When doing final packaging, rpm reports 'Bad owner/group: $file' for a file that has a numeric owner/group even if there is a %defattr that overrides the owner/group for that file. This behavior worked in rpm-2.5.
I believe this is now fixed in rpm-2.91.