In the XAdES CertifiedRoles test (X-BES-5), you may need your X509 V2 attribute certificate ([RFC3281]) for your signing public key certificate. The private key and certificate of the attribute authority which issues your attribute certificate can be found in the CryptographicMaterial. Thus you can issue your own your attribute certificate for yourself by some security toolkits.

However the Plugtests service can also issue your attribute certificate if you need. To get your attribute certificate, go the the menu Attribute Certificate Request on the left menubar and upload the X.509 certificate.

FOR YOUR REFERENCE

Here is the profile of the attribute certificate.

Attribute Certificate:
  acinfo:
    acHolder: YOUR-DN
    acIssuer: {AS REQUIRED BY THE SPECIFIC PLUGTEST}
    serialNumber: {UNIQUE-NUMBER-FOR-THE-AC}
    validity: {AS REQUIRED BY THE SPECIFIC PLUGTEST}
    attributes:
      role: uri:etsi.xades.plugtests.2012.participants
    extensions:
      authorityKeyIdentifier:
      noRevAvail:
  signatureAlgorithm: SHA1
  signature:

This figure shows PKI trust model and attribute certificate issuance for this plugtest.