Summary
- LACNIC leasing-contract-risk analysis asks how lease duration, revocation rights, route objects, RPKI coordination, abuse duties and payment default move scarce-address risk into private agreements.
- Leasing can satisfy operational demand, but weak terms can leave lessees, downstream customers, reputation systems and lenders exposed when records or routes change suddenly.
- A credible regional ledger should record narrow evidence and preserve portability without pretending that the registry can rewrite private leasing risk into public permission.
IPv4 leasing in the LACNIC region is too often described as a technical accommodation for a temporary shortage. That description is too small for the market that now exists. Leasing has become one of the ordinary ways in which networks acquire the addresses that let them serve customers, open new markets, keep legacy systems reachable, support hosting, maintain enterprise access and avoid the cost of rebuilding production infrastructure around a protocol transition that remains uneven in practice. The contract beneath the lease is therefore not decoration. It is the place where scarcity, continuity, legal uncertainty and registry discretion are converted into enforceable obligations between private parties.
That conversion is the real subject. The LACNIC registry record tells the public who is the recognised holder, where contacts may be found, which routing-adjacent records may be connected and whether the entry appears coherent enough for networks to rely on it. It does not, by itself, answer the commercial questions that now matter. How long may the lessee use the block? What happens if the holder loses its registry relationship? Who must maintain route objects? Who signs, changes or withdraws a ROA? Who answers abuse complaints? What happens if the lessee defaults while its downstream customers remain live? Which court can act fast enough when parties, customers and infrastructure sit in different jurisdictions? What rights survive when an address block begins to behave like collateral?
A narrow registry would make these questions easier, not by solving them all, but by refusing to pretend to solve them. It would keep the public ledger accurate, auditable and portable. It would record control, contactability, transfer history, security assertions and dispute status. It would avoid turning geography, meeting procedure or administrative preference into claims over capital. In such a system, the private lease would still matter greatly, but it would not have to absorb every uncertainty created by the public layer.
The current risk is that the public layer is too silent where clarity is needed and too elastic where restraint is needed. LACNIC may be less theatrical than some registry disputes elsewhere, but the legal economy around LACNIC-region IPv4 is exposed to the same structural tension. IPv4 is scarce capital. The holder needs rights reliable enough to support investment and contracting. The lessee needs continuity that is not destroyed by a dispute to which it is not a party. Customers need reachability. Yet the registry record is not a title register in the ordinary property-law sense, and the registry contract is not a sovereign guarantee. Silence does not remove risk. It pushes risk downward into leases, side letters, indemnities, escrow mechanics, routing procedures and emergency clauses.
This is not an argument for LACNIC to become a heavier governor of private use. It is the opposite. The more valuable IPv4 becomes, the narrower the registry role should be. Scarcity does not turn a bookkeeper into a landlord. Nor does a consultation ritual launder a mandate over assets held and deployed by operators who bear the consequences. The proper public function is thin but serious: uniqueness, accuracy, reviewable records, security assertions, dispute notices, transfer recording and portability. The rest belongs in operator choice, market contract and ordinary law.
Leasing contract risk in the LACNIC region is therefore a test of institutional honesty. If the registry is only a ledger, it should act like one and let contracts be contracts. If it wishes to influence leasing, subdelegation, use, geography, routing or commercial structure, it is exercising economic power and should carry the accountability that economic power requires. The current middle position is the expensive one. It lets the public layer retain discretion while the private layer carries the blast radius.
A registry ledger is not a lease
The first error in IPv4 leasing is to confuse the registry entry with the commercial bargain. A registry record is a public coordination fact. It tells the networked world that a particular holder is associated with a particular block, that contacts exist, that routing-adjacent records may be connected and that relying parties have a common point of reference. That is valuable because the Internet needs one address not to be claimed by several unrelated networks at once. It is not enough to determine who must pay whom, who may subdelegate, who bears customer loss or how quickly a route authorisation must be changed after a default.
The lease lives in a different layer. It is an allocation of commercial use between holder and lessee. It turns the holder's scarce position into revenue and the lessee's need for reachability into a time-bound right to operate. It must handle what the registry record cannot: duration, termination, performance standards, misuse, payment, customer transition, confidentiality, jurisdiction, evidence, audit rights, indemnities and emergency cooperation. A good lease does not merely say that the lessee may use addresses. It describes the machinery by which that use remains stable when something goes wrong.
In the LACNIC region this distinction matters because the legal and economic geography is not uniform. Latin America and the Caribbean contain different courts, currencies, payment risks, telecom regulations, insolvency regimes, consumer-protection expectations and enforcement speeds. A block held through one legal entity may be routed by another, leased to a third, used by customers in a fourth jurisdiction and paid for through a bank in a fifth. The registry record may remain neat while the commercial risk is scattered.
That scattering does not make leasing improper. Leasing is an efficient response to scarcity. It lets underused addresses move toward networks that can deploy them, without requiring every user to purchase long-term control or wait for an allocation pool that no longer exists in any economically meaningful sense. For smaller providers, hosting companies, security services and expanding access networks, leasing may be the only practical way to obtain IPv4 capacity at the speed customers demand.
