB?)Or6)TG*6-K@YPmN39bgq#Jttg<>fUO zc4R2mv!y;v&bOhlEGzU!&T+>}BzvowL;B^k0*h#CmXj^bon_5{*gW9smM+#2q6_>E z+CnbK@{j96FD*~vt90N|3GBK_@jv$@;J~j7>j<1HbtobWsgCw$svG26-D5ylSyqDnfdy*jxHe1j zEux@Nm^~>oDmSt`G`9M@Xj!Fx?6y`-k#bfYnG`zcC%`4`i(I_j@KCxJ!Q`O{{5ii; zMqwi!Ct|Xid*0MdZWk^y5`cZtT0bv9527zeg+DgTWZd{Y8qjGuW2zm>X9>isRMo%! zt^14L;v8`77|SJy^A$nH<5YBKuME}=$KauR)I6eivJ4sD{i~L6Z7M?RmZ<%5=T+a4 zyE|mk-;TM%on#o+VCU|)U7yjO540epCc$`&3CZLe3zL)Y-GYf`v;9h>>$AY$jj z&JI}L&|I|$VSnc@A3lEZ2wT7eVS#tVcc99!oI+MMi^@taA^J5y4dZ3#_xnfrnkF_> zzPxTPjIn!`w~<~Fk4)F~G{o3RuYnCFNt44NYr`ci;|-TXXGqRdI3?IGx|=2{V)%bg zYRFW49={qbJ|x_JHGnO?+!GyS+%ppRx+pn!b<#y&mUT7HSyEeFFp>aEFL*m+2ZbR2 zX^Yp4g;<8L-E*Tsik-D!~7a0NL=WoP(KO{ld1=UoXL=3qDqlH_ zLf-;J9qFU#6$KYoM`9PT%YhnATw#@dk=SQIT?M5&o{Du1{X;9y|Z8wL=4=q z5BMoNq338U$$@P(mOz5)!CEi6`2w}ERpAZDmyU2#ts?)k_@QWoVCFSd9KRw8)^YHZ)fgF*$E&kdWrpIlcVy z5u%UBWpWksJxcK_Our{xmsK&OFJ?qQdb04-S$3VUW>0O8S0MP9)x`$`n@y{ySBs@r zP&zjqzNZtC2;jBc(D`@WY=qnP7yA7dtO6%|YA0@1j>?cpYI~SsDHXiDY2yg-t)&0@ zoZGzZ_TgadK@iJ5l#s9S^tOkh#c}XwTOl0r5ET|m$e`hNkOx*(C8d7bx|-Wo3S-6D zy8ddj8T|T`mfSv%Y+*h5y1r`9_00?HsYZ!kO@#(q0`TIy+B5DppRgY48l$a}#!gkV z-SO8lZQAl%=i}gyZwnLcz>)7xLEBz3`~E1#q?@M~zF-)mg*4Wx-Hv>p>fMD0%fG2* zh@8#LKcKP^jYfCaVY1OJ(O4az`6i3tblttsxG8^g`TxyD!v?P+L$0u%Y$3d;f)V~8*OfA{BFrj=KN>zakSYq(czorL0|u;`LMlG)>-qA zI`%j~0|8|HSy&<{C9c~uB-urn2jMS*A^KB5(d^8@buH~a!PJgtm>G|Lg`!dPO&UWf&# z3&vLBU#h*@FXI%gH_($nAva7kIXfzSzNw>38!i5ZEvR|9ATKf~v)Q<~w9CIQl;&+C z=|#LVrX413aPX@f4cefka+LB-3ZY_E%w0e*j2Nq9(kJOXwy|T!g}x68yR1QX;*;sf zVgfLgwpHfRnVAP%jR@h0eP?3u!03c{q&m{59a+N$r!IP0S(*dU55OfYQS(QV{_A>| zEq~q`zY&h``8~I$GCT)>$;o}>;o##_-fjY^82vfKmCtP+yLNB`GXfSZ%8(c5JGATH z=TlfY3vEgQj?p?Muys*4?+Y?b^C}$+4Q!=mD8e22vciG%ENo0HkWkXbv0tzI>N8SH zvRCT{r+d&>)8AAr!Nx_N-XaL6ysnFe8m}3OO!PQWJ8&Jt)gU{1+`g|ICMs3z6=f;I z!?cti>t>cNA%r!#F|<7<;k7Z5?-F4Uo_ zTb(dF6&B(?AWV%rX%Cj1YRzfE34p>;@SAYuzNUZufRXo)o}SB(0!zr-YtnlDH?&}F zF#b!oL&f|io0Vr_{nekJ!N5AsG8!|o3c`~zTy#MI#GGb)95$QVOXLUw$I;xM)0g`Y z7Q{UjVo$k(b?J_y6`s=AiZ6AH#NG}PM=8CRHo2va71!o%Cv3ce z^E6+wZpm}uozYI;81~JKZYA47pkf&!d@i3{u*yrpg&FQ&rH7e^ij7I{EgU&?Xzl}R zDD2(gW;8s-HpAF?A;*vQ8nV*ZaZ%YmGl@lEpV+K~K{@uD^qB-d;0O6OzQ#xg+{&r= z{73t?!pdzqsTckuT((-)W%~w*nr>NPJ|W0#=a}V0qb^xH_;EU8j%GgBeAj3G^sc>@ zc49fbcc$fvH-w;phnM=hP9xEn%XzujdyM)P!u!+(Ppr>Juu+rO4?8G>D%=6$g z_k>6rAn?TT!~;wPSPr})+EaxUXGjXn@Zp=Ei^d`mgDxk!!;Sx$UrjC~OKH=W6ai~5 zZOZtj%jP1>kOR|Ehl2D+@7IG_SB~x?ic6;Btc$Y^_i9bm+>wR>Npz{37DB}sm&)>` zKInrcR<}VLn~63|GJaNLzXer@!yJHMdNhlgLqcd?!o(K5D{z!7hbEi zBHm*j(@}Yg7En3GogVAoN?bA8ZUH)aZ3^0dxA&<| zzcgA~D5YQ~*h8kMF7WSmYVp?SD8L}-K_J8?{yKFApqxmrf@o2PcSBGJbEjCj3`4(x z+ISV)EjECx?^NXo=I~_VuR&%NSTWgC+w3<>9=75U|XE zbEQ{Z$HwTGo4DUP{Nr}gKH=fUEe(bEsh%3T7C6)PH5;l$NoEskqZx_EVaBgkL8yeO z5HAx3>?H@Xz%t$yG>HWF#e4?9|D#3WQhRN;i!DNHCr5GYvLffz()C`TLW7emw_)z? z@b}`C-4Lq%?(%f^`s|NduIhT`(UVRiENUbUg zk6<|fDU=R5*K2uiipa1gbY3?|yiK0T=h+qk$k!L#v|XEDZ+=x{G~mnOgTVd^D}xGV zEK(Q>LFw#ya42%%I*B{iZ=2dS%$`;fV;RloUr#%>=dgUa@#LT`_qF0!Mn2(<87|_r zf)*rRV+_btuok-aBzYqUNBI#8tys)zar5`rJ_$G|^F!V#`WyU8w7=hf{j&@oM16{m1+`Pklt5hP} z86W&caRpz!DZ1w-mXNd1#?po-j(tNt2Q9`>Es;Bbn~sMOQQ++h_v0yLvv_*cC{2u_Rto9_BmWR4US6AHh!Pl4wUyDkG{Ln^G)h-n6ltb5jRMTRa*2MH1NX<*bOSU zbbCcPP{bBfbtBF?-j+9wqg0Kd(m8_%3FxDIWmBJ>j_v2ToR?joBbKL~px&7g*+}V) zHRcQx;+r6aUbN2LDH|6;_Emo?vQEW5F2&N;n5DyQ;giWHxGS3ryap}skA!3l#wUbE zL~jP;8ch@)3G*Fst&kF!kiZKCtgVf)NJ7VMO;P6W{KF@;3u*ni5LCYvHTXyllHod` zn@RJKNg;Q!4FgDK0o~prV$t}l0x|r_$MmbA8E>VB?17vk4qx0(Z1;?_s2Fgf+qvNu zeho0~M){oTAdCpT)np#pES3CXI`d~05-WO4{xs3MHsu~v=shZTtDrG}Vu_k(=071& z_;-zVNgbXG@_TlL*v>CR!c~J?@&MZMlm(e1kH3agg4q5Kw#i7MZDw=nHvYk-Q6k9F zLylLv+*287S!iK0h&B!~q5>tjMQbShT0v*NU$E+0mJVfB2?+$#ltVr=FC5(nFDkUV zJ25CBe&GK5Dr7kUJ}ozJT5-`GghR@iXS68RB-l=Jpo518PHSuG3?WTm4{ig!4Fq*0fA;(4T0-4DQMb>5xN!Y~%#0XiEC%Y)qRA0Wh&R!@LCk5u8X`h@|+OIg>#qB~yMGGh& zd0!ifwD&D&vY(u@X~vB zBnL#G<)Y;to4NU5JsM(H0YLwMc4SDKN*sw^V^Mp7vBN*T8PoscqlkmwjN#~avNz(S zmtJvnHIn7*v6QbtJaTI$7MTU?{4cb})3WD-;rjJ7M*pvHeKfAZ|9T>06n0^Jl;e>8 zSqu%Ler!aU)}55}!)@u@{3lT~WW3J@6K|Kxy>)6qKyaxv>B8F~1&le2x9B^SN&;ZH(+D&17Qg2$!q0 zE>Wvl{J;Vt{7;IQ;LkIKBTW>NzJ9_vze-}kw&G(xs?M{%W^GwJnz%wm+FxUPp|uRAU&Qaz zRk6i?_P_}gIsjhx4 z9M4wZxpA2Z9ET(6=+VVaq$|-0*}T|y7vTxR2f_%l9>sOSZ5^jvX4UKXVEFc#HH~s$ z$?^Zz08q+Y00DrhNGRrQpHmrc;~8ypVI3-Kh6)^Z0l*I8dV~PH^X)js-!ncam)3d* zH~`lE$>Y?p8BrA3Eo(;Ae<3X`8L@3|eY)49fSfz&1x#zz;_jl=afb9z8 zXGU=b7%C*H5XBD=e=$wP1Md^N9Y)ASF#8cip;=NKS`{#M0ZScA0o1$Ej;L+wS&k95HZV`TdRX9#*Fy+iT`W!ds=-~__Ymq6wgLY+v(80)tz=wgsmaneYV zZ$1;x!luGs6N&JByL5y>_aP{7!J_yZ#WL#`1jX-}zymGMjNjbBu2Ce;BejD?Cwp+Z z@>WVI3`<3+v&=c8okS98YFvDqurMDBSb`)H_d7BLI(HrjGmS%DJSw1zdE%UrhG77XfG$H1_6!pXz(b^w0nET}M|WI>QCKk-|c_9sBzJhz$Bvej)QO=eeHUCL7$~Lem7R2scc_4q})pkmaD#CK$>aZ{&|52OdeqH=&8Iz-Z&aB(55WbYhnzP zF)PC3j-54Wfp%u@cSqbq>U9G1q6tv>}RhWc%9C*ZL|$eC%LpXs9=NzViqjIdhF&`2`1!(7k!4@7T>Yb}aMGBcHZYlmiC|#N?2dZp6ePWk`B62US{ay=3 zQwy;a+6(YSri%glxbEu(cy8fV1?hR~K{#_{0y-SGODj80c}#_uLAu7l&;Fgpg}l^m z-1@jkDzD^pGkU>{5n8hK0)|gJTAv?v56Ud~b)Gdy`3~dc5>yg`TV4}P`RFrrPEOc} zZo&liyCM=>&zqf0G5JWbXO*!2T8htHQWl5^Eab9!AM9gs6M47*qVk`P)3O>1Z>tE( zHM#l4lG^j;Yc6v8(tDa@qxl&<=JHAc-XJ~ePDLJ1pPJ`*2$N+@A@>ht|0^LqAw3s${da`N7d5keQmh~pLVlA)vYQ+TXh{0t2`)e4MU68@k!hwE@Ts#_44O^eI4xq&_uGasIcs?X2_3qZk4Gh@{_>)oj`AV zop4^y*ulBL=_j`}7N{7iYVt)+i0N_`WOiq^&azWxT^w+n%s+zmh^CW*v!({GoR>Bm{Gog$=Ww+{q3F%5s< z3=B-ytfaq`<*P{;rM7(m%VG`rj*mtetM(Q*URRnsbZ3KQ_G`#|VEX=JG-@Wj;v3!+**My4IfbF;T}A&Qvx%lU@K9zQyu*N?VCmtoKDVyN&6Yf{u zS8iH8&-s==UaS_p#U4C+%R9%)apDb0XRvs=rx+G_A5tvq3T*bdNM=_DXDDXINQXd; zUt?WlS+cVPW2j2PNZZb26&^0O0hT3a%)qnet`E}vSj_$^T;9h&#k9FcHYihzQe}w7l<8EX`;GvsMg4UBKQB6CiGH}1@@ukIGi3xQKxC~_-@B}P zEmT%;nS@dsS(fc4RL_u7?Df^3Ib!I{aZbK;^Q0anfO#YTAeWj5HhV{T1Zfs)kkUqr zDG`;k%L`@ZM0Flp;3&m4&UZ9}b*inn-&I{XG&5$u7xLRETdBabz)BZ$9AqOW9g~2I zU>%M5=yN{teyFT{`mqm;g1dL2zp%a>)Z-x8Gdu0Z+G#uftHHf`*bzmfC@WU-DC;~P14Kv$w529YpR8(G zE@Src?QSB?UM*U>khtfZAxU!-Zg@-Y_Rtpb$J3*l>iU?5F_X&H*|XIEmO?d5*WYU$ z0e{(cJU{_rg6EiZ5jKN0_F7-Ow!8c5{m_tkJDZwsDbsRxI__Aknh~qkMD19g!=v0t4(Jxlir=qeroOPz9O9x7KhdiB^P(M!@Fhs zKz}w7{EdCvR!Vs?+L7t!L3Y+`n!ZnDlb(C%zO5PD}2D8R%!mi2u~ zx0d?NA*mPdEMDnN=EJ}R3aag`!j(H^j;FeHOkv}68&IZ=6_tEm=Hoq-65cj9<DgZ9KLeSVyd$b&7L|m1{0xO7@eO+uZnrqgSFSL zmE^WX#6J}Rd}KW0XHVe9p*!-qL9b!(s!dCE>2Zm#CpMojh0~%YJE_`UL@C*3C}YEM z&KqpY(-;X=4zD{efkP$x(~zB4>_8FWQwvL>BXeuc7KCgRDraSRX70CvY!uYcrH=Q7 zm_Zp;1Vz<=#94qD=8(io!_&(&XhE9clPTf-+ATN*qGrH<4?V!1h#cTr%0P*iWUnb{ z#zT*nZsBg+E*2KYm+D04vLi7&VO8S=GeADW>y|js@f2}Cuv5~jdS%Fwmp9|{tZO5+ zMb-vHVBC(bZ$YkKl0Q9b9fNx|{ujN%38d3tE=X15i7$iG&`#klloqnJH?=Jsw)~zH z`DlFx)Ep>NoD%;!nb=1DtKh4*IlCMl&6X^`{~%z4SS#WpkvicP9Pp9ffynTbZ-2WV!r@FL&wqT=YY(zT z`2WZ{r`X)us9o2#ZQHhO+t#Z6*0yci?W(zIt=cwM?f(6e{by%qC-Y#Q&4ZaIdBzy` zbqx{=#u=|2fnLCp!rLfZGitvJ(g*iG^oRYVJ>d5^uB)52_OpA%-moHEmc~zr@=?aR ztZ4r}+9h&6F%mN-gNmN&eD{RxaT%QuG6O2$L_0X}Kz&QDL{t!&7|e9%bfNbw%h#M3 zpYP6k&qhea%82y#0HZoaFy?4(Vtu{efM6nk`Mi)klp#fOz&o9SS z3Sa~_;gROH$w8_dpt7Fs)8Z*0HaZmdB+#jL`MZ9eJz(wih|m z0wJ*zy7&_GE(l2_fN61$*`|k8U34r4k6K3etrb{jtqIOd=5AJ%F>xs=%@n0J0qLl` zrt+BwAXc%)E`6NRpyzm$XQtdVuj6E)Hs;tqY|?>+PHyYNY#1!}X5F)Y^_AHYaF9qW zNfNpd{KE-iA|uOieW+~0jDgK|eTAIB#0xY`lahs6xgp{;)|jEz5VDs1sXQbC#r4%k ziYT>$KwZ615RH*G-v%2@oL2Wi0c>!KD{RgXigPK%I}N5#50+5N@UAy7cKwo+8o&E9 z+dh=k8nH7l>4xHWb6!5yDjuKIk?(e@UZp@Sb`q4|eIK_)WedyQ9zzgderIs8 zuvr)OI6=|MU_Hs7`pR^A?586cyo62^IUo;CvWdxrmdIbOD!F-S$HEB60jAlQdo+g; zs76a-AqJyr;ORE)uggcklUcGc(gnR1mo}U_!m5g=(0i+S&ST+HEt-`;v2K;h(;(v& z!aZ2KmZ2VBIvt`Ko2UuhmC9?z4inonl|j|XkRX#2v$@SWU{(v78uPn?c^5p10`H_z z5rex5eZ(o$kT^h0w@oJp00V0gif3@19I6gzmOU^Y0mEOuO03dJr0iRVp27ybJ+kBG z%G-601#SLR8zW$B+@P*Jz*z?c9M4?->l~0dy3*YJFl(kG7n*`dlf(TCFs&Y&SJZ@H z2oiJM&Zg)DL0=$nvpI|J17=WoBA%z!_vC?bnVPU6Sr&cNI)6po07(*rlgqa)JHhAJAg=hvUrZ~g4 zLd=y8_55ebCRAkczAyFu5=JztCD(#I9WAQ6p%%f!uF4BOM170op+5aEoupq3LZ8fi(jeqxKA~>SrgBX=z&R|KwYHWfHQEU#oVe*ki_^!(8AaKfMODR)dPUIHr$yEE$*0leDI+s8T(lJ?4i9_8Qm258kS4B^*~)^c;Z3V2jX zN2i4TV9WCz0gSfa2KhpJ&gQ+U97WlpM_Ow9S4zw!YR0`?cwqT?4E~LKJ_=O}^1J{# z((xiM+aH3xMf|TdqyF)sJwmxb7&Yp(C3nFBTuM}e&m#~>kkl0TxgRyzJll^j?>tv3 z%3-}u9S5B_+cV=0y5T3Jr5yTbEZg)$u!9iOQl5~Ih}GR~*yH105T{bYTZ}t06y0)4 zjFXJq-+EZ6p^dra%ZY%A4t{>RednHq65{60KcPTJhXPABLJBd|H-C}O&K`I$s3vGY zW$1}VWtV!3OiOEztQacZJ+KD&0PRMrCGTeyPX7hQ)vBf>UtIR&Y-MPN1E=WS@ynZB8gbF*!Gb?n$+x z*tMas-&pC^YAKfTL=0i(x?D8f_Kyn`Dn55cG;Nky;&1oMIIA{{VCLh(+l*5o%C!{n zg9nZwv%v=L4wD|NYjUHslCP?&iZZU?N!)fT+{0@!w~^b*rCyfIwIq4#pFlVOs;mz* zQz`>m>Vt`?2rg%kA{~#;eL^=4RCVoNDuGsZ9I_dw7*bv+vdV-j9I> zwvKABhms*$`xV>6U@w-=#~cTwcg$a<)QV3Sea&KG9B~k{q{{Gz6sQcmcSpH>Rib1$ zQvwky{!f{5{HzqLKp~V&sQ-?#SE{YdrNNTvs@gy0P4kINKGdml_&eMImACuvftI(h z$i`fLtpxU(pzmRa4x`99%utKTjy9HBf|9oc74u@hl_}s;gA2kRxHaO4MZAvUwM^3X z(rf*FsFEo4f(U&8u6ys|H<&|HXbi?TchlQ+dO4t@rLdXcU%^8Ch`14)H-7~1d}|Mq z@)__TsFQ5E^1>*RBP$Ct^Z$m7@qwxSt7v}Y68}{+=HoQTnUn#)Xdp-2&3j5$ z@x@Km$yCw{7oKKM31>3_KGSO*ws5omJcugERB4>-)Ys2X>%hu?k;C zKXZ5Tm7G29HlSJaQJyvZ6?^mZr<|7f1YeIy1{jaqDW8ZXP!v$8$3MQzRQTmi`T&DJ zGZ0CUQ?qA);8M=xuOhOmYrNV0r|g*s&~Me&0Mi) z>hAFDJ6|7p9~rgnYcPF+M(JU(89w`cEaU6O3W+)U3uY81rc#G=xr~!x{Q!9{!@8!d z7If+r54U-?l4%ExP*!DXTT;_)DF6d$UZ?4d!2t^axdl3^a+b~ame+hAxo(a^+ME6Nt(onKk z5T;S^q_SlX949EIjJ>btw%B0}F?MD2yK@hf%?bPmkD#4$9mY-UqHm2)6|lg zHXHbBbCxr@a@E3k9kK39i9Uu??vmZxnDP*~zBVuoHc-eId93Rx0f^}X0HV{^# zfUHrYrqY$H%>-U-N=3|qMsH2Vo%6ro&fA-Vn-J*lF*j@ z)pBaHp=qKKJfJ~lwqYRkBul*wq;uawCu^vBh*4^r6iTw}fH11n26B`OmG4_QnWp}= z1_^ydh?GGSwYNexyKI)}rKde%igruZv7@kYMS%#;Bu5|z@`Wya>8M-#-LbJeVghDi z1WOGf-(Ffu(Or)Pt_YCe89uc^>B)wH01sAlXkON`oK;iKDH}g6LS4m>mAa1Q5*N|N zJ)USk7K2y{4@=^3L8p%0A1;R9C9|7Z8R;aqqOt4HZ+CYz6zlk>1hXQO8oy8w)li3~ zC$FJv)DAv=UFOM8zDP#9B5zB_%eo>{*g{UARzC~56bC#G&IbVg#r^)Z{ZIttUo3>V zP5L)zl6TOcSTEVGk!qt!hxB57Xr3AbC|lsh?kv9dCQgB5zF5w~b@_NQVygCHKGi}O z8MK5AafU;7RKQ^!#-3qi^iE~c|DQlwdXPk-QSl}i(e+7L$S@XJxyg_9OLBOO+N{5f zp}Nzq&o?$Thz#)B+!RqZWyTa7a83qfq^SVT6fo!f*Nh)e^!g`}-mGO*LX%XhF*GeS zcP3=j<>4oyijV8-8!`S~)UCU%#%^7uo|$eRHXv{%V2~0E&L6+m)LFgb#jeCFN`0^N zkm-JlAFGm0SAJN8_@`sENi*3dx)6We)mU%}15q{kK?Wd_=r~!{G1@)3410I*irX}P zH>)Z^2~HKtqvldo^Xy619qaLVi28Y0jY$iq=O#-N;CmGr?=0#Yy&vz^7;!nn2QI4> z9#TEt#bBw>1E#}mp8`c|r$qZ3H$Y?J9E9+nPtX+nhWwZL&_t-Ymm%ydNA87M{Ht{e z6s%Y{I|+cSG^M7BcTToCfV-V=%ZaEkL!XkeGVRmza#o&GHaUbXG_phIIOWOZ+UIjhJokv!By}%DSsCW3}z^yyL-L zONy{)WLJ=P4>TU_Fte?IP4;<GGouiGc*X3Hut6;&(aW5g=qoTyAk;qj%6M$OxGDPie{ynEg``&UXP` z4Ss0;tcMM3$bmA^?%3=OV+AF(;~@JuS_0n;o9&z$LER|E;~T_g!cnwK@<3CsW@qNw#FnG8uF95E|05OXLcu1%n5-Hh8s9808Z z(`j5zou&n#WVe4lwt>mJF2xkuuEJbbZW$ouA-T^ro!3Q>@F~mx5>J8oTrW?Ut!iTl z4)uMA5T3QKVco4eTbQ@V1JLq$>IVC42<~h*`^Q(&@D`WcS08cQ@#RV0?|}fCgH=mU z{_sgom;Ce36Yn?m04;S+cfR##bas%{W*TP<4j#tC^i`%m_b;XQUvfa|CZlV~6^?-l zh5f-o`}|u8GWKU`JvjF)c(rCke}24haLMQ)27Cl%FSJf`0R!46+Jqu47meOjOMy~E z=q0EBjsOCmN6OBtoqM;O7e0UtH=WY}H(w>rKfp#2T(2PCql~xT%zfW#`bmV%Z>%q7 zhtga$p&G}bb$rLdd?&rUC;hj)5{Wo=0Nw?t>x5O9D{4b&cJP@2e zGLX2Bv>uRbjHNc7;dpT0e0U|#aF!KJdEOoo?TynG;UU2`juZh=`z1c=CJ23XZCC6D zFE|W*Nh?UfKtksuYi*6JsP_-R9&2hXIHR6$!dC2C^2`bBdcc6M4>;!@ElyymhlXI2Il)li%q{WEOiL``N3nW*7cS6gr*Sr+1cy{V zfK#7-s}aY{<;5k()c4oeG#?GMH_%6}Z0#P>O_7@XuZ1J-9A~E3G!TG3f;ntFwUQ^5BFx8?moHwfl?qc66ZRN`vE?Q{CX*;EcxFNVaH zWV?enX8C263T$(RC_V(J=0=|OH&QTC46fGZN{V@b9d$Fg5 zn}x##wh(A9Fe~mgA7g2Fk+W?uQBnJ6IoFzl;Hf~WjI%XXZlcH#7*fe``}GHXH=_5# z86xQpyMTvLZ!Na?Cr4I~B+jX9(>8qhs)Bz|eewm$a0vb_iorVK;{CI~#n&E7GcEK0 zIs3W-a*BWy?4iwoC+RnXohJt&Vw&K7MlQD1JF1!m zkz_qfxM2wbiSQFd%1#i6)_=kO8OQUnhPHSBXMce+-(0Yfo_lDFx?o>Ooamygyrman z@du7)gddDKvAaE%ZDxA7XV=+Rv;~O(lkYU{q+bTS{IzsitG|A%4m)b9H<846{6i65 ze%jRhM?<>4s((-VZ}uyTdF)^X-MP&I+$wFV9M%(!BcfSR?QFX{oD6$h%pg<7i2F{B zUZ^iwb|+J5lr_5-RW*ID?({VgN8%?x;uqQIc+0i>^5x!9 z8Jzw5|Er9cnf~K(q5dn9SXsDO(-&!e<~u(Fl%x%bB)^;birjEy?D<$>bfu2fJ;=3d zH&2N)?+v}1VDF$nig~hSG9lmsovg`)-iiEuz-F==xKJCzUIThlq=>r4@^~_3^KDot zuqE-Q>6gJ3qe$CtPnUtE`l*lB^=3y*OiebM#?F^Xdl^IwM9eqx8I^&*To%!vBY+w& zUc(PYih&Nkh$6mdW|PL=j3rICg{KX6{;x@U2a5=^1PZUZ(OWKf6yml0eld?~$%7oGQ{DP*MagiNf2Z)&^S4!1l+H#J~)l|xgU$b@e))pTX zhA*>W{+NLws<*s|!5QI$e0H*yFaQFvMkd5TqLRIM%zDcan@I$w=-RBeq2tvw+b69@ zU5%OFaDz(2&GNeL_&y7+HC5Vu^d|tr5A-J&2ao(iVT`UV!ndl*uKMkoYKK-|7rOYP zrYyV6aOAdu9(p}5ucgbl_bhfq?