Searching for ROMs can be risky due to malware. Reliable community-vetted sources include: Are Emulators and ROMs Legal? The Truth You Need to Know!
All available via GitHub or official developer sites. where to find decrypted 3ds roms
Once you have a legal decrypted ROM ( .3ds or .cci ): Searching for ROMs can be risky due to malware
Based on community consensus and archival reliability, the following sites are the most frequently recommended: Myrient (ERISTA) where to find decrypted 3ds roms