When you create an Account for the first time, the password for your user-Id is used for the initial keychain login password. As you create more passwords and other items, anything that could be synchronized with your iCloud keychain gets added to your local items keychain. You never get asked for another password and all is well.
If you change your login password, and especially if you force-change your login password, the keychain password(s) sometimes do not get updated correctly. When this happens, you will get these request(s) to unlock them.
To fix this, your should launch the Keychain App and change the keychain passwords for login and local items keychains to correspond with your current login password. You will need you OLD password to do this. If you cannot provide your OLD password, these keychains will be dead to you, and you will have no choice but to create new, EMPTY keychains for the items, and build them back up as you go about your business.
Some users will protest, "But I do not use keychain for anything!" My answer is that if your email password does not have to be entered each time you start Mail, you do indeed use Keychain.