-pI6xFD{hWl_c~dACx2v{GPq*AZ}jPXNCzde_k` zlYguJ_7wOr{DM_jEp@PXf@P!thb_dVLNg!hy+PZIrgp+VGS}XyGx1fAnv1IKhM+4P zI`#A(cfI27!A=vy{qeFv)@5o|2Ii+Z4SC(i8|=}dzOx~jgMjj<7=lNG5~#my&Dqew zd^3wh>Z4JQSqkR5dlgUM#{hcXu8LN(edatMwMyP3Q^l~neg%THkWsg z&2DKFsZ5=C^~X$WV5L6JtXeKScXT?6!#M@fqRuaXcA4)L;Z0#gOh32SSL>gui5fGS=B}|p@r=Kg5 ziX(?CED4oI7X;1)I9X&nzq%DaHG!+Vu2149BI6bCtDO-`Of7; z5v{iF_2j4DT2pTz$1p}|$$*+Wyr0BJG1!hh4XY+Ta+3EU`Dz#Jf z>!-|FNE;aEnHuxr#gm!Zub#~o7d$|o_z!3D-Q(TgO%Z=c061WYf$(P@1!9@Or>EgG z<@NKSGd>?~RSsjbBYk?T@eQvfik-GG>d^5>1|R4sRO}9;5#p2PD215;1-VY3&GXTV z#=@p!y(c1T06yeR(-d8tqz@Pv}ayHdaACC9p}?1;%Ngu^x;M^)IgmdmUX9@-vIv{lgs1yXUM z!j4S~FM|z^wuoW;;YfbSqfa`hW~P>uS1vi70x0f6s9mamtle+sp2JVK1`LKtY`utP56XWPjof4KfTZ#)Sq$A_i+YQtl>JjOG&H1K=UNLi z_zs5+JdcaFOdYZySk)gY4Mi-{&0+^WLU3H=dbsCMXD>x6oS!y8i${=_r8-UjpgxUl zp^a|Yd;|Pal05gVs0y-*SuRK^F8=lLvT*Gx>vsTQ$5bI=!hAnskQLK0(6Q$FvDpMK zAkC@2T_c zhUE&LuGx}_Uuklc{+LWGyY)cRLbsRAyJ{yoj;3!DnAl&ZBti5+XiZR8pToRsIwR%1 zw?(!tY)P=x-y|^~!<~7m+fEx2=%TpU0J+KF2-xT%+b%=_>P01{kWB}V66$86iD5G7 zj+l$GBsC{(xj2?k91}vM+gK~UBNuVFydQ_`IjcHYqhl|&BV8OZO>$$`rd`6A5}f;z z;CJR0F#m>8z0+MifcY)o&4Y(J{Pmh5adz&djtFyA1O ze1kqKqOz83M7!*$UxEHurS?n7b}2F1^{H;9+qrV6KVrw)Bo;cCgS!uRY*7A%2Ttkq z`!oBZp82Zl>jJv^h-sp5>XaQ9R+FTNjx_>Zcgp-MGvgL$tf5oZ+!*PM1}kp8A|-1d zZOc~NQ8fny9f>*Pz7eZ-6!gpx;4273C*e77y$%U3O1{#*#1Ef5r@|l`8fB_}|KoSQ z{-d(%@Dzbc#|-|(mqB957BusF!7?g^@Gh`h3ZB^`+*#eP-x|YvHVH;;KoBsirkB6* zVAF9X#$%o2d~gUdUPJ0zrE}JcolC{$yf0%=*E~aNZvT{xO<7_bF!#s|=->c9$dYV( z?$iPE+RsLTax#lj6?gsfrg--H-x4fAgx*D3Ob|j9JH^JSut|%M6h_g{wNObQpmNWw(qPFvfDxmE zV;;OE(92d_*Orj#a4;AX;Ji`z5V+GXp3Z_Fwk`=b%2Ze>=?cl2a+|b`#B7#vG}%arJ0e*o;14SiSq`ASevRSxiwP_^P_DS2kFw($g|+A&3-C0h-u;q{@FJ4OkKi*p(3lD1s8VS}gP-`r>XrB8h0dJB_;r6^0)lg-VML+z!2@G_!SF-aK= zYH(_$*%K0hU?~3KO7evw>0sj%o})&N(Wjlf=>t945RA$)eSD9Q1j`zoE5z>@#$-Tq zlYL=ozPt?bZmIF}(s3pV#exC^6_%w5Y-{{28;uz2`TK%9!19ttl|}C!3~UXM0mX5Z zh;$1DNsofMioIl*iD+k9tglB=HEum<8HyQ$Tj!Lwa8)8Yv!p2`YL5v_i(r!SF#0}x z(I~m_yl`yX?@~T4994OxU&nm% zC}<+yLAQHlyIkS39P+f_OjLM*R__P2xl}(nRR8I$+2XPU8GmS}+J@@TiINEyrk*w> zw^JL0y8d{`VzC}`J<&_4s}OYzCB6Ok{^}7CP$mA|K5{p5zd=~%NI8HQ6t$_J_#5xE z3XtM@i+jo#B-Tf7Lz;#>I$r=6IW&yFtr-2SLE{INYqG*lIEpw6^?Tt47-Cm@yH5~p ztK@!K9Ah|=wtt_g)k0`d2-wlh6elMy*kY^pd+H8lRa@Am`<*&Qo=P-h$uI4-Pk0;I6&2FNv19D3bw=Q{)$(o<{?~0QMgLO{ z6W+RNjXK1*4trr`sGCuroQ>9P-r2ASKtRReQ=$*Ub;!0a{ z*K%1(&2IvxJxsai$lzB!-KI&tz|StO#+t#l;way^yhW|5OpIdX$Sy~>0_>wsDicTh zxF=gvI@)CdSgmZ(_VpM_SqSlZFg9lyKY6x{EZtZ1FGAIR4OlmYVL#{Aimz7&nA7i# znQP)=$E8!skPlS8LEFigmwSQak zj3vfNhjKbMwWM2 zGZizif#jt~f_*vGAR)gN)(-)Z9R$TJR6eq)4DE60x2qG_Wd!5Y`($tcRoJ!b=u&?! z&y?|x{8=g`fS~#fSfoQwHQaSoIlmzA99h%sYcH%5$~<9WUXy&UK){Lc^i%?veGAe& z`%MTkIm~&Pz1S7^n8E!|&z$l>Vv-D9U%~V~+^ZJ$IY4mbAKPOQ=D6y2krwiA^P}AF z7bXg>4!jZp0lxdxfcjzMLF0Bm`?@L0F&Sr=%uRB$Ul>{k*wCt-Wmk5bQwEX!H%Ky( z9Quac8{TX7?I$1Wt zn+awZUlRZN#9y%_{zn(XjUVGxM|g>pKHtJ>ZQ~dStRPle#gNPEj0eM4h>4t%o&VcT zcD8s-9cDhpuz>hy{WScWcaK)4>c#Z_lBBgkO+CgnX%Lxsl1odkw%FsAGvLz^3FL&$ zLXH-Ja(RuUN<)3ibz`dA|55oFC8M8Zem$31Z$AX4Wt*|+UMiPy-p3`23?^EugSFA` zeTer#UuUbV)C(ZQ2p=T%Jz}UberD`w9F<)^A4UE&&3H^bszxTk!skkub3JHJHlRn* z!iga3f|BAG)k)p?zGJGk3|JYVpr3bq6iXxFQvS4@@5MdLL={22tErwTvR^OEZrQNA z$0#+AbU!;TFa4tfO;OZstE}#ETQt6KNnpP~LwgUGEBTas6n_B-`WN!Btcqj0XHRTE zzxQ#Wf5`9CD+hT*6;}yRHlH!aYXQ=%gTgmSXMd~{-{R;4#{Vm?30O>p6`B*4nM&1A zSjP5kAcGlgR8#JGuhLwt7Qs$y6oiE__F+zhQ|;gwm>Bm&d}g0vCTkOr&c;LM>}py? z)Ax#x(dgnE>hX*(L62l6Uk)L*tM!FerTFP_KMv;8hLzbav zRBY#^oh5QT9)xr*1~}3|2{}4!VVf$LAO;<~-m+rh<)E65*QyHo3n6JfJPqlySlvDs zZ7m9jUVesH1(-2DFc2Prs}nQEDD5XKZ6X>KWnqox3Z244%^XTiu^lGCRC;Tbuq`M%$TG|@Y zO)lAUgv@7~yt`~=2mYDn9x|flLt5MdFJCH!gc~7AU1fx_olJ#tZP_WS?zlsY3h6Rf z9`1ICp(yGQ0?J|_I7f0&3BzY@!Ldx~N{!@xn5h_Mcp~pG0De3b9ZxP66AUf|8O8QY z@+VeJ(v*6Dt(%jA%61SvA!6D+ocD&@yaq#QGYRR=RqYW? zBY0L0(5NdS9~lToWJr(8q980Ir8O0CpFtf(7WeKfB^(nA8Qv)i8hsf}?gq|cvp@`` z1nCMTVupfxMgJ2f;&O>V;R1_6)=ZC{I7Iipw}3%+pn=P^SSEtB%}OZPjK&<3pkLo} zPsdSSa1Bxjixe{4nGJb8f3*oyC;H&hFs)Gluo>MoKs+L#37LhZpoivQBn+tb^2I9@ zhOr^&&3Ucmuz-1?XUrv3n2Tt(Y^)TvQKxf&ZqlLp+iG8xM#m2dkJ$Q20K^>MK&*|f zeNwl)2t$$^aU}tE3-_fLKpGMSv$r(gzu#@btd7(gq*&+ue9WiMRPT<4ZhEp{#|R@NN0CWYF`#5k4K_=aV;GJGRb;Z6s_j!c}wy$e=x-yf!+L& z7@I@OS4oruxT{&gFb|VAscqm%vc)K6S`M4)yxhQU5L6l-*TUcNneP$gl|zew5qm>k zX~3-Uy;z}W-kf#bu;kq#wKYr0PI?aG+uA}XKesLdsGbmjGVJV88}?!X_InV?AA`t$ zcQD$-zx)E?Y9zk)WUh=_fZ@>JgM}c{AkIUGnJ8LLnKO%&jnW?;?9)D~spu+e|L<`e zwUJ8rQ^PDo2ZiWL8*Ave^otDuy;NUdTST}OFV^k7#nC*KvDBm@<9XWixH!aH36UZ< z<97{H1(532pvAV75ak6bp4{(MyM^WHk(jLCF`o5#;`H4FZuItvN9rB~_E|e8_Ep0y zY+{Hi?mSn&uU0)RROrlf^4b3krO8bR8FQ#1^>ehNx(Pbm=(c-lWBXhJm;|xQ3g;6R zjJ>-pg15!*kr=5*kX7JRlGOkLXMV!O@j@eFqUWipmEp%63ZX*rX8Wy&VVK?;06Fgv}@t0n{wP6|loPBsOh&kLU)0-pD@I0ZKJ z=@+EyU$;{f6jkJ>`J#0J^ba=IPz^0#WX_^o;#%r4EXt{vw^9Hb+@{$C+J z^bj;VW&EuyBlwH>-5h2tv_#-VPX%Pl-P%7q#u`dAOjd@t}g41gMHlydh$s`~`hAZE{!V}w}aYF^YB}c!pQ;aJpK$3L3 zC?bX~L)~I(Mk7J+v2ODOce!GeuNQN_6{(5_@jgbq|1rM2A|_zCN2i~O0^@-)b2Ftw ziT&JFM*dsF^TU4ptl_c7bd4;|1cu0HoP^}{PiZpPNX+b!(xr?IDOCOIGdGH{>-+mi2%>_I9bo~NwGJ#x>A&63wXfYeg2bpN3xOEv+Zk(k5 z)q&zxFrl8t!6E0ez?*(f-sM4BQGJlEEoJ{6sGpuL_Pk`wA_QubT z()H=?q_BG@b58yZ9E&Bj`F`4auYtrzCEz(SD#GiAIfq1iKtpxh=$N9HHACZ z$`Pkcl1m>`?h3Rv2OW`9HbOgvn24pZ)L`9|Kk0)mHyCVnt`srJaS|Pxy;!|Tf#4!{ z1MDvJIbxWBwkA_f5G0I~8f7slh&!M!1=`M(JQ`pw+g&N^SL;v7*HeyG^jiT`8Y{vE zY6*pwRP`pC{RSv>=3_xe*fbg)Yj$<#HByU<2$?ewNn#a>0wJY&;m`q8wF-J32bAnQOYvD|{kJgI%q)}+EWAd;3 z9|;JB4_O`bNY1z7!MOo1)Gc6qB_w!-?(Y0no*pYMp0S(7{~db1y81IxNXrW?amf+q!oUXmVVjQE?&|jtv@O zp=cX6$R;HY_Ws!Y33G#=RHcM1h6oU}X}pFJ*lz_b#_57#jc3(A^ca8<7RKuqpLIZF z=`OJ*+j`oYbE3R;Nu9)iqZ4z_n%SyG_Jt3tj0s*818IFw^nP7lm~;X=e3l~lVh51g z;!p(t&07G?JqR9FIwSBlMA$t9G{)edfZ<8(FVNCz_2Qzj6adRA=Y*xbichb6`Y8pY zhEbnzyW8(2O+$VEnS)X;dzbvieRB|;lCp}gM}B%21iQVrWg};Y z@0|7BfmkKNtYsDndwzypqbp015P}zR#09Zy1{?HgUPwrs06V}VKF^XEp*VsErD3F= znx|rh9}{mF9b}Tv?Qq1YoUVzNeQ)dCPR{tg>j)+3%)MP0sqWa;Kz;2T&c0dg2$4pP zezw9)i_94fC)6(;x2OAbfPcy#^d8xhI&Nrg05>m0)1Pk2qm$ zWv=g;%4bN_$*|bm3oioC?>o+p6r#7G=YgCAGL)35v=D$PUDd3Gp&1B<(atXcTAhcE zG{fW`OKK}WwA*kKe13}Da|IK3s$5mOoJrAu0)H{aX9nduVgDjGW-)3~7FM~SEQ@sm z6@xfP@jE`Nb)Zn)Ss`AGA?(ogM-b^O3LyuC$eCP=LDb{_B3xRWNcXuyj(pr3Z2&%* z9>5ovO#<+g?!D+EMTXdscU>N=Yd=K}HY+*ffR!*{*SP(wd2 z&+MOw1U)`od{8zC7Ndv*h;X91?q?i9}OQKevTbID7Kk% zqmp`Ezi0>jgPMVy=DLmTFF@QUQ49q7Yg7+ItqY*hSOdeKQhUqw1XlYS9yuK1tW9~Z zOlDRtG_(rg&)OYyg%pFAW;Nm6< z`rd*#Xi|A&km75lZ>d$@Dis8u90>9$ZUVp2J6baZrzFY6v^@E);=}F!n2;|XApfCp z|HKAJ_8>cX(0?)n+iG`lEJP59<>3S&dB2*L4kXpFaS3YUEJN94B%qcekC&&0scaZ@ zTi;4n8G^Jo=Ba*5i_iTM#}h^;2%IQPgx#EKOUD`=XL^OdrTD-<4sYHDK73Ff`{`v2 zpIHyb!dqdm#Kp103U!-S3JT?n#5^H6A}9cOIs|upXl4?ntlHrh?*9aMY)OFxlPT2D z(Qox{k2Rox2u=th+lnuh&qA8wkvFdNLKEg8qF@tX(8)azFc3fWm zlMFjk_~{PK561GyY9d;}133ys>OoRylm&GWi~%XMW1er~EQNIIY>Y9u?MD`>Z_QCXIK-D7jL^;Z z{=KyvOljF`VimzbLu+6V_dae}8B2(#6!v$egI4++S5~NvehZbqhw^V;RlF=0^2jjGNNc*S)m1>DK7H2&K7%hVJ=js@uQ=cLkWkP&4+`vn|;)(`wPow(!vOfSo$ntI> zG4DG8DI?bV)tQtM%$G#B=7B0L6WMJuj*D+vOK?~8?4gL%4LIgv#TLW7pCchc;8~SJMhckce)5WL-C?fnNFOI(Qy90VWoLyFU>ETSp<7XNwR@Ptsj5e( z-}1j=3Q?sF{PUj&-Zedl zI#O5DhtsPUAC@v6#n&P@M9*aVjiKQbW_w$joNkFi)i{Ko@|R<;QZ7F-;uH$tH)3S-60(`QMv z$hS6qHKHj^Pr%cA+7_UV6#FfvR02vTjgYx3Y{?3<_ymi|UToBL{R~HPHY`(~FeI8i zBJEvDH%QRLtwr11X(8V?Tak?H>14gU_Zd7p`~>ox@X)X?S|9w?Syw!|hJ!H5=E1{7 zOeSZ?9o&Ji3a&?N57zYyu4g=pgK?^Ts1IYSJprymJO5X)O;1NRX)e5?6Nm0jdqwgNAdZPnOW9kxuN$?KGAj$@)s#C zUee2J>>w15?2wmG@hzNi=XFJZO(dT5k7>KOG05k63%gN^-j_H31Kj@${xlM1e3aMx%=2h#b z70&>dm%)r{2sjUkZBVWW4ZL0V)3@16*odkR4!`CR1K`&<#?@c>u$h=%y;h6YqB;j4s@c z;h!~>%VAMSka9(4C$A^|t^y*I>sb)UX<|CKChmrW#p%|K^6B2+7<$ZlVq1}d;N$xZ z5Gg#-%qNMxP_bS{F?V*Y7%%pz3=A5N81glK!4zQi*KO&dnr|2)B<)@uHxxlsT!mJ0 znH*gA>VAQ3}v$x3!3!|aS93wgaA+;qBOP_Dj>4LuCMu(w+K-M z?l_)9Mv9hD1WB=U*8>YV(4ayE9K4x}v*^S9)A`Fa*RY6CRfh|9Ce#Sm`g9N|(lUDH zc#HBOGNGg){_sz-fQyF54`O}0+a|gd$G?}7Qeamf4i}>MJUKQo0FLbOPu8LPT@m#x zPk-&gd;r}AkE&_F#YOAiwbu0Y)|#9P_98|P*&grT&)O45hDubzx>N&Kp(wu8Dc@R! zu5nr+q@-hAvg(zy_?O0{+e2Cs`GSROM`AU9Ib(D0!7JUY-OO^a8=NhMJ=2R_n zAmu}ur!uT7;!)IE6~)q}`?m64H%dip#K0RAVF2HLwN)hgMe13^Lg9J&MKbowG}SJm zx?2hO_^zTJT6Jpm@XZzWLzZ86-e~`UmH8qCtWexbp7=ZZwTWha1igaP2N@ju#Cb^ zUrJm1qjOaQsZXLo69;*O&PZNA^`bFwFf^@4W9fs3F?xCkoakpsp3ctm7`-cB>H9<&VKEpltMD%(R1H`mJ1wiITRt^fap-&xgcerz6lBT{MP@GhNSZa)T zDorJqQ#c(uIa4PKG)9Ns0!l0g;yUBjTJx7@BVHdQ8Qhjy&1$W2&xO9q{vo+%4{+d%I&mueEFVtj!uW6EC4X@du zezaVt0i%n#{dU@Tu3&C@d=ImK=@79Dq|6XK=in+)NR6<_j@TM|@s|d@g1s^l8_i0ywi} zuT1mg!?cRA>vsX?4QFzuRT$kbE*x1A-;Q(YDXmkjN^Z3lh4JKat8|AsTJ`qyO<$i^ z-m*pqEZn5fq0ihPzdJs1tUW^mzOO1T8P-arn+q2}Zv7Gq<06<%wQTXaojyT-u)Na!ms3k101ZUu9r4fj1#!DK=rQxfTUoy`ua@ZOh_KyvEpkRb zcF+`;1Zf6gC@#@}9w)M?+tSBgkX8kJdE_&_uRr9-gH>vJrW!Cl2q$ZLhZ?XrK;C7O z1EuFebJt8&7Y7RnIKfpzmz=jv6L(~pM)kK8H9EVf^yU=YsHjX+TT{8-ResWU$JPtU zSR&d=oouQz+c41S^~z@_;bS7x1oRN$^Nro_p|PczQG5ph^6UJyr0%S1Ij1Gpw)=gu zA;^VE{C9E%7GW0Zao69;Z0%hO0Kfo6LtTNj&LN71+zIcvO_L4B)*~Ka9~bo|LS<1V z158)gWQ5kANxN1Bg zBaaY2r`yLxBtx6?bJDu0O2Ex>ywgB4+FSiKPoK;GC6R-uJGA1-hHqv$p{usF~to4Hum4OtCp6kAAriLgyZc zjKpWXuQyXS?qf@OX>_T{w(@t4k$Q83jxQt0pK-uCt<3aW^WYG0JFy6gd1L%P0I@($zxD*M!RLh!1*2MOWA_>We3rClyO1nk zS$Ds#Mqt&F7Fq7$+^)(F7o-%D%_fZxC%_=Sj}S_kVD~ z$d_iYsVXQdv_JFiuHPx6D$jrX8R*{bx+2T6n_Z8ttu)n|`7P=d8cO!}?JA$=QqnYl zAvqpxQBa{W=AHTM8L8Kjwwu9CWlFRDrnCJx5Td{7=v=_O)VWX3gK=6Y$legEq@0`j z!zJY*r2%$YSx}a%S=AahtjpQ2yO1D^OPy35=^FF#s@jF`7KO-?PaS{psk=w+t}DnN z#9>tUvW)U<=#L^?T4%l_*7ih?ZCEFvG=}Ko^=w`}lo%!yv&J}*vkbiKlYL^rim?ON zIR`-IY75p))vlY>9Ey&&ZJ67+pef6oi&D6cejv9QO@(%ugIilLn$(6wSXZ<9GhDgZ zka~4lZ8p^$GNWA0hXH@&DTm6d9u8mu)k7CUSB;=0G!?>En9~G`DkLgb$*NqO*J~FP zzn|g=mym%F*?Q&ogldtRf;mZ{YAKZk*t|c8`9NUt@o1b@F-$!(8Xv^pQB?Ldh8~9R zAa^n5(R(@c43yXC;lUP!IO95IVsKBnB8SJfnw0bT#&XDYwHkltBETe6!&4wkjhP6A zg>l7`*~nulqlGB4J_0u_#Pkw^8p;K=$SDLx;?s_VrtrADXogfI4C#Ah8!kw0EAqvy z63SJk)VCPawjj+Nsbha4(tQy7iVbMtkesnks*g7{01rWa4bWRu=GvG&2z@Nm@avnh z?OxnfZ8u5+UT}XZ3eR0a_!Q^{MbtZTQ(o>0m3*F2OV@}ZsUnX&Ny`8pojpy<4DgVJ zvY=eLAuqpr`@Jm%XiaxF*e{0)C~}Y2=Ca?9)3mR*&0=Bh0Z>iD@py{1web%9wGKqX z4bccJhM7+80C}4VQDF^^X#SVDbYVirYHJ+7u=>; zQeQe42GmML1ye7%8p>q9s3dEa%OA6hmn{zdOgm{4p(BJX? za5rTIuxy$fmu62}HYIE)QoqV(Dsj$aBDq_E6EE%qP<@%l$~kfhSCBKg$I8uoP3Ntr z=7|6TQc-^|nr69-a;UdY2oK_9uZOm2L45UL76dUfvMfbrL@xlV3P+1bq4N=4=1RtN zN!kv;;gUo{^~P!%vgA)N!1KNl0SJJ(qltl2UGS&k&bSC0=%+V;SVO*zW1Vpy>y!;+ zol&+OYnl02_o2p(fK)Rc9c0dVD)wVjG|kc{BCmh*ZxZ=ri*Uh-MJVElt*Yl2m-F*w zdo}cBhDFGaZ_HJzu5MO{nrcuDB~(4PPsqAZJArd z9;E=!W!<)T>Z}1?ZWb@e@u*>r>loHSm~0p?6#jnr?#E+vKl$`XL$e4TFEglFKg2HKgsnuYnj`8d3{&6&UQLqh{EP zi!pp6pL!&16U`}1*}#y$K&}z?sTxs50W)LYEuAIHn?+Y+AV}NXY-W|!F8~POob)Ts zPx?8@xk01={35iwFeZT?@NUVzhZSwiQT2QwB8#3uHLMWVOp6ioVewP}D&p|dLtmQ$d%UmrEkKwPk|wC`(rDP5#b^-`+vga6m` zQvGI7Zrp4e@vG3%@oPNRA-}?;m*#)jm|t@h8lVxss-Q>ULFpp|>rXXe5YFr}s0n*F zar2#N5z5wTfd>Vp!01sj!+z+_TrR`@DuBfxPwb=~y_X64Q7W>Mmd zKfkH4gM#J>Xov}!Tp6<#O|!m$(+Ds}4Ws+aEWWrOcS)ki0VKY(pS*cDaV&piKlV+* zmKth#$H}3L2R^oHD0@H)9kKnOZE!;&%1_xhL18?HG7lPzKwq{>4}eRDCQltWQHlsk zz}MglXw_B`lu#+^=>wC^3qY7`zpmmA-FLVSLP{mBpA}L9g2o05nyKN?cd(8bvB<)_ zE0h{addy3DVH1_pj49vb-aUW3Q&Mi)swLn5{Wainn>-$a&Z)x+^G;`JoEjdfZ!l9sChZM#pwY3s=kqQ@J=r2&wOnW(% z*;WdQqmmhU_Kft+EqtQKU5tb_+L!)aN~RC#L%qIx>igCC^=y5s&-;JtfP?PGWG<E&HpEqeDsC$u8U6C@*CEcrhy*HPDV3?0u53#KfL1PsW z%VRM*jbj44!mkhG@p+XE(e z;DhU`twt@j*$d5!xBq{51006WW>sx3>D|e5)G&RJZ4ZpM*d7q(192mZl%~Sk<5Vl_ zl;`nAO5!-@bE-Xz3%~9k96ME2MlX4wW=cyguKrMRRCOaM4`!yIUTlk;T%}Mb6 zD;^O~afB@b&2JCaM%fN8YU)F;!%+oA1 z5@*R)5?~p78@PYp2XXXr0eayOr>!6|rgHsY5F=%H5GZR9@}24hBmX8TbuB?84939& z#_r|XTs<8*=z01E!U-_j?~-&hBW{}~br8NEh@E+N)*k_}&>?nQVDyOn@R0!Fdz=1^ zGe+lDTj&d;0r%n7uBwk>hr+iJZJJmKu!F5FZ!uY5b<2N-1HOO^Q`^<8?G>7Ws#FE> zA8ulS2ZzO%A@c@euxiXa?K)lD+iI17AnmuN2XXmUd8ky2w%N1BOB`pyi=<@xJq!-^ zs+ZRAE&R~2;J%!T{kG_;wEe-Pk;M#nOe^7w` z6S+L^rS)K+DhBrH|Ixk)v(5E{L(e}^sNZ4aKm1l4H{NM16}}e_t3W6);7dM)Fw!tk zr6oO{Lo@0{BovfV*BsyaKNlgwOwMnnJO6~A{{m4Q#n)wSWOH0+<;cK1>8jy?RR6xlPAwg`|o63KITe!g?grw@o=iirAS|6T581g&Qu zW>h~#_Mhbr{dF;$t5u8T?AcqcUM#L>W)np`MLf^ZVmC|Lk7tX2!XbaKPU0++B8L@= z)hub|O?&7!EA{%>TWL?o80LkPW)00bE>eaTx3lDZBHo{&AJl4E2+RmGYlwdP<7@PN z+1!*{^?pJx2?tTT%IZbXm*f?