If I remember correctly, you need to explicitly set the addressType to telephone in the JSON payload, otherwise the API defaults to email and rejects the E.164 format. Try adding "addressType": "telephone" inside both from and to objects.
This happens because the API defaulting to email when addressType is omitted, which fails E.164 validation. The suggestion above to explicitly set it is correct.