Yes, you can have multiple reporting addresses in your DMARC record. According to the DMARC specification, there is no limit to reporting addresses. However, Validity recommends you only include two reporting addresses in your DMARC record as it has been observed that reports are not received by addresses after the second address in the list.
Addresses to which aggregate or message-level reports are to be sent need to be separated by a comma. An example of the syntax for such a record is below:
v=DMARC1; p=none; fo=1; rua=mailto:dmarc_agg@auth.example.net,mailto:dmarc_agg@example.com; ruf=mailto:dmarc_afrf@auth.example.net,mailto:dmarc_afrf@example.com
