I know an IPv6 host will send Router Solicitation (RS) messages, and a router on the link will reply Router Advertisement (RA) messages.

In the RA message, there is the Source Link-Layer Address and Prefix Information in options. So a host can know the router's MAC address, and it can generate it's IPv6 address.

How can a host know the router's IPv6 address (router's link-local or global address)?