We have found impossible to implement these two blacklists (hourly and daily) based on the same ratelimits when the match is the same, the only solution working is to distingush both matches, for example with this:
ratelimit "limite_1H" rcpt 20 / 1h key "%M{auth_authen}"
ratelimit "limite_1D" rcpt 20 / 1h key "%i%M{auth_authen}"
racl blacklist not sm_macro "sin_autenticar" not sm_macro "usuarios_excluidos" not list "our_network" ratelimit "limite_1H" msg "Hourly quota exceeded"
racl blacklist not sm_macro "sin_autenticar" not sm_macro "usuarios_excluidos" not list "our_network" ratelimit "limite_1D" msg "Daily quota exceeded"
It's not exactly what we want, but at least works