Hosting or downloading copyrighted DS ROMs without owning the original cartridge is technically illegal, though enforcement usually targets distributors, not individual downloaders.
If you own a hacked 3DS, you can inject DS ROMs as (CIA = CTR Importable Archive). This places an icon on your home menu for native backward compatibility. Use tools like: ds roms