But efficient does not mean simple. Scarcity has made the holder's registry position capital-like. The holder expects rent. The lessee expects continuity. Both rely on a public record that was not designed as a capital-market register. The gap must be filled by contract. If it is filled poorly, each party discovers too late that it bought a different risk from the one it thought it had priced.
The registry should not be asked to police every lease. That would move in the wrong direction, toward a licensing state without state accountability. But the registry should also not create ambiguity by treating commercial use as vaguely tolerated rather than plainly outside its ordinary mandate. Silence is not neutrality when parties build critical contracts around that silence. A narrow public ledger, with clear holder rights and clear limits on registry intervention, would leave private parties freer to contract and better able to price risk.
The better starting assumption is austere. LACNIC's essential role is to preserve uniqueness, accurate registration, security-relevant assertions, contactability and reviewable changes of control. It should not decide whether a lease is morally attractive, whether the lessee's business model is preferred, whether customers are sufficiently local or whether scarcity should reward one use over another. Those judgments belong to markets and law. Once that premise is accepted, the lease can be drafted honestly as a private operating contract rather than a request for administrative blessing.
Duration is the price of uncertainty
Lease duration is often treated as a commercial variable, a negotiation over monthly price versus commitment. In IPv4 leasing it is more than that. Duration is the instrument through which the parties decide who bears registry uncertainty, routing transition cost and customer churn risk. A one-month lease gives the holder flexibility and gives the lessee fragility. A five-year lease gives the lessee planning confidence but exposes the holder to payment, misuse, regulatory and registry risk over a long horizon. The term is not just a calendar. It is a risk allocation.
The LACNIC-region lease is especially sensitive to term because address use is not instantly replaceable. A lessee that deploys the block in hosting, enterprise access, VPN services, security infrastructure or customer-facing broadband may place thousands of relationships on top of it. Renumbering can be expensive, slow and reputationally damaging. Even when replacement addresses are available, the operational work may include customer notices, firewall updates, geolocation consequences, access-control revisions, mail reputation rebuilds, reverse DNS changes, RPKI coordination and route filter propagation. The economic life of the lease may therefore be much longer than the written notice period.
That asymmetry gives duration its force. A short lease may look efficient to a lessor because it preserves optionality. It may be unacceptable to a serious lessee because the practical cost of losing the block is not proportional to the lease fee. Conversely, a long lease may look attractive to a lessee but dangerous to a holder if registry terms, local rules, tax treatment, sanctions exposure, exchange controls or abuse patterns shift during the term. The parties are bargaining not over time alone, but over the right to plan.
A well-drafted contract should separate the initial committed term, renewal rights, termination rights and operational wind-down period. These are different things. The initial term prices expected use. Renewal rights protect investment. Termination rights protect the holder from default, misuse or legal impossibility. The wind-down period protects customers from abrupt disconnection. If the contract merges them into a single notice clause, the strongest party at the moment of conflict will try to use that clause for purposes it was not built to serve.
For example, a ninety-day termination right may be commercially reasonable for a small test deployment but destructive for a lessee that has sold annual service contracts to enterprise customers. A one-year minimum may be sufficient for address translation projects but too short for infrastructure expansion financed around the block. A holder may require immediate termination for non-payment, but immediate de-routing can harm innocent downstream users and turn a billing dispute into a service crisis. Duration clauses must reflect the network built on top of the lease, not merely the parties' desire for flexibility.
The most rational solution is to price duration in layers. The base term should match the lessee's real deployment cycle. Renewal options should be conditional on clean payment and responsible operation, not on the holder's arbitrary change of preference. Early termination should be limited to defined events: payment default, verified unlawful use, material breach of routing or abuse obligations, loss of holder control, legal prohibition, insolvency or documented registry action. A wind-down obligation should survive termination unless continued use is illegal or technically dangerous. That does not eliminate risk. It stops duration from becoming a disguised revocation weapon.
Revocation risk should not become a private ambush
Revocation clauses are the hard centre of every IPv4 lease. They are also the place where registry uncertainty most easily becomes private coercion. The holder wants the right to terminate if the lessee fails to pay, attracts serious abuse, violates law, subdelegates without permission, damages reputation or causes registry trouble. The lessee wants assurance that the holder cannot withdraw the block at will after customers have been moved onto it. Both positions are legitimate. The danger lies in language so broad that every commercial disagreement becomes a potential service cutoff.
A private lease cannot make the registry powerless. If the holder loses its registration relationship, if a court restrains the block, if a lawful order requires action or if the public ledger changes, the lease must deal with that fact. But the contract can distinguish registry-side revocation from holder-side revocation. Registry-side risk concerns events that impair the holder's ability to perform despite the holder's willingness. Holder-side revocation concerns the holder's decision to withdraw use because the lessee has breached or because the holder wants a better opportunity. Treating those categories alike is bad drafting and bad economics.
