You'd use cURL or CBs built in
Guzzle
library for the HTTP request. You'll need to review CB Query Field to see how it's adding new validation. Specifically its CBfield_queryvalidate class and its XML tag fieldsparams. The validation works on any fieldtype so basically you'd create a text field and turn on your new validation parameter so it'll send the fields value through the HTTP request to validate it as a phone number, but again I'm not sure if this will work as it sends an SMS with a code the user needs to input to further validate it so some other solution will likely be needed. Whether that reloads the registration page by erroring it and telling them to input the code is up to you.