When working with Hibernate Validator >= 4.2 you can reference the validated value via ${validatedValue}
in your messages (in Bean Validation 1.1 that's standardized in the spec):
cpf.validation.message=Cpf ${validatedValue} é inválido
Btw. Hibernate Validator already comes with a @CPF
constraint, you can find out more in the reference guide. Would be very glad to hear about how that works for you.