The lessee should not bear all registry-side risk automatically. If the holder presented itself as able to provide stable use, it should warrant its current control, disclose known disputes, maintain required registry service relationships and avoid voluntary acts that jeopardise the block. If it cannot do so, the lease price should reflect that weakness. A holder that keeps the right to terminate because its own registry position deteriorates is transferring a risk it controls better than the lessee does. That may be acceptable in some contracts, but it should not be hidden.
Nor should the holder bear all lessee-side risk. A lessee that uses addresses for illegal traffic, ignores abuse notices, conceals subdelegations or refuses routing coordination can endanger the holder's registry standing and the value of the block. The holder must have a credible path to suspend or terminate. Yet credibility does not require vague moral clauses. It requires defined events, evidence standards, cure periods where cure is possible, emergency rights where delay would cause serious harm and a record of notices that can be reviewed later.
The key distinction is between revocation as remedy and revocation as leverage. As remedy, revocation protects the integrity of the resource when the counterparty has materially failed. As leverage, revocation lets one party threaten service continuity to obtain unrelated concessions. Registry systems that tolerate broad discretion at the public layer encourage the same habit at the private layer. If the bookkeeper can speak like a sovereign, the lessor may learn to speak like a sheriff.
This is why public record and reviewability matter. If a lease termination results in route object changes, ROA withdrawal, reverse DNS changes or contact updates, the sequence should be reconstructable. The parties should know what notice was sent, what evidence was relied on, which cure period applied, who authorised the change and whether emergency action was genuinely necessary. Reviewability does not prevent conflict, but it reduces the reward for opportunism.
A sound LACNIC-region lease should therefore contain a revocation architecture, not a revocation slogan. It should list default events. It should separate curable from non-curable breaches. It should require escalation contacts. It should define emergency abuse conditions. It should preserve customer wind-down where lawful. It should impose cooperation duties for transition. It should require the holder to notify the lessee of registry threats that may affect performance. It should give the lessee remedies if the holder voluntarily impairs the block outside the contract. Above all, it should reject the fiction that a registry-adjacent contract can be terminated like a magazine subscription.
Route objects and ROAs turn law into reachability
In ordinary commercial contracts, performance can often be measured by delivery, payment and service levels. In IPv4 leasing, performance is also measured by whether the rest of the Internet accepts the route. That is why route objects and ROAs are not technical afterthoughts. They are the tools through which a legal permission becomes operational reachability. A lease that says the lessee may use a block but does not specify routing authority is incomplete.
The route object problem is familiar. A lessee may need objects in an Internet routing registry so upstreams and filters recognise the intended origin. The holder may control the relevant maintainer, the lessee may operate the origin AS, a broker may have arranged the deal and a hosting platform may be the real end user. If the contract does not state who creates, updates and removes route objects, the parties can lose days in a dispute that customers experience as reachability failure. In some markets, days are enough to lose accounts.
RPKI sharpens the point. A ROA is a security assertion about which autonomous system may originate a prefix and at what maximum length. It can protect against hijacks and misconfiguration, but it can also break legitimate routing if poorly coordinated. If the holder signs a ROA for the wrong origin, leaves stale ROAs in place, refuses to update swiftly or withdraws authorisation during a dispute, the lessee's network may become invalid or unreachable to networks that enforce validation. If the lessee changes upstreams and the holder is slow, a commercial migration becomes a technical outage.
These are not abstract problems. Leasing separates economic use from registry control. The party with the customer may not be the party with the credentials. The party carrying abuse risk may not be the party able to change the ROA. The party paying may not be the party operating BGP. The contract must therefore translate authority into operating procedure. Who may request a ROA? What evidence must accompany the request? How quickly must the holder act? What happens outside business hours? Who confirms maximum prefix length? Who removes stale authorisation after termination? Who is liable for downtime caused by delay?
The answer should not be to make the registry a routing supervisor. A thin registry records security assertions and maintains an auditable environment. It should not adjudicate every origin change in a private lease. But the registry's narrow role makes the private process more important. If the registry record is the public ledger, the lease is the operating manual for how that ledger is used without harming customers.
A serious lease will treat routing records as shared critical infrastructure. It will require a readiness record before addresses are advertised. It will identify the origin AS or permitted origin AS set. It will define maximum prefix lengths. It will specify route object location and maintainer authority. It will require test announcements where appropriate. It will create emergency contacts for route leaks, hijack suspicion and invalid ROAs. It will set measurable response times: perhaps hours for emergency correction, one business day for routine changes and immediate withdrawal after confirmed unauthorised origination.
It should also address the end of the lease. Many contracts are careful about activation and careless about deactivation. Stale route objects and stale ROAs create risk for both sides. The lessee may retain an apparent path after its rights end. The holder may find its block associated with a former customer. A new lessee may be blocked by old records. The contract should require clean withdrawal, evidence of de-routing, DNS transition if applicable and confirmation that no downstream customer remains dependent without written authority.