<>;0RuS#7Ho zY8z0rzBYQ9%`K<~TQf|#mY))wJGXZ)?W@8lO>icp)h&5*6_m~}Pla?!7lk%fQf=F2 z-6_K;d0n}Kzixl7nhF$djSky(T`$Y6wGrAwkYN|7Or1QZd5#&_%-$&ZTWeI3S!Pwr zDRFi*R&aLYB%?N6aIThvO677B3p3&BlA&Nqb?WXn40e!2@;o{)Hv!Ra${v|;AZZSs z>LOQZrw0KNwB_FG&)rROlao$Tfhi@lu&bWl#%3;9=JJ1SQ^Q@Zf{l%7hc|-kmdbi& z$GhQ;gfgOc=WX3@(Ed>U{z*F^qd9El-tOC~S@)aa>5xxZ(C3x8PR2&pVVD)sb;@uZ z2yf{uO0ZzsqDiwtFCaD!a2apLfmoqz=8X8_h}4l0%Y6_laFM%PAL{l{_n*H=qH@|E zr6Y^wI3s`la<{v9KP+)kQua$ggc0m1!{k}Gn2Ei*Q6YyeE{4~E0Ouhn-i(ft3MO1? zC669Ks;d>LjFs5qZeJR=WgO?y13)qs1|c+x1~17KfoCHpV=f30v6G`s0+ZleVlu)g zNeQUc?%}#n_S_@L5uU;GeqSm(46}oR?t;h35yyXO5!`tRwI+f;sD3(l6`)+V+btv` z#I7VM#B{Sp<+88aru&nX7HSja1y0j|@|Q`~Z*+0GKjTTs4Gp0ef$`#qTwk8 za|+_zu)O%>z)R@2@FOHx1Wp3GYp%&9!2k+Bo$H+}#ezzYc9)5@8fDU26Q$?q*%O2Q zUOj(Re{6kWCbM$vV;?_>GA{P)@hDnyxGS3umSOInk9!hmNs5A`K1ZM&n8ZXTL-mFuorPL^qk9Wq zqJmu0U%b*qN`;8SFA7q05gZG%d*s=NMB>vGN{W|XI1CDT4YyHSO(K6B)YVE~|qw6r=vhGiK4(%4oC~(kq7qX%vP7p?4}y zy9tyMF4~p!!W0wZFxB$b9dtXJ@{E5;2Ys)N|8Ft6qzTfEB{_|J@#H2?Xr*q1{2^T${#EisTxS zq3O}mDEt&b$Bjx~jCi32g_}JjT2=1Q_s`9Y0sXY86d42!bBcer9Yk-&eP@3y)N<8X zmxo5xHfa0yZ4F{=k8MJR5LMT_bLO#kz|U%M2_1sN4tCl-pkF9u)+xhI9cm#9#nd+H z&^^#QFi;gdpA|MKrokkX`F5|oHz>9d!b3?^5095!aAUoyzO>DksD`d;`ycRCwd}uG zPujBM#{geLJLpdp2&y(5Vsn34H8ymF#55Ygvdkn>e<-*0zpK?z@bN=mVRw9uJ20#Z z2O$=BRDiI%aEJPiH|TR0@Tjp|J|M?qMUI!BET|6-odg$=#$)D@03O9J44_Qh1u#?w zXlKF>#>&Uw$9l4a!Rujtq(y;=D8ex^6iBT+z<~_?`n~YlQ35CMnmd1Fyi{g;e-`6m zs=Df2PT`>dOQrk{IP~bBr7}bBb;TQ!~nXdgu&s!8{yfay2HICXew{kkQYc5?d`9^HIS93`X>D(IFWX z4KSL7f_vDZT>Et2?r*kW>xtxvB~S^)!3&6HX*Ga&%qo}Ys%}==vE|ja8W$LzW0ND_%%JMnH>mV@>YBa``YHX>pyC8Y4%1Mj5ROtnqIonXnCLWp~l zGoUv0@JemFGr`i>Gg%JRl25ZVh2Q~)r&$`%RR&@5Bu&F`o{u6TVrjS(zVUqY2sNvp zAr|0=cAx9&uKXGKDQFtn4NfBH5=+<8?jzZlkMlh=N#JwSF)>Z#C zB?B2(P$`Ex9^quh9E{6}lN^l5OvFVbj51yMb7;&=j{ai44Gz|4467YBCPk!b6~2E>9#jEQ#N3mTx80uRb?nEQ zuPKzH-)15PCGzI4=L4)i!Kv`OD3ySdp1+70l~C&M*VFQQFe;u2IL4?*KfyVY=YK+} z#A61t2ahQg2nks{h*2SvEYg5cVZ?uhI8CTPD<9?>VO5-(Ya|W4)a_W0c&<4Ns#Qdv zIRmIZ$@YJSC)zIm$&3m$=VUSQVS?uLaFjxFKESGq0J$TQG)EFg()4fyA)N6C%opEE zy-YAKiufT|=AK+oBZrl5TC^M{Z{?DCPHd0%!;f(rn8h9S>omSR_enw(3n)$F3);gT zf=qKP0EKc}F=08*m>rbe_i2<$weZDa_7C{;ANB*);@+2#YXKYsH8ePvuWJEBe_2g$ z+&B`w`&aOks0TJ9en=FP^#b1643NRb<4qd5*n>dsmfhOzmO7GbPq3KNUT1#F{Ku^# z#SgXH9%qADVBv#pi7FOfRlRy7KarF&lH$+!d$Bo4$@Rgf17@C*@z-KQ{xUx}!cp_Z z!HahaU(Bx#>_?0!PLz~nzBx$Rf7{voA7BK=X)1&+B#f9Z50d7nX}e*y#Mdw0>CuA7 zsLHjrW0+Jl=NXyb9V8b?aWNx5;AoZ?G)pr(CN*zAoRYU?b5pMI{T{zG7-HiWU*(eZ zW1NMfi6bEkv_g(VZbp>1t+&r4O<{s@Ig|-*+^v^AxvrY3D~GymNP9&#e>dx)-mWXs zRoiu4_2jB+H)L5~nFT9JMaqK}fmY6wtE#J-fh<;K-`D*iDVrrJ*Xwr1CDl4($z4xw zw*Amm<%YaHnf*Bb9>9Zlg@fW-vl5XBD!3v?jC)AWlXX>gP2F6Rp(We4hKb;hVO5dq znK2=Wp0Y|wd1|bHNO&ib*KQ5@qiZO) zA(D!UjE6PkW({54cJ=W2H=QD7#5REi^DOfYZel|!^)Jd{0fb{+1@EjE92$(ynTvPX z%~(oPCi7%Vf7`81Y9TmHA?2ntdwdKH^Vu_EK7rB0wj{^L=8Fi5g7Pd5W(;c{)(@GM zM2rU=)8LHkbk+LKfE0K19l7w~yf4J*3r2XajCuO6HQ%3{!C z7O%|b$@uuWqY^Hlz&*<>j(>8kxiD|xk3jof6=k05e;?QBc}k%J{P@aznL)i`MUChM zj5BR82G95_^5PrI_})G21I9teaH*s|Tj)0-#_9O%g)MSshV7qhSV4%$B*y)!v^dPa z*%{oM!9Q7#QdJ~Xw6MKjU-e zyIZfI*|cO{OJvdtv&KSuJY^!8K^Ic{X$?b^e{&ry32W)fcm_C;8s!MkW_bzv&gia@SCex#29LS9zg(NOi0cjqISg#CR~tv$ev{ly0gB-ags&!i4z*#mcTqq(2|%4 ze-c`*Ys*GdMk*dKkRgGbsLavGJz3dB1*LD&@fksm~cS%_HA4ggJ z5vouDbb=>UUoSy$gY?*8XF*kP@odNPv_aX;Lx3(beg^1*AQzKHk(BGc#Y7K!)8sXl zsZD;bUmqyfNk(Iduws8lnL0cwI@oh@e?3)n+$*}=lZSkoqAP*~dq587UMl?mD!Rvo zTpkIz>`^7BLLa@?{NbJBT__ke?vNrO}ni2i@pqaCTOkqhCg7tvLjrbXOUzDhgI$rFV6Ht$qJ226iPopf9?zv zTmA)_6_k_AU9MTpy2t&8H7kcsz+7LtuT`^*7KL)J??$o!1zSwJ-93FOGGI{|5=CZ@ z_B)`Tu!>zmgQUx{A`iB#um%m=EI&3qirIRbTeWyh{$>H_DwXcJ0xw^=c=xjzGe3{C47Gq_9oUclx@7#*zJ(^I@gt0hB$ee;q#fUDz;&5zH6<(5h8aTKVV_oWNHt|Wgy-Z_G*^z%}KC1 zorc_T%K0g|5N4d_LUeM2e?zYB}?q7jB)!w~Vj-|qPh(0RFp7h&lQU6k5eLa4T&UOpv%g@m-W-sl!1(Y9u z=p;P_S`aaTEZPo)%@(s0+R_v{4e>03-p+F2pzC7fgcdu-&yyR_f1iu8Y1)BYR%BH+ z%eAeDDbwH9>*22P{47pjo@A=-TV9+-$)8wiz!=z;*%6M~W}0 zkkOaND#UMlOo7x*e?K5?Oy^bD+`eFAo$i@*lrX-PK}eO2`pC1CoREMgBg?Mc`Xin~ z*}y@2FF21t<=`BLt}+1?K{a-G^|q*LUx#D4DOiDn;G*mLJbdhK(`3bcPKHqFujXXelxGz!^V=FxpU^+bI+aGk4$jM1pTr9E_PRf zt*<^_N&Qo1|5@zVxAUtRy)|E4ee**~59X^Y^O0n!Vrdky`R*!c9Tge#q?zVa(Gc&&@kBN_nDUHa}hkAA;<|HT$04mPy8A5u0~} ze)|3$`>v=D#g?9*i7UrI(th!qLNamaS;8ozuh}e2^pl_Ir})1Ki^p-ILwmbo{ibA# zrfth^-_*;hUbA<41j(g;4m4L>s!WMR#d=}#m8yQ*c`aXna;@|-w3lL^nvCMwIvADdmt z8biur(N|5~u>y-+Rx5)qlFRSBvOB*540X>|O{)n2#&zWlJ9Nb5r|3wT^EmZ;Uw-Pr zJQ)WyFxnLhz5N4537C?&w>>z9V_C+dXae6^)I!O#Gr7|i7>rg`IFdy?&sCCX zZc(I;T)E_7G$EJb@t3JZFL+)(8-Eh=EXy6~x;N)Op~&j8XT@@f-R%s@PSX+y#W3fa zQ{E+jMM$ef!Sl)f%oH$3Qh0U*WxwHFI|@&QPzK=$zIb7?Oigq(<}&n)C_jw^B*}zu z53v1i>rbM8jAA67edmwU81s;avD^8(pa6pe7cxqMJ?}OJd*L=`5>upxL4SKhvpnG` z0Rb*rtdIkif|Lc6N^fr;5>}VhdUKD5U9+tg6(!abcLVodJlxOzPtgwQCGWReb|H>1 zf!+w8O$su*<3W2b$KP0`KFtkCo@$xc-1 zF6gT6hM@wpV!Lhdad7O|VUHqQ7CZLcOZ}yn3s{QKhWlzeq`u_2r*6^KT3s8qZz{}> z|9BsNu`uCaN+b8E7d#o|^Bv5{EL5=wZd;&L^^d=1F++t`5VtIjD7NFKT5Q;|ZT6iW zm{6ebHJRTzGQY06MdM}AkTuVS=pV`v*edg0>Mm$e!i&W}uXCC)jKO&Xs|N~EVraL$ z`uuF`bfW9Dvrxgyk&XheEOoY!i^TW@zqp8hdHZ1oi6c}o$B1J&9teIzx*$L8b*{p0 z*j+PQ4tO*Snj*+@px+iN9leCUB#9a#(L4=4FQ|mTIdrT$?DtKF@{S$D<^yC~A!iEw z7Ev-GPTRnswQOJQ%WYMc>_brTlHV}3f@@8C=(?Yp?^af!^L`%~M1o2&}w_NCJtJe&-W(noQ6C~#V5h@};s+Dz7Lvax)*y!EHUOT%|vtR)Rk*%6;#ggm%5f);S6%xI)i7Q)CvU$2wRSBhd{9(G5J0zJb`^V}A`|2z0yJfRp;+kXhBQ=)ST}~La6$y0QeUubiY2=*w&hD zG<&QqmU)iS<1t5PCzKW{v6Mc~T$l}|r8$K!OUA@iF`nh8yhYEH zs?e=RsHeQOD1M2z=$=fC#HNK#ivEip{V6NYb8%**Cq+6891yMme>FSD4WtrCg!F0u zIMV-|r-OPP+JSl~?4a#`xZ8H#_4i^RFb%C?zHOVnSu|TlF4=6~1#L|YFXJ<^`g9CK z6`rNWd7af<0vd%p8hj+#YV1h`Iu8C3Nc%INiv}`43XF3>`x?BNqP2AzLg5%+0;4n4 zaC?A|P_yCG!X<|>E~&IfP)RZrUP_NN<#L)G!*LH>OlnHMMHjw*?CpSAX9}e`Q9zYB znM}f$=8-cOH}f(1!@(=OntXLqw{OPkpGuKOLtKWogg&;>jiHRA!5IF;>Sm03jHS5; z=d#-(iL8jDiFY0H-Y`6Va%vKx3jK#%zg&2}GOPDKDRl&K#-n81X#Bo4L1Z=~U&9qy zQebGaw8&I7vbK$XIZ`t#b8TW~4pGAhJM1!opU_3-nb&l`s-e9jD~3Eg9WRApNu5c5 z9QtIb-*6l-^rbLqJ(5np<*=yC%k9XE7di!sr4{HTfy{(0XYhyv!vEFGYrWw`jn<(+ul4`;#||;JWT4 zEy#M+=2ItaXHE#=MZFabUb?fK*c|4#o*<*P%{9b9a~xAF_a~~@_{bj3n@t(4hCMWl zblaVz=+ixa#>J?3qB#lO^@Z=565-oOI{@0q$j5x#jlZWioTFHP@slGgg*QTXL=aT_ zh%eDMy?AkoNfbi{lQAY2p=hV4ce?tG05LqM_Q~a$vdc3Khrb|+y-1a;*dK=sK znj@?1zU9ik7y9>tt{&4U8tS#kP33I#p*CHCtVUGQ?c6hW%ai&GyY3{USs0_136GN{ zZOG{gZA#p`phlynGJFu9mUKu|E}?%7rAO;7il=bLk&(v{nP6=xLus&U76lov;W(-wK8DMkMwAn~;r z&;@7|K7r0uWt9d;qN35Lsw5dV)yPadM~OBcV-%?0ciT!XX*TbqVA?gnVvEYM}$x7c1fv_aat03Uyi2N6wDbJLlJJXc< zyYJ)NbIxb!luOB~tqudTm;6f^8-yyufk_xoF zUS;pI^8Ffpr{5;B#3C2=o!mTq`wD$qb(dAEpC7SH!A8Wb_)R8RJIpDp&`dY~VHEw+um8UN^NM0+44{-_Q97%yuj9!D zX5r+lna7Cn20e#jpo@{{qDDuoF}8~AH{AVq2XeDDDM z0T#5?R1Y72PKW9Y!6)xw4~{Ri-RQ?3QFD;?A2yaT*aSAsS>fYCio)z!b$e9prl#-4 zrJ*Gl!JMD(vi-0or4Cw|^@pb>AaQdl!S%vBwIBM!7{iGU)$X4g>si6D;AL>l=BA!T zbba2BHQH`pqVsCh3F26lf@dEO%>enihH&`ygL5tbug!6o>0@?Dm?S17 zC(exQQ34%?bE$m%OekKwM%8{l)Z>U6ml}VVIm=}-d+yE>_a0Rp;#nn@P?{kYmIVUb ziH19WyepsvJ;rTS3W|$DMOX?4%j-L#USd{A>Q535a!scL2$-LH#W~co$D0jdvKLeY z0L(`SaKEe^bgMcR_?OJ&-ND(|TaN~tYm!6ixr#uv5Ta5*sHFE8_=Yfxn*~m(ayWft zfQqK`8W^Q*EpHG8D?O{~O&ld%YaqMYLsM^mu#Kv2j&0ap2@-f}s1NOpW-Du<-#V?Q z?8WOVj&xnaFA`RahZ+v?{B3ZeARCc+uj+)hX&Gs|y?L@o!ve} z7)f~xOhV1rlDn(ao-QNC1*S{|&I^=}sNm-1tgAmxPr;r|j9>PXeWU{+A-E53#a8;* zvd;;v532m1gDOK%q6z8QDbu%8Qq+%Y8w?v{pG zDXSJ z9;j}xB&s0cIWLZPbKRnq2rN0BSJ2C$qqlq1^%IcPu5K))d5WSSQF&2DAFbAZyQ)!z zUWCXRDaHe}O2f~YCeV5qplw^e1dW7i>=X!vbkT(Z(e2`*?zH7PJ6+%Xs~&pPpRTEs z0Huwm2Defw;*}!dbv%`#|cf9L#hRvp5vE^gx<_stCh8?Xc}oSNj`CP`7XEy=fSiBXq=S=d_wmfaIZg zj^Tls9fmkQJdO~=itt+@4DL7-a|m$tlJU=(nHBlbX$E^VPiBv@c;{3^r=E-KkqQo z5PpQbQv~=?Zvk3Rc;N_?%dEtDzD4J;MhNE2i}P?w28HPzIjQRo?fb6Q^k3Uf4z@8L zturk{jZ2)sW?an$$DuiY)NKQ+HHJC^Xx9ZKyd7|zT~85;`UOWw0D!2%U?!_4%NiXB zISUjp%b0-TNm{vqi0n^+4os1|5zRFp;2Y}q$1fm`P&W!7Y=0|7HeQ+qHb9!(!bsLZ zh_$Oe!qDkB3r`c^fDe=e5jBCSz=e)xn1qQ)F41a{TIRY@A495tKTs z3`*s)#k9cmRM^Y|tpjcA`L5nSnYTR~ua~Rr>)wc|LP$s5N$!R^<#a*gj75c|D?P2+ zIl#`4ivf~Ad6Yh=3*`lJNCJrBj+QR=_0OGd6XQG}=q(I?s$u9k4E@ya`gVRCfpLQg z&wsD)IWBu|L`>Mqb|RKTQbn9{V2-mr6;86l`0O}l#D?E-yF5-dR^6iC>3OT5+yf3eUJYtWWL?#MXbuZ4B>`ga*htS?;H4xPUke&y*6ga*X%7lBuIZ0ZIz$$s zny!H?VP=-4%El_GCip1lEZie8dkLVS9C2_=-j-0diM-{=4DoJOTigYd`nG^902+6~ z1usJ@fAC<5HcVA{7ueF3!CWhv7pF)Hpk;w%kE)x0c+k{`+NYER(Nyitl_>BsDdU|B z$)zO)T|yS^PTMJ{cijNz!l(qT9`&Q6%y}8=j_Io}y`YLx4dP#f8>%nou0Y7V>etqZ zq~a~%xjHPd2K21?hjiQO0Xr64BQcpLBSv^O;~fP8)SHa0d13Wpy)7u3CrxLolY7$7 z)EJ|G=4#q|%lugJi+hU-f0-MuwXf%`QpKy2ai*@zpc8CtG{@_p7@{}Q(Ok*QJBqWL zLwTs*t6+GOZb)KyoFcG^DfO-Sop-WOYpEbu>HrvyX-Ks<1qQPt#tf-?AzohV6D(m` zsi6zT=-$}w^=Q%$P?1XoC>SUX?n5k!K+e^FLg&Ne7YSOr^ST?9+`fX=%mb^~My>}& zkWouJubTdHgz5FGxiuVwmExbJN8`miqtuKtp%>)J3I#Jq_Vc0xV#~w)_@&FblAnFS zTqO4xp(&9(^c$f}xC8)#OYg|_MY@4dJc3eR)Gh~4c%>8}WVy1G)g12YDuuxOIFmqs zUr1CzKP=mRjurK6;Lni1=?v3*D#xn~5LC+8G>)|+(9=uS*hs|5fT$Zl3KeZs+X7hB_JlKs`li=sgcTh80?d) z#@hG{LhD)l&>V1Edl9Hb7K+43c1^#3^SPWsJM$R2`x1P(L0T|vl2pYO2$IIuk=9e` z*F!TIOa(5JD=p6E-!nx%02(MmDc>hHHtA#c`V#RF46$DysP%pU2gLW(V{Ed5C5O+JWf#e+6jSYI_-0b=eX*)OcpA+ zWN%_>3NbS_ATS_rVrmL9 zIWjm3Wo~3|VrmL8GnbLr0TY+gjsY-#dS%a4X<+mNXtZ2j$j?&BmKAxTEJ&9M#DFBC z8DI>6q?q!~Tjf*okGZ$s0B1&YvP`K;l!!(@?&I8ZZsRwSCX}T3$NsE#XDPWp`|XVC z-xB+y+L5odd@EiDX0yLDsvoMR&Jc{{tq0aVp_l6#_k3cZ(?S7f}Y$q(gN$GZ_C5n-D95})xz zNQDn6O|m>?_TfYCHwX`k)V>6NE8u8YqPrdIp4^lJxvcA!R9*Y=`nIn(WbDXQ*H<<9 z<&|EWCR8s@GnvrLo|7k3nR#BUN$K{O;W!5W;EG!FC(N$bK9GIb5*(Wq?jXHBq)alH zlg;;e*L1hT_JM4>atmL<7&-PgvP9LHCY^KvjiN^?8vSvfg|H21T_%}^c@~>_(R|YWxj&pw7 zP3)ljgL15H>cQ*~Y;Ly*Lkek6vuO6@v(HGg7s+NA$yZ-Zk0XmDPh}CGCmcgTz{`}o z0Pbh&K$J)(XUpWrmr;j*S6T6lgUOv!OlsXX;|(cWQdVQrwX=o6I5fmfisnh72YheMFEOpa%4s5~U%^D1%M1Vk9h zLE;r|AY@#YyV$S%WDxh@OFEy-U8vq`Xc4)N(so^Yun{(LcXx0uK;Uz2jP>FZ%2-4!W` zP82XoN<|K7L9Y64xBPYeml*8?1TS+welhh%0cj_x^Ts@sDL)s6nUB|hIHjZ>aVn!=L@wErGHS)ZPk_=MWM<)xS>q$?aZd3>G3vu61$09v zpU$pAV!|IuugQ8R(+Ucl;4Wk*X$9$m8;RY)6;u(o(M9so4Wl+ogg?dNYK+rIrj&)_ zQGGm!@LBfIMEP-9!YOsx6N(g!q0Z}Js@rW%8XdLc!`?)HJ5vbnatbgTINQ6j-RMJt zNj6y6W(H9(Efi{djA4Y@x`mYZYV2?8sgZN2D;|-~7dC6VJz9CdT&&G+jNQpSv*w!EBzy`<81NbE-!VRo(APohNQ0+yOBqEX269JbbDHO@;rYg5S zSM*E(*EC{(4fkP|JW;_S7)(1%n3>%~Y6sBi)}db82S_4}E#@{Cd3?O5ogX|55Rip~ zpD$jv*BZUn%K}j=Q;YHvB11eUe|rTi1#RwwP1y>^62@GZ#nzxIHeLJeVVkA~K$~Ig zo69Asv#NsJKobTp{V^#{+(DdwD@jy+q9kGL<&L}LDmNR!l2jcm zB?9)QnEbPqgP7W2P61xvGG~*V0;?Y?8+x_8I94_&OVXoNBaa~eK-FNO!han(>}b&# zV`?ms^QDC|oN@hq7jsSp8<_cb#@Sf5xQ9^gYdm34mC;*+R&HvrDpxgE7raFz#S%-RpgNwn+;} zc%dd{(u;xzK!y0MwJ3I3Z)a>3Vv}(P3-^%)fh|*CI3wE`EdvR}^H~g`Q3dQ*P-oe$ z1v0|v3wXERL` z2d8QGkm-+R$pP}XPoW?FJ|pIg1Hk#Zc~Ai4o_9bVfFz~j0Gxn^5`xZG zKs32n4EwrjK4Pl%;DM_eR@_`HpOKS)^iivdLYHB7LYN7_ik#VnMUoZ$%5_2s$2ae0yz%rZgzm#xnc+eCPIycF20>UKMTk$-k=osff&OtpXuOY;K+ zlqHn2B23SZGEh*g1@(OgScB20vrq`Jl)Df+$wHx&`o7H*NGNtbAjJXVT^LY*W;;EG zn$8@|fDi}O_+)Zsf9DaDCdH{*D3Z+c9Fch99|#Xj7-%_8X2!H*|1dLrEN*}rXC5)o z+&BONq@YvEKxNbmiff_5V<^|VvBvDRuQ4Syn+DAaRQeDl2BnfPmy!S}?|@egD@$Gh zEkbaB28YM}5>N=L8_=eq+0^ZSc(IrfCrCEeTRdM>y)N>|>Q(?}Gf4q(mj>!+8i^6i zOX(cMjshm~erJ>;%lQ~kkpojx5e$S@rmm9So{4B|@2+ONPPh7wVKZpVEDkTHeHbf} zg8u($pQ!P`Q*30+RnU^lg;7GFJb+eNC6qlU-+uS~n-@!N$<_}uHzK`%Mx#X>mZh2D zXzLsBVx#rJPy=W=o)7bI+cib)(bfiO#vY&J^b{Mg+%?f*LQ{3>9vjGJ99A_1!cBeE zm)AQ86D?l=rm^aBI))RyV(iX?~+cd#Fl-Rd#(H_3oS2TEHr&fLH|}mOIzt=eKb- zxln%fE(pk3DS}Y+-5K1NX;wOssoh;Zx~%{t%A}jz5%(fJ#FZw0mlc$IMyaLt2rWoh$8b!&D+sW0fD2k zj2B@IT7VKc4muMX>1N$0f7wmS1=g+wln6c7NnWK*GN_23YTUo^WvrNJ|uOOYVQgf zLu_}X5ZB1;%^}pU)ue#wq6X9BMvb7Xhp}l(O9G*Kh1gE*M)5V+rLK)uwKOA&&uD*_ zH9W5Mi4f?U@sowee^i+tAtcbzmWY4%%}=jMkLWoVnKwM_b~Py83g{Y^%6Zw)mr0)= zsvLM0=Ibmai`?T`a^$PN{bYpwqz)|G%IlTw0L5TRtokv6R(7WRSLsUXvPUqwKN zb73P_M6#fqbO}@6Eky`2vj2o<)++1EcD*grZmee@jBho zrt}eM!j()h?FXCPA)d^doe_i~78CM|{LiYQST2NeJ$(FLNm#OHQT_I`{fJQSW`ALDPhID<{ui?hD|_(4a22V^@@ zCgNgye;c2U@id&yb_RwCF3&5DZp(!m#GCi;>T0)tf7jl;+m+P?D9gqklnT@fgz3R-R#I}bxe1Pcc zFv~6v}W}RBqPgR zojRy%9!Z*mbqT-VQsTc>G?Ux$PYD_1dveNi0ODExDJ3HVJBn(MeetN0DWX29D?B8# zmn;hEjuakE98p(_TT#HHIyp{|#NCX7{It-Ge*$uMkZor80hX6I4J0V}{da;tXW5X0 zXH?<4^OKgcZwC2kB~6s?;ZBI2Kf>grIZsL_w^&T_)Hlnpc>!e%FYgTTyB`4d$Edn( zOC(t@u?&qU=nZRvedk#)hyg?