It’s not prohibited to have multiple email addresses in the RUA and RUF tags. The best practice is to have no more than 2 email addresses in each tag because some reporters may skip sending the DMARC reports to the third and following email addresses.
Read also: Why Every Business Needs DMARC