Routing is where the fiction of mere paperwork dies. A clause signed in one country can become a validation failure in another within minutes. That is why the public ledger must be reviewable and the private lease must be operationally precise. Holder rights, lessee continuity and customer protection all pass through route objects and ROAs. If the contract does not govern them, the dispute will be governed by whoever controls the credentials at the critical moment.
Abuse responsibility follows control, not slogans
Abuse is the most tempting justification for overbroad control. No serious operator wants address space used for spam, fraud, botnet activity, credential theft, unlawful content distribution or attacks. LACNIC-region holders have legitimate reasons to protect their names, their registry relationships and the reputation of their blocks. Lessees have legitimate reasons to avoid being treated as guilty for every complaint that arrives in a mailbox. The question is not whether abuse matters. It is how responsibility should be assigned without turning abuse language into a general-purpose revocation tool.
The first principle is simple: responsibility should follow practical control. If the lessee chooses the customers, operates the service, controls the servers and receives the revenue, it should carry primary responsibility for customer conduct and timely response. If the holder controls only the registry relationship and delegates operational use, it should not be expected to inspect every packet. If the holder receives notices because its contact is visible, it must forward them quickly and maintain escalation channels. If it fails to do so, it becomes part of the problem. But responsibility should reflect what each party can actually change.
The second principle is that abuse clauses need evidence standards. A complaint is not always proof. Automated feeds contain errors. Competitors can send hostile reports. Old WHOIS data may misdirect notices. A shared hosting environment may contain one abusive customer among many legitimate users. A contract that allows immediate termination on "abuse complaints" invites opportunistic termination and defensive overblocking. A contract that ignores complaints invites reputational and legal damage. The middle path is structured triage.
A workable lease should classify abuse by severity. Routine complaints should require acknowledgement, investigation and remediation within defined periods. Serious threats, such as active attacks, court orders, child-safety emergencies or large-scale fraud, should trigger faster action and possible temporary suspension of affected services. Repeated unresolved incidents should create escalating remedies. False or unsupported complaints should be closed with records. The purpose is to restore clean operation, not to create a theatrical punishment.
Subdelegation complicates the analysis. Many lessees do not use all addresses directly. They assign them to hosting customers, enterprise clients, managed-service users or downstream networks. Subdelegation is not inherently suspect. It is often the business model. But it creates a longer chain of control. The holder may know the lessee but not the end user. The lessee may know a reseller but not the actual host. Abuse response can become a relay race in which each runner claims the baton never arrived.
The contract should not prohibit subdelegation by reflex. That would ignore the economics of modern IPv4 use. It should require disclosed categories of subdelegation, accurate customer traceability, acceptable-use obligations passed downstream, emergency suspension authority and records sufficient to identify the responsible operational party without exposing private customer data unnecessarily. A holder does not need a live census of every end user. It does need confidence that a complaint can reach someone who can act.
Registry silence again pushes risk into the contract. If the public layer does not define the boundary between contactability and policing, private parties must. A narrow registry should require accurate public contacts and perhaps dispute or abuse contact fields. It should not turn itself into a moral police force over leasing. But if it threatens holders through vague abuse-related consequences, holders will impose broad and sometimes arbitrary controls on lessees to protect themselves. The costs then fall on smaller networks and customers least able to contest them.
The better model is disciplined accountability. The holder warrants registry control and routing cooperation. The lessee warrants lawful and responsible use. Each side keeps records. Each side has escalation obligations. Severe abuse can be stopped quickly. Ordinary complaints are investigated proportionately. Subdelegation is permitted when traceability and response duties travel with the addresses. Abuse becomes a managed operational risk, not a pretext for administrative command.
Payment default is not the same as customer failure
Payment default is the easiest breach to understand and one of the hardest to handle well. If the lessee does not pay, the holder should not be forced to provide scarce IPv4 capacity indefinitely. Scarcity is capital, and capital must earn return. Yet an address lease often supports services sold to customers who have paid the lessee and have no knowledge of the upstream default. Immediate cutoff may be commercially satisfying to the holder but socially wasteful and legally risky. It can turn a receivable into an outage.
The problem is sharper in cross-border LACNIC-region commerce because payment systems can fail for reasons short of unwillingness. Currency controls, bank delays, correspondent-bank friction, tax withholding, sanctions screening, local holidays, invoicing disputes and documentation requirements may interrupt payment even when the lessee intends to perform. In some countries, moving dollars is not the same as approving an accounts-payable item. A contract that treats every delay as bad faith ignores capital-control risk. A contract that tolerates indefinite delay ignores the holder's capital cost.
The solution is not softness. It is graduated enforcement. The lease should define invoice timing, currency, tax responsibilities, payment route, late-payment interest, documentary requirements and the point at which funds are deemed received. It should require quick notice if local controls or banking issues interfere. It should distinguish administrative delay from refusal to pay. It should allow suspension of new assignments or growth before de-routing existing customer use. It should permit termination after defined cure periods, while preserving a customer transition period unless continued use creates legal or technical danger.
