What you're seeing is actually consistent with how NX-OS processes BGP updates. An inbound neighbor route-map is mainly used to manipulate BGP path attributes as the update is received. Administrative distance isn't really treated as a per-update pat...