Yes... via a Shared Layer 3 Out like you mentioned. It's only routing at that point even if that route doesn't actually connect to a WAN link.
A shared Layer 3 outside network (L3extOut) configuration provides routed connectivity to external networks as a shared service. An L3extOut profile (l3extInstP) EPG provides routed connectivity to external networks. It can be provisioned as a shared service in any tenant (user, common, infra, or mgmt).