Security deposits, prepayment and escrow can help, but they should be understood for what they are. They are not merely credit tools. They are continuity tools. A deposit can fund a wind-down period if the lessee defaults. Prepayment can reduce the holder's exposure during the early part of a deployment. Escrow can assure the lessee that payment will be matched by routing and ROA performance. Each mechanism reduces the need to use reachability as a collection weapon.
Customer continuity deserves its own clause. The holder may not know the lessee's customers, and in many cases should not know them. But the holder should know whether the block supports residential access, enterprise services, hosting, critical systems or experimental use. A lease for disposable test traffic can have stricter cutoff rights. A lease supporting hospitals, banks, public services or large access networks should include transition procedures that reduce harm without excusing default. Commercial law often recognises that remedies should not be needlessly destructive. IPv4 leasing should learn the same lesson.
The registry's role should remain narrow. It should not collect the debt or decide whether the lessee deserves mercy. But its record should support reviewability. If a holder changes route authorisations or contact records after default, the sequence should be clear enough to prove whether contractual notice and cure obligations were followed. Public record does not replace private enforcement. It disciplines it.
Payment default reveals the whole economics of leasing contract risk. The holder wants capital return. The lessee wants operational continuity. Customers want not to be conscripted into the parties' dispute. The registry's silence cannot decide among them. Only a contract that treats address use as operational infrastructure, rather than as a simple rental of numbers, can allocate the risk intelligently.
Governing law is where geography returns
Registry regions can make geography sound administratively simple. Contract enforcement proves otherwise. The LACNIC region includes many sovereign legal systems, each with its own approach to contract, insolvency, interim relief, telecommunications regulation, consumer protection, evidence, tax and currency control. A holder in one country may lease to a company in another, which serves customers in several more. The address block moves through routing tables as if borders were irrelevant. The invoices, injunctions and remedies do not.
The governing-law clause is therefore not a boilerplate item to be copied from a software contract. It determines how the lease will be interpreted, what remedies are available, whether limitation clauses are respected, how evidence is treated, whether emergency relief can be obtained and how judgments or awards may be enforced. The forum clause determines where the first serious fight will occur. In IPv4 leasing, speed can matter as much as ultimate correctness. A court that reaches the right answer after six months may be useless if the route was withdrawn in six hours.
Parties should distinguish governing law from operational jurisdiction. The lease may be governed by the law of one country, disputes may go to arbitration in another, the holder may be incorporated in a third, the lessee's network operations may sit in a fourth and customers may suffer harm in a fifth. Each connection matters differently. Governing law supplies interpretation. Forum supplies procedure. Registry location affects the public record. Network location affects regulators and customers. Payment location affects currency and sanctions risk. A serious contract maps these layers instead of pretending that one clause covers all of them.
Cross-border enforcement is especially important when the asset is intangible and the operational lever is fast. A lessee that wins damages after losing customers may still be ruined. A holder that wins an award against an insolvent lessee may still have lost months of rent and reputation. Interim measures, emergency arbitration, injunctive relief and agreed technical standstill procedures are therefore central. The question is not only who wins. It is whether either side can preserve the status quo long enough for a decision to matter.
LACNIC's public ledger should not become a substitute court. That would be another form of mandate laundering, converting administrative control into adjudicatory power without the safeguards of a court. But the registry can support lawful enforcement by maintaining accurate records, recording dispute notices where appropriate and resisting informal pressure to alter records without proper authority. A public ledger is useful because it is reviewable. It becomes dangerous when it changes under opaque persuasion.
Contracts should also address insolvency. If the holder enters insolvency, can the lessee continue using the block during administration? If the lessee enters insolvency, may the holder terminate immediately, or must it respect a paid-up term? Can lease rights be assigned in a restructuring? Are prepayments protected? Does a receiver or liquidator understand that the block cannot be treated like an ordinary office lease? These questions are uncomfortable because they reveal that IPv4 use has capital-like features even when property language is avoided.
Capital-control risk deserves equal attention. Some LACNIC-region economies may impose exchange restrictions, emergency controls or tax procedures that delay payment or complicate outbound lease fees. A holder outside that jurisdiction may view the delay as default. A lessee inside it may view the delay as legal constraint. The lease should allocate this risk expressly: alternative currencies, local payment representatives, gross-up clauses, suspension thresholds, documentary proof and termination rights after prolonged non-payment. Otherwise a macroeconomic event becomes a private accusation.
Geography should not manufacture ownership of number resources. A service region is not a people and a registry region is not a sovereign territory. But geography still matters through law. The right conclusion is not regional capital control by registry policy. It is better private law, supported by a neutral ledger and holder portability. When public administration stays thin, ordinary law can do its job.
