Not an apex domain
The domain _acme-challenge.oi.com.br is not the root of its zone.
Instead, try zone transfer on 2.authorize.certificatemanager.goog .
Instead, try zone transfer on 2.authorize.certificatemanager.goog .