How create docker registry with access controller

I will try to describe the problem.

I have two clients and i want create central docker registry.
with each client i also want install docker registry but every client able access only with CA.
every client Can only download what its key is suitable for,
is it possible ?
if it possible i appreciate example.
Best regards