`^bNRx`xu*ZxP3VwVgiO=-;i(CODT{o@M@_Lcb#$edstzzvhUZljh~ z>Gmgfn7W}Eo5|*w%Asa>s>khOceVeZf00>21jNVHo~w^hAm;IhpI}jwqWG1j$fCMr zS?}2FYSh&MV%z;QB@|zT;Pi$SRNeM=*V+sJrmeQO8w6AGqtKjh z)_mZ2Me4ls`sX+6S#O|-dJ{n8_I)>Yu)-rvPD3ewJ)J^Wxu6k6pMi`jyj_NM-7_QQwXgI;}| zK3)kzhtALK?>#6Ws!uw+3AY5^+>+_2s-VPQEXlzlg{V->DMl7&e)N$J1cUu0ZqvH% zOLLi+(}X%F<2INvWPPp90VJV3{|awdo3e#_QQr?SrHAD(!u6DAou?J&LtsxRlqL<+wgNrm+n3*4fIRqJPY}^(On_5ds5Q1cI!Y?qWUeJ@?#mZ_z&nam0d{{^);K z`>QzEUj2B*?T-u%@qn_id?XNYW_J%2JJCB9Ahj1~<=F;k&SSw+OzW(JU*X zG)~o+SbqEc+u$En`&jMh`xE;rF%i>G{8w92`%nWI(<7FNC}^T!nPhU%>f!y}?*6XY zY~F?M7O#W0{%L$YoweW*XEC>bv(BbWFkc)O>g(I^r=R)-%cHVLL|AX*;L9%;|GN3R zcS4a$kI`JsA&b_-I6DN3N^}0E4aSE$cys-f1*>YP)p?ezgjsP0mPLge_iy@`M=2Q! z2U8D!b+E=`BFdRHOy6{UGk(BtKX=}P*jQrEc^f`A3!cW|P|5wvX}COpD>Eb3>v|nL zKQya{U|)@^hk6LQHmG*H;83mJFUqJac~*q=I0RL@4ywap*I*2ts9KFp*J{gHQ}QH^ z%G|j4*b|&ZS!O*EsV|LPmx2{=l(Wih_@>?VizE;0VF+#(B@A1LGOX@*b&&r)_|sdt zJ}{W%bh-jR6y|i{S2qTKps7Nr*~Bu(XS54v{_DzvXZ#J_PG}7@M{t3&Hh4wO;phg7KjmfzNu4AG_ebrUOVcL`((|&$EbI z>!|%J?-PKn_eVHw(|7xz3Z9yNL?liY@e#31Vv0sODwoezy_+-}MsvXFNF z>Lze=votClp4JjjOI{#AbLU-sHo}s^5pWW-)Zyssu3888)vjt+O}n+QvilGs$}}e6 z2yV9FnX-rsM~07oyLy-a5BuPex1I1Wo$mwTm}$3@-{3v-bK~?}y9%AO<-AZ3z0AzDy#K$r%t~j(-Oi75E}A%tP1{$crZLYr+cQvFn4s zR%7kwgq-6XxjEc(r5B<{<%Fs8+=qU)k_qDOks=I}f2)3flHs+LVaY)y25z&JF^6Z? z%PV^vtA^->`!Nb`z=&$%1l$v+E{=Xa<*7s{Y&?T5VVOhUZTo7!hk3eo_kpOD;zsVC zC0QgmfBE)#RM6~4+h0vcqA;I7RKw5=`UE;lWMG#}Ft^*p>~`G+Z8rwndh|C2^fEWjVWS{PWXkg+?3J<@x8^<_iwI;X+B_OBpeoX_#%4avY01F8&5VpsyIrb zG!@6O)K9RR@I)^{ZWMCM$a3V4Ro8ypKK3~8EVz1#WNCy7Uu~NexUttLe5eWe!J!+P zv6<|Sml^PD7fVuQVL&!Zo<7{YAaj-C`V$STxctUI$LDjm{m4?DRrvdHE6x8-g2FGyGv3SWE? ztj4IVpH-A)NS(|W4C*ph4`5Vt2;_fB*^>Hyo%$Lq8Jlcq?By#!5EVC2_~MJ{!$|1B z$;`3#QOukaxfQ3_1LOyzT+KtXm#Gp*hRLk)k8ziP5%WS%NJlIjS5>W+utB$(ml${m z0>YvxT#Zy=?5qC0sU6G)Qts6&x1_F;Jc?rorR^}+#z2aQE!U|+fKymbfd&zkCM+?3 zPU`OgL6eJAe}R`zjdfL)BL#Hk~2_D&JAe z1&Ttzh=vVdD+H2YE(GIDDB;yU?(dO2P*OtZ`3VKT%M4|;>t-R{T|#s28_Jj)T|Ig0 z!(CGl@IoN;`AZL;C+^^xs&^Yz(hSvq9$QgKE{QQ|l1-A_Z8#q9Rb+OrvwanrV+OpOFydvKb0-vZe`>x&C96%4|7iWK5c|%la>lto$PvDIPzs0}CA5`t)UgN{Y~O zQ3%Q*-X3(m>PMYfF?~9tWG)B{=CI#j`aIm0?tWWeTtHkl>TJoc114BqeSLOjZrxgRyV6TXL;bsE~t( z;%H}T^X<|hJ~%?WSFc=vypC$wJF>=ujBBU!Q3;z)W<$m*)8iTY(FZJxQ)YH8N<}IZ zNlJyIQeM?lm6!=Iu+0S*R~kIAfzmB;eSk{!Cy+LC*Y$verwEnE0e_Ew&FXPi^?@cJ zT0<3ju`CcZ0lo3NA3S3we{W_T6pMC1$PHVf&QmRsC%-gL{OE7TPxbEps85z;nX{X! zbN4mH_k-bKqU<=C@v!8s12P~_!>6Wu9KgS;zNTdLDriQq1Gwy-$b9Hljm%*LHMpeS zAI1;J=2p=I%5b`b`m-v3`z7nYu=HSAdb#vKshp%%`DQxdd`{_c#HuJTOsLt?*6ia# zQ7uYgYuochHOAR8|0QG^pIBBoF7;}aSc}WUWeNq8i~ov3t$LhM=r0y9Sh~0%BstNu z35xS&3qZrpl`Y7HMP8V08!V!H_2bMKz6kd^b@S>3RKpyM=TE|cEN0npbrR=is*`1bf=0xyX>__W zjuWdi@;G@>g@U?&r?8Lxiseay-H9oRCYL3%@}zVvhU5B#6GsYmX)mQ4nla&7Mf_5I zq60`?KV+^o6{Tf2><^Y4^;qTrq ze(RdFB;ZW6iHIe_bZMtbjx$fzQu|+xYd-`#KXM&m((1Z@;KI(Adgp6(lOu6j%J%&$ zb$xT+9e3}A$y9DV)3=JXpl8SHg$kr5=l1nsSJA@vACBtkG=T)P$^16_x!MlVW&zqO zO9X!BF5Xu4-OyI!ohqtw@S@ccRIrxXtCY#V4A|@7d<>L1qB_4&9#Rcn&Qj4d7+!C@ z4hwW!Y+2xcc*pM+ujjKGSPRNf?(z+)iz7hGa5FlQ4B=5aF0D@q13*uAaCpSHFxE^V z{ZkVsT2>H`%&8;u337Pf9OSmAv_vvFHXx;ml{6b5E~R9DtR0Fb<%dAZG5|?s0eu7_ z09zQ<=cax+h6MG)TyI7~$R6WPdMXEhxCShHIaWY_@QBFdJXR8v2kbId245D%uCr&h zNC1)4YG<-mPvlLbhmVAAvKS9H4_+C?qQWWky4oRCAlt6q6D8?-{*`U<31(#&buZc( zCnG;F@uHp)hL*O<;i^=TnF=10w;P(Bfr}2Z3uWV>YfyIu&+_-7?w=ZP;l68|5o|n+ z)%YlXFHrjr=M~{nq{swiX^(JD6n+O%J}C+_uRc`5VSO(Rg~+J;8Mq+eys8YRYTEiJ zUuVoER2)PW6pKtVSfppRxv8ltK3jUj zDpuQC>8&L#_2sPt5s!sRkyBm%!y^P#7p4lSpmxN>}8^lv(FKI|3g}@ zm^J^76dzB|f?`^b0}@eoLGAFPw0Ks3+m-TlJVUcHZFfe}nfDv$q9=9Y0QF#8s-w|e zm}+aPa!vL&gON1doMj8hz}Tq3U4PfKck6o7SKH|Zh*>Rll2Zrs?iPk&cRbC_?zYV^ zDoJ$e%9+#qDmKTTx^oV<@hlaIh{x_-&TcNZ7`-p%XnpqH<&4-9(x2vC)kxoeYiu-g zqhhCOo^DExFjT}*&i$+0wMM>>FW^j@8{h{nK^PWRz5F!l zWJ>R-+0+zbW7}FG@3^yVlqj`-8twh!IHe$+|5SVZ6uU6sD0NlDr%#?Af2ddE+>-?$ zDcriMkWif%>BdG~P_~_vEmP6~oYU0igiJpS(z*A$BCJU5t5qj1N!+UDcI)Pk*ZR5v zlg3^LHdUSLTOgho5vrDvV`Cm}_b6V1cM^l+>Hr9m(1wKl<3FxdJL$21h0RtE((lrd zl4Ixit`89J28)#>lE6why z^uj)muey*EvN)e#L2;HHT|wPaEt1fyyKxq_&7>493!7wHXe&xr_SNB-Cv+}*0XC5y zCHUm%0_@c4;o2o)x@Zu8nSD2~SCO^zq)%@qQZEFf46|+h=-Qu$=k`^ZoGG2YtLeg^ z?ewh&T|K4VRqNw`)6JldC}*B7egX8EuI*w8|T5<`I_DRM(uNXCG}X3sF{Cfg)O?OA6leMQ`j`sCVf5)!9;xTGeOYyvyZ-)#gmU zL{Lsq&N*7`&XWG~V)aj$1jdz^v9jPWe`2*hOS)y(57YHpKK|xiX=Y#o=UG|mF@)zh zqXMlCXUWH;__#oCuN;XzFMQpYFl+R{8Ei$ zd(}y|^r)RMda>=hE98zuSb@_**dryAvP6z^IHrm`yYqhU9itzs--R-We+mKX<6QYz z1_0q%av0I%T&4~X7>6*9d2a1Ierop@BN%4x3|@dQ>`|+3Z337IZ8bL;rI=*Y?swDM zKreLMrbU_-HlXV;plxWJSR3|Na!UPKsq**N>S{bkV>3-H7<0OABBw7YWF5^j7b)68 z@-+;(0h5+APx@g2rYsA_f0J4-ez9?O>xYZ&C3=pCv6&A|Ilww)h!%#tEnKjh1)W*d z?DtGeAX4p{RbBVP8cw&pU1YG|LhuBuHObW3d1QU_d-euFA|d5JQs4f zffUHm>T=tT*A7w{53rVD|(1qjXs1b1gAN3hM6M=e|QigE2U)sED}w$ zp;!iqOFdj70S@e{;S&b00A$W%t|-8VWf6c6x(8o!igRz)uKCr%ijI3fEhRW} z=%|53N8cP+Ah*SDgB9g{ngSZScn6bZ3Kfz$byq_(j%c+gQrMg*6TpWC<=>*0uk||w6P5q)oI0z>vaQ1L#R?gsqq#>J zm@esl@bMSgGyz%@GB((LfMka%oDfdtDah@+a6;ngnaZkBe-~h|a`9L&rIO>F0Mo{= z1CYi_2X9mkmjtE0Ms?qPxw;uDg(Gbz%a&oPsqj!K-zh9xeJzRRWq;GH(YgXCuEyqE zr&=|B8YQKuudD8=QFE;U7u&8{>SIB4l|p#zBZbhRsg{5B7FFxDa%I1fNM6;S79`aH z*-U6N^g9zZe~uk9Fgv%{^diDcoR_?`_RyFVyb9LJtR=rUM7PKy)&+r+5A^ly?XFbZcCg`}?5+lO5^RaOWeS10NXg&}!nkJ9dCS!wqiuc7KZe?C80 zE=j+I$=D`K1|<-{)gs4n3PVM3Xa*>ha}C*M$?Wu!e+AenJG~pr2mrOfrB*V2i}| zBviFbe+JR28Ds#aQ5Rwm_*9SUZqZ9Kj@fZpnc3aHeqkQwru71vWuL7Y6Wlb@e66rq zxDJv;J-26;=`4|jL2XNY=9s-S)44*7>aw40od-eTcmBCSfoU_?zCWFvQIn%XyWOHo z*@^DARjqlIqN`L8mj;)&aT-vW2J=exKYvfyl~COlB|WZ>#3{tbZ*yDS|| zc~oG_ZPSMW8yaF6H8IB{oCiBM6u3cA#1*)7xCasEYv|zp0dNrX=w_-LsLAbU$m&ui zmnf_QV4^|;&2+nmsv#{3luMZw;9@Pw=8=bFJ8q8;J;Bs$p>#Z-hMQ)NKp6{D(iFLV ze=nnBR57Q2F=YCn^#Pb%aCb^wr=Ub{f$knPcJeGm$!ConASVAtq2+TF`;|lNc=h2S zzedauGv)~;R<;ySi}I9t!T?4mT7-DDQD>X`5ZI+tj^J=CJMF^EReuTY)`iEOP-NBh z5Y=|uFG@+-m`D!I`U1L-i*`Rod@oO>fA_2n9MXAz3@Tb=saUUD>6vP4xO@}`g+yGp zysV0&?!ZW%CAA@q0LvnG=^ocFfTS|qzuNYKl$v-3`!|ekCd*hA0{=84TpsJ&UAwJ@ z?QK8_VLPd(lINSCEePCeczZtpHF}?&>*GU!lGH_F+}ETGQ%@5zX$rq8g<}@3e-zix z=c<}}5E-Yy^ij46jKc9eKpAJc5p?lsTkO;ENuZ5z@tK>hF^*4R^&dGKyDvUTNW7X~ zo85j2;&PT=c?mFRJvy42bZ0z%b!rCF4XVK0Qyt&z$>bkFGl8_! zSm>k-zypj{U?)o{MXA^egg$Xfe^f*%VTfH&Q%cls(AeKd76EKdoh33<38g}?I}8=s z30&-(UWw2FgtoBR~a3uvz#v5PoXel{hFrQH@M@_dbZ}-(Ws#BTjY)=P7ENo7sf7Sra2{`Hs z8Xcwm1&vC;;4?`WoNbpTF>*|q=OOonW|jq7jY%x1t?*;qDO!+mjC?VEgVQprS+}<~-heOD^N)H;6*PnuCo|*w93LxwhrD`;$jl+h|PVBN>!snXYzB>`>51QTXdS#Rd8c|^_XnD}9GyV6 z*u?mRVM7Ao08@yZwqf>bDTDOg_7>o?TLX^@;yY&$-=mi5OgkU9>#FKAa7p~CQ?5hC?FPfC&%x0h}3+*o*@B4P&Y}>BU!Wlb)i6=qn zNl>y(@$rIE+^$55f0AS*+}>!k-5z{`MP|7rQ8ZI) z0}~|808zT{yS2JH?CtHL(`A;jWzU7@MOvESm@{@ln;F72e~a9$Su)R)KPKb8soO7r zDL`o2ZqvXX)*lz==w6ME07K5)N_PksEb!c;WD9wa`}DYo2d3O#1C@+hrNZ<_Qt)ZJ zdV8}zzJi5*tsrH1B~_Yk{j{3cw=0@Tmq?0Yt z@}}#!yMZ7je`RpfRn8R@^mvs-aOk{jFe;VAFwgltWO9dg!sQKK%xNA}Q0{3^rSz0L z*s&7HkwOBE)bFW~P?5=ND^~yshAMkc1InO}vmwS*r+LapoVv_nxoIDykLs%H`bmn8 zv#LE~bAo6#w}Y|GV6LfUs;a4_=4nrVKED-bmbxU?f9(6?8c_n_@OP*OBQ`@}cZypQ z>#V@XsN-XRJ62|GL+Z-`+8p&A`%v6w{$*_m$tL$he>GIQodg-Z*{g+6XsQ^ZgHvEU z*$hojU!B$AfhEo z2xl;w1ys4IYC9cOn_d=5_jRazFK~vvbv=yV{zfGOsGHy?l#JP}JfrqQJ}5*&qYZQr zD%u@9ZRe*NZlp%0qd#gM4+!4B8pJk6N8#hwv;p(^mT*!+ z)8MOUVp`9--`?yxqwkn54H5wT$dS|vA}&Iq;97$vZ{NI&wk=f*<_raW5%A5ahb5wJ ze*#jK+NR^}k){L9q*LaI=_VzLLnp_PA{@}s86hc_d>G(~nfU#yw?>|cTiKbAF_(O3 z>YB@;H8?0FV+t!^X@r7U2NI={>44XBr^ZDe%Zsw`B-wq)nF7tv zeX#f;xhg+oKSQew|E)e-m0!1N0ZIPbY7kCH*ybvg4Rxfj0j($<12IOMe@;ob-Se|& zk-?!*`F8xRIYh)mmr!1nA_YuKC&ZigVNbzA;C@X{7Y71f$h173$d5X3nd(~rQo!k~ zLI}gyy?XVk=+7jkjKuiI{Jq>A#bk5z`G~1siTP`}BY#;O&2iOY zdGzi393L#!NBSj3a!&FzC5zor)ZTy07C*x#uujq>kwpqC7OSJEnKx}WT(9u)x9_Fd zArUmsq||Fzn$wI6vba5pE~4UMM&99SmK9XQLa&L{(~ob-o3c5STYUbAT@p58=8ZpO zlD0!HV9czTCuxBjk$I9So2Ud2fL-U&H{XzM#&RkP7F8R0&N509_7i#ea`u1I;%|Y8 zlEDsHVoo`G_kJ<9f)_N+nYUtMLIQ8cabX_c-F3=QDdkzr&5zY4#$(lc_SA&a++F|U z>DlB=Mg@0g)(si1D{^{vlaXcFR}hZddblQKL(1h)w+(666RR+QOlD?-WxJcJ_#{a| z!C8!JXT>~MLEP2D<@V~bT(5sGqMLe8Cbs5`7Fo)s#`?nq6*j~#Cf6K!$2yn8?J^A% zw+Xj99A7z*u$YQMST~f*PsX?A7ra2GE>JbAsnI-xaC2+)Rk;iSitz#XnTMY$cVYoi z@%F;5^?q_$9@8XtHchT8Xdy(A{n11BkPJ`yNn&8_y^ightH$i zdd5W@^`)W@wHH_DW_EwYYE`Ys?RCApCcAQ2UROPV)GW7KvPbAjDkaZ~s2Y06+!ZPJ z`)v(tFtv3W8)EXIPLR(mEULTV!54gHwvEWE`QrT5x**3py4juSYbDsgZnC3#7P?p$Sc=s`kvZa%^ zmv6DOT(yU0QeHAB4oPm4WmOL46_BguNseF)m@?r~U0~gIq$C>!lZ@tZZnL%=s!^^p znmX`Ax248afxCaGhr-A0zVl`?%3SuMi@MQ!Ks~OM9+v^8b1EFK7&QOJVvlF@z5t@h z3mGE1;8e0HsAZ8mhD~^(F0R0hx35aTw~Ak8~_;Ewi{T92SWJ!N*&b`Kws4iHRRMi>|%c%u3*8Xq*-pUa8rfUS9qn- z^(N)uU{e!gsEHX1s$!4&meR>uGg^~4lsva0%_Zc0_4 z@c~|I-)?JF6cPbtOxkGPYfH>;-V&KAOKxi*5j>|VSK39S*7o%6p8vdLuyp?FE)zqHqKP$oQDo;)MZaI0O}eX@T$VFs`qI4`lOR2hH>4u#uAMOltp zEA&r_92lN>$@;_OT3EuM2$-iQ|2iT1UYE**=K2Dw9(jc6=iqRG+QAsX0Hj>Iur+&F zP&bv9gjizw0l1*qJdkSzT+$V`sc$CSo?w|Ui}Bb*9gDmBe9#pF-EmbnE5!M507FJS z!JL0dfDiNK|5KQvEJ)G&iTZR@{=?WQ@Rs+c4vViAk10!wod;b;5ma$|v!N^3Q1PJz zrdjmM5^DGWln48_WWbU+E!GU!nOo%K+4u~`-6h&?8jd(PKg#pToADFn9o3W~*e@yX zEPkQehqr$v?_ZI2uOOmoy1wAo6?QBd$&-HyOF&Jwo`BNNl2B#+CSuK~<<^mkL_~my zgv#TTtu9Y+2|&iUKBYkTY2vr%kJKl7LRhD~rcnHB+@Y%#6g^%fKD*L1(;VWQ)lZb2 z^QJ!G1M+%3XtGyw55gM9;Qwm)LbZoy{|L--7%rRDWmjIp!Ts!c5RE)mr7QrvhHHPh zx|wk-9XyY)66sT{=q!Lq(Fz1E{M=MC?4SyfMt6gTGF7IyCL-*w?U5b;-KcLd;orpP z0$OV_Hs1EiuE~fKC@wY+v|A^NR?<{h000-Fu_8h`v=$1@B`HW>h!^zc+N$pjlz?AN z9~8*1uJm&Upt(Zi4xKF1x~|;TD<6N;588R~j*O}6IdFAhO3QEz&a8W6iKYkG?Z!Tr zF;CFvbpu|9Ha*BaBXU8Esw**6=|$>mKF(Lv89g=%xM_ev6GIQMJh1>nu7}7oeP)M_ z)6Z3GDEVHU$Dw0lslAVg4a^~LTG+TFpMbx66g%b!>{gCRJ!oUi+hHX;Ag9>a8RX;&B_u*0(bhxOQXAxjDneEW-TGZJ5F$>LBjG6KnCcwM?rfX~zUEz*z2S>~`fe6> ze_!1mCNX3}{-yPUjp_$1%k+QKs^7QGs_G_n1EM^x8|TqNrHk6F-tD*54upI^P7Je` zRsGYfLHgWOP1QlKwIWydIu!tG++gjdZV!DJdds=#=7I0vy zT>94F=`!$=OyCSqmBP2mz*Z*MJ-GrCAc@swc%B0NyQVREDCHoSOxk}@ZQa;8Ss>DkWI1svAAZ_Ca$F$}y2%G*8sQXy*Q?OmMRY@o@6c_u-_K7fys8mM90;hb^7j z0~(&8SaoR?+k$vaS5SWke5(aL1``ZgEd?msWjwc*s4;^(aQV_%637KiM|Y3c(`jHh ziaeRx3H5|)JGsuudY>5s@n5FjDU#F~Xnr0W=uZCv15YPN98JC-8pr|azM;cu&!hb$ za*V4lXJ6+732mPDLG)|6>FKs@_bTTgN!1(bP-$vi1!{lv7OHlo9tCrC>D!e_ zR0^5}7S&q6ym=K?TuJTY?@AB91YfkcG?R?d4(yyW(l8_wf2%Ie`P&?=xNciFpMY19 zRqc?(OmiL~TRm5Xuu>5eN1R|9S$1J6S=H@uxC4ahr4m#l+eqQy68=)B?dyF7MpP%E zc*EtZ7G7`Kfoy-;K**@dg);~1kGsLoA^3O>VUN&7Pk$eqKUVhsFL%C1?r@Yls<*>X zo&~e;-xE4Gw9`O2U6ax`VIU@yQt!HY+{=i2hdya^YL}%zSe27zX); zzv1u`f|NamVu(eS^WQ@;NG_51kF%P$Uy^5I->Mm@ntj%<(V4}E77;N zU#W1eubO{;J>~;PD2yJO`tzZhdwsk&9}j@Zcx;WG<5!M-Ib3U>Nyz;o7%DPuu$%Dt z6-bmDC#_3#`bE^V&HNu#*Ivw!-`>pxw#S@DA3wN`Qx?&t?h$S|j*bD4oensUGb)62 zu3n>t(!l-Z`-Z)7AN1?Md71RnIkW@z1SM-)U?zV>q`wmx>MVdwa^d6`8C=1sZ8G#^v1p2L^Th+nnp(C^+a!>M{ekHN<+g`Me~1O%M> zp8ls@SvP;4NQ=z6Lw|2j*SeS;+Zfk{W-)mRY&XZ zX;xM_CgBa<^2h53gO?Gw=${nS2bD2VxyK67gLbq7%kg`$T6JUp*AJ4Ynd$4r(cj_E ze*ll+?oefJWOH?o0Fg`RR2l8XgmKn|iAU<_b5(mGrDQ}mBHecu2%R4Go%3(`gC9X?gfl{0sW``t+pqDcXRUl2^YV5>Yr-seZM?8qfyK10EXaRyJ@B@4Y|e9Q^Uc2Y%68?I)!20Hsdrd6)!G~CQA`^qST2cRkJ8Us4>`-!k2jh3 z%nP1+ZT)e4I$bJ>gvr%FCLik9IE!K&&|>bL|Ej&|7g6Td!{99!1qW{9!WY)&(G&00 zTkir60F0HDi)`w74ls~)EsSA#W384+ zVzRAa-R(Ck@2d6$9#`JjiEuAhtDa2Pv@;|SZ$+7jz+KE%!#Lv_&XU{&Y1hwZ;4Cb1 zgScIKcZLvQZlTQ-Qxz=6K~xlR(3T`shq0RNZc~465laJ^pqCClr9c#(K7vc0MJ!Jq zgk><@A6%VBiDlEfXH2lylxqim{Mave1_(y6Ut=c%jRi=%D~ zSdo7u{H_~AneM8i{yZIxiD8o<2@E>9%9A*%#%~m`-0q?tA5E6vnwN&pHaJ6Yc4DWD zr8Qen;;J41gi@09zOB|}dsDAqUqRlh+eMhLAjl%WY^!>3t&ZP$oWkk~Y2=&d7rXHw@BQZ!;WB8)}eP7?faK_>!(^yEj$|b5x{Wa{(0X)N0ni`E--w@pr;|-d0|z;aqj(}){Gr?TRefhm?-y*6 z-25Lq$P~)hxeQZ4$7cSQZmgzZZgPKSO2e_ri#L+J>jCayHS@On&Den3y%J-wUYOamgy{>zt6ruq^ zuCOqVLc3*|P(O~KV{BI>&#P`?jTAmfvT3RpTR~C_A>u4yB#CspQc_S2HAsI88|Y7_(%LB~XSq|cN|c8*r8!hkNW(w458xw99@ek2FGV)3h$DLiITsm@O?Tk!^#-#D7pEGHsD3;lLfaZ}`yccD1xK48OAlRD=?$-;)Bm zmZZ{`*M@&TSKduW1sj6KI$G8r%^*`3%n@-%T=7CxDfMpiNlmA6oQLS?>g)DN$@0Fo5drvrCZ(b!N@7E&C6yRf;H- zR-u$WHw*MrnCc+0*3hM@D+W3lei5=yn5IsIDpfo?RzZawkB)yF0zP*{oxsl^HL@XR zPAAJI+>E$QihJs?)rh$gmKX6{1*MryVid(PbVUnAf$?*_Ss`JqYsrsI+l&oPZiJ7H zFakOPR>x(C-?)W2;<2iybtI=&gsBAe0rDiha{zxeO-o3GnW3DA-|R<+>GI?b~6&u#Fh1UYNSk5P;KsjDNJ(dqZx-%D~p_vNB)7R1~Ul$EpG@^f<5Qzl&8>` znbuD@y}-XPWtQZ#c2X#t3aSn|xSAw35CZ3KYQ1+i4Pt*rTN{9U?ycFP)Rfl33Z%SM zcP+)k*x)o&#==2MnHL~~AD{o=U8tHySPlXujl-!36znC8B2?eU-ISNBv0M`B3 z45Gzg=?8!O4Q~vxp>lv&R4Fw>2*tCmU)u>ikLr>#695M7Y0PumbbDpRL3aPnj#~tN z;i|N~YZ3wCjFWFieM0ZmPl!