Certificates usually use the x509v3 object for 'Jurisdiction of Business Name' and this would point to the national / state level identifier. Ie, in the UK, Digicert looks up the company on Companies House and signs the UK company ID - the end-user doesn't supply the company ID, just the legal name, the verifying CA then checks the government authority to get the company ID. It would be similar in Brazil.
You can see the national company ID inside an EV cert from the browser, and also from openssl:
https://certsimple.com/blog/do-ev-ssl-certificates-have-bett...
One of the the things we're looking at is getting metrics on the parts that most people don't have, do better pre-arm people for verification.
That's backwards from what I'd expect. I'd expect to give the CNPJ, and the CA to get the company name from the government given the CNPJ.
Is there anywhere in the site which lists what one should have before requesting the cert? Something like "have these documents at hand" (followed by a list of country-specific documents).