Distributing or downloading a .cia of a commercial game infringes reproduction and distribution rights. Even creating a .cia from a personally owned cartridge may violate the DMCA if it bypasses encryption (the 3DS cartridge contains a unique secure area key).