That's odd. I don't know if this the default setting for new DSi, but usually parental control in devices are off by default. And even if it's turned on by default, there should be some documentations on how to unlock it with default password or something like that.

I think your DSi is a used second-hand unit.