*7%r~!pkh>SHFTjfHb_`7#sidIgwN(5vS%Hk`IanY? zax*<1H(8}D47KQz#lfVvdPZW-*2sQ$a3xS-+va~PP{n{#J<2?xvZj>z8ELY}w2GFl z!?|g%iA+FZS_^`mly8O$p?``roU&+ehX-j>irfK!P1o%R(6S~eHxNn?)rSRFWklJd zh%{DLss*Uv*&G$dAv_RjZVE~r#hp3%R1IA_X zD5CDhT^4t^HKvxUQRtkOBr;SD(_!eUrX+vo*z?QUM)Csn9Hy894v^d9uVBt^6%!{Y z9c-;g%{jULULfy}u3K5@PmN!<=Emqq0T*t-mhleQhpao$mW`b>Ics|f6=kTJnmL1P zVhJ>=zL#EVk|YF20=^Pw4_yf5Nq7fiaT?54bus1=8Ks-P+c<=lCP-P%?1s=z^_73j zq_%|IPs0Ztp8}AY(xkiR{nRK*+|Hl>=EdbNOXciBI2$ZmSmZvR@RV}_^XkQ{ITKS2 zX#%6jrP`W7Ox-w5?+vYV&z$S9$-SYb&GyTEcZM-t$LY2GUANnBO4D_57I!JN~ zbzp6Cd0kFWUl0`Ydr&`#Mv!D`up57=Q+GSr6?w9yqhAu_pFJA;ef>zLggl>B+Z^IJ z(S-QUXRj6!b?u76zi!Q+U2mm4H5%gFt}A)SRwuF}Gbv?7;2D3&mPwXUmt@NEwj_t( zp&-;1jN*LJ>Oq=Df&bOqkIFg==V~Z6YDiXwlpN`vN@Lp+btyjMfky(xoI1HOZ*WvB}cz0|rs%h96y82Z?_OKk;Wa4L>MAC&dzre=Yu`6^N>WbQW>b$h18%lG=YV z00Y2V2_uvZvA$~5{nsC5y?|04Las(;Rb?@tD~7lAsM=-Je25J<_a7tz%qJfyOLOxb z#Q6-HkeMOZ&Jn1l+%Ag_^Ndr6w*~? zY;6$E{4-sdzQZsDr~h`keFz!^S7G%`9O&DbaqV0rO{b*WXKRt?cP--FuRtKYgp+$% z<^IVEj5l!eUrNgq!3@RVa&9k3PUYu0k~=bM4S(|01x+JzQIxY(UqH=1WQk&(Tj}ho z{e0~Ei_rCFuC=yi z;5)3T#i|=BRGo;+)4jMIfF9>(SIua@D6kl(#OfujQ4`iZkq3f>XU2d9;rBJkJ05SLbjL z2aa?&58Z~n{W30#?kQ4vo8!}GXJ7_Ta0Fc-L$s+;MZqFXV_cM>!=v*mx^K?t17s1TWq z;KXus64Z;jY5S`UK7M?W83`h$X_96742x2l@R%%bPlC%pUe3rHJk1hG<1p4|LiO~Q z*W^`RU*{D*KVVk|f|z;Z-!e(tp${--PAo(uQ4m>(L>>Ay-*&WWn*IBH{gFH+?1{3Q zljTd$Qrz`VW{*4#TvC6DkCuN}f&8<2+ZJ6%`uu%WfHU)|E%MDhxtXzuW*JX|qAfoc z8`59p{p{`XFTN=(N@ygFt>vEfef8zblgWir8nck=L#yDntSVABJ-IK7YD03eY@K6s zrct}5qbIg)+qRu_Y&#vBPi(tmb!^+V?R4C+J^k*QJ-eo6s_qZ#7ui#7L5+MDpC3_@2Z}B-AhQ zmZ(0_WO+)8QN7^FAF!wW4V0Q6F-r`ieowG725?Yp^)h5VMV;eD}-2*09LXx zL-dlzL2bmF)&{af!dDm6jEJm z%dqMt;cw^50*23n-`-8Ilgf^-g~!x6=>sCEot!t5Ye>8=^2Gj_GQopvMLqJWafK$% z;q~Tv;AJ-SGYE?cwlAfP9gZ;GFtjR-@e7v%`JxtRM4sW}ahSr_UAb2gxV6=4zL@qY zz;dRyBH+yJs7o8f0CEC(D)XJHxeBlr%n*0qi|76n46cC;7PXbDX$D$VRQ!OgH`y|| zJGOQ8cs@)K!o&|Cf{BNfG>0qKI+v?FU&mDDO;wR$$ZyX@kAG z+Q0$Ifyx=l)gz2AjxPgJ;s(`z(MoM%3;qfM)D>o2Mo>O+C?t2`TK0=6)Yq&_swzKd zHraMli{#uon}0qC2mb3w??(-sJ)fVDy1GG+L;r%tH&}T=dK@U|IhnsknEm&Cy9_4# znhqx4{1^m}Q*4jV84TqP;Wh5erZG2?A_cx88&lg+m(gCtM_2UgtXF6Gu{`6~dJ&muCijAZ~ZfF_69h7$LoAPKcmm_T^l4~Llzlw!O3r{BTMy9TnO zn_vd0_QfyH{WN;GRhfW1)nR*fckI01j9u$j;=nznruHn+S75HyC&nAzn#*FzY~uwy z%d?X%eewk{Y_K5pnc+(%Qlz!qQtITw^CLR%(CBbDzZ4gWO%s{8Ci|#lxa#lF_JtJ; zBF5{j9#Op%g}Hu8&2yd_JMOz_{si6>3Kz@;_#CG{viop*%EB6}eL1D4KjxJ%(1rKJ zTatZLgMq`UlQ9N&kbFTIZ5_b}##z_(8;qK@oV)D}CfLBX<~JK*%sUvTA|QbjCI^x{ z;?{$3S23<6XdJ$a|GS4z!2iNPUE$ANJMN^aA<_GANM zTWnRvqpmt8q{tyYBkS-;DyXvYh`aaW>Q9*Mn%uhFI;@Ki5^eqR#NOZu((c+1w(zOl z*bCg#ZrO-C&LS@8TN)Wje*giI65(~8=N_N+3Nl8?(ub#|nkSU|$7w7%We^|7w6}i# zYDqhF&2vNn#RANG?>@r9>NVBu=FBNtieycoZa*BGUOiYZ#PnCBNEFs2yX*A7@=#oTJ|;~f z7kup!q7~%=h}6^(y=j~1Bv?0clz#~6+m#7sXn$5O18~-$*E2lTwGg$F?U>2ZXyQ-g zzk*>Lz+0Kx!h(n=aovJdVP_#|T3YWKHo39GI8-c-!nI(FA zLPJx)rK{c=MkPu_+?G8$#?W*8b-AZTKoeA1%!9x(sOo!zv2U3d)*qf2}lU`4#Qsm z?Kc7xd6XYQPv0h7WL5(2ev*%diJ!G=1-(p`aLu;bQ~thr6`@DdQ@#;}DFrDmOi{8@2vQvzy8#jwr5H_7TRz4H>yku_00Z-aSBpRG`B!HqQRsWncUQN#Tc*T zdDFfu5j_YYw?LZzN8FZhxO+=*Sbl@)WaW<7Q2L-qjv;u%oQZg2*ZCKB`@31<5M>d4 zw_L%{d1Vt9+pJZ1bb-^aH#D(!w98m@RC12&n-2`|Q}33%(S0u8xSqu5u+~{hd%r|^ zwDV`P#JAKIEn)(6FfOmuRQW97@9iQ?*ghN(IqVc*`ZN7-3w~3u2Daw_wZ1GdqtV$! zt1J7!O14uy%B;?rF2vxlo?`vuHaqfv-dq&W{qWejoam{BwbM{{f7AZL@bm9xSa$L= zSO(^_?3JwBb(c{#9 zH$9US!OW;w=ZUkZ^7SvY*lbh?eTkqIGQudyux2NzZ4}wR?^8DqGyS|Hyu9mKOUV&S zWM?j15+yN)^+bfVJ5x&HZU*X2$_23~2mIj+WE?@@iRfpWj#|}wMZEr*#Ozw$ zFSxM@ORqXQx-Rl!k<4I@*&BNzG}Lu51wc;T+Gaav1cS|QkOku|%$sJTmG0#MqGM%$ z`9e!N%CW$+iKl3Jqu=*`u!7`MEPZl~_!mPf z^&YEp>}G+{{2;{;_D;uM*r-rq!bHh}lC6}hAkqPyKPs#**uQ29kk*h5-lk9Sdf6gb zPz0%&a_~O(g)OFfuUX&rp_XR$&4Cc8RJ8kA0U&YZf|~uL&`5s{jg~)el=0<8h0_zv za*CjC_{NJ1pumB0(1Gf3m~h$T;9yKelbxMN1=bJ>3#h!FWnL%@wS?6u$W_E8KMKlbKVON+JW(20ecXO zBtizhtDpS+^n}tvK|{M@Fyd%8j+i4a+eMo6An4+GlV)T1_|i-~a(}_@*`5AoP>x5e z%4mrW6p;^`+$fJ-c}MF)uMr$=GAuwq>r(8&EjYDloZ9}go+%*dZn7E@%v08C>Qbj^ zCMwPM#j_vZ82F&M9Y?YR|09_=am+&D;UvU6T2*PL5kTk1#-153bNcA(dl(Il+a#7` z$b|>Xy#z?vH3BVIE*ep3iEcCMWz8d=gC?+DFiW;8y|-r$*}?jQ((Yrx=)Ew{Hk6V} zPrGSx7&f>zD?lQd+YxDlEEs`=`B}pyr~p#15Ybpetw3Om^*I_| zGeOkeFA@Ei-{CC&Sg@d^cIYYAk`#86dgFNwYEZf=ij>)15vrgy*sP}~hGHNc8NHt` z8Z?s^$I41ezXR@=trFA`a|3j#3StX}iWidaZSP0oN6v_Lr+6KF2uDp)>XQ&GfB3DC zQ8!Vkx&%apqv2zfm^)3RdA>`Toe1HVa?kj(bXOn4vr~*OlmRE*)*`EM270-4s{7~} z7(4v5)!^u0O&N3~(eDAAR}8z56wv2cuG~Fqp>fhsJL<*Imtzy^&ICgeX-38qlUlpc zkr2M-yjVn#rQ}|yVGkL3?On{L0(6_E+)Pf2;6@0rK}KRJ3tP*$a7~!J6o4k2Xx)q2`0Dp4rK?t!Gp?nJptA5)P9UeDoSWuVflI~ zW6R25+BQ{zJS1a8-nyZ=0l!GM3AqV2B|_vBG#L*T(vz%A;6jdaO zXOe5)JTJ?Hu0S;6?Gn7F8E~<%p}`Qw*`JU@^w?8$h+OeXy=A)D_Kn&b$H@V?X`IZP zw)z#e>IrIuI(rv%`YzfclCxzsCoLH5~khdJdYgR$I zh|ypIejtK_nBa!tcQbvJ;xV_4p|mJ1TQGvvYkRq zLtv-OR&qjdG0xpa(7l4p3ac_{Wd6~yFo71d2M<(xoySEIO? zmpXnArPH9p5Csru--96UE^d@(cq+XyHmC6L&jG8A1e{dsUfeaG4t$3>B7N&YnYUs!8*vDP_HZe z68iZMKSdx;(l&agOn1f(ckaLgabw9mSRaaloQI%(%>XybS6-`*E=tQ<#J@z3Yzblg zTZBT*^=c$j8?ubGQ?Szk??-ldEK^#e;ob=_mDuR({~8NX|I=>x2QmEbxsZd6Ieqc! zKRpMREzbXpg>}Bt+`6b>0mQ-^N5Nc9oI6njwM7$z1&gFa|v_y zR7)p|u6JlY4j%5tJ|ZZhsAMDlJiJj~0`0L%dk0Bx^kf>U=pp!>I(TI_lUp_sE-?H* zw>uYV5{|^j8`x)=3nKn_Id=%j&MqGKCVm7dv1un{A0OjX^nP9{+;!MER3P{ZnQFqo zvAjorkCB^(?@-V|eDU&(7k?cazF13^O*xsr%zf+)uUwBf4@76{4$3f2&$}zM0&T-O zg|rounYOJ`yU0@_2R;tyx4EKYWRuu_JuM%6p6yO|=piSjf0Zv+7*L3%t5t3SW}QHP zXm+jxI6jrHfm21u!2=M1EEm%KB+xsFH)tnVTFd^P>e)X;wZ8mO zgOZqKst*@RpnT7fnHeL6UC3!f;T^A?;Qf~jF!r3v4}~L*{M*NnM@S0Wn-j#4ixHKZ z_3$+R+T08)Q@vg5H(YW~FH~1OfZ>n@@$qk84o)PMiPqOOH1y!Dj6Y6W0Igc^&|qRT ze~FQ=Y_|w0R+wGvi*WGIbs7r+m}&9rKneYYJ|p-{96++<2CU8sNBiV{@#INPnYYT> z@Y_@p6o&Y((dSRIusHFA*351}3dJ4*5W@yL=)?Tlb}ZvdCG_+)2c0iPIYJ|+WHe-- zs58iC^Wv)~_D5CPh`ukEfk?-;z1*WO+>fl2k2lnzAJ4&IXDVD?dKvQ1%Cg4o{@3Dx3 zDL}rBrYRHijp)ov7ak7TulO8+H#a{&(CornIT8VFlp9-R0Mt1nL9#I`m?GHpRt6iR2CvUkP5CBq&&3TM|7bJVq(TE-aQ307En0A$?Q}&*W&HK52^L}PHv(TuN zx0A(RP!YgiFwQOzLcWxqU#^4^m_oPx&kv{9R~~!y=X4r?uyk*{z*CSg2FiQM|+G11LVnwV^Qfy(?TFy}CG| zDj0gcNY`F@(L+R3HTpu1i#pIAR9=BkPCNlpvWyv)5nMpa|kq|BF6Mc zJCbmj2Lm+*5agle$|wCK>#Blhe$yoYl8N7yI;m6eyfumm6fFRz6pir)V*gN&*Zc=33DjEb?rkB z8cZ3S2=jEFv}m8jjA<$cH1v4M1Z-XMZmoTwhWb?mQ1!^vN$zvM$F=A;EHelBvws8y zJpVzDmS%7w0*B+4g{dn&zfJ)DOm@kLU94GUxS%zk@C+nkONZPF@^6H_7yic$GDu;{ z2q+?#<8c-NKFb`Yii}@0={vJ@m5tQM6hu-s&ENvzi5-x5@Y+f-%F4LW(!)>#mo2mO z+unr%Kw3G0?Hr~t>_DojF=QP^lxOyMKGI=@7Qv8jT{gI}YpF6d(dc2AHUt*G_yMuCmapjn>o*n|2ul7cQtHZ=P+ zu#_a5Z)m;x+TG@!47%3i&nL?vEme@ zs6Ibmw1y1cswZmB@O+WWKf<=kRJ1OMz^nIC4KG<@cqc7s*58EG&sx+R734g> zd&1V#iMLsq;zlSS@*D?vXh}dgw%wU338gJH^}RVhy{x6Jkmyb4w9leUXETG12ro#u z+jHWCuZ*mpO~eAWtl8L&-B&nQyZbo9xYVx2gE| zVMJAoyBrshEGW%CBiLx9KW4ywhq$8ovg$@bs;yP};=%_a-)G4y1|Hpn=x1y1R}Ug^ zwaq(e;1DkjX_F1adbDJ9B0~?c03i-kq$X^31wk|4ecc+_5LOV-^S`d%#IsC81Q5+) zAlqyHiM5w1Io*KSr?=ski%l)@T3C9NIkdYw4;L=e!k+o0xPBs$T_z{dmXSrJNe62| zA|Cblfg-cE?k z*`%Ud^_RT)n7QbnU2BJ-=jW#gy1M>hi+u!W=rNY_a?oWAC_1PvpU~Bki^bP@FZwu;lW(Sk{ zs=<5Ry3%~#%`iod{G3TnMOC1S86=yAP}G}~e;(mJa98K}=~$CgJ)W+aOh(fDJ7Aol z>`uoYR(YhU9-9q|U^JB1+>$8J+oO43*E0WvYH)40a+gWI?Ff$;0M(#lYZNq=m9=f$ z?@02>pduuAU?-S*W5Y^T{$=iW_R5Y6JFTg}8OtTwrIf6p+S@ob3TSpPC5Yq7k{6fe zS0?+F!)?R8^8xfSqo<5yY!fQK>U%=|CbJ<1@6f}0^edF$%n*CiH<#XEZ$dEq;S&}Rc0&*h0-c-7e zg}1^fDoBiwa_tnxG!hfgdVD2C@Mq_xhK1J~2roXC;GLKLAOL4i>lju=H*ah;-KB4X zh)J>Djl0tF+&34R;BwryFg-c0-8tVM;x6Gl*V?>pfpWn<1@ilrciXuKcXx?aBC2ce z;|)HvMV%^Gv}0vD8Z0^o=W1Sd*3)>O?4)EvZ+yFhV5+GxD?Cc;&lIwOU$v5@DH{{5gDgU))e{s!eZ)<5| z5jPX<=+vq^48#pfw;!%qQ3bhxje@@lA1$$y(R^%?1YOx-TgHGbcA3*N#JhkMT^2Ll zZhY|6f`&aycE3d+g!*;S*>KcRJ{p%WABsV1!j{rgolGqWQ0XMnJ9+x$E&Ro@6V`;Z zy-(J4iNtpMRMv@Q%&LD40=`OpQMZjJvrU7Pt2JK=2h52$@hJI%$o*T_{Y!oXUK^L+ z(FKK)d;g2p41Rk~ergpx#hV>SkN1Z1?beL13Asmiwz#AO5IY(d#y^^eC-mn0$=WAC zgv6bKA~f?mY?#nYC6wV6G`VMS##tUV(<4oWq`@CQQlHh{Li~x|`nWwTL`6D}Y+*_y zY@Ysd7udEz$KFJ-&mRK^+d0ToDuZU4?(-Lt&LpZ?79&FX7Mjt0iz}CKNn;~8=%P*+ z&P57CQ^^J`1mtDG)jGdV8 z+S<;omTA8lGuM_e+8nRTy*WZhzoAwbQ{_?&&Xl`K_Vh7Y+%=sKrauDn)IQEk8#Pi2Pl?h z7j0)h{{wYnvj6OonDL?%1uY{6Q-S3~FPfhRG{P7tzk3)rJu7=~4W{Qf=mQ9E4R}k1 z#?jgR6_yrnuQJBHxt0EX>6-kl)GGBm3y8j6bgv+SlVmW+y7@Fqk*$xx%J?kHs>rPz zvhRHz7&7R|Pr7f0tw2PHUuJr&%QVI&z;=6GIaQ47sfTG$OZZ2pX=kuqPLvkw~g=wBA= zZ&osth2yHAGPE}6e%iBlH@#Q+fc;Z79sVx3d)oZtljky+S)yFqAl$vxyxJszN3^Z3 zkQM9QX-@_*k5$JC7jvruptCkpPH3RFs`=%YQy+v0yfj-f*_7xZO3P~5EhQ{Fpw;YXzU&&Js69>L65F+JYb_&I8F8-^j0dvgBavWa}eFHk``o7JDKRYW5Aw8EqUfvH#FZT|+jfAoPb2Uzv{Q^Y;WllHv`j>6e zPd*&N@XIrt-v?z^H!ZkI)3Ko@#MDYs=x?A$^vaO2v;H}))lY^aLwK!5tK=1$HvpXK z{$z;#n**r0ODLq3TX6?&^*m?0C~*lTl9!P81E=yTI~zl`az9-qmv>R`N6+JYd-!$t zTGJ{U;|)(<`tOeAzax^e6ZsX!@2-IKHrKQ1-ytGV*E8O2pUS}pMe#@OgZyn zD|h$8NnPEH+FGTU>Zx&<(S`+zQP6jkcU0gUgE@Z19~ll#TaX?P5Khu%$Bsr$J&bPx zqB0gjVDGD=ollAkhf=7PM#z$RXFEDB&-eE=Gs*v?yR+L+9+E3u#)JnG!9I<#`3!i< zdmPnmoGSmYNlRMDz-*|KX(L)H_kUWqJan|w&VF_E;=nQMXG4sn&=&@}F$;Ypbop)O z4CW@0GZmh51_n}rqFGO|a(x&5MHb2CG*_BfR&G@g+75{bb*!umQ|P)fMmuD1q^9c) zJ?X%m>TgRNp}My|ERrGN+2*Zm9V|Wkt%9!<5s#+b#dH6#ij2fWl-U@&%X=}hB;L> z4!34iSnAV4E>bP0MVeDnhSSk;ekdh(z)}?Hd!D2L0(;crFzzPd|5I&df_(0~dG&NUe6p2=Epin(F_3 zRijgxP<26g;N&-hN=>XS4#Il@1Nm4SM+ZJo(SVt9&ploG+bX=UZIymm48V+eL8SXM zC-dHH5*yF#!+Hy3T-cLm_Gy6e-%gOU^c;l;jmTVo>xe;oz=#SE!Zl~W#M$)}OA zRw<8eFuXD{EAP?X@92KDjAkc{bpz*7NBKp@wt?MR`g0ZZ2{2z^PV zB*yq*%A3j`an<(vTMRgwuzy&g!FVgs+3s#d0}q~y%V1dO)0AA>Sp)_P6C6oZAm`rc ziPzu{QhDJg)}4Yl4ng}>O4&y~XvJ;717SjtIY;aBVPMawH(dUPm=xH5Je8tHXEIac z=dXAm)5!xf?;fOQ;w1SbssMNUd=YN_1qQ17&ZEwi5F$6O?hJPWSKAG?%tP?g1`tx9 zX5!?Bi+&X{7H~dv+4hquU`+p9gFU;#MGD1$&h4ycdYFfB*BAgEn2 zc*Ao*mKr&$TR?C`^vB9h!oD%rcIa5(IYDuCma`}LWnUKI*YGKd43#r(*$U>V1l|DT z6h$kl?p_aGP-v$M5O_<9iYMV*qkZkv^cKyjXy$ zS2ZJawJBk{L5m8vpJZVA(9depB3Wl4Uxk-O#rljv#IC*Wy=|N-`S5PTEH~`yU zFa0=--HZy^ofra^d$lb9%+H0sOP40sHj}eV(}_;U<7+Vhv+UQ%k)QPX^?Br`0qI*$ z65OR{v=%%(fPMF`5yt2sKIm~^<`W6Lq(wyO6*mNt#;Et}HB!+QW`{*lH zVvX6gO{a%`_n$AC%DPhpq`v9vh#g2+l&8>G#9&8u5(661TiKPs6K%B>U0^;$#C(O_ z2njWJ*w)qU&a;LJOQpHe81b-xy3kTzgrhqaw;m3vJBbms)X1|Pb4qgMnA{~Jp--5+ z=oMtgD_v!XWo9qdepwHEK(t!Q9HK9}!oD+XF+tWN8Ekxm1^Fe6UP4b-B|JWK6hS8& zV+eZ^f^gkmco5OULR`xUY#?EOk0vuz!3BHE;O?kkRcqgo4r3S> zs>y<_)PSh%o~5V^E=5|O zk)-gV#$Z>&_R#Lwv;ji#NU(^>KIpNnrGm`rCaeO!ZFc>FdU(pBontJOwLwQDT6-?o zN`&s`4GktkCo(&P%XScR*yBzXG#aGHSE|&O1NCKJS#B%hoKg$ADLIyG-#j;sJLJ}? zSidMoe7n_fWO(5|s<-KCJUjPp{OIz62 zKZBn*67bv~wm8>yl}O#Nw$h?4YUIA$#QisiI=^YW@UD%Bx239hA4|3+o;N5>ez-t3 z4-?2k{Mb781fvADWCAZkq2H7?6UfnY{g+~DwuS~IrXM#=lBSOQ$NDC0$JWev$ad;< zQgr>Si`y5CH84epHB2{3XBZQLHH?!ji{_tQ3IXwi=dfv-H)F~)=E zmA3TZkMioBT11(O*NOY>?}}Hw$Hg6GOuf;wlhn|4Ww3ofvF(hyTuL4Kh8lOyMR)?# zyF%w~O})&&+P^)N9qOw;QZb9`Z+j9R%2LzYJk1dlVIX+!E9~C!x#;7@wtjo4;4-{4 z2)T%L*>CC?uRrs`{!v?QYEyHMba#d8mpNIy)|jf&Ivy^l>JIS{gX+zA5rRl$O{w?; zx*7i9-yKicv-yq5ORW=VXK&mdFiO9D6u9njtzpQ z(7@cTRv=MHd`oHo^^&OvRx#&vQymtnm;E(CVb+`#ay#2A8ivz9YrQbyT(p(3)&VFg z#fMwx&z3x>vG~r}%PVjX7@cC$(qx=M{pGV1c0a^F5GBUFhSkIr_D>nK?-pf`Ss=6$ z*{p;a3Ik0n2|ArE_H&=AFkO`%%Psb_0ET2l5MX7$r%J`*0JKvdxCbXY8(6yv*Z$4m zC1%+yx`Ywwo{C7n6_b>i$|$!~81UyYh`i%3ZnSpi<|G)wK(1zb2n9;mWx&BDv6`{r zj#`gDc@__H3%q^USV6%J7MCgPtN>hg+dst+3F)eL zG7va?+e>v$IckgWuE3$OOm|YX7(gjp58;s)DuUd{=9kbx$8MlwRZXvjSUQ+ZV!f66 zXFgWO#CPKHloU?GX>AF_2@$3w6;XCuLuc)<2l~SIqvi+${RNfnA^paLT7u`ADU6eZ z%x9LtId`y$1NO7dLmLtQ)1OcMXZ+SiHc$_zZnOr->O*s&v~TT2er!jTCnd;|m#KVU z4deDoU4%XgDl>Z$&w}|A%sBJU!6&NpM=u3(kJxx_f-uNh3rooyX?!gbTDmao*W=UH z*qV)uhpJN>Tzg1CzcpuBJg!=3uuC9$in36335>W3`}?GwX6gl0ewIb-*Md5GI?y*I z_@T~2aj8Z=CN)fdd)dqJdjcdt@5xqy2Seh`2xTl)ttXgcDpw^p9^%v|dttdl40k7{dT@W z-;Fpqt@@+c<{F+Y827$4{8$DtEp67qp6E}N+f7Pca~kcAKtR*aiZ^$cYQxg1kyZe` z@yj0?bXPXgW*_GA(dG!`{>?0{=cvee_kICb{6QK0oantPwt?oJnwY`9B;cA{)oH1~ z-VwI#uNw!L0?