Collateral without a registry of security interests
As IPv4 becomes scarce capital, leases begin to behave in collateral-like ways. A holder may borrow against expected lease income. A lessee may build a business whose value depends on continued access to leased addresses. Investors may treat a long-term lease as part of enterprise capacity. A lender may want comfort that the address stream cannot be interrupted without notice. None of this requires calling the addresses property in the fullest sense. Economic life often reaches conclusions before legal vocabulary catches up.
The danger is that collateral-like behaviour without a clean registry of rights creates hidden priority fights. Suppose a holder leases the same block under overlapping commitments, grants a lender control rights over receivables, enters insolvency and faces a registry dispute. Who has priority: the lessee in possession, the lender with a security agreement, the insolvency estate, a buyer of the holder, or a new lessee promised better economics? The public registry may show only the holder. The route objects may show the current origin. The private documents may show conflicting claims. The customer sees only whether packets flow.
Traditional secured finance solves such problems through public filing, priority rules, notice and enforcement procedures. IPv4 leasing lacks an equivalent universal system. Some rights may be recorded in company registries, some in private contracts, some in escrow arrangements and some only in operational practice. That fragmentation increases the cost of capital. It also gives sophisticated parties an advantage over smaller networks that cannot investigate every upstream encumbrance.
Registry silence is again not neutral. If the public ledger refuses to recognise any economic claims beyond the holder, private parties create side ledgers. If the registry asserts broad discretion without accepting liability, lenders discount the asset. If leases cannot be made portable or reviewable, financiers shorten terms or demand higher returns. The cost appears as higher lease fees, stricter deposits, narrower customer rights and more aggressive termination provisions.
This is where holder rights and portability matter most. A holder with secure, portable and reviewable control can offer a cleaner lease. A lessee can rely on continuity. A lender can evaluate revenue. A buyer can conduct due diligence. If the holder's position is vulnerable to administrative reinterpretation, every downstream right becomes weaker. The uncertainty compounds at each layer.
Contracts can reduce the problem but not abolish it. They should require the holder to disclose existing encumbrances that could affect performance. They should prohibit conflicting grants. They should define whether lease rights are assignable. They should require notice before the holder pledges receivables or enters arrangements that could redirect control. They should give the lessee access to sufficient evidence of holder authority without exposing irrelevant confidential information. They should specify what happens if a lender enforces against the holder.
Escrow can be useful for documents, credentials and payment flows, but it is not magic. Escrowing a signed letter of authority, route object instructions or ROA procedure may help if the holder becomes unresponsive. It may not help if the registry refuses to recognise the change, if courts disagree or if the private right is not enforceable in the relevant jurisdiction. Escrow is a bridge over operational delay, not a substitute for public rights.
The long-term answer is not a thicker regional permission layer. It is a more reliable rights environment: narrow registry function, accurate public record, clear holder control, portability, dispute notation and reviewable changes. The useful institutional contribution of the thin-ledger view is to make that direction explicit: exit, redundancy, enforceable rights and mechanisms rather than comforting narratives. Such a framework would not eliminate private finance or private leasing. It would make them less dependent on guesswork.
Scarcity as capital is not a theory imposed on the Internet. It is what the market has already done. Contracts that pretend otherwise are fragile. Registries that pretend otherwise push capital behaviour into shadows. A public ledger that acknowledges its narrow role, and permits private rights to be reviewed without becoming their sovereign author, would reduce the collateral fog.
Silence becomes the law of the stronger party
Institutional silence is often defended as neutrality. In IPv4 leasing it frequently has the opposite effect. When the registry does not define the limits of its role, the stronger private party defines them. When holder rights are ambiguous, the holder drafts broad discretion against the lessee. When lessee continuity is ambiguous, the lessee demands heavy indemnities or discounts. When routing procedure is ambiguous, the party holding credentials controls the tempo. When abuse standards are ambiguous, the party most afraid of registry reaction overreacts downstream.
This is how public ambiguity becomes private hierarchy. The registry says little, or says that policy may change, or reserves broad review rights, or disclaims economic responsibility. Private contracts then reproduce the uncertainty in harsher form. The holder says it may terminate if the registry raises concerns. The lessee says it will not pay unless routing is perfect. The customer receives no assurance because neither upstream party wants to guarantee what it cannot control. Everyone writes around the missing public rule.
The problem is not solved by asking LACNIC to approve every leasing arrangement. That would replace private hierarchy with administrative hierarchy. The more useful reform is to state what the registry is not. It is not the owner of regional capital. It is not the judge of customer geography. It is not the police force for business models. It is not a central bank for IPv4 scarcity. It is not a legislature because a room or mailing list produced language. Its legitimacy lies in the narrow public function: keeping the ledger accurate enough that independent networks can coordinate.
Anti-mandate-laundering is essential here. A registry cannot convert participation into authority over absent holders, lessees, customers and lenders. A policy process may provide advice, technical discipline and notice of risk. It does not become a mandate to control capital movement or to invalidate private contracts beyond what is necessary for uniqueness and registry accuracy. The parties who bear loss must have rights, not merely opportunities to speak.
