Thank you very much guys, I was debugging the dependency graph and looks like the bad 'cryptography' version comes from:

cryptography>=1.9
fsqio.pants.contrib.buildgen.core==1.1.1->pantsbuild.pants>=1.0.0,<1.5.0->pyopenssl==17.3.0