|j^K56~ZCBI&&=|`*Q1dzuH!ltitT8@gOok|rkN>~LovtxE+^6Jh< zJyWj`jt`Ixc%)EsM-Y~WZk-TwRSNcjfzdWL(WNfvS|-sA)Uxe?R=CEWsh&q{XUUCi zH@(1v!7ib~Nq~NCSeYFsEO0!hz?vIr{W~imQi$HH_qUiOfY}GT8~}A{?vlep;Bov^ zP&f7(b7@#(`QAI$S)**v&wOj0`_}2`Rs=4r^TJo{>}a=tSaYMi(Oi5yI3+ePxJnXt zjA)dvqNKfyoRpXV=+{&(S*gK9BD+3$#A&(EY)s5%#r{ z$Qk~Y3YL#^4vBOAxc8IL@(m%?B5XhxC(qS1YNc8*c z-0C&(T=$#(5w6@Dk-G&BL7T$eFMVG9p}*q&@sTI_?K3csS^^=-1$!67;`AxV;$)_* zG`sg=1`T$rGW#$-0?6jToe{1WbT1Q^<9(X4z8SoilZ>~YbDiyJ;rG?I_3$kLs)mV# zg(avuRdA|86u+dSb$)dD=Q8oQBHJXLCCzihD#K@))nKZSd9@PJiLnT)Z|{UZK4Cch z1hw{7rJQJc@c`{^xI`zki%R?D*@i68b)Z9{44oFqs{P68W@|#fJH%7X;D*QW{qpLMh z;Opta^>_5O2e=1<$Zy_1tuinL@RO5uuGO#2mON^a+{A1NK@|)P=?abE%q#jwLDa+& z*LHrp#9fjm+QBy`V<-@)V*i0LEe;0ev%~H9J4)_whKt+jR|@O%)Wr~m%K4AKvp}f~ zz0AhU66dIEPLb%6^DrWmkMMl00M%ezpYh{I^y!-~eJPLrHG=_-CK*{c>WZZ&OcgNa zU*QB#LRO^ZHlleyuY;mZYH&H(#GS*WFN`Aitd|Ls zIJI{rWm!r?nweV5w*!9vxs*!`Nk>v=&SI69sp2c&l4ZEgtP;h$0hNvBk>$#A%jHp6 z&`wSdRn1YkUePkfY2E3JvZ(y|v~O`=(5_v&tYum)PG4xQ5&O;ZsXJ>{?wI6w-m3lM z{+$Ia1G#$dn~iG89teIN^qE-zV@|T8IZv76$4tsDr>dvbHFTg3fF% zf*5Vg>gQzTskg7yBWnIaL1Sbhgjk$B2+_IBUukB(9VXD5S>QneXa-gNy)0bT9{zyI zVYZtFeOBsiVlx7REEZ~5^Sbp-etpt}ZH&^WJQepp_8hzWZ?V`RS{Ms2o)ja|W@cyM zF1KGn!m#!qkmtq2aTml`zYZ!Kw3YwJPzlZk%PI({$wcLQs%n4`MBNR%6*yagaEVWL z{R6t^amDWmV*?$7l^j5ZhRnGV37zMWNspT$LYI||6@(9k(L6UObb~_G7`6Zqa_vTe zL5L3{K4))?Vn-&U>M}8rCN@IQR`Apb+w~2D!si1_5~$_?9krv&nq|~75tUi_qY*QY zPiL6F4GKi|_F0_;^woh8y4v$qdb``0lA9z1&~e&h7r@ghz2lwKe{H|MKD4v9;|1sG z>0xZ?6l5GJVct%5lxMG6THOt~5GPt;d6WY~d#9TxaZs{MZh5_2Jb$tkj`_0z^YDGH z83L2Ejn0n|k;)8o%U%Ib@pI$_2id9B2?AdC$AjiSBjaXF#v zQIz;vbHL<#^``03`h*dzA35$ImIK;{aapsCuP&7|8){zGFak1ln)Pm6b+V*TzBotI zgG8eITd|9F=2H!tN_*Vg0VO>S&k)OoTZz z*Z$Bpn~^Qz7m3an>oDkrI%fHDr9T!I(cGh9*#L5W>QI4M{zm9fz+;{c0dAvYh#0Lb zl^I4;EBP{fIye&L77Duj^xdQ zx}6KGgCZ>19<2{GpoW&i#Q3)lDG-I%k=MaE&PlaPiAq=$(0|g1D48I}9qDIIR5+|tnAp4t$MfL7>R-p~9EgONsM|OCSr|I?NU2N(bPgD*2 zY*8ENySG$x46%_OK!Y_}M_2a0?c7jx;S!eVSbX8k!U|ZgwLPNw>pQ`ydlhjlP{3Fq zcg!Y!@wRb%)(_8@^tnXlwK>2VC&egL`snq}c6LslVV4aGtYAr0*gB-*xb?ZcZ znbAJ25v z&-9DQ3Ri$+`{5g5z%RCI=9Y|AzI^`^4Q3T-`!mXvtKSb_~yD1Z-EeINHh{ zKpI68k%o}!u34b)&N82y(~|4;ifyru-7#0-F5d18NDaH5n}5lN0_;icnsu)e#2vH+ zU+>p^${q~;X`3yo(%$z%py3bEsd~?uyj6y1%MIKAQxA4`q-%6R;2CTDomukYVh`^lT=58f8Lt#Uk!G1hy( zr!X^=fIlc85+6CnVK5BcMLhVtF4V)z8h(pWlb2hnm%98o!nArT7`AjS~wrK1z1m9mwHsghqYuZ?$^C7 zeS)!O6dX#;7omBnk-zB-aq#=m?+UOUs{tKZ|N34{|lO7d!^ z#I+c6ZG7u4NZWYA{DNL`eu9TQG*n{%y`5$a`-H}+Cd0L8N9Dh>$au+^=4H-L$QMg~ zBb~Bloz#&yUF0+1xtn*ZL7dKgaj0cvC&$lDLtN}+-z{yy17Ezo?OR&MIl1TLchZjE zlj~~|&lvA_V>&;t5zy)O`NouNQqdY5o^l?+>dWxLfwK*#lqfFqm{3U{VDsQms=vbtXKZ3RLLLtbC|cGGG{g#mSNc9Z-M$9v ztj^;YcN-MpM_Khy2F8eF;YXS8tb*wOttOKlzq8W9W_}YqUVS3{jM!w0FD>dF-0cN@ zq#?Tf|BPXr|DEq-gXiXk{Xf%Ldg9tY#ZeIs7zkz*z z1$GM{GbCq(5KyS*r1+1>P4UgLeGloLo+7)NqMjxVZ{h9T(R+PC_@QVu0X_Wvceiqr zOtvQ8U&!RGb?B?PgMukt3J$+nk3hgrbuaj6IngUJF(_G7wxLTvw&Qtp64*!1toU2B zOa(X)ar8!Qjb*nQ&t>cT@etd<7D3P8{Cf(UGMfDaM|+2e!Xf$YlEo{wNZX(UXL<^| zBJb-h>O-&DV;M5Aj?z@;flk9G0&BkH4q;$MaEM{9ZL+auKL9`{rQj5vI{k*0`3(`yrqtH-7sZQ@q9yR)x)owGOI=>dD2F;nXaj#cXP?gnIox0-|lLK zqg=wu?wA@a_VQ8|%f+0+!) zRlI0w4*ztJhR1L8T>Cv8*4F~y5h z9!xP(zP-qd8#m6mJ8asB|Ch@je)V6jCmCBBhvy|NEW=vTOd@PV7-|{54lPOiUZOh( zLJI|48s?%WQZuSQXg&TH0DnM$zp$$p@t*U-Mc#|4J0TcE#`0M-cr)N!aw(m={`iCJ zS$|i+u6g!V%d*FoP1BU@Umd`(RDS4}EU)A&7{l_DBrw1hLMuzlJaF&mb2?fa^`9nr4VRC;9cuQs`gO^K{yTJeM4L%jA6c%KH?KmZM z00jt{)awR*D3KpnQm;mfTW*CsPla;!YY+AH77(s(M?`Ie^rjs~0Pz|i z)2+YYaF_)ovUM_?Y*rfB+;rE?s@jkq&ZF+h8nCu+E|0+xs^ltxU#`iuHiA(F34iax zr5fv)PhtLue(o!CFgdQGA7(yQl8+G%;gG^d1nj13^&YNqh=g#-g!-}t)t&`c@q$#9 zc0u%lGF~vJkdia)vRxXnytmMfSa1RJ1B*HE+DC^nm0Wm!`7n!<_$f<8Aq}n#q}mK! zM9Mmyev$-Fdb$7;Ko&lE&tJb;PJfr+Wm*>A00@O`-;Ld>+f1hcA4}>_;M{nzM0;W$ z$q@-WP@RksZ8JC_7B*s1_og<-s8QYQscB8NbBJJ8`gBjUw9w95FelAIvOpd<@H$WZ zszsUwb1o9ho-$d@G6jSN4Mgzb#oT={KsfgSo=!LJ5k37S=C=@B)WlD7+kb4TUQ4+Q zR2-@L8l{J&Z-|~eHKD_R(m*eMwz^Y=*rV?1*qA~Jhr-hOzXGqnaz52g<*;9edq4@w zj5}SDK1>B%&v&K*83<>mPg4tQWST(k(nc<5>{lp{FS|R)mUT5&m(@@k`M3f)xU9)d z)vh<-5SXm;FoS!C7X>yhbqjvP^(oX|kFDA+e*wDl= zCMBfP%u87+gEpEuynjU5QqH_IwF2@Gz}Z2B%YT4~O`HTpCcGZ!88`4}a|weDIP{#1 zeRXAuT96Q*Rwh@RKB+D{gM|+CSO#K}c`2EhS(Ep53{Fr96im%l*64KKKrMTTWYbpH zx{!5DBjJ2_aG$VI2BvO4lA#_^GP%<(XVjB{U}7%jBET(E2Y&+B^U4pZ-2fe9HzOR_ zm~SS0H+@r~w@at${J{n_Tcq3<0vAa=-lSGB0@~~lAD*MCMLM0)9<0Zd z^7U_og20e|?mg-lBomY6;a$4M43>3H@=T);h*9{xn$>I=Mx>`w;g<<>eEtEIXH9{4j|dMN61&FQ#0USK}aq8I8;O)4oPwuW$ZXN z3c#!Mfdlo+SZ_d6zZmtUDvv2*G-`*NP7inCB431)D%!dBY8 zl3s#|0e|$o;Fv9#rJ0n|s{L@WZW1EPL8EwIx4We}&UvM_fgI>AEU{5f(~|og<)WO+ zGVJ~N%Jj2z8557T8<;43u+G~J1>z?A`UO`p24+EMyC%cWU0*LI7{34tOJyjEyZ3r= z(A?CNe-f7R$I?g0!x^f7k35QsDe}0EuAd6DmIx4GTDtg<+jU@=dpJx1PVs0N0}C@q z8h@%=U-KUV3|7EioWU2#+C(E9bkc2~>uB`WM7a*tEA{(N|1=?)fRIpX*SmbTfQl?t zk#|3f@}Nwg5nlEP-?6CPp{Xk~4$__X^220DL)7hIyF9M3>JRnpc8o}FGFJhZ=lj#1 z;h+}ZVzA)YA|OYy*n`5@-!Zl2oYV?k+g0csKG>T2!qI{@jTt=4|4;vH!-G}5thywfcK6-sPJ{pZ4 zG3cC(%1lONq&H+I%z!lml%=ObOmTUL#nA8y#)#b2M*8r1M)6uG9K1+H?9{kBW`8Tj z44kY=s2E+hOu<3$|98v2s#}&Dl6s(9rl8#Oy%=Vh*ilHi+bgp(mcUukHyq+#86=CR zJ)E(ysBuHqeYdqaN1CfWY70)h@RbxqOjhh^LzE~wcIJ<|5CmK4uSt`a~ypwFaVDT>hWIn=NO5f%i>p?)D=5~zdyH>j*j6=@uMyz{$U zNQH1!06R3PaHwJcQkh6$*suKTJ3i2-9%%Mm^5vd~8ac`hp9Ix92Y0%2Mst7ycgh^V}`UeV2<9cZ-k-JLN@* zXc;ZIh*tyz*W?$Xu!?E^V1I$J2Zjs;WlD$i41ltO@FM|soob>J?Ae7LJqzeb7IapO zJb7%>VdSv`W?j_6r@#YH0;(XmV_$E8#RF#F;6SkjtXu@=TqI}hb$=|11XMU#9xGJx zQYF~4@?G>fQYf{|w_qtbH8qdB3Uso@OvESzwh!y8I732fVaoA5s%Wp4m0qnEmXOG)-*jDgL zD68sgX6mY)k)s>w2<4g{7zx7i1%YW68Kue7Z*|y4pVHU}{r0JTJ26T0{P-JCYt(P& zUvnTS(LFyM*?)Na2I(%2M$YHaSa2JSzSxdqQO3%|g`;j~fMR4`%`ik2qmN8W!z3TJ z3YwK6I|5kWt(t0dr85SAr9t8<+&vx`*1gAgh zUIAWLKX_>rH>rwnzq$Ldp`R)j_*D(tlY00WW5%Ybmw(T(@4?gq_X_{r=}zw9H-p&> z6nC-^KRNvHA&yy!Gfca<43w+yA^te8^^4%3i^QMW;k4Cd3>M0}`O7kFKSl}MuHV56 zI#r{9_FJ9FKD@8;C;G#z>oob==lQ&y20}%08X~IM<_DMXfPA*ol(UcREEiyZI=XxY zH(b{^<5bkS60bKxAu<;ZariyA;>z?;u;~czEd*#V{rL5-vAPnmV0p#&iz1fcy_(4r zsJZZppXm5yB?N@Du?53*py>;2_suww0tf!EJo*d#_dgWUi0_xFC;}V;H#nEaC;~=* z&2rqv5x(;&=469a+7V_jzzn3)fwmMC6PaS9wSAycEN}rX5iNlg0E(hhIr%C-O5QQu z^M?U;Ny%|4m6FOTF9tn5{qyzLJ@`Ok%1DfV?7yq)gP5!jJ{&OpE3yBquE}@Hg9WZy zt_~i*k@#SFd0<{*L~~J$|Z-%E@8CbGlT>t#fr&GyXQAL)o4x*p0s;)YJ{5H^- z=QI<_?)hT+T25Ik6|?83B3If5bx($?id^4phI&=>1Gz3%q^!Ey*(B8`&S}cHeL4DA z;X_Vyl!4~pYBWcA>FvZAO}N`K>e_3))yrb2LW8FuC{3NEZi|U*5Rqmvw-4`*jd3Vr zyYf#T`He@5Qy~dCAhV;hFR!sdCF)UXU;J?hRz~w zw4yA#s_)6F?cm>S+mv;)CPS+w4n=p!6uc@`w66T(!@n*6Jc%|=mDAkWLvD>AA(==^a*~E zaOQ+Z)jEEvh2tBq#Y*++^)FTF5>=VB^74hCai00quDsI~mG;MfHJk3i!dK2B?RE44 z=;YD|Tp_?nDT8RON^)_x6A*xKD$5)sgXI8vXTS?t&D@HjDR)p;qyQ;wblAJ-)2DZb zV~T=*?6zK{q$+iRY$M34-&BXp#?Pl=an){v0|Dlvq=ggUgXb(-nv?5fz*vbTCId(; z;6GixURRw7(W5tir;l~soV+Dn_2H(16ac6yyLP*+N@_RALfO9_E)t%`(O()9+bG+l zKQ87}L%K?+*pvGSlsu2Od(z(}zm<|FRE{8WdpimO5c0_%jTt`mhKTI~HU~Th*_f#| zCFk#EG#g7pP&@<2F<9cYqvoOXkpLMj^U!cF*4-h*4?rz{q$$MX@-PRGR3eWs!$|yu ze1BD~CRP+wGI_Qkp1hemIKd2}es} zt3Hw_QzdeLf4H-#tRd8ZR;VOu1}#w^hsQLPapG8qRW$;gI`CN4k$Qq*QxE5;Q|#Qg z>CWrsyljeD!UNq)UBbt@K;sU@rIxO9<#+paHxi7G|5K zB%8L~B3glwUCDQ++Sc1@Q#TbQ+Be!OI(yruB5kvOxq}MSSyLc;Xg;rRI*_H&rL22E zf(zVSKqyI1v0$|WX5)*6d+w^oddz4bs{uQkQZGXk+%XOHN@y(dJ=AL(Vni&IgF~8H zf&oYjsS5U(T3c``09MUvj-+^xxgimqpGScWoWAP!nyzmRQqDZf1n|^6@q0(YpLQw> zM78pQ=9Pu%bo?Eag*_oZo;V~1kLdCN4MCj7V)qn5HBe9tvak&RXp)ImT&E5EMT9AT zHXQ`d9RczH`_=swU<{y5QyC+FOFEAWCays{mAK=5tO7I%dcCu#>!H2ric3Q?aut1E zQBu>2KH8}(5ImeY)JSxi+KjsL(m6C(E`9MJ7Gry_|3y_b1_2p zmKpgDfi*HUwr|PsA;2Gymt^cbhY1UR%6RThIjNv|iWL+i6cV>WutvZK5(pU$on|xz zegf;ZMK_qd?W*m@a9X{AJ~A-rguA|vPC}JS=DRqC%XRC5HC~(CLdfS8dikc=F}MVn zc6|Fkt8)=f816-w^j>@s0V#~XfGw#F4wn5t(8xWh&RMu%heXEE)`|aWs>jrS20pkd zG!nxW(5m_J0b`#vIMulrRy*+ya66ki6NI|8qpGm*DuTvMQHA0L$; z{kf}dsQc;~tE)~I-El)<$VcXX!kNK{&#Om}oZ*DSlmmrc97)wAV&Uk?c=Y=s)&xI> ztqH#S;`Zyp4itf$XJ7B8bdQq)Dg+krNp}`)HohTsfl>|q#4@Sw{(|-g2Q)JInzSvN z{U%65sucZJtb2-lT9fH#ggqszL393@br?=ll6!Je#7Lk1=Q;WO!JM>zWS-kzA340s zOV^qG@w`mMmpq;X3q@N zG_#>S(C!?lkFyVxrV%NB3t&wJQXT9$>SndMDJ$%CaG)vtJa-z{EQJmtb!hg}@u@j} zCi5wUV`jK(*F74?r+8hV0!xq?MFSG=vFu*7M6kqM(wjrBs^D~n4^+U5c8}q5NdgTU z{q)_`Tngolga67}88|u+8b_k3Fj4jyCwdq}5NmS`;C^W6?PNNCj=(i>I7=xe0h6fM zPa++L^KnpRM5U0aYMe&j)`vV7kav)F+hATH!fTtZU3bOxH7E|#jmfo#^xzj3pN^^2~*m>`G(Y6LHo`|pU}itB$Rvf zTs;eQk;)I;pG`x5LD59;Tuwt_REx?q@pmb(tsTzVas4PJgFe8|bYA{E(JRP`6uV}d z6Sos%d19{F=~OtBBL!+qqz6Lro?>?0X9!5!Ny>w%p7n1sVvk z)HsnVDzdTtq$$tskZFJIOaQJD-%*E!GNCb_;Y>1G^em!($A?J_p&4BUvpRi2;S&UG zbK#pF$#!vKc6}8?OOs~%fg;CQO6+HJDff4e#inoPbFWu|jAMN-AB+Q((#k)5{bo6v zizW&7LwS$_b`l7k*S2eicGYgCB7ylU-(f`#pYg5GZW+!X{e{A#u}PGGCu#0S7SNdL zi&RWnb1YYXDBN6WR=yZ?nW;;sQyR!k#|_V-9&aY1)r=Zw^!N8K^Be=osN2j~dk)84 zj)jdUgMyU#V?o)o*L^X~yihc+8HwG36T1ppYkje4Fy7E-i4=`brzruoz=@~!H{Nc{ z^p63~oN7=K`dJ?5*y~S*FR%&D4#KfGR6%p+WoF=iZr&V@S%((2T~#}CM5stY`Z;16 z`a6W7fh2?qKp;KkT-m?dWs*kNJqPL34CFe&7-yOy6v( zL`189>bwU8I=}Qcs%>|^xtQ_zc_2fqPHt!xJb_f-nK#@|dh=`#=?!Kaz}iOlsmtrlhdw-|GvN)m71~D=i5!f2f;cVZ$>s zotuYtY2rZd9bSRroXAd_aL{y#pG_3AB{S@Qb@ZZPGxexS{iBuCah4)mGk4zrmKES4BE~fOvYxZUG1NCAYzweTN zA4EVu8{gqRcn{>y{Q&vN0Xe)!zlQwy13YwLq(+_shIwQgg^VUa!A|Ul4Yv=?3o=*- z zWN%_>3Nbh|ATS_rVrmLAH8nB{Wo~3|VrmL8I5(G(83GfR5jO%Se@k=Y#u2{jS4=Jr zRFTG*2Y`WHdsruq%c-)w*;Ra5rBqlFqTmGy8UV%JigU`<{wev7>7F-0iqa-Iq$=fu zZE-Nu(~qye?w+4WN*PJUweZ`Rf9IxV}3x zA2CvJQbNBWwceN-9LDB&@hzo+X>hP1le2OZ@rs*QMP-WVFc3(yU>! zpgGUT_5LimNz~0b`5srZT+uAe%$ijH`ok6ZuG;LX7Jok?R|y+2`^A4Gl95B7BBa8v z$)(7(uvEacQJ8P<$ar6qE4_+QriBrL%2G13i=bI4^xBu#f28-)u#!qH?A>8Iz2t4O zYiqKoHk)oF?`m>iZI*4lB+Z6YWZ4X3-@H4AFUvAx$!>&S*08qj&;NS;CpbvqF1R(L zQrY8^i!ssw%LL>0hx>Y?W#9Hq*Ei$Gf3h?szjnB~EGg&8sbOzaka1clatYt#AFFqr z(|@K9l@z{Ef7Vdc-1wm;4X)zUt;vFRhb|}sG!Q;En%J}-L9}kwSL-!gv@^o4&aMs0o5g%9zcVKc~4MQ`KeKX$cL#oBtbQ|LtU{T{53Oyio zT3w8{%S|=TyoXcH{Qaob4=;0YDNtKZl~Il46`ED;TG_R7YG#QCT?q;(lu4 zJD==0oR+u+Y+P`fs{GJ#6y>Qu(K${J#vKTpS1p$fDy(XcYwnT@aERbK^>|MQeH{Ug zuMNcoEmctN3x9GH*PuY}Bgxkc?@s3_ z%~Zx`f2X@`Sq4GwzD^+y4UU0&(84t;Yg3P?sJ0e_4^SBipXojQAg@h(*`;^d)bpWyyJh+Pyvp`~#pb0iz%y_!s2Wc~RnDSket6`ODQGt{i@d z!iWVp;lzD;9XX#<^ktq=F4HKElYbZ&W2MGi;f(Nd8*ZCX$+-85+@=8sw^>TsZq+Ox ze{2lu`pp#JWR`jOZQPICdMYln7+S@;%^(88X(mA}m*8dNeFX~b*6U`(h@I@G3R;B2 zKJMa>fF;i5H)CHd-fQQPQ6RoeV0#cB{s^w5ed4a~);6&ioQ4xrs@z5oO}86NMiB_9 z-Ze)w*DR_zKw#=*Yx~=7H{R|xhsc|Qe@s&O?33pPV(+@1e1qvCVhWg?gKjIU3;f_9 zUrYi*mTvz9q^SGBMuWGV*&>Hjmb-=fbqw0D!o^xOF7E4r96+Unuel0IhHmOT`Rp^& zY-jfc4-d&UFZ69SmQ;&Nqg)P-ij2i+_Yjvsq}1Qma4Se_#!blI$luAAWK(|_f4`hz zj>eWa#W5+t(dVIIq2Op>NLmD}cJVL|2fIO`73U2WL3SSJaJ>5()jHQ`Y8SBSH45r3 z0XSpx)-eATurs*B5nTW_M+@dqCDMYH@)Mv+d_msKpsC1U3x9&aCeOL1_>^a9bXf8# zKm#DAyQ~S}2^CHuapv0k^*9))f2exI;mt3rU61I|A*FaTB`S;;Gl0CquXE7ja(1jIddOJnyO@5JD?vh4urwV`MA~`qs{Wx!GI5Pgh>ZL1||($K#jVu$+Fx0HiD}ht?W6~ zxR3o^2HTA$LmKRg$aTcK zvVwa<#YhYFK?KX2Zyv$xSw6+o$b5jGD!*RG8%CIJ(y8$*WQhELW#z6;E?5!QPV?L@ z5iMQeZDoPFloh9wJBTauGMr((PRm6Mt9Hmyut$)CU>bQ>LuoVtPVl*ftyT;8K4bh@ z!2}$o@HVPQz#0xUe|+w5Xc-wWwZi)xqdep00@~{}pnKtvlW}mPv{Z(PL6!Z7nX@o~ zK72@rCnXjh!?c7@#y}*D-8B0_$)|)<_E&}?6&ahRtsG8Fef@G#MVJbujr8R6utVWD z%fM+<-_w{9t|Ie47{WC#Ooaeduz8~RwOS4IPE*>F7YU#Se}hD>giIFo?Eu{K_D<`N z$sB&veE{;}1!0z`8Hn+vAy75XeGNm~950hIG_ChfU}AXGO)^uf0P^kO<*V5iQ+?i? z&*+M#GyZ34Azsj2JQi^fSE+CjR{=q*F#Wced-|!PW6mHbaqzWjyKNiu>#<CkiqpXge^dh~ats}0+idH$+0+*i_Q1tB1y2qQtH`+y%G=}F+U9CseaGGv_~TL6 z0(K;$B1yXxswnsmx=#Dd!#=3xJC0ImjBz{)b}Sf0XLV9zQ)hPMLSw;qR%f8i}ab?)f%QMg6k2Ki3P=mT>x z2f!Fsmo}^rOLqe{MtY+lAiy_CL+6z-vN)DI!Md%j`k-WC>9p#b)0s3f4j{ViFn-a# zyVbfg9@=bQnDgPkZq6^zMjO;EsjJ1kFVw7vTd>ZoYn5Xo-674ZS+@*QL*{y%5I!Sp z>0!b)e@zR@l=Rn_dmmtX9(u99h{xvq6Ggn2NlQNYj_b1ONGej`*W9;TbCFLGgN2-A zcLG07Rp>EHn*bs!PXY%l;m)ql%SDJAQ1PTeBU5OBt2zr^a*$1wx!3HA7gNK5YnR8Z zc8Th9-$C{lQP1HKU;-{23eV@{v)7-N&sZ9be+`oTk*=+Zk@5Asd8$GY3>UI(dE2yw zunV|iYt6{rDf#wp9+5!L!`S8ZfvBZ#P$iA)!a=}-*X2R2Kq?IEzIu?p@EzT#MmIRf zzG+)hwL=HsxoCIGLukOJf@={rTR9U25I@U2TTE@?T>-W>ccd9@S6`P_R)PyJf^i}! zf0|Ti=$j1sJlV<&3Q8|oK9fvDRf=ma;aTNme!?d6lP9qVNF$(ocHFBWQn@O_EX8I$ zP(iT1_VM+u9h+^d%Wbd>C@cPp*Hk@RSh2B~l2a9RIMYIzf9Z!YY~=pWZ$ixRL$d^r zUfO(p*n9rJtBSDvJz5n(!6H0yIGUxof38NJs)|^dJ(`rEz%c|ZjD$dmer%wrcn1Fa z>=H-!ws{bbP1A}mb)bOYzQ1&Q7`r~2N}#ym)5gUo*ES~!Dww|TUiCj%*#HMG%7ebN z@1FWr-XHz+CASqu)X*>~#g`trFO2dsH!4L!H0wgz*pQ{s^6}WXu)Wsd{eUrHf4ZCc zOVj!