Your vMX will have it's own IP in an Azure network and you'll need to route packets from the Pa towards the IP of the vMX towards all spoke networks.
You can achieve this using a few static supernet routes or using BGP if it is possible to peer with the Pa to exchange routes that way.