Clear limits would improve contracting. If the registry commits to recording lawful holder control, maintaining reviewable records, supporting security assertions, recording disputes and respecting portability, private leases can allocate commercial risk around a stable core. If the registry reserves undefined discretion over leasing, subdelegation, need, geography or proper use, contracts must price a moving target. The parties cannot know whether their private bargain will be treated as ordinary commerce or as a policy problem.
Public record matters because it gives outsiders a way to test claims. A lessee can verify holder status. A holder can verify route authorisation. A customer can know which party to contact. A court can understand the sequence of changes. A lender can review control history. A registry that keeps poor records forces everyone to rely on private assurances. A registry that keeps good records reduces the premium on trust.
Reviewability matters for the same reason. If a registry action or private routing change affects use, there should be a trail. Not every detail must be public; commercial confidentiality and security have their place. But the fact of change, the authority for change, the timing and the dispute status should be reconstructable. Opaque change is not administrative efficiency. It is a tax on confidence.
What a serious LACNIC-region lease should contain
A serious IPv4 lease in the LACNIC region should begin with a representation of holder control. The holder should state that it is the recognised holder or otherwise has authority to lease the block, that it knows of no undisclosed dispute impairing performance, that it will maintain the registry relationship necessary to support the lease and that it will not voluntarily take action that undermines the lessee's lawful use. These representations should be repeated at renewal and upon material change.
The lease should then define the permitted use without pretending to supervise every customer. It can identify whether the block will support access, hosting, enterprise networks, security services, infrastructure, testing or other broad categories. It can require lawful use, accurate operational contacts and compliance with routing and abuse procedures. It should avoid vague statements that allow termination because the holder later dislikes the lessee's business. Commercial predictability is part of the value being leased.
Routing provisions should be operationally exact. The contract should name the origin AS or process for adding one, route object responsibilities, ROA responsibilities, maximum prefix length, emergency contacts, response times, deactivation steps and liability for avoidable delay. It should require both sides to cooperate during upstream migration. It should prevent either party from using route authorisation changes as leverage in unrelated disputes. Where emergency withdrawal is necessary, the evidence and timing should be recorded.
Abuse provisions should assign primary response to the party with customer control and forwarding duties to the party receiving notices. They should classify severity, define cure periods, require records and permit emergency suspension only for defined high-risk events. They should allow subdelegation subject to traceability and downstream obligations. They should not transform every complaint into default or every customer mistake into a right to de-route an entire block.
Payment provisions should recognise cross-border reality. The contract should specify currency, taxes, withholding, payment rail, invoice requirements, late fees, deposits, prepayment, escrow if used, capital-control notices and cure periods. It should define what happens when payment is delayed by bank or government controls rather than refusal. It should let the holder protect itself without making customers the first collection target.
Continuity provisions should be explicit. They should include renewal mechanics, wind-down rights, customer transition procedures, no-new-use rules after termination notice, cooperation on replacement addressing and survival of routing support during paid transition. They should distinguish ordinary expiry from breach termination, emergency suspension and legal impossibility. The lessee should not assume continuity because the relationship feels stable. The holder should not assume it can terminate without network consequences because the invoice says "lease".
Governing-law and dispute clauses should match the operational stakes. Emergency relief, arbitration, courts, language, evidence, service of notices, technical standstill and enforcement should be considered together. A clause copied from an office-services agreement will not do. The parties should decide where urgent disputes will be heard and what technical obligations remain while the dispute is pending.
The lease should also include encumbrance and assignment language. If the holder has pledged receivables, granted control rights, entered a sale process or given another party rights that could affect the block, the lessee needs to know enough to assess continuity. If the lessee wants to assign the lease to an affiliate, customer or buyer, the holder needs consent rights that are protective but not arbitrary. IPv4 leases often sit inside corporate transactions. The contract should expect that.
Finally, the lease should require records. Notices, abuse reports, routing requests, ROA changes, payment disputes, subdelegations, termination steps and transition cooperation should be documented. Recordkeeping is not bureaucracy for its own sake. It is the private equivalent of a reviewable public ledger. In a cross-border intangible asset market, memory is not enough.
None of this requires LACNIC to become the author of private contracts. It requires parties to understand what the registry does not provide. The more narrowly the public layer behaves, the more precisely the private layer can contract. The danger arises when both layers are vague and each expects the other to absorb the consequence.
The better public rule is restraint
The cleanest reform for LACNIC-region leasing is not a new thick leasing code. It is a public commitment to restraint. The registry should record, coordinate and protect uniqueness. It should maintain accurate holder records, contacts, routing-adjacent data, security assertions, transfer history and dispute notation. It should provide reviewable processes. It should respect portability as a holder right, because exit is the only discipline that voluntary systems can rely on when discretion becomes excessive.