^@xk$NK?lNdJdz3JX$yNVTM!fM~90ztasx9YOV`T zaa33`lg0!w(6};$_SOZaiUJeUp9r1b3g11n-DWkIj-_d!K|%`_>H7CGfCqf@6S3JP z;HW~l_an)?Nr9%8lL&^G%*E*lfBw~a5zlNPs61aw&DW@=Jz2+*9tMGr){A*24s-%F zwGKUL2j(cA)D%-v;bn^E<$#we^+olJ+<~og9AZv16&^UCs+0&K7$ySe-z2|TjCAbZ zlb?U~O#_knzR6qtdvBaCE0b+|b3OwLJ#}-rM961wM~FuiKezZVVTRCCf3cZ?C*Uz@ zcu7y%n0^3+az}4w(AO~tTmfMBRyd7uJpV0Da6z#^V|X$wq6U9X(=ZpU+QqKbZvx`^ zhT&Uz0i<0743N@NuHik#^i(I1ghI2{j{8e_(x)d~>Zn!Vhidfz$x>&y&<;T{EEGLp zz1mhLnUpG70Yg}8U|ZGWe~3TcH>-POXGU*LJs^R$?_Va(N1j6IC&B|5gLa1xU?R?D zq|nb_nlM?$d90_^IFi+231@!X)&zTYx4^x$S7{OkTwqS41?=qy?IW0`1$28c_PctP ze0V&xwdmh%b?qIPvvqT_H{1j)kOj}O4S{agg8Ap188VroWvCKte<}x5_&i5kz&UPO zD1ZTo)EU4_$bo@UKNTUUfN_Gg0?yf~l_#jdWXE1O9h)&T1r$xXmxYMd%VD&R z$l{kzk5}79dM&hmf2XA~nMBgtW@O}ZfC$boZ(@cLk@;rbKuoqDqi&|ade4Ky#hw3B z#kRH%)?xGMhy22ooj6H!9y*(&F-Qo$O9pivDuB#yE3@eECoVjF+A-yIN;9}eJus8v zgac3MaSIq?fn@;jjV0Fn9$*0Ak1ON8!O zK_+F0IY=xPx#kKi%G^)H-BI=hS;&@L>Jk(%DlNqEH#6Lqpzh5~b4Ql-07=D??Je=$ zl-MB|k{#~tf8yGs1?AC9U}CKqsAu@d(%*sGF*&A+2+W(gKjaFEI`0p@7Z0A6&R7SO zU?MySidhH41nwVO`X@$y4}2J)qUQt6IR{KDQUy|YlOa>h6gN~2e%5;{9 z+2Kq5+jNeB?MXTPLlq& z)%t&*FbRw+(=00s0VCF%lcYQA`eC}=;Nve}mv)9srYbK>GlmJ3=3J8X;Uu|Cipv%G z0Y|gENF|kK4AoD6J}2K--CecC=SS=+VIpSV_(LWcJM=19A@FT-mgV}%fACkHN}Lyd zGQ(f&{aQ?^Kd zY^tfcs>bFNMpYB3#&;u`dQ#t3-A#X^-yHk9p>E7B;2biQbJztp>y|k)>%O`m)n=pp z-(Qo8?5q0S3T&iIv80*E_0aD~)sfjaJ!up(MUiF>EidK>C{qdGgc2&kQDOhg>z=zPr&r>6%FgMafbnm5YadcxQhs^}ER7 zNY(LO6c9;@*~OBnU%UzDNd3fL8!Q&QFwElSfaw`!4lbut%s&vqFoEBU#CKscho1ay zhjEQI4$s0${b9BgW8hv7{ILp?A~5h}^w-7!7|BiXtuG4Ua=*kF5e@fZ6K1ZG|C-$lj3Nguo8Kji8(R z9Ku57MSNTt5JLW>&m(T+Y3Z#)Gi(@omTX3HTdg<-0_VwZZFfVq)v#iK#Uc~QO*3e_ zMsm|k6F$9dZ*H5x@)e|=f{TDzkeT936%~j`6l}Wln!iMgD)29NHDIY%1|2 z5GvYESgHu8i*!N`7)0pdD4>tC3(Fv(OL?4KKyVe($1Y&_xO|bR$o%^4o_zi}Y4;)> zb(Bb%${>Mi0}+Nf$vfxy^ChvQG)(wnu^c3wpaKCWnRXzo37TOK*_kY-%V+BBufG_8 z=e(Q~6&$zs!<>JnfHIx^z%R|h*b-v2WV6|$Nnvfz&tNPr3f2N1@pPP+9JJiA;Q-#0 zvi$UT@LO5L!#>_Z&O?$Irc(ou%3@Uk$XH14Mrba)&XIMU^scA3V^>X=$=nrL76b9? z#SHUAaJgFORLJ0*WK18_;MFI8wedK zzi=or+cED5r>boW-K0CygFj}VE8UhiU%OmNbOlc{iU70bM9a=50 zru)4)VGb}YW7@==k7GCB>9-Jj+T{d;5EyOY+cHlD&79}Q31G7Y1^0X!?wYxqbDq+` zjaK3IdtHB8ppdmG#9)BvFkqQTbCtV2FeCZW?=}F7C^o}v>}`C#g{o!0Ym~6 z7DZA&2iVNTD-Z||6!9_KEb2WdN2p7Mw!A4p3?dGF!GI~Um}mL;93f%l)P)@4p?DW$i^0r2-qXU>lx2LTY}8= z;*Rpn7Ub6;_^*1K7EG1_EEIVe^r7>ucRiM`xkEVU`diECQ0C#hIu^?i@%3|We8i6u zlCkHrmrFJWZsMU-{AxD)W2Zc4XD+g*$XTJ*o-ba8Jfj5ng%P#ItR?3L-3^6{FNZ)! z^mTu$bE(g-uPzLd3eX36$Y}PJ2lSYSJoKPQgEZj?7Jz9WXybDMR{`PToSvn}L}?j~ zz{!{gD^?nape;y55DsNYIh;JX+XGyiYDd0*q2URp7KY*a7x_?a!#s^GSh!C3;B)m$8|Wcyr+D~$D!*m3s5HgS-ROU zJRi~}%okD!6#nQ8-G0bqa%eVhoA=Y(c0XF0^6ePNP(`$Yp=aAMXf}a8j|J&5;iOTM zxq25R(`KB!hR#&^xI%)si>=p2`xZ)My=}-u{I60MF6obPMK8O1u6KGSpmvShdGsJM=>W|>4LLmPhk#{Oy+s8dEe~zQv|hn3HD+RangV0ESv}s3!Tl61#6zN8P8ztPam|a|4;840$ZE`2GUY2 zZXH%xj=goBnCpjj&|ST&xswykJQWiNRe)pvcu1LJ%TQG&+y2U8%gtd1p{l zgI0;CKe-5!bbD0=~Epj^7&2Ap!3|3VO_Hl5#Tt!Vq zniiqg(xH1TZDtrEfi{1SG$@er{{T1{hcYZK8I4~)f>8O4EJu9T_xr1=Hr-v7CGQ+$ zm#D;s2QpJY!ndHvoVC<+cU){&fD$JoQT* zJ2vx|F7HPG(#<&E7`KxFkd{3pNcb#h2tQK@IygSDn8pOXzG$dsOe5hRA;-9e)Nf5} z7$C$iNKJ8t__7hz*Y(|iV(jYPaE&gaPA%^Y)wQqHKGdXZn$2kY&5$eWW@E2B3XqM_ z{h}#>-hhCEW4?d6C7_o=+bRU@SqIW zai7$-7xY-$ejjra4Dljxm`K}=Q`ObYX=t-!8{?<*#c?t$=t}7-V%IsFK?CE_ck{!J z02>R8aRu_39hqwej-30=54|BNNJVKTq7$H2I62suBddS*`)!NmA}YCRJN9}{uP$^j z;xPRE#cTL~Gxpm%Es3gY3{xcL{%EPfAt-ZSt8jh<(AWy$p%d+F^PoN@V{h(lVScMs zQAKBdKL$-cGw{5?t6tmuf;}8`?$jR-3>zcz(9}pPry5%8KfOuTA)%t)z;V~T>q#Jw z9qdI-NTz=#duI8keg`1T#nV&Y0U+gv3m#?fsqj011tc)|JS6PJ{ezZ^D%oNx(;oDn z5lDOCclc8;emW4gICw<63_d!qC5M`ya=uf54hMzL(3+H$-)~ z+j#002*~l_Jxwehq%WJOZh6^jrFML4J5_JB!*c|`@U_9%y2?(*cUqgKdvHI(XT8pg zPv~<)dMw$ew?YdRZap9LLXn*Uy}n$wA30@Ad0kjC_i>Ktg|3**Kkor{*mQ_K6S2Bs zLwtX?a`wd#g952k{uaGB7Ccb12JAx2oG#j33b)1=XBRaO@+j%c*%h0OCwoRTPibIi z$c9C+%xh)*g~})7H7J~l;_1AGLsWGAw&-qHo?N6fOt8Yv2Ejy++(~e3!Mcf~%>d_I zCjL|)xwPGNgYx2Xm6C7qb(ZloS0U9}HHLo*Il4S3?4t7g3|I502)Go?cV^Hcb?p9B2mC`A&ipB`q%VV^>M=u?Yw4!ZtLsIy;(cgf0c*%x zG-SSkGZf76=QcvPzVY^M*V&J1u$!^yngO5l&|Euz5z8d*)n>9@`U`Yz>Du)s!GeFY z&VR79E%Y)_$kWW7{(6ilq>L^^gl&(y2ITzMGW_bvf1UE++^A$uk=f%~dJsSBbML=# zw*le%o@UdUt1^k*dPleQL>@XB>Ms#YdGMVQOL^$-9bpd2h@n;4DhLv3l$WX z^;)x;hRL&KEu7R_EW7@_`T{@7^*3oB)7yI6RD-Ti@we~rs>h@)m%zS)R}!Dh$Y-D7 z4`+1Q&p%@fA~q}V8VF|o;pey_%VJ4z9vZK+h7*(c4WwzE;fEKHlg-DR_)Q^RSesF0 zslOA^m5uxKmWUh&zFeRD9sc|eEeQ~fmkw3}9Re{qmn~KTNPjpMefO{6TV){Tkd!D< z69kxcCsTB`lVnq4_90mWilo?@+L9~Dar3ZG`#SSe_CN07hrXN?6U-t&lbYn^=vm8j_T6=)2bK>ryNHuWkSGYqay#>? z$NBO%1i`$R`hR|`0?b%uGp}5fRo$*LJ^bBu>>~J*MqwP=IXsAHC?r`PX5Ou*Zs+7u z&*q_`l1V#$Nm6FZFPT<_lSoprufylxS&7?n)RYT4Q zJ2mMFvixX2qnoPQ-6!d14D!?Y8jep!;E7k|;Coc5xLdVR^qV6Q4 zReV@Ao=hp7M0$D4_~pgd=kMQrSl*q#zdrx;>F(p@<<&bEOiCSr3!kzs$lJf^F+uH! zPnC+58~Xbh?^DK-Kr!w{?4CSi6v}bi-gssHwY~Lr#V+3zWqwwat9s5O8Y@5W@}@Z< zZF0ZK&wtqM{B-`W<S&` z>;*EXg~A05+T0@Iv}pEQ2-GwOEFE|GYE+{_^)Dx2fAAq_(& zI&VZFo=$@ZKAzwN7xkXVP^Q6v%Z+!A+JE(tb}WRhU9z0V9F-izo~~gMeouZxl|Sb7 zlZC$%$4Ft!Ffs!BDjDfSxkKG}rW`@4j8T(~(Hp8VN!R!jdNig%k~-HPW>4gys!4{u zr~C4V!wlT<9`lz4=^@(@T{KjTsV)urVJ?CgC-%KIHNh=+in9JPDqF3(?`_#DhJO+| z)>0=TM*Y}chF6_xI6u}+98lS-ORorRxf~n{MkTrkw);(sbQG|J0@SQd@&v0ag!#eQFRzL|NG99+-HB zziJw0y52z7t)0|rp9^N;OcTqIF@KeVdcS^)-V{f61@gQ;Iy(g}yZv!___{p$(xr}I zc%=9i!7zKr)<7_u5G>>okp?;_Oi5q9f;*xSIUxu5g`v^)ChmN1#>W#AgL(A{p^K1B zO4J-NphAYOJV=MKo9NMVTJ6jL>*6BRD0NRcz@nz^Blag zf?PJ%6L7_68o*o68moqD43EHF8IIl6Y&!L;uE=lagH7RoWxOjgQ*?(Mq!s$1%NWX31r%hTH_dpQ0v8i(On^2FSAaXE4t2x)Vdn~=juDvJQVzq9OU|M8I z59XqwCW+lypvUpmgo+!lQ%a0JMR$4kPjC~+3@LE$>uyt|MZ0+-DSxEXqWN;MMpSXM zX;IJAN2}+%pEgymzrzu%q3+ZB?pRlB=XIm7zI+||Ar%ApR!g>AMW9>Kfpdl|?H%(^ zZJAkqZ=}s(?~-@M9I3# zA(g_p$*?1k@4E}{q#7IE;3@abT~=+;R2=Oh1$5mDs=~A)JAXQo2*-wgViXdHmcZ$ltw3H&3O?N3VEnRmvS$w1*Mx~|T3&KJ+ z{39yDFe}%R#D3JWs5D&6s1(yk^KVzs&Yf-DdFMW8SXemse&?R^-E+SCW_a^v&c;=} z7Jq$g>6>%bl}FKMyKmh2$KhGaJ1X;Q25oK~x3pzY^P)rjPYwG1f#dg^{kOifVe!j9 zuRPNBU{y=$SC1_G;rO1vwhUh~Y0XW8r~i`QyYuAHP48S;y!CQ!`|g8_s`pIXC`bSL zFg&*I#MFsHW?uI~x_6e1btJn4H5Xe|uEYR)_T-B1)M`jb4KaX#a2;hL_d6tgr5{<8&9aLn~RtU_p?1m}5#CTF^xb+G~5 z1`$iy0>^DcGeL)V;E+X>1KN=uYzQ-eMePU+-k+vHD~D%cVU4JJj~%KoEkcLPgbocO zY%%48B|(F;milABY=V9mTaW@&)gWURaaSRrh;wH>aO8*rd|LQu+FhG<)VpB0($lM&E--KIVvQi1Uyf!>2MWgXL zhj_J^PO!RS0X^F5J7W7L!qoAUbD4fUIljS&;o2Ufsw+W4ejHc%ae1fmV^K6gRaRD- rO1yS=d~8+4$p4-3c($SGWo1>9^4Wg@6)p-e diff --git a/src/static/support/dist-docs/ovn-northd.8.txt b/src/static/support/dist-docs/ovn-northd.8.txt index 8e9148df..3c42c6c7 100644 --- a/src/static/support/dist-docs/ovn-northd.8.txt +++ b/src/static/support/dist-docs/ovn-northd.8.txt @@ -1250,8 +1250,10 @@ LOGICAL FLOW TABLE STRUCTURE ignore_lsp_down is configured as true in options column of NB_Global table of the Northbound database), for logi‐ cal ports of type virtual, for logical ports with ’un‐ - known’ address set and for logical ports of a logical - switch configured with other_config:vlan-passthru=true. + known’ address set, for logical ports with the op‐ + tions:disable_arp_nd_rsp=true and for logical ports of a + logical switch configured with other_con‐ + fig:vlan-passthru=true. The above ARP responder flows are added for the list of IPv4 addresses if defined in options:arp_proxy column of @@ -1643,7 +1645,11 @@ LOGICAL FLOW TABLE STRUCTURE • One priority-50 flow that matches each known Ethernet ad‐ dress against eth.dst. Action of this flow outputs the packet to the single associated output port if it is en‐ - abled. drop; action is applied if LSP is disabled. + abled. drop; action is applied if LSP is disabled. If the + logical switch port of type VIF has the option op‐ + tions:pkt_clone_type is set to the value mc_unknown, then + the packet is also forwarded to the MC_UNKNOWN multicast + group. For the Ethernet address on a logical switch port of type router, when that logical switch port’s addresses column diff --git a/src/static/support/dist-docs/ovn-sb.5 b/src/static/support/dist-docs/ovn-sb.5 index a19c1ea2..83e0bd80 100644 --- a/src/static/support/dist-docs/ovn-sb.5 +++ b/src/static/support/dist-docs/ovn-sb.5 @@ -3225,7 +3225,7 @@ The chassis that inserted this record\[char46] This column is used for RBAC purp .PP .PP .PP -Each row in this table configures monitoring a service for its liveness\[char46] The service can be an IPv4 TCP or UDP service\[char46] \fBovn\-controller\fR periodically sends out service monitor packets and updates the status of the service\[char46] Service monitoring for IPv6 services is not supported\[char46] +Each row in this table configures monitoring a service for its liveness\[char46] The service can be an IPv4 TCP or UDP service\[char46] \fBovn\-controller\fR periodically sends out service monitor packets and updates the status of the service\[char46] .PP .PP \fBovn\-northd\fR uses this feature to implement the load balancer health check feature offered to the CMS through the northbound database\[char46] @@ -3298,7 +3298,7 @@ The VIF of the logical port on which the service is running\[char46] The \fBovn\ .IP "\fBsrc_mac\fR: string" Source Ethernet address to use in the service monitor packet\[char46] .IP "\fBsrc_ip\fR: string" -Source IPv4 address to use in the service monitor packet\[char46] +Source IPv4 or IPv6 address to use in the service monitor packet\[char46] .IP "\fBchassis_name\fR: string" The name of the chassis where the logical port is bound\[char46] .IP "\fBoptions : interval\fR: optional string, containing an integer" diff --git a/src/static/support/dist-docs/ovn-sb.5.html b/src/static/support/dist-docs/ovn-sb.5.html index df8ae710..04db3fec 100644 --- a/src/static/support/dist-docs/ovn-sb.5.html +++ b/src/static/support/dist-docs/ovn-sb.5.html @@ -3708,7 +3708,7 @@ Each row in this table configures monitoring a service for its live‐ ness. The service can be an IPv4 TCP or UDP service. ovn-controller pe‐ riodically sends out service monitor packets and updates the status of - the service. Service monitoring for IPv6 services is not supported. + the service. ovn-northd uses this feature to implement the load balancer health check feature offered to the CMS through the northbound database. @@ -3756,7 +3756,8 @@ Source Ethernet address to use in the service monitor packet. src_ip: string - Source IPv4 address to use in the service monitor packet. + Source IPv4 or IPv6 address to use in the service monitor + packet. chassis_name: string The name of the chassis where the logical port is bound. @@ -3765,27 +3766,27 @@ The interval, in seconds, between service monitor checks. options : timeout: optional string, containing an integer - The time, in seconds, after which the service monitor check + The time, in seconds, after which the service monitor check times out. options : success_count: optional string, containing an integer - The number of successful checks after which the service is con‐ + The number of successful checks after which the service is con‐ sidered online. options : failure_count: optional string, containing an integer - The number of failure checks after which the service is consid‐ + The number of failure checks after which the service is consid‐ ered offline. Status Reporting: - The ovn-controller on the chassis that hosts the logical_port updates + The ovn-controller on the chassis that hosts the logical_port updates this column to report the service’s status. status: optional string, one of error, offline, or online - For TCP service, ovn-controller sends a SYN to the service and + For TCP service, ovn-controller sends a SYN to the service and expects an ACK response to consider the service to be online. - For UDP service, ovn-controller sends a UDP packet to the ser‐ + For UDP service, ovn-controller sends a UDP packet to the ser‐ vice and doesn’t expect any reply. If it receives an ICMP reply, then it considers the service to be offline. @@ -3814,50 +3815,50 @@ Details: name: string - A name for the load balancer. This name has no special meaning - or purpose other than to provide convenience for human interac‐ + A name for the load balancer. This name has no special meaning + or purpose other than to provide convenience for human interac‐ tion with the ovn-nb database. vips: map of string-string pairs - A map of virtual IP addresses (and an optional port number with - : as a separator) associated with this load balancer and their - corresponding endpoint IP addresses (and optional port numbers + A map of virtual IP addresses (and an optional port number with + : as a separator) associated with this load balancer and their + corresponding endpoint IP addresses (and optional port numbers with : as separators) separated by commas. protocol: optional string, one of sctp, tcp, or udp - Valid protocols are tcp, udp, or sctp. This column is useful - when a port number is provided as part of the vips column. If - this column is empty and a port number is provided as part of + Valid protocols are tcp, udp, or sctp. This column is useful + when a port number is provided as part of the vips column. If + this column is empty and a port number is provided as part of vips column, OVN assumes the protocol to be tcp. datapaths: set of Datapath_Bindings Datapaths to which this load balancer applies to. datapath_group: optional Logical_DP_Group - Deprecated. The group of datapaths to which this load balancer - applies to. This means that the same load balancer applies to + Deprecated. The group of datapaths to which this load balancer + applies to. This means that the same load balancer applies to all datapaths in a group. ls_datapath_group: optional Logical_DP_Group - The group of datapaths to which this load balancer applies to. - This means that the same load balancer applies to all datapaths + The group of datapaths to which this load balancer applies to. + This means that the same load balancer applies to all datapaths in a group. lr_datapath_group: optional Logical_DP_Group - The group of logical router datapaths to which this load bal‐ + The group of logical router datapaths to which this load bal‐ ancer applies to. This means that the same load balancer applies to all datapaths in a group. Load_Balancer options: options : hairpin_snat_ip: optional string - IP to be used as source IP for packets that have been hair- - pinned after load balancing. This value is automatically popu‐ + IP to be used as source IP for packets that have been hair- + pinned after load balancing. This value is automatically popu‐ lated by ovn-northd. options : hairpin_orig_tuple: optional string, either true or false This value is automatically set to true by ovn-northd when orig‐ - inal destination IP and transport port of the load balanced + inal destination IP and transport port of the load balanced packets are stored in registers reg1, reg2, xxreg1. Common Columns: @@ -3888,12 +3889,12 @@ Configuration: src_port: integer, in range 49,152 to 65,535 - udp source port used in bfd control packets. The source port + udp source port used in bfd control packets. The source port MUST be in the range 49152 through 65535 (RFC5881 section 4). disc: integer A unique, nonzero discriminator value generated by the transmit‐ - ting system, used to demultiplex multiple BFD sessions between + ting system, used to demultiplex multiple BFD sessions between the same pair of systems. logical_port: string @@ -3903,20 +3904,20 @@ BFD peer IP address. min_tx: integer - This is the minimum interval, in milliseconds, that the local - system would like to use when transmitting BFD Control packets, + This is the minimum interval, in milliseconds, that the local + system would like to use when transmitting BFD Control packets, less any jitter applied. The value zero is reserved. min_rx: integer - This is the minimum interval, in milliseconds, between received - BFD Control packets that this system is capable of supporting, - less any jitter applied by the sender. If this value is zero, - the transmitting system does not want the remote system to send + This is the minimum interval, in milliseconds, between received + BFD Control packets that this system is capable of supporting, + less any jitter applied by the sender. If this value is zero, + the transmitting system does not want the remote system to send any periodic BFD Control packets. detect_mult: integer - Detection time multiplier. The negotiated transmit interval, - multiplied by this value, provides the Detection Time for the + Detection time multiplier. The negotiated transmit interval, + multiplied by this value, provides the Detection Time for the receiving system in Asynchronous mode. chassis_name: string @@ -3941,12 +3942,12 @@ • up FDB TABLE - This table is primarily used to learn the MACs observed on a VIF (or a - localnet port with ’localnet_learn_fdb’ enabled) which belongs to a - Logical_Switch_Port record in OVN_Northbound whose port security is - disabled and ’unknown’ address set. If port security is disabled on a - Logical_Switch_Port record, OVN should allow traffic with any source - mac from the VIF. This table will be used to deliver a packet to the + This table is primarily used to learn the MACs observed on a VIF (or a + localnet port with ’localnet_learn_fdb’ enabled) which belongs to a + Logical_Switch_Port record in OVN_Northbound whose port security is + disabled and ’unknown’ address set. If port security is disabled on a + Logical_Switch_Port record, OVN should allow traffic with any source + mac from the VIF. This table will be used to deliver a packet to the VIF, If a packet’s eth.dst is learnt. Summary: @@ -3996,7 +3997,7 @@ The logical datapath to which the logical router port belongs. Chassis_Template_Var TABLE - Each record represents the set of template variable instantiations for + Each record represents the set of template variable instantiations for a given chassis and is populated by ovn-northd from the contents of the OVN_Northbound.Chassis_Template_Var table. diff --git a/src/static/support/dist-docs/ovn-sb.5.pdf b/src/static/support/dist-docs/ovn-sb.5.pdf index 1536217b7231d0b0be990a2fb8664dac08557078..e7c7c55099146d7a0f15d31078d830819240ed68 100644 GIT binary patch delta 4757 zcmai$dpK2D8^Ae?B9~?kH4!-mrNX|iy-iLOl~OvQtJ~4xn<%7HB04EeBO0bmi&Rsn zr;E&xq>L^?g{Dj@k*M1&>}}@zW@c|apFeo4cm3A8)^F{1tyTO?_uw<#O$q9S zqQ2RxUBBe)a&KDvJn7diCqv78iSyQ^ruWm|*$iCvQ@dvq6WY*~9F(-U^Gx-b)>k76 zQ0Jolqf@h$^6X2Gt2aLlmkoS+=xI+(zUT4VwU2Mj^mknRVsx=`KQSLA!l>AvYU>(pLN zv%?!pYi^I|4C{P?Ib<35ESw@sI=q|FEc&FUXtZ(AWHd!PzLi#lT&)U-HHo#;dekwXJnWHT+iaZoS)cHSy!61$8q+eDo_0&e`1XYPrvWo#Ep6Ecf4|k3`B2 z)O~JLt?~HC$TJ0o&o5RLPoDo7*r@0yG6Nb{%_|W*zGa*{q(P^%pYP6^fGi#7x*?+6 zszFEd`~%+y&LKX&*^}=?(Po$ItW4MYkL#+=>Lv2^c1Pq-%=&=2 zoy08udn;|t;HS!O_Kr~7b8Gx}m+#tryMAZv*2b1RrzPG+<{|K)I7QkqTzu!GW^q!r z>9KiV`fc`~v-NCq&?g(-woi?-I*?r-DqEW3v_+|RqrY@UPt$P2fSpVH%%U#2ul2oW zA*mlRt)+5@w~?yBde){=wd~0FD&2}Un@^9X9x9@)_Uf;SE(@}ZR2ojPNtxiV{pp&L z@s0MTU$6R7H@Eak#XQrjBEPs|^ksTdTyd#(mcBf?=45+B-H1~ajk%(k@tM85M{8{` zcwHsyti7P#Joo#BkR?ot1+n6)4i&n&fxg#*~Q_^Gcm8v<#ZFZ*Eabzii#JA2V*O zjJV50nD36OD7EO15B||Mz z4h3&aYg6|v$Ta0S@-#O-tSh~J$OyaVxLSpr~dfI z6X|Z5aL=PCW&K1^MEtATZGSn&( zJ2TE;n{P>JmFHLYpH5WGIp#I$^?i+8)sbH{0yW1sRh9(qHuBu)sdvA3b&%9)OnEf= zXlnag<3>n&AING{7ON?&0-5MP`RsZ0q)>Eg} zEDZ>h2Boh{jJxZxGWFW3w;T8P9C+Ykrz}~NkWjy7*?F5s8>{pRzZ*8L+x<9gooB9b zYR#C_d1@er8tMDR9h2GJZ7vzbD#TjZ+#eWJkY!jBW#V?c7 zV^tx>TLQ4Y+HYMXH$(g~`#Va;8NY7N4BcgQc4}qq>eLshb-cGD!x`I9FU0JJw3w4L&Tq<&m9(6t({+@5D;$ zxS)A)Z;q^M*?i0I@(z>dpRI~IKj434)+mwwJ)_Y#=2vf!G+XBO>y>4QGP~x5A4qq4 zv+wuJ{o(r2>FQOfl4<9L4cjZfqwZPiao#>AMC$%^hIS`%!TFtMtI3l$NAnWpuNJi_ zMx{<%61uW+k(=q|CF7lpF06I^dBKaVGp?AX+9vO>ZF79?arVNV({jSReoN~5uuIF@ zTkJ#pUQaV_Fx>Vg(siXtjOgV3pJ#voMb&r9x71u{mpv?&PI;BC^=@5h@0g9ht82~? zC&N~m$W#P~(^{S){E9Aai(+0V;ecZf1avjlnE3CO4aOQ}Uj$;r?O> zfuQKW+faa#2)~U&7z#j5GYtn7h4cC|Bn22=8=xqJ;I+{dPV@4kfMf)@0AO%_et@Ci z&+!cYH+hsoQG|gt?4(9v{A3i0kvJSXj*a~V{*%KQ09Udxsel6*P6-x+v6gs?p-_@! zU^6#9DU1OGhlDvB8-k+=028>_5FEpxux@A$Lva#XN`~Yx3@}j1#f14V0>feXM>uxp zprOUk96(X1;9|mgVl+v@!jEta!$8e1hU9Se!-QU3OgK**qXEqM2uI*3?EVNx0us7d z4xJC63{2xE7fs!ap;9^2A1jf*?Zji(H-wQzy?EYDE9KV1l zf@CnL9 zHxF_GFBDEvkeJAE0xuLR1}1PZO5lZJgRpLp6L?|IH~=jtah$*l#SjEkaxqNc1t4rq zmvb>7@WLK8G&G#daRM&@r%9;bVnE;pu$u%62RVTkz)lou+H#!03!pIydT}vK;Duct z4s&cZn9&pvh@nvof!%|kKny!3fG&0{$R6DMuYx8}0;buq8F7Ibnxs(J%z-p5P(uTR zhJ-x_3e?ct@snV$L4Qs#v_KBSUTd&!kQB&aP=bM$2%8e21$G#Wp`a4sQVQ&_8_b@f z9Ej2aI}Ce?K|_=S1$J1g04h)x#AtyXhNcNv$bkgk4nPq0%+thJ5NG&y0D=MB-wX}fF&u0zyAP5 zD83n%B~|>6B>S%6TVV4N{Er5()iwl+^KDTG%74(Y3kJ+z7F7Rz<*_e1oE!qi{-ukx z#lG@{wn&=fuMW_pU?DWc@U~6HK5!&gTt)mfvIM=IAx1_kS|k71Oeb*!vh IJ!a_q0Z!S^Jpcdz delta 4818 zcmai$2{cyeAIIZOi>+<6+9%tam%Bgr3fVK2L68yVE_FwGaEZ9( zY2w*sFKxR*pY@u}pP#8=9vqtR*>YHK@J)V9N6WZL|;exFRo>qOz3=Zl?9>N;mV*A8-%%e@;$lor|cM8_{`p6b%N zaY;aBh*JDc&l0D5D}V3^_$|KC;I3X8StZdQ zB#Fo89B@$I-jsp}pUL}0n;xmy=JWaYp~n8cfr`q4`1J#)UFOd8QLV1JK{b~-?$h}t zIYn&l5H$H%u+P310e2FUPfX5KaBce*HwfL(r0wB12$wk&9>_E^7ye-!6SU9F*~+UPIW~^)=g<|2)HFz}2I})H^$=D_XM>u2;79-}ykRe)9PH zO|M>>Z*^+Oh-_d!*Q#jA!r4xP!Z)4V4(NIlx3ItbJa)KxD; z7Q^Fx+V-A2uP`p|xlW|@mf14K;r9!>kaCALGesxsz1togt28Qlv|nDT`we3CR_|At z-?LVv%6UZHJdp9F##!3vbb?}1ab2@z$7>m(ws3m0FeTS`@l?y$Ao%V3D4*a-tuLk1 zx-VCV7j{Le*(gehZR?K6pK#sYkkc<+7~Z4Mc^d%^U8u96C4MqMZmp5*GTZY@ZO*l__1|ri zf4@}T!zwNRr?Xc-dih38OR&kW%6U>Er<9Rtk|-FzC8=+UakItrnOh=?uj+RyF10V4 zs(Q6uA~#?2gBfAe_%SeRnPZP$P^O=}e`Cwu{CU%}2Xf^5yOp$NhOF88;o3Lx=J~j$ z>q)JMhRZi}~Fs()Q$|p9Y^a_o+AA+fF{=4wY%|%F=Ub zh*L_L=#-E>C1xNh@YlGhK@G-ajH2q~#xN+sx&#U{a@@G3HkW`+PkaWE` z*Ts3{z>%^@8{@p^eLEZ6wFgt{q82+IP&n0Ym3n%(>Q=`_vGz;{%|Pc(A3N^n;)a4t z)t`xR+Jo!5UwtxY`l!45NQ>~^_sI@x;j@Gx{;;d;&- zaZid)*`-N3O^u)S)I6!3>S}%T(Y|k#6r|QZP`=Sq+q&+|@~v;{zhv09*QcIJJ`i|J zCFR_>SzF>?tx3DqBQEYt$*ta|QJQ0#*J|8uRJS8u=C{-1hmgD_ElA{G{=m2nXQ#tv zXPOfmbjvrnYP{CbQWP$_ac#;9C5LGH-+#y}DE?$)rub+uHFHb)3;UlZ<~2|S<1A{W zEV^${I!W)M1Ts&-+IuDE<_3kITac7Cl9W}gvR8WZ_-Nk`IjiC{#eTt?ljxA4O{Gz< z%ZU$(`Lkux7D9L1%g>g7m{9Zu>Cw=PfbIU+a!P5pP458z$MITb(q+d&9$%)sY>c=SojIZfhve zci4R0bwb+r)}9Avwq;(34cwGiHjt7GPf8Xps^3+%X-$RiO0oa&%8ecYd;D%$4LsH* z75h|vG+L0E4JpPEuho_Upei$_^##fY~}C(q2IF5YneOBmS0%sUUPjQQ)0aCedVc} zCt|zTiyAX(5J63b)BB|k>Z&17vu||pWW_s0RCrg2i<9A%n4md*wYDA07s3yZW-L() zmNLJfUgb6<-{GXM|JYwLBtBJqAv!kHy=P8sM(WYwniQ#h`&YX42dr3irF-YG-N$qe zpAU$c_a!~?Vu-Ehwxmio`xndO%Fh4R+1pt*;d(;&?Cg52`tGAW_gB0wmrREbdL5c>Z#&lw*PY{mqBPTTPc~ z$4=hf^w4A2rgdS<{pLDK!Z}-|mTd$LzA`huU>N_@Um4yKXvU?n)(Gqz?1d*!{ z)CdDc5N$A5ApCm8Yp$S3lY~eFY#>EG-ae!VhJ7dz#Qa3wC_n%S`*mQ6ou8<;~@3z>ay&A z1i~N``+5xqFphB72#BH}x=Tf1Bqj;YehOzUz*z$XfdI}LNnkL?KMZh+=L-M|=lTZ- zO#OM@lz%P{6EKV-be5{XXeP#WM!*OlXc;xe_80iS9EL!&6Js;waR5On-eVAqcS!=q zNrbLo&j;Mg5->mrT1B0)jlq!sqWxGKpF`pfNUwLI~~7+W7tu3?u0D zf8lT@s3ZTv0TiR{G{^Qw0+LQ(ZG3;sRS>#sYz~D9f;RbfYz~DXI*hgPbwM#4qZ|K) z!zq#$%^#Zs7(xfIwlVHWk_25bHpdhNM5}0x$zd?SXg}7*zbA$wFkLXp;hf|rm@qK$ z(`Gqt0TCFJO|&~};}s2o0Ro}ZM>&#rCIwOS$S6l~Z8(Gzw4DxfCdsrS_V;(u!vu~% zD4oFCxDA1^p*U0Mqa3#m2pppTZKBI^DDO<>g>)EeBYE|J0}7@aM>(D@IE6Ct(_=ZF zE(Ap4bO38ZdG$>oOzl^Uay(rK6i~E^kmY!~Fpno_Kh{R^bRh_U(gmyy<2EXSAeo+_ zuz=-wx)2lrXm{3z@pJ(&Q`70A98VXfO~CZXD96(UU=T^$>9hWLx&R!<=>*os>t6(5 znlarq%JFmoBu3FDB9`On0w{{0!$bmV7GP3^lQ1NVp>!h);yhtUglQro0|q2{p8|fTf_UOk5Q5VMqa-hBD5f*h z3J~KGhIr~wC`{4r5bKhs4uvtDE1d-qn5Pa!z$iV!f&@<;3J?%&2QwfF^YVuIrUE(v zW0n%7vd+rd#)`s#HEBs&lcXiEu&@TGg$+uXGtaQJ mAx(|{?+$laQ&ZVJdp&pWJ-FN3N0u3eVG5Sj(z3RJ%&iQjAC+L#LKXQf!FWi}BGDiz)!0HeEj7(T z*U&J{a{D<+#&3)qMg|r}#wO+l)6YmVO2K*C-$^rGWOcGMwlFs~Ft>DdbTM^vaWXJ9 cF>^IEH!!nwa&|E@u`so>A*5nDqY|SG08#KP=l}o! diff --git a/src/static/support/dist-docs/ovn-trace.8.pdf b/src/static/support/dist-docs/ovn-trace.8.pdf index 11ae9c29f777ce3523ccf64c0fa8ba832ff5c83f..f51aaf1e31caec6a96bdd540213c0f889fd93ea1 100644 GIT binary patch delta 188 zcmdnAjd{~H<_&z8d5m=pjY14ftc;DUOeRZR)d@c6Ko{a4~W;GdHz# rGB$9ubTx6dvmvM=mdnnLtGFbwsHCDOHI2*E#L~ckOI6j?-;E0Z2hB4L delta 188 zcmdnAjd{~H<_&z8d5m-oEJBQotxU|V3?@rm)aurPLXHZyQFHL