Telnyx are not providing a name in their Record-Route header; they are only providing an IP address, so the IP address is the only thing that can be checked against the certificate.
Asterisk tries to send BYE, but the transport layer aborts, due to the server authentication failure, before it is actually sent.