It should not police leasing as a moral category. It should not decide whether a lessee's customers are sufficiently regional. It should not treat commercial subdelegation as suspect merely because money changes hands. It should not use abuse concerns as a pathway to general commercial supervision. It should not let policy language create capital-control effects over scarce assets while denying that it controls capital. And it should not allow participation rituals to launder a mandate over parties that bear the economic loss.
A narrow rule is not a weak rule. Accuracy can be enforced. Fraud can be prevented. Duplicate claims can be rejected. Security assertions can be made coherent. Disputes can be recorded. Court orders can be respected. Contacts can be kept current. Transfers can be made reviewable. These are real functions. They are also the functions that running networks actually need.
The alternative is expensive ambiguity. If LACNIC remains silent on the economic boundary while retaining elastic discretion, holders will draft harsher leases, lessees will demand deeper discounts or heavier continuity protections, customers will inherit more outage risk and lenders will price uncertainty into every arrangement. The public layer may appear calm, but the contract layer will become defensive, complex and unequal.
Portability is the pressure valve. Without it, a holder trapped in one registry environment must pass that trapped risk to lessees. With it, the holder has exit from failure, capture or unreasonable discretion. Portability does not destroy coordination; it disciplines it. It tells the registry that service quality, neutrality and accuracy matter because holders are not hostages. It tells private parties that the holder's position is not wholly dependent on one administrative gatekeeper.
For LACNIC-region operators, the practical conclusion is sober. Do not treat the registry entry as title. Do not treat a lease as a casual rental. Do not treat route objects and ROAs as clerical details. Do not treat abuse clauses as slogans. Do not treat payment default as permission to ignore customer continuity. Do not treat governing law as boilerplate. And do not assume that silence at the registry layer means safety.
The registry layer should be a narrow public ledger. Holder rights should be clear enough to support investment. Portability should be treated as a protection against lock-in. Scarcity should be recognised as capital, not disguised as a policy inconvenience. Public records should be reviewable. Private contracts should then do their proper work: allocate risk between parties that choose to deal with one another.
IPv4 leasing in the LACNIC region will continue because networks need addresses and scarcity will not be wished away. The question is whether the market will operate through clear rights and disciplined contracts, or through private attempts to insure against public ambiguity. A registry that knows its limits makes leasing safer. A registry that keeps the language of stewardship while disclaiming the costs of control makes every lease carry a constitutional defect.
The economics are plain. When the public ledger is narrow, capital can move through contract. When the ledger is uncertain, contract becomes a hedge against the ledger. LACNIC does not need to become a stronger ruler of leasing. It needs to become a more reliable recordkeeper, and to let holder rights, portability, ordinary law and careful contracts carry the rest.
Sources and further reading
These references provide the article's public doctrine and background context. They are used for institutional-economic framing, not for adopting any registry or official-sector narrative.
- Lu Heng, all notes index: https://heng.lu/all-notes/
- The Policy Mirror: https://heng.lu/the-policy-mirror/
- The Bill of Rights of Uniqueness Coordination: https://heng.lu/the-bill-of-rights-of-uniqueness-coordination/
- The Multi-Stakeholder Mirage: https://heng.lu/the-multi-stakeholder-mirage-how-the-multi-stakeholder-model-turned-attendance-into-mandate/
- The Registry Continuity Fallacy: https://heng.lu/the-registry-continuity-fallacy-protect-the-ledger-not-the-gatekeeper/
- Running-Code Primacy: https://heng.lu/running-code-primary-the-patch-needed-to-preserve-the-internet-original-design/
- The Poverty Penalty: https://heng.lu/the-poverty-penalty-how-the-rir-model-taxes-the-poor-while-calling-it-equality/
- Sovereignty inversion: https://heng.lu/from-double-extraction-to-sovereignty-inversion-how-nations-lose-sovereign-control-to-rirs-for-us100/
- Registry power and liability: https://heng.lu/on-when-registry-power-detaches-from-liability-why-the-present-rir-coordination-model-cannot-survive-in-its-current-form/
- Number resources are not political property: https://heng.lu/on-internet-number-resources-are-not-political-property/
- Thick RIR governance as double extraction: https://heng.lu/on-regional-internet-registries-thick-governance-turns-uniqueness-into-double-extraction/
- Registries must never become enforcers: https://heng.lu/why-registries-must-never-become-enforcers/
- RIR enforcement creep and IPv4 liquidity: https://heng.lu/on-why-rir-enforcement-creep-is-the-silent-killer-of-ipv4-liquidity-and-why-it-must-be-stopped/
- Cost structure of regional Internet registries: https://heng.lu/on-the-cost-structure-of-regional-internet-registries/
- Decentralising global IP address registration: https://heng.lu/on-decentralising-global-ip-address-registration-with-distributed-ledger-technology/
- Unlocking the hidden value of IPv4: https://heng.lu/unlocking-the-hidden-value-of-ipv4/
- Portability of number resources: https://heng.lu/on-portability-of-number-resources-and-the-icp-2-revision/
- Number Resource Society: https://nrs.help/
- BTW Media: https://btw.media/
- LARUS: https://larus.net/

