Thus you need to own and have control over the Domain Name (or have a subdomain under an existing domain name, for example pointed to your server by your employer or school) you wish to obtain a certificate for, from an ICANN Accredited Registrar.
Most likely you're routing the route to 172.64.0.0/13 incorrectly. This is often caused by network admins incorrectly routing the private route 172.16.0.0/12 by using an incorrect network mask.
It's almost certainly not due to Let's Encrypt blocking your IP address (why does everybody always jump to that conclusion?)