Yes, for the vMX (and Z-series) you are allowed to have a "lower" license than the Org is configured for. This is because the vMX is basically a VPN-concentrator and not a real firewall.
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.