Legally valid way to obtain such rom?
Like many current Amiga users, I had a physical kickstart 3.1 (CBM original), and the original AmigaOS 3.9 cdrom in my A1200. I threw away the old rom, as it was having issues (some corrosion), and built an AmigaOS 3.9 rom with the legally valid content of such rom and the rom updates present in my also legally valid 3.9 cdrom.
Many have done the same. It is not piracy whatsoever, and this rom, unless you leave stuff out of it, requires a 1MB chip to be burnt into.