If you have an unpatched/old Switch you can run Lockpick_RCM to get the keys without a custom firmware installed.
Needless to say, you do need a jig to enter the RCM mode.
You can use a PC or Android phone as a payload injector.
If your Switch is patched/new then you're not able to enter the RCM mode anymore.